last executing test programs: 1m46.252521715s ago: executing program 2 (id=1199): r0 = socket$inet6(0xa, 0x3, 0xc) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) (async) r2 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000200)=0x400, 0x4) (async) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r4, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) accept(r4, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000004740), 0x8200, 0x0) ioctl$TCGETS(r6, 0x5401, &(0x7f0000004780)) setsockopt$inet6_buf(r3, 0x29, 0x2c, &(0x7f0000019080)="fcffdd944545642bcc7b0a6534c318017c74a36adb48cf4848a93a0749af8e0a4660a9fbddc5acea26fd4310cd7d07d2b19e740b03b785c9f02676a854fb04f6097a0e5ce4fb455e38ad9d8a9acfddf8a382fe09575e3b2b01edced3da56123ca4769d9a8f18e6b73f64ac4078a5", 0x6e) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r2, 0x30}) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000019100)='net/route\x00') (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) (async) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = dup2(r9, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0x0, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000019280)={&(0x7f0000019140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000019240)={&(0x7f0000019180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) getpgrp(r11) 1m46.183933787s ago: executing program 2 (id=1200): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x4, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x19fff}], 0x1) 1m46.112382797s ago: executing program 2 (id=1201): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, 0x0, 0xfffffffffffffffe) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000c00)=""/201, 0xc9}, {0x0}], 0x2, 0x2, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x7ffe, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008050}, 0x4080) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) syz_open_procfs(r8, &(0x7f00000000c0)='net/psched\x00') sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000000000000b010000000000000000100100000c0000002900000000000000"], 0x28}, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) sigaltstack(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = getpid() r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mincore(&(0x7f0000356000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/192) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10) process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000d00)=""/4096, 0x2, 0x1000}, 0x0) 1m45.662968333s ago: executing program 2 (id=1205): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x1, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x8000, [0x7, 0xb71, 0x2, 0x3ff, 0xa, 0x200, 0xf1c, 0xe8a7e6e]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwrite64(r4, &(0x7f0000000400)="48e341dc89b9c8c2dbb09de280bcab15e5c0cb18ec89dc6ee49bae0ce9fdfba5d1735cfe19d70ad3cea400a20c520e6241073179c63e04cb7e851751b6e1af40e744795f91218b47cb80c3711a21f8762d8b231ae6cf9b9949ec473727985e06d613654ad74eaded07ffff2edad3868dbc6a75766a0b752e01b532ebdd1b71467f731f21229b18f2b46cdd04f698c05cae4ceeb0ba366d104bc880b731ba6845a40f8fa8", 0xa4, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1m45.662425924s ago: executing program 2 (id=1206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) unshare(0x60000480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) 1m42.108655392s ago: executing program 1 (id=1240): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x1ff, @empty, 0x20}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="a53b0b", 0x3}], 0x1}}], 0x1, 0x200080d0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="a6", 0x1}], 0x63}}], 0x1, 0xc081) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000006480)={&(0x7f0000c2b000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000005380)=""/231, 0x107f, 0x0, 0x0}, &(0x7f00000064c0)=0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xfe58}, 0x18) fsopen(0x0, 0x0) flock(0xffffffffffffffff, 0x5) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbb2, @void, @value}, 0x94) 1m42.072510072s ago: executing program 1 (id=1241): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000600)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000400)={'syz_tun\x00'}) 1m41.977059894s ago: executing program 1 (id=1242): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1m41.900819815s ago: executing program 1 (id=1243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x1, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x8000, [0x7, 0xb71, 0x2, 0x3ff, 0xa, 0x200, 0xf1c, 0xe8a7e6e]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwrite64(r4, &(0x7f0000000400)="48e341dc89b9c8c2dbb09de280bcab15e5c0cb18ec89dc6ee49bae0ce9fdfba5d1735cfe19d70ad3cea400a20c520e6241073179c63e04cb7e851751b6e1af40e744795f91218b47cb80c3711a21f8762d8b231ae6cf9b9949ec473727985e06d613654ad74eaded07ffff2edad3868dbc6a75766a0b752e01b532ebdd1b71467f731f21229b18f2b46cdd04f698c05cae4ceeb0ba366d104bc880b731ba6845a40f8fa8", 0xa4, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1m41.864665315s ago: executing program 1 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x1, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x8000, [0x7, 0xb71, 0x2, 0x3ff, 0xa, 0x200, 0xf1c, 0xe8a7e6e]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwrite64(r4, &(0x7f0000000400)="48e341dc89b9c8c2dbb09de280bcab15e5c0cb18ec89dc6ee49bae0ce9fdfba5d1735cfe19d70ad3cea400a20c520e6241073179c63e04cb7e851751b6e1af40e744795f91218b47cb80c3711a21f8762d8b231ae6cf9b9949ec473727985e06d613654ad74eaded07ffff2edad3868dbc6a75766a0b752e01b532ebdd1b71467f731f21229b18f2b46cdd04f698c05cae4ceeb0ba366d104bc880b731ba6845a40f8fa8", 0xa4, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1m41.221475884s ago: executing program 2 (id=1248): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0xf97, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x31) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00#\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES32=r8, @ANYBLOB="dd850e8a192ebb7a5461207db3447ad144494c6a3a950b1e303cf0c6524e73c5951ff18d186a29c983f10ac3d77f51d40fae2936ccd27090d199b0a6962306455d2d58106f2977c8572aeb619c03b6118783a231f971ed80c40c8165e86e98c820af97798b74531ae6661f2fc986e09cff0ee9ccdd1c051a213e022fc1002b774871244e50e2f4b9d2a03365fbf84924dbd4cb7c570c18757536091000bf4add158720d603bb08ac92dbb82a2177795fe5bfafdc8c6e675de35e0ac2bd994e73e57cc82f91e195d4ac"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 1m41.199992545s ago: executing program 32 (id=1248): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRESDEC=r1, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0xf97, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x31) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00#\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000040000000c00088008000c00", @ANYRES32=r8, @ANYBLOB="dd850e8a192ebb7a5461207db3447ad144494c6a3a950b1e303cf0c6524e73c5951ff18d186a29c983f10ac3d77f51d40fae2936ccd27090d199b0a6962306455d2d58106f2977c8572aeb619c03b6118783a231f971ed80c40c8165e86e98c820af97798b74531ae6661f2fc986e09cff0ee9ccdd1c051a213e022fc1002b774871244e50e2f4b9d2a03365fbf84924dbd4cb7c570c18757536091000bf4add158720d603bb08ac92dbb82a2177795fe5bfafdc8c6e675de35e0ac2bd994e73e57cc82f91e195d4ac"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) 1m39.780060544s ago: executing program 1 (id=1267): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) unshare(0x60000480) 1m39.730432555s ago: executing program 33 (id=1267): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) unshare(0x60000480) 1m7.9370679s ago: executing program 0 (id=1596): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x7e, 0x0, 0x3}, 0x1, 0xd668, 0x101}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nodioread_nolock}, {}, {@grpquota}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x4, 0x1}}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = dup(r2) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m7.452312847s ago: executing program 0 (id=1599): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 1m6.545598499s ago: executing program 0 (id=1600): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) 1m6.48381794s ago: executing program 0 (id=1601): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r3, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0xfce) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x2}, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x1, 0xa, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x0, 0x8000, [0x7, 0xb71, 0x2, 0x3ff, 0xa, 0x200, 0xf1c, 0xe8a7e6e]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, 0x58) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwrite64(r4, &(0x7f0000000400)="48e341dc89b9c8c2dbb09de280bcab15e5c0cb18ec89dc6ee49bae0ce9fdfba5d1735cfe19d70ad3cea400a20c520e6241073179c63e04cb7e851751b6e1af40e744795f91218b47cb80c3711a21f8762d8b231ae6cf9b9949ec473727985e06d613654ad74eaded07ffff2edad3868dbc6a75766a0b752e01b532ebdd1b71467f731f21229b18f2b46cdd04f698c05cae4ceeb0ba366d104bc880b731ba6845a40f8fa8", 0xa4, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 1m6.372518842s ago: executing program 0 (id=1604): shmget(0x3, 0x1000, 0x54000000, &(0x7f0000fff000/0x1000)=nil) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020dc22f09ffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x32, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x503e, &(0x7f0000000f40)={0x0, 0x698c, 0x100, 0x2, 0xfffffffe}) syz_open_dev$usbfs(0x0, 0x400000001fc, 0x301) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x0}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)=@xfs={0x1c, 0x81, {0x7, 0x8, 0xfffffffffffffffb, 0x4903d42a}}, &(0x7f0000000480), 0x200) 1m6.061518936s ago: executing program 0 (id=1612): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) 1m6.030951286s ago: executing program 34 (id=1612): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0) 20.987266483s ago: executing program 7 (id=2090): syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000000000000000bbff0228aea560e50893d99f800000000000000001000086064b274a6fb75d310000000000000000416a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fdd7cd0b8c69746126e0d966f0c3e56fc14dae18465161ec18b9e3b9894bd4d6589a779e3151324108d9468f4992e1e98126f939bc"], 0x0) r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) tkill(0x0, 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) getdents64(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000008c0)={0x3, &(0x7f00000000c0)=[{0x64, 0x2, 0x5, 0x7}, {0x40, 0x81, 0x13, 0x100}, {0x6, 0x6, 0xfd, 0xfffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 19.940497837s ago: executing program 7 (id=2100): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000240)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000000600)={0x2, 0x4e24, @private=0xa010102}, 0x10) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@getsa={0x30, 0x12, 0x20, 0x70bd28, 0x25dfdbfd, {@in=@rand_addr=0x64010101, 0x4d6, 0xf7547ddf373ed26b, 0x6c}, [@etimer_thresh={0x8, 0xc, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4081) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010024bd7000fddbdf25030000e6180001801400020073797a5f74756e000000000000000000050002"], 0x34}, 0x1, 0x0, 0x0, 0x2400d841}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x2c, r12, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x29}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x60}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x1c, r10, 0x200, 0x70bd2a, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRESHEX=r11, @ANYRESDEC=r12], 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008884) 19.847307359s ago: executing program 7 (id=2102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 18.822808353s ago: executing program 7 (id=2108): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 18.783601133s ago: executing program 7 (id=2109): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 18.593696216s ago: executing program 7 (id=2113): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r1 = socket$key(0xf, 0x3, 0x2) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, 0x0}, 0x40) 18.572361616s ago: executing program 35 (id=2113): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") r1 = socket$key(0xf, 0x3, 0x2) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r3, r3, &(0x7f0000000000)=0x8, 0x4) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, 0x0}, 0x40) 4.593877318s ago: executing program 6 (id=2228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.508352838s ago: executing program 6 (id=2229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0xffffffff, {{@in=@multicast2, @in6=@local, 0x4e21, 0x0, 0x3, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0xe9}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x7fff, 0xfff, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x27, 0x5, 0x3, 0x200}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}]}]}, 0x1bc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.916152227s ago: executing program 8 (id=2234): r0 = socket(0x10, 0x1, 0xfffffff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x2000000000000102, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x1a402, &(0x7f0000003f80)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x2f5, &(0x7f0000000c00)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001480)='sock_exceed_buf_limit\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) dup3(r4, r5, 0x0) bpf$BPF_LINK_UPDATE(0xf, &(0x7f0000000600)={r5}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sync() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2210886, &(0x7f00000001c0)={[{}, {@dioread_nolock}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='kvm_test_age_hva\x00', r6, 0x0, 0x1c00000000}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './control/file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000060000000080000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r7) 3.70667263s ago: executing program 8 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x5a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3a66505}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x7, &(0x7f0000000080)={0x0, 0x14, 0x1, @thr={&(0x7f0000000580)="0765aaf87945fa526506b8eb215212489cb93b057b037842704ec1720ec275b7ea79e36e1a4e7b8505557eb7f0934f4d71728505da13c757ec8c6e161ed5ab4d471e0f819399c66817c6be9a57f754b161ae310c8e74908bef5d1c045e731375e782efd7ce9bcf92bc5dec1fe377a90084bf4c55e7f52c00451a187b99987deacbabc34173bb49e2232b183b4ef87ef8f22b0abc8428d568c6deb67abc1951e8cde1a83e93b674e9235f0025c1addec3b7861c01abad607202", &(0x7f0000000780)="5612540bfd5ec56e47d691c946f1555a4e246c7a1028d145ea56f1b2c58a220c5877e0f950284a7a95444705a4386847dd387581107e4ac3ceb2b59d8dbf1fd92222d1250f767d74b6c0212875d38f82a65df7fea2685520980fa842410945e0225986107384149eafa2f781f8f3acd1917236d8b9b1d51189e16d3f7e195fdd073c48d4fa22268e27ae9a39d5fc70c36e0a31e3c3a8109531fe8a98aeff36b9"}}, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) r5 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) fallocate(r5, 0x0, 0x400000000000000, 0x2) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.64303276s ago: executing program 8 (id=2237): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0xffffffff, {{@in=@multicast2, @in6=@local, 0x4e21, 0x0, 0x3, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0xe9}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in=@loopback, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x7fff, 0xfff, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x27, 0x5, 0x3, 0x200}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}]}]}, 0x1bc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.007110803s ago: executing program 3 (id=2246): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 2.006699983s ago: executing program 3 (id=2247): socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) getpid() socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) 1.556220249s ago: