last executing test programs: 6m47.333864879s ago: executing program 1 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) 6m45.787274934s ago: executing program 1 (id=158): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r4, r4, 0x0, 0x4800000009) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 6m44.281089398s ago: executing program 1 (id=171): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) ioperm(0x0, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe22, 0x500, 0x0, 0x0) 6m43.258286975s ago: executing program 1 (id=176): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x1100, 0x5dd8, 0x2, 0x4, 0x4, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0xfffffffffffffe00}, 0x0, 0x6, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x44010}, 0x0) perf_event_open(&(0x7f00000008c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5ed9, 0x557e}, 0x42, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000240)={[{@i_version}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x447, &(0x7f0000000500)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xf62) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$TUNSETLINK(0xffffffffffffffff, 0x541b, 0x1000000000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000023f, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000000002020207b1af8ff00000000bfa1000000000080a1c00410ff1199fd7d0007014a00f8ffffffb702000000000000b70300000000000085c590007300040095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r3}, 0x10) setpriority(0x2, 0x0, 0x3) write$binfmt_elf64(r2, 0x0, 0x78) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00'], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20084, @void, @value}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000340)=""/183) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) 6m41.244193047s ago: executing program 1 (id=189): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500100000201030000000000000000000a0000010800084000000002140019800800020010000000080002000800000078000e800c000280050001003a00000006000340000400000c0002800500010088000000060003400003000006000340000100000600034000040000060003400004000006000340000100002c00018014000300fc02000000000000000000000000000014000400200100"/165], 0x150}, 0x1, 0x0, 0x0, 0x8040891}, 0x4080) 6m40.835962404s ago: executing program 1 (id=192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff5a9, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getitimer(0x1, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f00000004c0)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH") readlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000000)=""/172, 0xac) utime(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 6m40.835377674s ago: executing program 32 (id=192): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff5a9, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getitimer(0x1, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r1, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f00000004c0)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$eJzs3U9oHOfZAPBnFMmyZeIv5PvIZ4zjjO18YPM5ykpKlIoc0s1qJE8i7YrdVbEpITGxnBrLSUgIaUxp6kvSlpbSU49priGX3FoKLfTQ9lRoDr30EAjk0pKWFkpLKbjs7K61+rOSLctymv5+i/edfeedd953djzPzmrfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIqlMl0pjSczl1cUzaX+V6XptfpP53fp+tirZZL0RSetf7N0bB9tZB/9nZfZ9radjcbj96nDsbSV748r+++55/L8HB7rLb9Kg7Traf9ZQ74sk4hutRl06t7y89MptaMgu+vZPOhN7b3iRv19rPc9m1bxRy+fLs1maN2rp1ORk6eHTM410Jp/LGmcbzWw+rdSzcrNWT09UTqZjU1MTaTZ6trZYnZ0uz2XdzMceGi+VJtOnRheycr1Rqz781Gijcjqfm8urs0WZ8dLr0SrzWGtHfDpvps2sPJ+mFy4uL01s1dRWobFVOcOrdpzDD97zyWsf/+XiUmuH7FdJ0tkxx8fGxsfHJh+devSxUmlwvDS+OqO0RlwvEQMRrRK3Zaflztq/Qd5gZ49ZNyPi2n/tzMEbbtFAJ/7HXORRjcU4E2mkMVA8rzyGohLTUY9azLde/3Zozfx18f//Hv7jrzdbb2/870b5gyuzD0UR/4+0Xx3pF//XtWIHHoP9aq2+325Nb96r8UZciUtxLpZjOZbile2scc/aWm/HY7idDuxsrbORRTXyaEQt8piPcpGTdnLSmIrJmIxSPBunYyYakcZM5DEXWTTibDSiGVmxR1WiHlmUoxm1qEcaJ6ISJyONsZiKqZiINLIYjbNRi8WoxmxMR7mo5UJcLLb7xJp23ff15378wm8+eac1fb3Q2CYdSVof5vZ/FPHnTQqtC/c3Ef9bJQY6e/euxCR2yd6bfFd36MgNt+5aEf8H73QzAAAAgNsoKb59TyJiKO4vpmbyuezLd7pZAAAAwA4qftd8uJUMtabuj6R1/l/aoOSHEcO73jwAAABgByTFGLskIkbigfZUd7jURl8CAAAAAP+Gir//H2klIxFvFhnO/wEAAOBz5pv9rrH/8Z7iGrsj0VgYTn76p6jXh5KrC2ceTC6XW+XKl+9qL9dJvnS9xubMoeRAp5IimRy8sj+JiMFKdjjpXv3yn52xBJ8Wz4dWLkDY71r/yRYNiM0bULyK78TRdpmj59vp+e6c9lpGZvK5bLRSm3t8LOl8OdJ87cWLX42i+9+qzh9I4sLF5aXR519aPl+05WqrlquXO5eHT7pLRbQHVGzSlmvd0RT3b9zjoWIgRme9I+31lnr737ma7MDm/U961/lWHGuXOTbSTkdW939va51jo4+PRbl8YKCZnWm+dq2n951WjK30fLjb2+Qm3oW34ni7zPETx9vJBq0YX9WKF9e3Yrx3+9/YtrjhVrxz9M0zf/1FLckmtmrFxC22AuBOuVBc9WclCu0rotA/rrW1AtqauLuvu+TNHOUurHzK6C7fE+sGY110T7cT3d+KE+0yJ9qfJwYPbRBXShsc0V+++PIvO0f0R977wQ+fOfKrD9bE9ZtoxXtxsl2mk8S9P+8TY1t9/u6aqPpua4l3+663MTeevD48MZS0bz4UVx66ePncC0svLL04Pj4xWXqkVHp0PIaKjwqdpE9LRR6A/2xb3WPng69dL9rvLjzJI1ucVd97/ScFo/F8vBTLcT5OFaMNIuKBjWsd6fkZwqktzlpHeu7wcmqLc8uVsuNryw4fT6JP2YmeLfa/3y+Sv92mNwQAdsGxLeJwEve0L/vz+t2dJdaUuCtJTvWed38lIg71i7mtWH6yfePc7tlx9I/lvX7fSb+wGxsFAD7nsvqnyUjz7aRezxeeHZuaGis3T2dpvVZ5Oq3n07NZmlebWb1yulydzdKFeq1Zq3S/Op7OGmljcWGhVm+mM7V6ulBr5GeKO7+nnVu/N7L5crWZVxoLc1m5kaWVWrVZrjTT6bxRSRcWn5zLG6ezerFwYyGr5DN5pdzMa9W0UVusV7LRNG1kWU/BfDqrNvOZPBtK82q6UM/ny/WrETG3OJ+l01mjUs8XmrV2hd115dWZWn2+qHZ0fff/sNvbGwA+C15948qlc8vLS69sb+J3N1L4TvcRAFhNlAYAAAAAAAAAAAAAgM++9cP1Wrk3NRBwKLY9fPDV4WhN7Nvu4q2JZzo9uYVRjJtMDMYOV7j5xP+/3+7MTlS4vp6hbs7dW4373LfqPd3T2cS7tBF2cuK5J564tJKTDPZu3iffPHj6oyy6vdukno3/p2w01PXtAxF7fvS9ds4X+xROBne4px9GxDYWv5ZsUmZ3j0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcCP+FQAA//+XX0rH") readlink(&(0x7f0000000440)='./file1\x00', &(0x7f0000000000)=""/172, 0xac) utime(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) 5m41.417830919s ago: executing program 0 (id=858): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xa1) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4008890) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000abd900"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=r9, @ANYRES8=r5, @ANYRESHEX=r9, @ANYRES8=r8, @ANYRES16=r4, @ANYRESOCT=r8, @ANYRES32=r4, @ANYRES8=r4], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000ff00000000000000000000e5ff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r11, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000540)=r11}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYRESOCT=r4, @ANYBLOB="c7203abb7eb4377bd1e754de779d053faabe98b2c47b384132d47495de425cc3735c47e7a3116a92f3290f4074e17e434224c4475eb3fe1dc1143e0deee462dc72dd8773a1c78b14ceda13d9efe69e793c8f3a42291c6f6bc8f68f5fad89dcc359dac8cd55c7da809c00a0a800fc4af5c42da2f5406d4dad1b598a57390fc412869085c748614f227bd29ffcd1b473", @ANYRES64=r4, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=ANY=[@ANYRESOCT=r8, @ANYRES32=r13, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009513018127610f3e940e521348d57282141bfbe0322f3c529d613c0431a2a22c64393aaac09ea7e56f83ee0a49ec1e34a7f7dbf7aafd21aa0266e68834028ea115cc78a24a707a7ceb9739205d8a500fddb6338f5e6cae915358c71616352a417802e6b6f917bc3842e84ea8ff0ef9447b79bfe9a60af1fb0000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='rpm_return_int\x00', r12, 