executing program 4 (id=2250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) 1.49999542s ago: executing program 4 (id=2251): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x62040200) 1.337324772s ago: executing program 4 (id=2252): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000440)={{0x1, 0x0, 0x7e, 0x0, 0x3}, 0x1, 0xd668, 0x101}) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nodioread_nolock}, {}, {@grpquota}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x9) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x4, 0x1}}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.137788065s ago: executing program 4 (id=2253): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, 0x0, 0x20048000) 1.125084635s ago: executing program 3 (id=2254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) truncate(&(0x7f0000000100)='./file0\x00', 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_setup(0x5f40, &(0x7f0000000080)={0x0, 0xfead, 0x1, 0x2, 0xd}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\n\x00\x00\a\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00', 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r6 = epoll_create(0x1) epoll_wait(r6, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x7f) 1.081161616s ago: executing program 4 (id=2255): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x10003) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 1.028370246s ago: executing program 5 (id=2257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r2 = syz_io_uring_setup(0x3c03, 0x0, &(0x7f0000000780)=0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) flock(0xffffffffffffffff, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000100)={0x4, 0x2, 0x8, 0x0, 0xe}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) statx(0xffffffffffffffff, &(0x7f0000001800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, 0x100, 0x0) sendmsg$netlink(r8, &(0x7f0000000300)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x10, 0x35, 0x2, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x40080}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0x7, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x400, 0xbeed3c6170858c64}) io_uring_enter(r2, 0x1d69, 0x4b5d, 0x0, 0x0, 0x0) 963.174897ms ago: executing program 5 (id=2258): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = creat(&(0x7f0000000080)='./bus\x00', 0x11b773d61c80217e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "3dcb992c85e72d26", "498ae0f3c2add6114cc5a9086104bc5d", "bb9aacf8"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r4 = socket(0x6, 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11040200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="560052959f0d", @ANYRES32=r5, @ANYBLOB="0a00060008021100000100000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x1114, r3, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0xdb, 0x5b, "344d279d09d45ada1834154df029f65ea44d843a6ca8de9f044e75ac9a510c56f32f935429ef4c372f94cefa29250451e5f67136269301f9aff4e2834e90aff521ee77a0874ce006ba5d8d264831d611025022fc357e4b8a21ea67a9942ea7fef8b0fde4b85cf0d4dafd70ab9e6945479149fc0445886a2164aeafca4731fae4f5b3180771dd5c2aee0d894a79c1a98e54b9157aa481eb449b813b1b45042e6e2762ba3ee0339ff5e4d782f1bd5aef3918a610c2f499b73911fa3e95cba065959f1ffb6b576143b5027256ae557ea329325a9b4e7c50e6"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7fff}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}]}, 0x1114}, 0x1, 0x0, 0x0, 0x1}, 0x8000) shutdown(r1, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./bus\x00', 0x200020c) 957.515327ms ago: executing program 3 (id=2259): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x38}, 0x4040084) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=""/249, 0xf9}], 0x1}, 0x0) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) keyctl$setperm(0x5, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f0000000100)={0x1d, r6}, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r7, &(0x7f00000002c0)={0x1d, r6, 0x2, {0x0, 0x0, 0x3}, 0xfd}, 0x18) bind$can_raw(r5, &(0x7f0000000280), 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r9, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x2000000000, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff, 0x2000000000000}, 0x0, 0x0) 787.08443ms ago: executing program 5 (id=2260): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 723.42029ms ago: executing program 5 (id=2261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) 699.498621ms ago: executing program 5 (id=2262): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000007c6e00000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_freeze_timeout', 0x149882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x62040200) 529.558623ms ago: executing program 8 (id=2263): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x30410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30c3a0e4, 0x1, @perf_config_ext={0x20000000000000, 0x1}, 0x11d08, 0x2, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x21004a, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 473.825374ms ago: executing program 5 (id=2264): r0 = syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="34000102", @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="02150307070000002bbd70b595000000000000003c9b00000a004e0800000000fe80000000000000bb1000000000000000"], 0x38}}, 0x880) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x70bd25, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0xffffff41}, @TCA_CT_LABELS={0x14, 0x7, "e79f2b3a3b04fdc55f1c5522fb1d34ae"}, @TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x78}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="bf000100000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 464.619044ms ago: executing program 6 (id=2265): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x44001, 0x0) 422.564054ms ago: executing program 8 (id=2266): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20048000) 398.144225ms ago: executing program 6 (id=2267): syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000000000000000bbff0228aea560e50893d99f800000000000000001000086064b274a6fb75d310000000000000000416a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fdd7cd0b8c69746126e0d966f0c3e56fc14dae18465161ec18b9e3b9894bd4d6589a779e3151324108d9468f4992e1e98126f939bc"], 0x0) r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) tkill(0x0, 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2e) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) getdents64(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000008c0)={0x3, &(0x7f00000000c0)=[{0x64, 0x2, 0x5, 0x7}, {0x40, 0x81, 0x13, 0x100}, {0x6, 0x6, 0xfd, 0xfffffffe}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 315.957576ms ago: executing program 8 (id=2268): syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000000000000000bbff0228aea560e50893d99f800000000000000001000086064b274a6fb75d310000000000000000416a8521ee0bcda101cc54ad242cd5a9c9fe4425db818cb03f87faa086420815f3fdd7cd0b8c69746126e0d966f0c3e56fc14dae18465161ec18b9e3b9894bd4d6589a779e3151324108d9468f4992e1e98126f939bc00"/166], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x1) fchdir(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) tkill(0x0, 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) 315.815706ms ago: executing program 6 (id=2269): r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000280)=[{}, {}, {}, {}], 0x4, 0x7f) 173.607518ms ago: executing program 6 (id=2270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}, 0x1c) r5 = eventfd(0x9) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) io_submit(r3, 0x2, &(0x7f0000000680)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x2, r4, &(0x7f0000000480)="9e1e75515da8502a79c195b0ee3ca84e7c149a2a7b043f4ac9779f89f6aa4186beef0d5d29102b253d2875eae61620f716ed2e92f25bb954958960222547a3b8cdb29629a25ba1b222613c8952cbc6d03fcb9bddfb2bf499dca2e5360cd937c0f5fe75f5f4ccb00b0000e5a545d2de5810db4036f54c293a5b780212abff50485ff91a236cc274afe30b7f965a101d88a92972d69f448f314048f1fad001cd969744ba7cefe565baa217a82daeed66f12ad26c3a697961d2d5f342ac692922254b91ccabce8e2eb139ead59dcafc5554937b39f4f4b990caa189a92775e1b14552275e", 0xe3, 0x0, 0x0, 0x1, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0xd2, r6, &(0x7f00000005c0)="f146987fcb618adccfc799ff24fa5813a5327adee5db02c4cd21198b28a9169052f3803f16ebf2602d07ee780475b6672d2e70c6a4a0d5f7ed4aec330fca9cbe6c6b98e28b029b479e5eef0fa5aa3825f3d25b1be73848", 0x57, 0x207ffffffd, 0x0, 0x4, r5}]) io_destroy(r3) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7fce1dca24e3ee4c89a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d83104000000fda542e718f94b929ade", 0x55}], 0x1}, 0x20048000) 95.425279ms ago: executing program 3 (id=2271): syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) tkill(0x0, 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x201, 0x0, 0x2, 0x7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) 51.04535ms ago: executing program 3 (id=2272): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x9, 0x4, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x5000002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0x9}}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 4 (id=2273): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000a0000000500000007000000c1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000001e"], 0x48) socket$inet6(0xa, 0x200000000003, 0x87) socket$caif_stream(0x25, 0x1, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff00005403cb0086dd6003136c00188700fc020000000000000000000000000000ff020000000000000000000000000001"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='bcache_read\x00', r4, 0x0, 0x2}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000004c0)=0x6, 0x4) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) faccessat2(r5, &(0x7f0000001400)='\x00', 0x0, 0x1100) r6 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='afs_folio_dirty\x00', r2, 0x0, 0xffffffff}, 0x18) flock(r6, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000180)="453ef993ef334e5f79c06b78932ec3b944cfb94bb4d1a673287ae7968a545735679d06a6aff41d188a6b24a0ebca3a878c6cd1999e8ac9ebe5d5026a138a1712c4d76ee49a5354d25955441a51aad8bc1bdc6f84ba3ed3e2925e11d4c6fbd7bc977646d052207e5bc946253508a526c2019fbc74e8685331b103b6fbc4713c03a0b42f675f0b21e43b329945cbd5c7d0c91617e8f7235ae7b5ed8c788b398387d3ffc939ad06b941497caac918f2a5048e3982bf8ca81fd3db08bdf7d55fa0e221ac87c9e9ed4d511fc5471bd0", &(0x7f0000000280)=""/221, &(0x7f0000000380)="6bf1e03d17a423fa10db6e7470d0ffa2fd061b9fa2c974ee62368e1ea856032f068c32c5d9b1a21e78866469040070fb9fbfb50b6c1fbf29810bb9d7e1d26ce335f41faffe4db0eaa480f7fa8dd1e0552a529e8a24d97334cdfb45144f4afc56dc79d58c7dad141d183fc978feb0cc6ffa5ff52f78fc7a17ca2040c863cc3aecb171af868297d40fcec1caa42fae37ce76e338e49fd0", &(0x7f0000000000)="a97ffea8a87381ad76e49671b3dc898e4e165a5aebcd5b3dc1cb18197d936a2a35d96a6a6a800b306640b1ba2b217ffa71486492242f02729e43a963c77b0210f9edbf2430adc5a16de2d80edc4fcf35dcb879706b56c27720d2dc33f63c187b8c201a04b083c050dbe920acaba5c0cc50dac4", 0xffffffff, r6}, 0x38) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') write$UHID_CREATE2(r7, 0x0, 0x152) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) setxattr$incfs_id(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) kernel console output (not intermixed with test programs): [ 222.235405][ T9298] sctp: [Deprecated]: syz.7.1843 (pid 9298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.235405][ T9298] Use struct sctp_sack_info instead [ 222.251775][ T9290] System zones: 1-12 [ 222.256522][ T9290] EXT4-fs (loop3): 1 truncate cleaned up [ 222.260385][ T9300] loop4: detected capacity change from 0 to 512 [ 222.267331][ T9290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.321978][ T9300] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 222.335851][ T9300] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 222.351695][ T9300] EXT4-fs (loop4): mount failed [ 222.393074][ T9312] wireguard1: entered promiscuous mode [ 222.398582][ T9312] wireguard1: entered allmulticast mode [ 222.441888][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.450511][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.870243][ T9337] siw: device registration error -23 [ 223.009041][ T9340] wireguard2: entered promiscuous mode [ 223.014550][ T9340] wireguard2: entered allmulticast mode [ 223.043072][ T9344] __nla_validate_parse: 3 callbacks suppressed [ 223.043091][ T9344] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1859'. [ 223.058310][ T9344] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1859'. [ 223.071148][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.133545][ T9351] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.258636][ T9351] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.339921][ T9351] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.388633][ T9377] wireguard3: entered promiscuous mode [ 223.394161][ T9377] wireguard3: entered allmulticast mode [ 223.411056][ T9381] loop3: detected capacity change from 0 to 512 [ 223.447963][ T9381] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.461045][ T9351] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.475018][ T29] audit: type=1326 audit(1746366519.937:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9382 comm="syz.5.1871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f718531e969 code=0x0 [ 223.511139][ T9381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 223.520502][ T9381] System zones: 1-12 [ 223.525598][ T29] audit: type=1400 audit(1746366519.987:1426): avc: denied { write } for pid=9382 comm="syz.5.1871" name="net" dev="proc" ino=32524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 223.547345][ T9381] EXT4-fs (loop3): 1 truncate cleaned up [ 223.553430][ T9381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.568983][ T29] audit: type=1400 audit(1746366519.987:1427): avc: denied { add_name } for pid=9382 comm="syz.5.1871" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 223.590829][ T29] audit: type=1400 audit(1746366519.987:1428): avc: denied { create } for pid=9382 comm="syz.5.1871" name="blkio.bfq.avg_queue_size" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 223.612643][ T29] audit: type=1400 audit(1746366519.987:1429): avc: denied { associate } for pid=9382 comm="syz.5.1871" name="blkio.bfq.avg_queue_size" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 223.719625][ T9351] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.733247][ T29] audit: type=1400 audit(1746366520.197:1430): avc: denied { write } for pid=9382 comm="syz.5.1871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 223.758324][ T9351] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.772445][ T9351] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.784682][ T9351] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.042672][ T9146] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.054701][ T9146] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.066936][ T9146] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.079690][ T9146] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.108148][ T9392] loop4: detected capacity change from 0 to 2048 [ 224.128743][ T9392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.141553][ T9392] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.211896][ T9399] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 224.254010][ T9401] loop6: detected capacity change from 0 to 2048 [ 224.291470][ T9401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.307341][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.318343][ T9401] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.413027][ T9411] netlink: 'syz.6.1877': attribute type 1 has an invalid length. [ 224.506173][ T9413] wireguard16: entered promiscuous mode [ 224.512017][ T9413] wireguard16: entered allmulticast mode [ 224.532355][ T9409] loop5: detected capacity change from 0 to 8192 [ 224.556506][ T29] audit: type=1400 audit(1746366521.017:1431): avc: denied { mount } for pid=9407 comm="syz.5.1879" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.588125][ T9404] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1874: bg 0: block 345: padding at end of block bitmap is not set [ 224.706514][ T9419] loop3: detected capacity change from 0 to 1024 [ 224.714417][ T29] audit: type=1400 audit(1746366521.177:1432): avc: denied { unmount } for pid=7335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 224.716560][ T9419] EXT4-fs: Ignoring removed orlov option [ 224.760395][ T9421] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1877: bg 0: block 345: padding at end of block bitmap is not set [ 224.786119][ T9419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.798247][ T9425] siw: device registration error -23 [ 224.838807][ T9419] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 224.859106][ T9419] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 224.912692][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.919218][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.926107][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.932521][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.947163][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.953631][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.961377][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.967888][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.968067][ T9429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.968101][ T9429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.153118][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.282623][ T9436] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.318550][ T9392] syz.4.1874 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 225.332789][ T9392] CPU: 1 UID: 0 PID: 9392 Comm: syz.4.1874 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 225.332899][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 225.332916][ T9392] Call Trace: [ 225.332930][ T9392] [ 225.332938][ T9392] __dump_stack+0x1d/0x30 [ 225.333017][ T9392] dump_stack_lvl+0xe8/0x140 [ 225.333042][ T9392] dump_stack+0x15/0x1b [ 225.333068][ T9392] dump_header+0x81/0x220 [ 225.333108][ T9392] oom_kill_process+0x334/0x3f0 [ 225.333157][ T9392] out_of_memory+0x979/0xb80 [ 225.333185][ T9392] ? css_next_descendant_pre+0x138/0x160 [ 225.333232][ T9392] mem_cgroup_out_of_memory+0x13d/0x190 [ 225.333273][ T9392] try_charge_memcg+0x5e2/0x870 [ 225.333371][ T9392] obj_cgroup_charge_pages+0xb7/0x1a0 [ 225.333400][ T9392] __memcg_kmem_charge_page+0x9f/0x170 [ 225.333421][ T9392] __alloc_frozen_pages_noprof+0x188/0x360 [ 225.333463][ T9392] alloc_pages_mpol+0xb3/0x250 [ 225.333557][ T9392] alloc_pages_noprof+0x90/0x130 [ 225.333586][ T9392] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 225.333666][ T9392] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 225.333686][ T9392] ? ip_set_alloc+0x1f/0x30 [ 225.333710][ T9392] ? ip_set_alloc+0x1f/0x30 [ 225.333736][ T9392] ? __kmalloc_cache_noprof+0x189/0x320 [ 225.333815][ T9392] ip_set_alloc+0x1f/0x30 [ 225.333958][ T9392] hash_netiface_create+0x282/0x740 [ 225.333995][ T9392] ? __pfx_hash_netiface_create+0x10/0x10 [ 225.334021][ T9392] ip_set_create+0x3c9/0x960 [ 225.334129][ T9392] ? __nla_parse+0x40/0x60 [ 225.334156][ T9392] nfnetlink_rcv_msg+0x4c3/0x590 [ 225.334203][ T9392] netlink_rcv_skb+0x120/0x220 [ 225.334239][ T9392] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 225.334337][ T9392] nfnetlink_rcv+0x16b/0x1690 [ 225.334393][ T9392] ? __kfree_skb+0x109/0x150 [ 225.334423][ T9392] ? nlmon_xmit+0x4f/0x60 [ 225.334440][ T9392] ? consume_skb+0x49/0x150 [ 225.334514][ T9392] ? nlmon_xmit+0x4f/0x60 [ 225.334538][ T9392] ? dev_hard_start_xmit+0x39e/0x3d0 [ 225.334621][ T9392] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 225.334644][ T9392] ? __dev_queue_xmit+0x182/0x1fb0 [ 225.334669][ T9392] ? bpf_trace_run3+0x12c/0x1d0 [ 225.334763][ T9392] ? ref_tracker_free+0x37d/0x3e0 [ 225.334810][ T9392] ? __netlink_deliver_tap+0x4dc/0x500 [ 225.334850][ T9392] netlink_unicast+0x59e/0x670 [ 225.334890][ T9392] netlink_sendmsg+0x58b/0x6b0 [ 225.334999][ T9392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.335042][ T9392] __sock_sendmsg+0x142/0x180 [ 225.335075][ T9392] ____sys_sendmsg+0x31e/0x4e0 [ 225.335164][ T9392] ___sys_sendmsg+0x17b/0x1d0 [ 225.335216][ T9392] __x64_sys_sendmsg+0xd4/0x160 [ 225.335270][ T9392] x64_sys_call+0x2999/0x2fb0 [ 225.335298][ T9392] do_syscall_64+0xd0/0x1a0 [ 225.335327][ T9392] ? clear_bhb_loop+0x25/0x80 [ 225.335353][ T9392] ? clear_bhb_loop+0x25/0x80 [ 225.335420][ T9392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.335449][ T9392] RIP: 0033:0x7fc7b35ee969 [ 225.335467][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.335490][ T9392] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.335515][ T9392] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 225.335532][ T9392] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 225.335547][ T9392] RBP: 00007fc7b3670ab1 R08: 0000000000000000 R09: 0000000000000000 [ 225.335611][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.335622][ T9392] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 225.335640][ T9392] [ 225.685857][ T9392] memory: usage 307200kB, limit 307200kB, failcnt 11305 [ 225.693126][ T9392] memory+swap: usage 308464kB, limit 9007199254740988kB, failcnt 0 [ 225.701177][ T9392] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 225.703916][ T9439] lo speed is unknown, defaulting to 1000 [ 225.708515][ T9392] Memory cgroup stats for /syz4: [ 225.747442][ T9392] cache 20480 [ 225.755803][ T9392] rss 0 [ 225.758642][ T9392] shmem 0 [ 225.761642][ T9392] mapped_file 0 [ 225.765132][ T9392] dirty 0 [ 225.768138][ T9392] writeback 12288 [ 225.771806][ T9392] workingset_refault_anon 1474 [ 225.776582][ T9392] workingset_refault_file 2319 [ 225.781456][ T9392] swap 1294336 [ 225.784886][ T9392] swapcached 4096 [ 225.788603][ T9392] pgpgin 252945 [ 225.792117][ T9392] pgpgout 252937 [ 225.795678][ T9392] pgfault 359133 [ 225.799261][ T9392] pgmajfault 846 [ 225.802841][ T9392] inactive_anon 4096 [ 225.806819][ T9392] active_anon 0 [ 225.810340][ T9392] inactive_file 28672 [ 225.814497][ T9392] active_file 0 [ 225.818029][ T9392] unevictable 0 [ 225.821489][ T9392] hierarchical_memory_limit 314572800 [ 225.826882][ T9392] hierarchical_memsw_limit 9223372036854771712 [ 225.833216][ T9392] total_cache 20480 [ 225.837089][ T9392] total_rss 0 [ 225.840401][ T9392] total_shmem 0 [ 225.843888][ T9392] total_mapped_file 0 [ 225.848030][ T9392] total_dirty 0 [ 225.851508][ T9392] total_writeback 12288 [ 225.855716][ T9392] total_workingset_refault_anon 1474 [ 225.861155][ T9392] total_workingset_refault_file 2319 [ 225.866515][ T9392] total_swap 1294336 [ 225.870460][ T9392] total_swapcached 4096 [ 225.874632][ T9392] total_pgpgin 252945 [ 225.878780][ T9392] total_pgpgout 252937 [ 225.882878][ T9392] total_pgfault 359133 [ 225.887065][ T9392] total_pgmajfault 846 [ 225.891172][ T9392] total_inactive_anon 4096 [ 225.895668][ T9392] total_active_anon 0 [ 225.899736][ T9392] total_inactive_file 28672 [ 225.904259][ T9392] total_active_file 0 [ 225.908281][ T9392] total_unevictable 0 [ 225.912274][ T9392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1874,pid=9391,uid=0 [ 225.927090][ T9392] Memory cgroup out of memory: Killed process 9391 (syz.4.1874) total-vm:98116kB, anon-rss:936kB, file-rss:26668kB, shmem-rss:128kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 225.963269][ T9436] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.099220][ T9436] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.170660][ T9436] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.211498][ T9445] sctp: [Deprecated]: syz.3.1889 (pid 9445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.211498][ T9445] Use struct sctp_sack_info instead [ 226.255481][ T9436] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.280607][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 226.285654][ T9436] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.311284][ T9436] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.398731][ T9436] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.419064][ T9454] loop3: detected capacity change from 0 to 512 [ 226.425510][ T9455] loop7: detected capacity change from 0 to 2048 [ 226.426466][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.441676][ T9454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.468707][ T9455] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.468958][ T9454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 226.489971][ T9455] netlink: 'syz.7.1892': attribute type 1 has an invalid length. [ 226.536990][ T9454] System zones: 1-12 [ 226.549998][ T9454] EXT4-fs (loop3): 1 truncate cleaned up [ 226.589423][ T9462] loop4: detected capacity change from 0 to 1024 [ 226.596234][ T9462] EXT4-fs: Ignoring removed orlov option [ 226.634124][ T9462] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 226.740901][ T9470] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 226.757383][ T9473] wireguard4: entered promiscuous mode [ 226.763045][ T9473] wireguard4: entered allmulticast mode [ 226.857186][ T8804] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 226.876831][ T9479] loop5: detected capacity change from 0 to 1024 [ 226.946219][ T9479] EXT4-fs: Ignoring removed orlov option [ 227.124784][ T9479] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 227.240148][ T9488] sctp: [Deprecated]: syz.7.1901 (pid 9488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.240148][ T9488] Use struct sctp_sack_info instead [ 227.294032][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1901'. [ 227.318490][ T9486] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 227.340280][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.345443][ T9495] lo speed is unknown, defaulting to 1000 [ 227.348805][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.364954][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 227.364973][ T29] audit: type=1326 audit(1746366523.827:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.410712][ T29] audit: type=1326 audit(1746366523.827:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.441091][ T29] audit: type=1326 audit(1746366523.907:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.464625][ T29] audit: type=1326 audit(1746366523.907:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.488090][ T29] audit: type=1326 audit(1746366523.907:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.511540][ T29] audit: type=1326 audit(1746366523.907:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.534822][ T29] audit: type=1326 audit(1746366523.907:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.558866][ T29] audit: type=1326 audit(1746366523.907:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.582662][ T29] audit: type=1326 audit(1746366523.907:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 227.605912][ T29] audit: type=1326 audit(1746366523.907:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.5.1899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 228.025838][ T9512] loop3: detected capacity change from 0 to 1024 [ 228.088860][ T9512] EXT4-fs: Ignoring removed orlov option [ 228.148174][ T9516] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.208755][ T9512] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.220402][ T9524] loop4: detected capacity change from 0 to 2048 [ 228.227967][ T9516] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.241769][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.251154][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.260356][ T9512] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 228.270639][ T9524] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.285904][ T9524] netlink: 'syz.4.1911': attribute type 1 has an invalid length. [ 228.292212][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.310182][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.330373][ T9516] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.365441][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.375789][ T9527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1912'. [ 228.410839][ T9516] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.485130][ T9535] loop3: detected capacity change from 0 to 2048 [ 228.510923][ T9535] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.582530][ T9543] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 228.626268][ T9537] netlink: 'syz.5.1913': attribute type 4 has an invalid length. [ 228.634160][ T9537] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1913'. [ 228.809580][ T9550] sctp: [Deprecated]: syz.4.1917 (pid 9550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.809580][ T9550] Use struct sctp_sack_info instead [ 228.856151][ T9516] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.884692][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 228.885216][ T9516] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.913114][ T9516] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.925221][ T9516] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.020857][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 229.058383][ T9558] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 229.136002][ T9560] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1914: bg 0: block 345: padding at end of block bitmap is not set [ 229.174713][ T9562] vlan2: entered promiscuous mode [ 229.180004][ T9562] bridge0: entered promiscuous mode [ 229.185478][ T9562] vlan2: entered allmulticast mode [ 229.186113][ T9560] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 229.190688][ T9562] bridge0: entered allmulticast mode [ 229.203388][ T9560] EXT4-fs (loop3): This should not happen!! Data will be lost [ 229.203388][ T9560] [ 229.223894][ T9564] loop4: detected capacity change from 0 to 1024 [ 229.230827][ T9564] EXT4-fs: Ignoring removed bh option [ 229.236435][ T9564] EXT4-fs: inline encryption not supported [ 229.242507][ T9564] EXT4-fs: Ignoring removed i_version option [ 229.250840][ T9564] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 229.264748][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.271999][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.282203][ T9564] EXT4-fs error (device loop4): ext4_map_blocks:709: inode #3: block 1: comm syz.4.1922: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.296859][ T9564] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.1922: Failed to acquire dquot type 0 [ 229.322209][ T9562] bridge_slave_0: left allmulticast mode [ 229.328022][ T9562] bridge_slave_0: left promiscuous mode [ 229.331436][ T9564] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1922: Freeing blocks not in datazone - block = 0, count = 4096 [ 229.333696][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.355203][ T9564] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1922: Invalid inode bitmap blk 0 in block_group 0 [ 229.441786][ T483] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.464386][ T9564] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 229.474212][ T9564] EXT4-fs (loop4): 1 orphan inode deleted [ 229.485658][ T9562] bridge_slave_1: left allmulticast mode [ 229.491481][ T9562] bridge_slave_1: left promiscuous mode [ 229.497438][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.506208][ T483] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 229.577499][ T9562] bond0: (slave bond_slave_0): Releasing backup interface [ 229.596665][ T9562] bond0: (slave bond_slave_1): Releasing backup interface [ 229.679178][ T9562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.703581][ T9562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.744811][ T9562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.764985][ T9562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.811902][ T9562] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.820408][ T9562] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.829043][ T9562] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.837828][ T9562] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.859419][ T9562] wireguard0: left promiscuous mode [ 229.864735][ T9562] wireguard0: left allmulticast mode [ 229.872628][ T9562] wireguard1: left promiscuous mode [ 229.877903][ T9562] wireguard1: left allmulticast mode [ 229.885112][ T9562] vlan2: left promiscuous mode [ 229.889945][ T9562] bridge0: left promiscuous mode [ 229.895042][ T9562] vlan2: left allmulticast mode [ 229.899984][ T9562] bridge0: left allmulticast mode [ 230.042196][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.057343][ T9570] lo speed is unknown, defaulting to 1000 [ 230.081136][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.088020][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.095001][ T9569] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.112640][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.123674][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.135650][ T9578] loop3: detected capacity change from 0 to 1024 [ 230.142702][ T9578] EXT4-fs: Ignoring removed orlov option [ 230.148449][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.155095][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.162394][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.170691][ T9569] hsr0 speed is unknown, defaulting to 1000 [ 230.225059][ T9578] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 230.233515][ T9583] loop4: detected capacity change from 0 to 2048 [ 230.249273][ T9578] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 230.259807][ T9583] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.293375][ T9583] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 230.304485][ T9589] lo speed is unknown, defaulting to 1000 [ 230.315463][ T9589] hsr0 speed is unknown, defaulting to 1000 [ 230.531691][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1933'. [ 230.555082][ T9601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 230.638925][ T9602] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1927: bg 0: block 345: padding at end of block bitmap is not set [ 230.765550][ T9607] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.824262][ T9606] loop7: detected capacity change from 0 to 1024 [ 230.845828][ T9606] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.877447][ T9606] EXT4-fs: quotafile must be on filesystem root [ 230.900988][ T9604] lo speed is unknown, defaulting to 1000 [ 230.934946][ T9607] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.003595][ T9604] hsr0 speed is unknown, defaulting to 1000 [ 231.083397][ T9607] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.164497][ T9616] loop7: detected capacity change from 0 to 512 [ 231.197831][ T9607] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.254490][ T9616] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 231.317061][ T9616] EXT4-fs (loop7): mount failed [ 231.367237][ T9607] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.424408][ T9607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.453656][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.475521][ T9629] FAULT_INJECTION: forcing a failure. [ 231.475521][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 231.488253][ T9629] CPU: 0 UID: 0 PID: 9629 Comm: syz.5.1942 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 231.488288][ T9629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.488304][ T9629] Call Trace: [ 231.488311][ T9629] [ 231.488321][ T9629] __dump_stack+0x1d/0x30 [ 231.488364][ T9629] dump_stack_lvl+0xe8/0x140 [ 231.488382][ T9629] dump_stack+0x15/0x1b [ 231.488397][ T9629] should_fail_ex+0x265/0x280 [ 231.488437][ T9629] should_failslab+0x8c/0xb0 [ 231.488539][ T9629] kmem_cache_alloc_node_noprof+0x57/0x320 [ 231.488655][ T9629] ? __alloc_skb+0x101/0x320 [ 231.488692][ T9629] __alloc_skb+0x101/0x320 [ 231.488767][ T9629] netlink_alloc_large_skb+0xba/0xf0 [ 231.488804][ T9629] netlink_sendmsg+0x3cf/0x6b0 [ 231.488846][ T9629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.488923][ T9629] __sock_sendmsg+0x142/0x180 [ 231.488954][ T9629] ____sys_sendmsg+0x31e/0x4e0 [ 231.488974][ T9629] ___sys_sendmsg+0x17b/0x1d0 [ 231.489043][ T9629] __x64_sys_sendmsg+0xd4/0x160 [ 231.489072][ T9629] x64_sys_call+0x2999/0x2fb0 [ 231.489097][ T9629] do_syscall_64+0xd0/0x1a0 [ 231.489118][ T9629] ? clear_bhb_loop+0x25/0x80 [ 231.489140][ T9629] ? clear_bhb_loop+0x25/0x80 [ 231.489209][ T9629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.489265][ T9629] RIP: 0033:0x7f718531e969 [ 231.489284][ T9629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.489307][ T9629] RSP: 002b:00007f7183987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.489382][ T9629] RAX: ffffffffffffffda RBX: 00007f7185545fa0 RCX: 00007f718531e969 [ 231.489397][ T9629] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 231.489413][ T9629] RBP: 00007f7183987090 R08: 0000000000000000 R09: 0000000000000000 [ 231.489427][ T9629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.489516][ T9629] R13: 0000000000000000 R14: 00007f7185545fa0 R15: 00007fff8cecb578 [ 231.489540][ T9629] [ 231.491098][ T9607] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.497140][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.529040][ T9607] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.802695][ T9633] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 231.835488][ T9639] loop4: detected capacity change from 0 to 128 [ 231.851191][ T9639] FAULT_INJECTION: forcing a failure. [ 231.851191][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 231.863972][ T9639] CPU: 1 UID: 0 PID: 9639 Comm: syz.4.1945 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 231.864008][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.864067][ T9639] Call Trace: [ 231.864074][ T9639] [ 231.864108][ T9639] __dump_stack+0x1d/0x30 [ 231.864130][ T9639] dump_stack_lvl+0xe8/0x140 [ 231.864154][ T9639] dump_stack+0x15/0x1b [ 231.864175][ T9639] should_fail_ex+0x265/0x280 [ 231.864212][ T9639] should_failslab+0x8c/0xb0 [ 231.864285][ T9639] kmem_cache_alloc_noprof+0x50/0x310 [ 231.864331][ T9639] ? getname_flags+0x80/0x3b0 [ 231.864438][ T9639] getname_flags+0x80/0x3b0 [ 231.864474][ T9639] user_path_at+0x28/0x130 [ 231.864492][ T9639] __se_sys_name_to_handle_at+0xfd/0x590 [ 231.864519][ T9639] ? fput+0x8f/0xc0 [ 231.864610][ T9639] ? ksys_write+0x16e/0x1a0 [ 231.864639][ T9639] __x64_sys_name_to_handle_at+0x67/0x80 [ 231.864700][ T9639] x64_sys_call+0x279f/0x2fb0 [ 231.864728][ T9639] do_syscall_64+0xd0/0x1a0 [ 231.864756][ T9639] ? clear_bhb_loop+0x25/0x80 [ 231.864783][ T9639] ? clear_bhb_loop+0x25/0x80 [ 231.864853][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.864882][ T9639] RIP: 0033:0x7fc7b35ee969 [ 231.864899][ T9639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.864921][ T9639] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 231.864944][ T9639] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 231.864960][ T9639] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 231.864975][ T9639] RBP: 00007fc7b1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 231.865048][ T9639] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 231.865060][ T9639] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 231.865084][ T9639] [ 232.379020][ T9648] loop4: detected capacity change from 0 to 512 [ 232.424554][ T9648] EXT4-fs (loop4): Invalid default hash set in the superblock [ 232.546595][ T9656] loop7: detected capacity change from 0 to 2048 [ 232.579600][ T9656] EXT4-fs mount: 21 callbacks suppressed [ 232.579620][ T9656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.605803][ T9658] loop5: detected capacity change from 0 to 2048 [ 232.626844][ T9660] bond1: entered promiscuous mode [ 232.632026][ T9660] bond1: entered allmulticast mode [ 232.645631][ T9660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.660217][ T9658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.682175][ T9669] loop3: detected capacity change from 0 to 1024 [ 232.688755][ T9656] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.704087][ T9658] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.715983][ T9660] bond1 (unregistering): Released all slaves [ 232.723976][ T9669] EXT4-fs: Ignoring removed orlov option [ 232.742129][ T9669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.798707][ T9669] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 232.821843][ T9673] netlink: 'syz.7.1951': attribute type 1 has an invalid length. [ 232.832016][ T9672] netlink: 'syz.5.1953': attribute type 1 has an invalid length. [ 232.866991][ T9669] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 232.883901][ T9676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 232.906993][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 232.907013][ T29] audit: type=1326 audit(1746366529.367:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 232.937083][ T29] audit: type=1326 audit(1746366529.367:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 232.960616][ T29] audit: type=1326 audit(1746366529.367:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 232.984164][ T29] audit: type=1326 audit(1746366529.367:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.007641][ T29] audit: type=1326 audit(1746366529.367:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.031107][ T29] audit: type=1326 audit(1746366529.367:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.054633][ T29] audit: type=1326 audit(1746366529.367:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.078212][ T29] audit: type=1326 audit(1746366529.367:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.101659][ T29] audit: type=1326 audit(1746366529.367:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.203611][ T29] audit: type=1326 audit(1746366529.447:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.3.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f597f48e969 code=0x7ffc0000 [ 233.210539][ T9681] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1953: bg 0: block 345: padding at end of block bitmap is not set [ 233.356258][ T9683] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.379613][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.441611][ T9683] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.463988][ T9687] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1951: bg 0: block 345: padding at end of block bitmap is not set [ 233.559463][ T9683] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.940323][ T9683] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.016875][ T9683] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.031270][ T9683] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.047600][ T9683] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.080716][ T9683] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.269270][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.315087][ T9700] __nla_validate_parse: 2 callbacks suppressed [ 234.315106][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.330861][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.331258][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.358887][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.368134][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.381558][ T9704] loop7: detected capacity change from 0 to 512 [ 234.388672][ T9704] ext4: Invalid uid '0x00000000ffffffff' [ 234.396221][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.399742][ T9704] loop7: detected capacity change from 0 to 512 [ 234.405734][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 234.411779][ T9704] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 234.468610][ T9710] loop7: detected capacity change from 0 to 2048 [ 234.490371][ T9713] loop6: detected capacity change from 0 to 512 [ 234.497682][ T9710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.499399][ T9711] siw: device registration error -23 [ 234.511250][ T9710] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.525876][ T9713] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.553919][ T9713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 234.562295][ T9713] System zones: 1-12 [ 234.568550][ T9713] EXT4-fs (loop6): 1 truncate cleaned up [ 234.574784][ T9713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.590809][ T9717] netlink: 'syz.7.1967': attribute type 1 has an invalid length. [ 234.748625][ T9717] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1967: bg 0: block 345: padding at end of block bitmap is not set [ 234.781463][ T9722] loop5: detected capacity change from 0 to 1024 [ 234.883613][ T9722] EXT4-fs: Ignoring removed orlov option [ 234.902734][ T9722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.278907][ T9727] loop4: detected capacity change from 0 to 512 [ 235.286046][ T9727] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 235.301483][ T9727] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 235.313823][ T9729] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 235.332468][ T9727] System zones: 1-12 [ 235.343101][ T9727] EXT4-fs (loop4): 1 truncate cleaned up [ 235.351447][ T9727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.412712][ T7395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.456249][ T9733] loop6: detected capacity change from 0 to 128 [ 235.554143][ T9722] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 235.591044][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 235.606857][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 235.626545][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 235.639328][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 235.749254][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.764328][ T9753] loop6: detected capacity change from 0 to 1024 [ 235.782976][ T9753] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 235.807606][ T9753] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 235.820298][ T9753] EXT4-fs (loop6): orphan cleanup on readonly fs [ 235.834735][ T9753] EXT4-fs error (device loop6): ext4_map_blocks:709: inode #3: block 3: comm syz.6.1980: lblock 3 mapped to illegal pblock 3 (length 1) [ 235.853766][ T9753] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1980: Failed to acquire dquot type 0 [ 235.865954][ T9753] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 3: comm syz.6.1980: lblock 3 mapped to illegal pblock 3 (length 1) [ 235.881540][ T9753] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1980: Failed to acquire dquot type 0 [ 235.893622][ T9753] EXT4-fs error (device loop6): ext4_free_blocks:6587: comm syz.6.1980: Freeing blocks not in datazone - block = 0, count = 4096 [ 235.908778][ T9753] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 3: comm syz.6.1980: lblock 3 mapped to illegal pblock 3 (length 1) [ 235.909572][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.923552][ T9753] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.1980: Failed to acquire dquot type 0 [ 235.938428][ T9761] loop5: detected capacity change from 0 to 512 [ 235.943999][ T9753] EXT4-fs (loop6): 1 orphan inode deleted [ 235.951205][ T9761] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.965989][ T9761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 235.966420][ T9753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 235.974125][ T9761] System zones: 1-12 [ 235.991418][ T9761] EXT4-fs (loop5): 1 truncate cleaned up [ 235.999359][ T9761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.013329][ T7395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.032032][ T9764] loop7: detected capacity change from 0 to 512 [ 236.060890][ T9764] EXT4-fs: Ignoring removed bh option [ 236.089452][ T9764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.111530][ T9775] FAULT_INJECTION: forcing a failure. [ 236.111530][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 236.124260][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.6.1986 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 236.124345][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 236.124357][ T9775] Call Trace: [ 236.124363][ T9775] [ 236.124371][ T9775] __dump_stack+0x1d/0x30 [ 236.124394][ T9775] dump_stack_lvl+0xe8/0x140 [ 236.124412][ T9775] dump_stack+0x15/0x1b [ 236.124484][ T9775] should_fail_ex+0x265/0x280 [ 236.124525][ T9775] should_failslab+0x8c/0xb0 [ 236.124562][ T9775] kmem_cache_alloc_node_noprof+0x57/0x320 [ 236.124642][ T9775] ? __alloc_skb+0x101/0x320 [ 236.124714][ T9775] __alloc_skb+0x101/0x320 [ 236.124754][ T9775] netlink_alloc_large_skb+0xba/0xf0 [ 236.124791][ T9775] netlink_sendmsg+0x3cf/0x6b0 [ 236.124832][ T9775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.124880][ T9775] __sock_sendmsg+0x142/0x180 [ 236.124908][ T9775] ____sys_sendmsg+0x31e/0x4e0 [ 236.124937][ T9775] ___sys_sendmsg+0x17b/0x1d0 [ 236.124978][ T9775] __x64_sys_sendmsg+0xd4/0x160 [ 236.125065][ T9775] x64_sys_call+0x2999/0x2fb0 [ 236.125091][ T9775] do_syscall_64+0xd0/0x1a0 [ 236.125118][ T9775] ? clear_bhb_loop+0x25/0x80 [ 236.125144][ T9775] ? clear_bhb_loop+0x25/0x80 [ 236.125216][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.125236][ T9775] RIP: 0033:0x7f6d2f37e969 [ 236.125250][ T9775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.125274][ T9775] RSP: 002b:00007f6d2d9e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.125293][ T9775] RAX: ffffffffffffffda RBX: 00007f6d2f5a5fa0 RCX: 00007f6d2f37e969 [ 236.125308][ T9775] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 236.125324][ T9775] RBP: 00007f6d2d9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 236.125397][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.125412][ T9775] R13: 0000000000000000 R14: 00007f6d2f5a5fa0 R15: 00007fffca2b5838 [ 236.125433][ T9775] [ 236.126683][ T9764] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.296741][ T9777] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 236.320903][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.357295][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.925260][ T9794] lo speed is unknown, defaulting to 1000 [ 236.947281][ T9794] hsr0 speed is unknown, defaulting to 1000 [ 236.985276][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.004276][ T9803] loop4: detected capacity change from 0 to 512 [ 237.031275][ T9803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 237.043547][ T9808] loop5: detected capacity change from 0 to 512 [ 237.050043][ T9805] loop7: detected capacity change from 0 to 512 [ 237.065965][ T9808] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 237.067081][ T9803] EXT4-fs (loop4): 1 truncate cleaned up [ 237.083081][ T9809] bond1: entered promiscuous mode [ 237.088269][ T9809] bond1: entered allmulticast mode [ 237.094533][ T9803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.109374][ T9805] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 237.124755][ T9809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.132578][ T9808] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 237.145464][ T9808] System zones: 1-12 [ 237.159043][ T9809] bond1 (unregistering): Released all slaves [ 237.165374][ T9808] EXT4-fs (loop5): 1 truncate cleaned up [ 237.172946][ T9808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.185732][ T9805] EXT4-fs (loop7): mount failed [ 237.339202][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.360781][ T9805] loop7: detected capacity change from 0 to 512 [ 237.376878][ T9805] EXT4-fs: Ignoring removed oldalloc option [ 237.382879][ T9805] EXT4-fs: inline encryption not supported [ 237.388803][ T9821] FAULT_INJECTION: forcing a failure. [ 237.388803][ T9821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.388830][ T9805] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.401886][ T9821] CPU: 0 UID: 0 PID: 9821 Comm: syz.3.2001 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 237.401922][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.402017][ T9821] Call Trace: [ 237.402027][ T9821] [ 237.402037][ T9821] __dump_stack+0x1d/0x30 [ 237.402128][ T9821] dump_stack_lvl+0xe8/0x140 [ 237.402154][ T9821] dump_stack+0x15/0x1b [ 237.402175][ T9821] should_fail_ex+0x265/0x280 [ 237.402253][ T9821] should_fail+0xb/0x20 [ 237.402290][ T9821] should_fail_usercopy+0x1a/0x20 [ 237.402314][ T9821] _copy_from_user+0x1c/0xb0 [ 237.402343][ T9821] __sys_bpf+0x178/0x790 [ 237.402388][ T9821] __x64_sys_bpf+0x41/0x50 [ 237.402421][ T9821] x64_sys_call+0x2478/0x2fb0 [ 237.402517][ T9821] do_syscall_64+0xd0/0x1a0 [ 237.402610][ T9821] ? clear_bhb_loop+0x25/0x80 [ 237.402638][ T9821] ? clear_bhb_loop+0x25/0x80 [ 237.402666][ T9821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.402694][ T9821] RIP: 0033:0x7f597f48e969 [ 237.402713][ T9821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.402777][ T9821] RSP: 002b:00007f597daf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.402801][ T9821] RAX: ffffffffffffffda RBX: 00007f597f6b5fa0 RCX: 00007f597f48e969 [ 237.402817][ T9821] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 237.402833][ T9821] RBP: 00007f597daf7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.402849][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.402864][ T9821] R13: 0000000000000000 R14: 00007f597f6b5fa0 R15: 00007ffd6ddd7c68 [ 237.402952][ T9821] [ 237.579733][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.589591][ T9805] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 237.648669][ T9805] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1998: bg 0: block 64: padding at end of block bitmap is not set [ 237.695213][ T9805] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.1998: Failed to acquire dquot type 0 [ 237.726739][ T9805] EXT4-fs (loop7): 1 truncate cleaned up [ 237.733489][ T9838] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 237.746965][ T9805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.814360][ T9851] loop6: detected capacity change from 0 to 2048 [ 237.829976][ T9851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.842468][ T9851] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.856248][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.882560][ T9858] FAULT_INJECTION: forcing a failure. [ 237.882560][ T9858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.895823][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: +}[@ Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 237.895967][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.895980][ T9858] Call Trace: [ 237.896010][ T9858] [ 237.896019][ T9858] __dump_stack+0x1d/0x30 [ 237.896041][ T9858] dump_stack_lvl+0xe8/0x140 [ 237.896061][ T9858] dump_stack+0x15/0x1b [ 237.896077][ T9858] should_fail_ex+0x265/0x280 [ 237.896165][ T9858] should_fail+0xb/0x20 [ 237.896197][ T9858] should_fail_usercopy+0x1a/0x20 [ 237.896216][ T9858] _copy_from_user+0x1c/0xb0 [ 237.896238][ T9858] memdup_user+0x5e/0xd0 [ 237.896340][ T9858] strndup_user+0x68/0xb0 [ 237.896361][ T9858] __se_sys_mount+0x4d/0x2e0 [ 237.896466][ T9858] ? fput+0x8f/0xc0 [ 237.896483][ T9858] ? ksys_write+0x16e/0x1a0 [ 237.896510][ T9858] __x64_sys_mount+0x67/0x80 [ 237.896536][ T9858] x64_sys_call+0xd36/0x2fb0 [ 237.896661][ T9858] do_syscall_64+0xd0/0x1a0 [ 237.896710][ T9858] ? clear_bhb_loop+0x25/0x80 [ 237.896803][ T9858] ? clear_bhb_loop+0x25/0x80 [ 237.896825][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.896847][ T9858] RIP: 0033:0x7fc7b35ee969 [ 237.896863][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.896951][ T9858] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 237.896994][ T9858] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 237.897007][ T9858] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 237.897086][ T9858] RBP: 00007fc7b1c57090 R08: 0000200000000a40 R09: 0000000000000000 [ 237.897098][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.897121][ T9858] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 237.897140][ T9858] [ 238.092972][ T9860] netlink: 'syz.6.2011': attribute type 1 has an invalid length. [ 238.260010][ T9868] loop4: detected capacity change from 0 to 512 [ 238.297719][ T9868] __quota_error: 333 callbacks suppressed [ 238.297739][ T9868] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 238.326841][ T9868] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 238.356406][ T9868] EXT4-fs (loop4): mount failed [ 238.394569][ T9873] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2011: bg 0: block 345: padding at end of block bitmap is not set [ 238.410008][ T9873] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 238.422717][ T9873] EXT4-fs (loop6): This should not happen!! Data will be lost [ 238.422717][ T9873] [ 238.490255][ T9878] FAULT_INJECTION: forcing a failure. [ 238.490255][ T9878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.503485][ T9878] CPU: 1 UID: 0 PID: 9878 Comm: +}[@ Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 238.503585][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 238.503600][ T9878] Call Trace: [ 238.503606][ T9878] [ 238.503615][ T9878] __dump_stack+0x1d/0x30 [ 238.503639][ T9878] dump_stack_lvl+0xe8/0x140 [ 238.503727][ T9878] dump_stack+0x15/0x1b [ 238.503744][ T9878] should_fail_ex+0x265/0x280 [ 238.503779][ T9878] should_fail+0xb/0x20 [ 238.503866][ T9878] should_fail_usercopy+0x1a/0x20 [ 238.503887][ T9878] _copy_from_user+0x1c/0xb0 [ 238.503912][ T9878] memdup_user+0x5e/0xd0 [ 238.503932][ T9878] strndup_user+0x68/0xb0 [ 238.503953][ T9878] __se_sys_mount+0x4d/0x2e0 [ 238.504006][ T9878] ? fput+0x8f/0xc0 [ 238.504024][ T9878] ? ksys_write+0x16e/0x1a0 [ 238.504053][ T9878] __x64_sys_mount+0x67/0x80 [ 238.504101][ T9878] x64_sys_call+0xd36/0x2fb0 [ 238.504126][ T9878] do_syscall_64+0xd0/0x1a0 [ 238.504209][ T9878] ? clear_bhb_loop+0x25/0x80 [ 238.504234][ T9878] ? clear_bhb_loop+0x25/0x80 [ 238.504258][ T9878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.504282][ T9878] RIP: 0033:0x7fc7b35ee969 [ 238.504298][ T9878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.504319][ T9878] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 238.504419][ T9878] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 238.504431][ T9878] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 238.504442][ T9878] RBP: 00007fc7b1c57090 R08: 0000200000000a40 R09: 0000000000000000 [ 238.504453][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.504464][ T9878] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 238.504539][ T9878] [ 238.702570][ T9880] loop5: detected capacity change from 0 to 1024 [ 238.724950][ T9880] EXT4-fs: Ignoring removed orlov option [ 238.747717][ T9880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.760916][ T9882] loop3: detected capacity change from 0 to 1024 [ 238.769177][ T9882] EXT4-fs: Ignoring removed orlov option [ 238.790080][ T9886] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 238.802028][ T9880] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 238.812138][ T9882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.840495][ T9880] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 238.853303][ T9882] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 238.867270][ T9882] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 238.891273][ T29] audit: type=1326 audit(1746366535.357:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 238.915014][ T29] audit: type=1326 audit(1746366535.357:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 238.938542][ T29] audit: type=1326 audit(1746366535.357:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 238.962083][ T29] audit: type=1326 audit(1746366535.357:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 238.985713][ T29] audit: type=1326 audit(1746366535.357:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 239.009324][ T29] audit: type=1326 audit(1746366535.357:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 239.033192][ T29] audit: type=1326 audit(1746366535.357:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 239.056655][ T29] audit: type=1326 audit(1746366535.357:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 239.080149][ T29] audit: type=1326 audit(1746366535.357:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9879 comm="syz.5.2019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f718531e969 code=0x7ffc0000 [ 239.132160][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.151612][ T9895] syzkaller0: entered promiscuous mode [ 239.157340][ T9895] syzkaller0: entered allmulticast mode [ 239.312085][ T9901] siw: device registration error -23 [ 239.401652][ T9903] lo speed is unknown, defaulting to 1000 [ 239.408091][ T9903] hsr0 speed is unknown, defaulting to 1000 [ 239.535289][ T9906] sctp: [Deprecated]: syz.7.2029 (pid 9906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.535289][ T9906] Use struct sctp_sack_info instead [ 239.566587][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.728346][ T9906] __nla_validate_parse: 10 callbacks suppressed [ 239.728364][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2029'. [ 239.749342][ T9910] loop3: detected capacity change from 0 to 512 [ 239.780881][ T7395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.800899][ T9910] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 239.805851][ T9915] loop7: detected capacity change from 0 to 1024 [ 239.822579][ T9915] EXT4-fs: Ignoring removed orlov option [ 239.828830][ T9910] EXT4-fs (loop3): mount failed [ 239.853438][ T9915] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.854948][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.875158][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.892690][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.902328][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.935572][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.944861][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 239.980337][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.009830][ T9932] FAULT_INJECTION: forcing a failure. [ 240.009830][ T9932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.023002][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.4.2036 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 240.023037][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.023053][ T9932] Call Trace: [ 240.023060][ T9932] [ 240.023070][ T9932] __dump_stack+0x1d/0x30 [ 240.023095][ T9932] dump_stack_lvl+0xe8/0x140 [ 240.023119][ T9932] dump_stack+0x15/0x1b [ 240.023191][ T9932] should_fail_ex+0x265/0x280 [ 240.023238][ T9932] should_fail+0xb/0x20 [ 240.023273][ T9932] should_fail_usercopy+0x1a/0x20 [ 240.023352][ T9932] _copy_to_user+0x20/0xa0 [ 240.023378][ T9932] copy_siginfo_to_user+0x22/0xb0 [ 240.023404][ T9932] x64_setup_rt_frame+0x2b5/0x580 [ 240.023448][ T9932] arch_do_signal_or_restart+0x26e/0x480 [ 240.023515][ T9932] syscall_exit_to_user_mode+0x68/0xb0 [ 240.023570][ T9932] do_syscall_64+0xdd/0x1a0 [ 240.023596][ T9932] ? clear_bhb_loop+0x25/0x80 [ 240.023639][ T9932] ? clear_bhb_loop+0x25/0x80 [ 240.023689][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.023716][ T9932] RIP: 0033:0x7fc7b35ee967 [ 240.023735][ T9932] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 240.023757][ T9932] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 240.023780][ T9932] RAX: 0000000000000013 RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 240.023796][ T9932] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000008 [ 240.023811][ T9932] RBP: 00007fc7b1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 240.023904][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.023919][ T9932] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 240.023942][ T9932] [ 240.320989][ T9943] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.376142][ T9951] sctp: [Deprecated]: syz.4.2041 (pid 9951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.376142][ T9951] Use struct sctp_sack_info instead [ 240.379947][ T9950] siw: device registration error -23 [ 240.423365][ T9943] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.456569][ T9951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 240.530649][ T9943] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.590308][ T9960] loop5: detected capacity change from 0 to 1024 [ 240.601777][ T9960] EXT4-fs: Ignoring removed orlov option [ 240.623554][ T9960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.649310][ T9943] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.659604][ T9967] loop4: detected capacity change from 0 to 1024 [ 240.666489][ T9967] EXT4-fs: Ignoring removed orlov option [ 240.666959][ T9960] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.703703][ T9967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.725060][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2047'. [ 240.736115][ T9970] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 240.744843][ T9972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 240.772525][ T9967] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 240.841732][ T9943] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.874284][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.910292][ T9943] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.948546][ T9943] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.959237][ T9975] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 240.972792][ T9943] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.042679][ T9986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.056528][ T9986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.150486][ T9990] loop3: detected capacity change from 0 to 8192 [ 241.268286][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.380540][ T9996] lo speed is unknown, defaulting to 1000 [ 241.386808][ T9996] hsr0 speed is unknown, defaulting to 1000 [ 241.549580][T10003] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.609502][T10003] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.659176][T10003] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.694492][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2058'. [ 241.719117][T10003] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.778951][T10003] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.792535][T10003] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.806195][T10003] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.819659][T10003] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.925702][T10013] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 241.943320][T10017] FAULT_INJECTION: forcing a failure. [ 241.943320][T10017] name failslab, interval 1, probability 0, space 0, times 0 [ 241.956086][T10017] CPU: 0 UID: 0 PID: 10017 Comm: syz.4.2061 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 241.956120][T10017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 241.956145][T10017] Call Trace: [ 241.956154][T10017] [ 241.956163][T10017] __dump_stack+0x1d/0x30 [ 241.956187][T10017] dump_stack_lvl+0xe8/0x140 [ 241.956291][T10017] dump_stack+0x15/0x1b [ 241.956311][T10017] should_fail_ex+0x265/0x280 [ 241.956344][T10017] should_failslab+0x8c/0xb0 [ 241.956376][T10017] kmem_cache_alloc_node_noprof+0x57/0x320 [ 241.956470][T10017] ? __alloc_skb+0x101/0x320 [ 241.956687][T10017] __alloc_skb+0x101/0x320 [ 241.956717][T10017] ? audit_log_start+0x365/0x6c0 [ 241.956749][T10017] audit_log_start+0x380/0x6c0 [ 241.956833][T10017] audit_seccomp+0x48/0x100 [ 241.956864][T10017] ? __seccomp_filter+0x68c/0x10d0 [ 241.956949][T10017] __seccomp_filter+0x69d/0x10d0 [ 241.956975][T10017] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 241.957005][T10017] ? vfs_write+0x75e/0x8d0 [ 241.957039][T10017] __secure_computing+0x82/0x150 [ 241.957065][T10017] syscall_trace_enter+0xcf/0x1e0 [ 241.957166][T10017] do_syscall_64+0xaa/0x1a0 [ 241.957192][T10017] ? clear_bhb_loop+0x25/0x80 [ 241.957217][T10017] ? clear_bhb_loop+0x25/0x80 [ 241.957241][T10017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.957266][T10017] RIP: 0033:0x7fc7b35ee969 [ 241.957354][T10017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.957376][T10017] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 241.957395][T10017] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 241.957406][T10017] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000002 [ 241.957438][T10017] RBP: 00007fc7b1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 241.957449][T10017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.957463][T10017] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 241.957485][T10017] [ 241.992362][T10022] loop3: detected capacity change from 0 to 1024 [ 242.171848][T10022] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.197401][T10022] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 242.206212][T10022] EXT4-fs (loop3): orphan cleanup on readonly fs [ 242.214959][T10022] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #3: block 3: comm syz.3.2063: lblock 3 mapped to illegal pblock 3 (length 1) [ 242.231077][T10022] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2063: Failed to acquire dquot type 0 [ 242.243188][T10022] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 3: comm syz.3.2063: lblock 3 mapped to illegal pblock 3 (length 1) [ 242.259053][T10022] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2063: Failed to acquire dquot type 0 [ 242.271201][T10022] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.2063: Freeing blocks not in datazone - block = 0, count = 4096 [ 242.286590][T10022] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 3: comm syz.3.2063: lblock 3 mapped to illegal pblock 3 (length 1) [ 242.297112][T10027] loop4: detected capacity change from 0 to 512 [ 242.302365][T10022] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2063: Failed to acquire dquot type 0 [ 242.319610][T10022] EXT4-fs (loop3): 1 orphan inode deleted [ 242.326305][T10022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.352744][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.363530][T10027] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 242.378446][T10027] EXT4-fs (loop4): mount failed [ 242.426634][T10040] hub 2-0:1.0: USB hub found [ 242.431730][T10040] hub 2-0:1.0: 8 ports detected [ 242.440982][T10043] FAULT_INJECTION: forcing a failure. [ 242.440982][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 242.453675][T10043] CPU: 1 UID: 0 PID: 10043 Comm: syz.4.2071 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 242.453707][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 242.453730][T10043] Call Trace: [ 242.453738][T10043] [ 242.453824][T10043] __dump_stack+0x1d/0x30 [ 242.453846][T10043] dump_stack_lvl+0xe8/0x140 [ 242.453866][T10043] dump_stack+0x15/0x1b [ 242.453883][T10043] should_fail_ex+0x265/0x280 [ 242.453974][T10043] should_failslab+0x8c/0xb0 [ 242.454003][T10043] __kmalloc_noprof+0xa5/0x3e0 [ 242.454020][T10043] ? bpf_test_init+0xa9/0x160 [ 242.454091][T10043] bpf_test_init+0xa9/0x160 [ 242.454175][T10043] bpf_prog_test_run_xdp+0x274/0x8f0 [ 242.454206][T10043] ? kstrtouint+0x76/0xc0 [ 242.454233][T10043] ? __rcu_read_unlock+0x4f/0x70 [ 242.454311][T10043] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 242.454342][T10043] bpf_prog_test_run+0x207/0x390 [ 242.454409][T10043] __sys_bpf+0x3dc/0x790 [ 242.454444][T10043] __x64_sys_bpf+0x41/0x50 [ 242.454470][T10043] x64_sys_call+0x2478/0x2fb0 [ 242.454555][T10043] do_syscall_64+0xd0/0x1a0 [ 242.454576][T10043] ? clear_bhb_loop+0x25/0x80 [ 242.454644][T10043] ? clear_bhb_loop+0x25/0x80 [ 242.454665][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.454686][T10043] RIP: 0033:0x7fc7b35ee969 [ 242.454701][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.454730][T10043] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.454752][T10043] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 242.454764][T10043] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 242.454834][T10043] RBP: 00007fc7b1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 242.454846][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.454857][T10043] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 242.454877][T10043] [ 242.701442][T10047] FAULT_INJECTION: forcing a failure. [ 242.701442][T10047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.714714][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.4.2073 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 242.714817][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 242.714832][T10047] Call Trace: [ 242.714838][T10047] [ 242.714853][T10047] __dump_stack+0x1d/0x30 [ 242.714877][T10047] dump_stack_lvl+0xe8/0x140 [ 242.714900][T10047] dump_stack+0x15/0x1b [ 242.714918][T10047] should_fail_ex+0x265/0x280 [ 242.714958][T10047] should_fail+0xb/0x20 [ 242.714987][T10047] should_fail_usercopy+0x1a/0x20 [ 242.715029][T10047] _copy_from_user+0x1c/0xb0 [ 242.715054][T10047] __sys_connect+0xd0/0x2b0 [ 242.715110][T10047] __x64_sys_connect+0x3f/0x50 [ 242.715138][T10047] x64_sys_call+0x1daa/0x2fb0 [ 242.715165][T10047] do_syscall_64+0xd0/0x1a0 [ 242.715192][T10047] ? clear_bhb_loop+0x25/0x80 [ 242.715294][T10047] ? clear_bhb_loop+0x25/0x80 [ 242.715314][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.715339][T10047] RIP: 0033:0x7fc7b35ee969 [ 242.715356][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.715390][T10047] RSP: 002b:00007fc7b1c57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 242.715413][T10047] RAX: ffffffffffffffda RBX: 00007fc7b3815fa0 RCX: 00007fc7b35ee969 [ 242.715428][T10047] RDX: 0000000000000010 RSI: 0000200000e5c000 RDI: 0000000000000003 [ 242.715440][T10047] RBP: 00007fc7b1c57090 R08: 0000000000000000 R09: 0000000000000000 [ 242.715451][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.715489][T10047] R13: 0000000000000000 R14: 00007fc7b3815fa0 R15: 00007ffd6a531318 [ 242.715508][T10047] [ 242.910503][T10049] loop4: detected capacity change from 0 to 512 [ 242.940140][T10049] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.970017][T10049] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 242.981230][T10049] System zones: 1-12 [ 242.986071][T10049] EXT4-fs (loop4): 1 truncate cleaned up [ 242.992646][T10049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.046879][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.080872][T10072] loop7: detected capacity change from 0 to 512 [ 243.088118][T10074] loop4: detected capacity change from 0 to 1024 [ 243.088305][T10072] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 243.106881][T10072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 243.114848][T10072] System zones: 1-12 [ 243.115382][T10074] EXT4-fs: Ignoring removed orlov option [ 243.125092][T10072] EXT4-fs (loop7): 1 truncate cleaned up [ 243.131234][T10072] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.160019][T10074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.182746][T10080] bridge0: entered promiscuous mode [ 243.193292][T10080] macvlan2: entered promiscuous mode [ 243.209930][T10080] bridge0: port 3(macvlan2) entered blocking state [ 243.216739][T10080] bridge0: port 3(macvlan2) entered disabled state [ 243.237842][T10080] macvlan2: entered allmulticast mode [ 243.243405][T10080] bridge0: entered allmulticast mode [ 243.249856][T10080] macvlan2: left allmulticast mode [ 243.251002][T10074] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.255060][T10080] bridge0: left allmulticast mode [ 243.255671][T10080] bridge0: left promiscuous mode [ 243.277320][T10086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.277443][T10074] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 243.286125][T10086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.358641][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 243.358655][ T29] audit: type=1326 audit(1746366539.827:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 243.388467][ T29] audit: type=1326 audit(1746366539.827:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.4.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 243.466938][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.942802][T10096] loop6: detected capacity change from 0 to 2048 [ 243.952716][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.966415][T10096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.984137][T10100] loop3: detected capacity change from 0 to 512 [ 243.990653][T10096] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.997477][T10100] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.013936][T10100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 244.022267][T10100] System zones: 1-12 [ 244.026765][T10100] EXT4-fs (loop3): 1 truncate cleaned up [ 244.033207][T10100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.106553][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.417293][T10123] loop3: detected capacity change from 0 to 512 [ 244.424698][T10123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 244.448201][T10123] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 244.456471][T10123] System zones: 1-12 [ 244.461568][T10123] EXT4-fs (loop3): 1 truncate cleaned up [ 244.472531][T10123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.510517][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.522554][T10122] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2089: bg 0: block 345: padding at end of block bitmap is not set [ 244.543170][T10122] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 240 with error 117 [ 244.555765][T10122] EXT4-fs (loop6): This should not happen!! Data will be lost [ 244.555765][T10122] [ 244.617231][ T29] audit: type=1400 audit(1746366541.067:1965): avc: denied { create } for pid=10117 comm="syz.4.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 244.883138][T10128] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.027459][T10131] __nla_validate_parse: 12 callbacks suppressed [ 245.027476][T10131] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2100'. [ 245.106103][T10133] loop7: detected capacity change from 0 to 512 [ 245.119075][ T7395] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.128503][T10133] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 245.140635][T10128] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.159299][T10133] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 245.168910][T10133] System zones: 1-12 [ 245.173965][T10133] EXT4-fs (loop7): 1 truncate cleaned up [ 245.190828][T10133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.204906][T10128] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.249594][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.265279][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.275781][T10128] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.296970][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.312521][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.338579][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.340468][T10147] loop4: detected capacity change from 0 to 1024 [ 245.347670][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 245.356987][T10147] EXT4-fs: Ignoring removed orlov option [ 245.381116][T10147] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.432252][T10147] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 245.448753][T10147] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 245.462640][ T29] audit: type=1326 audit(1746366541.927:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.487177][ T29] audit: type=1326 audit(1746366541.927:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.510749][ T29] audit: type=1326 audit(1746366541.927:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.534313][ T29] audit: type=1326 audit(1746366541.927:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.557968][ T29] audit: type=1326 audit(1746366541.927:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.581570][ T29] audit: type=1326 audit(1746366541.927:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.605292][ T29] audit: type=1326 audit(1746366541.927:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10145 comm="syz.4.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 245.732079][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.118173][ T8515] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.322221][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 246.333111][T10164] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 246.353809][ T51] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.399152][T10167] wireguard2: entered promiscuous mode [ 246.404748][T10167] wireguard2: entered allmulticast mode [ 246.446051][ T51] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.514537][T10173] lo speed is unknown, defaulting to 1000 [ 246.524281][T10191] loop4: detected capacity change from 0 to 512 [ 246.532817][ T51] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.553206][T10191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 246.565376][T10173] hsr0 speed is unknown, defaulting to 1000 [ 246.597313][T10128] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.608736][T10128] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.620560][T10128] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.627021][T10191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 246.632984][T10128] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.637001][T10191] System zones: 1-12 [ 246.649738][T10191] EXT4-fs (loop4): 1 truncate cleaned up [ 246.655714][T10191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.735155][T10197] lo speed is unknown, defaulting to 1000 [ 246.741893][T10197] hsr0 speed is unknown, defaulting to 1000 [ 246.842143][ T51] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.081997][T10173] chnl_net:caif_netlink_parms(): no params data found [ 247.127587][ T51] bridge_slave_1: left allmulticast mode [ 247.133322][ T51] bridge_slave_1: left promiscuous mode [ 247.139074][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.154220][ T51] bridge_slave_0: left allmulticast mode [ 247.159976][ T51] bridge_slave_0: left promiscuous mode [ 247.165751][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.212021][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 247.243641][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2125'. [ 247.480633][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.548729][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.558795][ T51] bond0 (unregistering): Released all slaves [ 247.923631][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.938663][T10225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.022751][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.030219][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.049651][T10173] bridge_slave_0: entered allmulticast mode [ 248.056469][T10173] bridge_slave_0: entered promiscuous mode [ 248.077339][T10225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.088764][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.096044][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.106245][T10173] bridge_slave_1: entered allmulticast mode [ 248.112843][T10173] bridge_slave_1: entered promiscuous mode [ 248.205062][ T51] hsr_slave_0: left promiscuous mode [ 248.215809][ T51] hsr_slave_1: left promiscuous mode [ 248.221643][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.229189][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.237153][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.244602][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.256858][ T51] veth1_macvtap: left promiscuous mode [ 248.262602][ T51] veth0_macvtap: left promiscuous mode [ 248.268248][ T51] veth1_vlan: left promiscuous mode [ 248.273944][ T51] veth0_vlan: left promiscuous mode [ 248.437744][T10225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.452631][T10173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.461807][T10237] lo speed is unknown, defaulting to 1000 [ 248.472296][T10173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.481969][T10248] lo speed is unknown, defaulting to 1000 [ 248.487215][T10237] hsr0 speed is unknown, defaulting to 1000 [ 248.504465][T10248] hsr0 speed is unknown, defaulting to 1000 [ 248.516798][T10173] team0: Port device team_slave_0 added [ 248.536625][T10225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.548401][T10173] team0: Port device team_slave_1 added [ 248.592869][T10173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.599982][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.625981][T10173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.715281][T10173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.722313][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.748394][T10173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.840626][T10173] hsr_slave_0: entered promiscuous mode [ 248.861417][T10173] hsr_slave_1: entered promiscuous mode [ 248.899099][T10253] loop5: detected capacity change from 0 to 2048 [ 248.950980][T10253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.973647][T10253] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.043732][T10253] netlink: 'syz.5.2139': attribute type 1 has an invalid length. [ 249.073296][T10173] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 249.107864][T10173] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 249.119630][T10258] loop4: detected capacity change from 0 to 1024 [ 249.126194][ T9965] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 249.142805][T10173] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 249.157324][T10258] EXT4-fs: Ignoring removed orlov option [ 249.167360][T10173] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 249.188425][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.289939][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.322615][T10173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.370909][T10173] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.394688][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.401817][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.434063][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.441336][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.607923][T10271] netlink: 'syz.6.2142': attribute type 4 has an invalid length. [ 249.637639][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.662522][T10173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.775851][T10289] lo speed is unknown, defaulting to 1000 [ 249.782508][T10289] hsr0 speed is unknown, defaulting to 1000 [ 250.355042][T10295] loop6: detected capacity change from 0 to 512 [ 250.450431][T10295] __quota_error: 7 callbacks suppressed [ 250.450448][T10295] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 250.452195][T10300] lo speed is unknown, defaulting to 1000 [ 250.470598][T10295] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 250.471240][T10300] hsr0 speed is unknown, defaulting to 1000 [ 250.617061][T10295] EXT4-fs (loop6): mount failed [ 250.752691][T10173] veth0_vlan: entered promiscuous mode [ 250.795723][T10173] veth1_vlan: entered promiscuous mode [ 250.841904][T10173] veth0_macvtap: entered promiscuous mode [ 250.861914][T10173] veth1_macvtap: entered promiscuous mode [ 250.909931][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.920438][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.930381][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.940898][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.950772][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.961261][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.067631][T10173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.080920][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.090935][T10317] loop6: detected capacity change from 0 to 1024 [ 251.091405][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.107765][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.118225][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.128106][T10173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.138583][T10173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.164214][T10317] EXT4-fs: Ignoring removed orlov option [ 251.192056][T10317] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.212556][T10317] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 251.227723][T10173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.269616][T10173] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.278809][T10173] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.287563][T10173] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.296338][T10173] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.307174][T10317] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 251.324165][ T29] audit: type=1326 audit(1746366547.787:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.347990][ T29] audit: type=1326 audit(1746366547.787:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.371906][ T29] audit: type=1326 audit(1746366547.787:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.395650][ T29] audit: type=1326 audit(1746366547.787:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.419362][ T29] audit: type=1326 audit(1746366547.787:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.442927][ T29] audit: type=1326 audit(1746366547.787:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.466655][ T29] audit: type=1326 audit(1746366547.787:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.490265][ T29] audit: type=1326 audit(1746366547.787:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.513918][ T29] audit: type=1326 audit(1746366547.787:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10316 comm="syz.6.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2f37e969 code=0x7ffc0000 [ 251.552736][T10326] __nla_validate_parse: 7 callbacks suppressed [ 251.552751][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2157'. [ 251.554131][T10225] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.580034][T10225] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.592211][T10225] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.593281][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.604036][T10225] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.625292][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.644887][T10330] loop5: detected capacity change from 0 to 2048 [ 251.730774][T10330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.747774][T10330] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.814873][T10342] lo speed is unknown, defaulting to 1000 [ 251.918074][T10342] hsr0 speed is unknown, defaulting to 1000 [ 251.971042][T10348] loop6: detected capacity change from 0 to 1024 [ 252.040171][T10347] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2159: bg 0: block 345: padding at end of block bitmap is not set [ 252.073136][T10348] EXT4-fs: Ignoring removed orlov option [ 252.101329][T10350] loop8: detected capacity change from 0 to 2048 [ 252.137811][T10344] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 252.160904][T10350] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.311364][T10357] netlink: 'syz.8.2164': attribute type 1 has an invalid length. [ 252.376965][T10348] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 252.573165][T10371] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2164: bg 0: block 345: padding at end of block bitmap is not set [ 252.680489][T10379] loop3: detected capacity change from 0 to 1024 [ 252.696187][T10379] EXT4-fs: Ignoring removed orlov option [ 252.729756][T10379] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 252.757554][T10379] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 252.913100][T10384] loop3: detected capacity change from 0 to 512 [ 252.948239][T10384] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 252.998527][T10384] EXT4-fs (loop3): mount failed [ 253.311382][T10407] lo speed is unknown, defaulting to 1000 [ 253.317907][T10407] hsr0 speed is unknown, defaulting to 1000 [ 253.342838][T10406] FAULT_INJECTION: forcing a failure. [ 253.342838][T10406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.356062][T10406] CPU: 0 UID: 0 PID: 10406 Comm: syz.3.2183 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 253.356140][T10406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 253.356154][T10406] Call Trace: [ 253.356161][T10406] [ 253.356169][T10406] __dump_stack+0x1d/0x30 [ 253.356193][T10406] dump_stack_lvl+0xe8/0x140 [ 253.356211][T10406] dump_stack+0x15/0x1b [ 253.356288][T10406] should_fail_ex+0x265/0x280 [ 253.356327][T10406] should_fail+0xb/0x20 [ 253.356356][T10406] should_fail_usercopy+0x1a/0x20 [ 253.356374][T10406] _copy_to_user+0x20/0xa0 [ 253.356422][T10406] simple_read_from_buffer+0xb5/0x130 [ 253.356447][T10406] proc_fail_nth_read+0x100/0x140 [ 253.356481][T10406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.356505][T10406] vfs_read+0x19d/0x6f0 [ 253.356527][T10406] ? __rcu_read_unlock+0x4f/0x70 [ 253.356548][T10406] ? __fget_files+0x184/0x1c0 [ 253.356577][T10406] ksys_read+0xda/0x1a0 [ 253.356624][T10406] __x64_sys_read+0x40/0x50 [ 253.356716][T10406] x64_sys_call+0x2d77/0x2fb0 [ 253.356779][T10406] do_syscall_64+0xd0/0x1a0 [ 253.356800][T10406] ? clear_bhb_loop+0x25/0x80 [ 253.356822][T10406] ? clear_bhb_loop+0x25/0x80 [ 253.356842][T10406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.356915][T10406] RIP: 0033:0x7f597f48d37c [ 253.356934][T10406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.357015][T10406] RSP: 002b:00007f597daf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.357033][T10406] RAX: ffffffffffffffda RBX: 00007f597f6b5fa0 RCX: 00007f597f48d37c [ 253.357045][T10406] RDX: 000000000000000f RSI: 00007f597daf70a0 RDI: 0000000000000004 [ 253.357059][T10406] RBP: 00007f597daf7090 R08: 0000000000000000 R09: 0000000000000000 [ 253.357070][T10406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.357082][T10406] R13: 0000000000000000 R14: 00007f597f6b5fa0 R15: 00007ffd6ddd7c68 [ 253.357101][T10406] [ 253.642117][T10414] netlink: 'syz.6.2185': attribute type 4 has an invalid length. [ 253.650023][T10414] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2185'. [ 253.775105][T10416] loop6: detected capacity change from 0 to 2048 [ 253.818882][T10416] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.017080][T10421] netlink: 'syz.6.2186': attribute type 1 has an invalid length. [ 254.122011][T10422] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2186: bg 0: block 345: padding at end of block bitmap is not set [ 254.172071][T10424] loop3: detected capacity change from 0 to 512 [ 254.207357][T10426] lo speed is unknown, defaulting to 1000 [ 254.213580][T10426] hsr0 speed is unknown, defaulting to 1000 [ 254.229859][T10424] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 254.387289][T10424] EXT4-fs (loop3): mount failed [ 254.730071][T10442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 254.742308][T10442] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 255.084108][T10467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.193750][T10468] loop4: detected capacity change from 0 to 512 [ 255.200869][T10468] EXT4-fs: Ignoring removed i_version option [ 255.207009][T10468] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.213598][T10468] EXT4-fs: test_dummy_encryption option not supported [ 255.287161][T10467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.323306][T10480] loop6: detected capacity change from 0 to 1024 [ 256.345882][T10480] EXT4-fs: Ignoring removed orlov option [ 256.379198][T10482] lo speed is unknown, defaulting to 1000 [ 256.398345][T10482] hsr0 speed is unknown, defaulting to 1000 [ 256.413703][T10480] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 256.578627][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 256.578641][ T29] audit: type=1400 audit(1746366553.047:2052): avc: denied { bind } for pid=10491 comm="syz.8.2211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.816555][T10492] infiniband syz!: set active [ 256.821351][T10492] infiniband syz!: added team_slave_0 [ 256.892604][T10492] RDS/IB: syz!: added [ 256.921832][T10492] smc: adding ib device syz! with port count 1 [ 256.970830][T10492] smc: ib device syz! port 1 has pnetid [ 257.057220][ T29] audit: type=1326 audit(1746366553.527:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.114940][T10488] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 257.161798][ T29] audit: type=1326 audit(1746366553.547:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.185457][ T29] audit: type=1326 audit(1746366553.547:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.208993][ T29] audit: type=1326 audit(1746366553.547:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.232729][ T29] audit: type=1326 audit(1746366553.547:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.256465][ T29] audit: type=1326 audit(1746366553.557:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.279883][ T29] audit: type=1326 audit(1746366553.557:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.303616][ T29] audit: type=1326 audit(1746366553.557:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10491 comm="syz.8.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3f597e969 code=0x7ffc0000 [ 257.461993][ T29] audit: type=1400 audit(1746366553.927:2061): avc: denied { write } for pid=10497 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.465885][T10498] FAULT_INJECTION: forcing a failure. [ 257.465885][T10498] name failslab, interval 1, probability 0, space 0, times 0 [ 257.494376][T10498] CPU: 0 UID: 0 PID: 10498 Comm: syz.4.2212 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 257.494408][T10498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 257.494420][T10498] Call Trace: [ 257.494427][T10498] [ 257.494435][T10498] __dump_stack+0x1d/0x30 [ 257.494455][T10498] dump_stack_lvl+0xe8/0x140 [ 257.494475][T10498] dump_stack+0x15/0x1b [ 257.494496][T10498] should_fail_ex+0x265/0x280 [ 257.494534][T10498] should_failslab+0x8c/0xb0 [ 257.494570][T10498] kmem_cache_alloc_noprof+0x50/0x310 [ 257.494611][T10498] ? vm_area_alloc+0x2c/0xb0 [ 257.494635][T10498] vm_area_alloc+0x2c/0xb0 [ 257.494654][T10498] mmap_region+0x81f/0x1470 [ 257.494717][T10498] do_mmap+0x9de/0xc20 [ 257.494751][T10498] vm_mmap_pgoff+0x17a/0x2e0 [ 257.494781][T10498] ksys_mmap_pgoff+0xc2/0x310 [ 257.494805][T10498] ? __x64_sys_mmap+0x49/0x70 [ 257.494825][T10498] x64_sys_call+0x1602/0x2fb0 [ 257.494851][T10498] do_syscall_64+0xd0/0x1a0 [ 257.494878][T10498] ? clear_bhb_loop+0x25/0x80 [ 257.494900][T10498] ? clear_bhb_loop+0x25/0x80 [ 257.494920][T10498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.494946][T10498] RIP: 0033:0x7fc7b35ee9a3 [ 257.494965][T10498] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 257.494987][T10498] RSP: 002b:00007fc7b1c56e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 257.495007][T10498] RAX: ffffffffffffffda RBX: 000000000000047e RCX: 00007fc7b35ee9a3 [ 257.495020][T10498] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 257.495031][T10498] RBP: 00002000000004c2 R08: 00000000ffffffff R09: 0000000000000000 [ 257.495043][T10498] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008 [ 257.495054][T10498] R13: 00007fc7b1c56ef0 R14: 00007fc7b1c56eb0 R15: 00002000000002c0 [ 257.495073][T10498] [ 257.745718][T10500] loop4: detected capacity change from 0 to 2048 [ 257.799723][T10500] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.830108][T10506] loop6: detected capacity change from 0 to 512 [ 257.869133][T10506] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 257.918537][T10506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 257.926490][T10506] System zones: 1-12 [ 257.967727][T10506] EXT4-fs (loop6): 1 truncate cleaned up [ 258.237013][T10510] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2213: bg 0: block 345: padding at end of block bitmap is not set [ 258.277568][T10512] netlink: 'syz.5.2217': attribute type 4 has an invalid length. [ 258.285351][T10512] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2217'. [ 258.334920][T10525] lo speed is unknown, defaulting to 1000 [ 258.367598][T10527] FAULT_INJECTION: forcing a failure. [ 258.367598][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 258.380288][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.3.2221 Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 258.380324][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 258.380344][T10527] Call Trace: [ 258.380353][T10527] [ 258.380362][T10527] __dump_stack+0x1d/0x30 [ 258.380383][T10527] dump_stack_lvl+0xe8/0x140 [ 258.380402][T10527] dump_stack+0x15/0x1b [ 258.380417][T10527] should_fail_ex+0x265/0x280 [ 258.380452][T10527] should_failslab+0x8c/0xb0 [ 258.380548][T10527] kmem_cache_alloc_noprof+0x50/0x310 [ 258.380580][T10527] ? security_inode_alloc+0x37/0x100 [ 258.380735][T10527] security_inode_alloc+0x37/0x100 [ 258.380761][T10527] inode_init_always_gfp+0x4b7/0x500 [ 258.380799][T10527] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 258.380828][T10527] alloc_inode+0x58/0x170 [ 258.380869][T10527] new_inode+0x1d/0xe0 [ 258.380927][T10527] shmem_get_inode+0x244/0x750 [ 258.380961][T10527] ? __se_sys_memfd_create+0x1cc/0x590 [ 258.381053][T10527] __shmem_file_setup+0x122/0x1f0 [ 258.381083][T10527] shmem_file_setup+0x3b/0x50 [ 258.381105][T10527] __se_sys_memfd_create+0x2c3/0x590 [ 258.381207][T10527] __x64_sys_memfd_create+0x31/0x40 [ 258.381233][T10527] x64_sys_call+0x122f/0x2fb0 [ 258.381253][T10527] do_syscall_64+0xd0/0x1a0 [ 258.381277][T10527] ? clear_bhb_loop+0x25/0x80 [ 258.381357][T10527] ? clear_bhb_loop+0x25/0x80 [ 258.381383][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.381410][T10527] RIP: 0033:0x7f597f48e969 [ 258.381429][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.381452][T10527] RSP: 002b:00007f597daf6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 258.381543][T10527] RAX: ffffffffffffffda RBX: 00000000000002f5 RCX: 00007f597f48e969 [ 258.381559][T10527] RDX: 00007f597daf6ef0 RSI: 0000000000000000 RDI: 00007f597f511444 [ 258.381570][T10527] RBP: 0000200000000c00 R08: 00007f597daf6bb7 R09: 00007f597daf6e40 [ 258.381581][T10527] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 258.381592][T10527] R13: 00007f597daf6ef0 R14: 00007f597daf6eb0 R15: 0000200000003f80 [ 258.381614][T10527] [ 258.411100][T10525] hsr0 speed is unknown, defaulting to 1000 [ 258.512363][T10528] loop3: detected capacity change from 0 to 512 [ 258.729147][T10528] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.180854][T10534] random: crng reseeded on system resumption [ 259.201277][T10537] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.478335][T10537] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.610405][T10537] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.756252][T10537] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.873292][T10537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.969468][T10537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.146830][T10537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.204895][T10537] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.246209][T10547] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.416810][T10547] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.494972][T10557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.513853][T10557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.692077][T10547] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.748365][T10547] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.831165][T10547] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.857447][T10547] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.906780][T10547] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.999455][T10547] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.053317][T10571] loop8: detected capacity change from 0 to 128 [ 261.125339][T10571] loop8: detected capacity change from 0 to 512 [ 261.161425][T10571] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.205267][T10569] netlink: 'syz.3.2233': attribute type 4 has an invalid length. [ 261.213125][T10569] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2233'. [ 261.302064][T10579] loop4: detected capacity change from 0 to 512 [ 261.315283][T10579] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 261.327631][T10581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.328112][T10579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 261.345514][T10579] System zones: 1-12 [ 261.350229][T10579] EXT4-fs (loop4): 1 truncate cleaned up [ 261.356776][T10581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.021909][T10590] loop3: detected capacity change from 0 to 1024 [ 262.051409][T10590] EXT4-fs: Ignoring removed orlov option [ 262.319604][T10596] lo speed is unknown, defaulting to 1000 [ 262.326151][T10596] hsr0 speed is unknown, defaulting to 1000 [ 262.632433][ T3304] EXT4-fs unmount: 22 callbacks suppressed [ 262.632485][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.828523][T10604] loop3: detected capacity change from 0 to 1024 [ 262.839048][T10604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.852528][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.861886][T10609] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 262.890333][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.899584][T10611] loop4: detected capacity change from 0 to 1024 [ 262.906636][T10611] EXT4-fs: Ignoring removed orlov option [ 263.022793][T10611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.041991][T10611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 263.057260][T10611] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 263.070481][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 263.070498][ T29] audit: type=1326 audit(1746366559.537:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.100436][ T29] audit: type=1326 audit(1746366559.537:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.124085][ T29] audit: type=1326 audit(1746366559.537:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.147578][ T29] audit: type=1326 audit(1746366559.537:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.171105][ T29] audit: type=1326 audit(1746366559.537:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.194689][ T29] audit: type=1326 audit(1746366559.537:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.218213][ T29] audit: type=1326 audit(1746366559.537:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.241811][ T29] audit: type=1326 audit(1746366559.537:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.265530][ T29] audit: type=1326 audit(1746366559.537:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.289138][ T29] audit: type=1326 audit(1746366559.537:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10610 comm="syz.4.2245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc7b35ee969 code=0x7ffc0000 [ 263.349185][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.498485][T10630] lo speed is unknown, defaulting to 1000 [ 263.504796][T10630] hsr0 speed is unknown, defaulting to 1000 [ 263.611432][T10633] loop4: detected capacity change from 0 to 1024 [ 263.619354][T10633] EXT4-fs: Ignoring removed orlov option [ 263.629862][T10633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.646033][T10633] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 263.657649][T10633] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 263.800497][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.837353][T10642] loop4: detected capacity change from 0 to 512 [ 263.844266][T10642] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 263.856665][T10642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 263.864936][T10642] System zones: 1-12 [ 263.869791][T10642] EXT4-fs (loop4): 1 truncate cleaned up [ 263.876009][T10642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.937767][T10649] loop5: detected capacity change from 0 to 512 [ 263.960174][T10649] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.982521][T10649] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.151564][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.350850][T10665] lo speed is unknown, defaulting to 1000 [ 264.357063][T10665] hsr0 speed is unknown, defaulting to 1000 [ 264.482150][T10670] loop5: detected capacity change from 0 to 2048 [ 264.520572][T10670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.568074][T10670] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.674162][T10684] netlink: 'syz.5.2264': attribute type 1 has an invalid length. [ 264.905518][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'. [ 264.914726][T10692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 264.939415][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.950663][T10687] netlink: 'syz.6.2270': attribute type 4 has an invalid length. [ 264.958554][T10687] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2270'. [ 264.977912][ T3314] ================================================================== [ 264.986009][ T3314] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 264.993029][ T3314] [ 264.995351][ T3314] read-write to 0xffff888237c299e4 of 4 bytes by task 4954 on cpu 0: [ 265.003409][ T3314] wq_worker_running+0x95/0x120 [ 265.008286][ T3314] schedule_timeout+0xb7/0x170 [ 265.013107][ T3314] msleep+0x50/0x90 [ 265.016915][ T3314] nsim_fib_event_work+0x1ebc/0x21a0 [ 265.022197][ T3314] process_scheduled_works+0x4cb/0x9d0 [ 265.027658][ T3314] worker_thread+0x582/0x770 [ 265.032261][ T3314] kthread+0x486/0x510 [ 265.036326][ T3314] ret_from_fork+0x4b/0x60 [ 265.040751][ T3314] ret_from_fork_asm+0x1a/0x30 [ 265.045513][ T3314] [ 265.047938][ T3314] read to 0xffff888237c299e4 of 4 bytes by task 3314 on cpu 1: [ 265.055487][ T3314] kick_pool+0x49/0x2d0 [ 265.059709][ T3314] __queue_work+0x8d6/0xb60 [ 265.064230][ T3314] queue_work_on+0xd1/0x160 [ 265.068737][ T3314] __lru_add_drain_all+0x2c6/0x3f0 [ 265.073939][ T3314] lru_add_drain_all+0x10/0x20 [ 265.078705][ T3314] invalidate_bdev+0x47/0x70 [ 265.083294][ T3314] ext4_put_super+0x624/0x7d0 [ 265.087997][ T3314] generic_shutdown_super+0xe3/0x210 [ 265.093284][ T3314] kill_block_super+0x2a/0x70 [ 265.097962][ T3314] ext4_kill_sb+0x42/0x80 [ 265.102297][ T3314] deactivate_locked_super+0x72/0x1c0 [ 265.107665][ T3314] deactivate_super+0x97/0xa0 [ 265.112336][ T3314] cleanup_mnt+0x269/0x2e0 [ 265.116759][ T3314] __cleanup_mnt+0x19/0x20 [ 265.121183][ T3314] task_work_run+0x12e/0x1a0 [ 265.125789][ T3314] resume_user_mode_work+0x6a/0x70 [ 265.130898][ T3314] syscall_exit_to_user_mode+0x77/0xb0 [ 265.136366][ T3314] do_syscall_64+0xdd/0x1a0 [ 265.140869][ T3314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.146760][ T3314] [ 265.149077][ T3314] value changed: 0x00000000 -> 0x00000001 [ 265.154812][ T3314] [ 265.157131][ T3314] Reported by Kernel Concurrency Sanitizer on: [ 265.163273][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(voluntary) [ 265.175852][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 265.185903][ T3314] ================================================================== [ 265.235704][T10694] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.289946][T10694] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.326438][ T483] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 265.343718][ T483] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 64 with error 117 [ 265.356254][ T483] EXT4-fs (loop5): This should not happen!! Data will be lost [ 265.356254][ T483] [ 265.378662][T10694] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.440788][T10694] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.567618][ T7335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.663383][T10694] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.675093][T10694] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.686739][T10694] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.698286][T10694] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0