0x0, 0x8}, 0x18) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$int_in(r14, 0x5452, &(0x7f0000b28000)=0x1) fcntl$setsig(r14, 0xa, 0x12) 5m40.415603786s ago: executing program 0 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x4, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 5m40.385935676s ago: executing program 0 (id=873): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 5m39.52884338s ago: executing program 0 (id=889): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00}[@\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x30, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x420}}]}, 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip_tables_targets\x00') stat(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x18c14, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdn\t\x00', @ANYRESHEX=r2, @ANYBLOB=',euid>', @ANYRESDEC=r5, @ANYBLOB=',context=system_u,\x00']) syz_io_uring_setup(0x98c, 0x0, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close(r8) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 5m39.300423313s ago: executing program 0 (id=894): r0 = gettid() sched_getaffinity(r0, 0x8, &(0x7f0000000280)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000002c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) 5m37.599988641s ago: executing program 0 (id=908): bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) 5m37.585624951s ago: executing program 33 (id=908): bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) 27.166119223s ago: executing program 3 (id=5587): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYRESHEX=r2, @ANYRES16, @ANYRES32=r2, @ANYBLOB="b9f0cfdbb103a3e77e807f3692680a397c19ceda8d5844bfceeb7cea0068ddfb6ed7d6cc679f48a811ddcbd603c30c619744b6074b34c87894e554a91731bf69f1a103785cc7af", @ANYRES64=r1, @ANYRESHEX], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x0, 0x800}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x7fe, 0x0, &(0x7f0000000040)=0x1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f48) 26.298336127s ago: executing program 3 (id=5598): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 22.721935974s ago: executing program 3 (id=5632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="773a9e0654df2a63dd6f2cfd7703f417194d9b12976d6f3bd5ce4ff9ffd33b0b037861fbec2d2294cf9b7c557b9d7021008a2dc3f1acbf8abf06efbe45a7cfd142d819ef7ff97f4774e0fc415935cc75b1968fb2a559d4d97c8a173bef78f1e0087df29c2771105b62faeb9f2def306f94c04fb4704ecc3670021958a41443c5b19a0bbee8e79ad52679ee6533f6890ab1c4c598426425f1d155528a8376b12a170b38f70d01657e0aca2885a0d846d484b5ee04cf82b74805170bac", @ANYRES64], 0x64}, 0x1, 0x0, 0x0, 0x24004849}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000f7020900010000000000000000070000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40080) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x1, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x5}, {0x5}, @control={0x4, 0x4, 0x4}}, {0x3, 0x5b, 0x0, 0x0, @tick=0x7, {}, {}, @ext={0x0, 0x0}}], 0x38) 22.619865756s ago: executing program 3 (id=5637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0xfa7bf949c12fce01) socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = fsmount(r5, 0x0, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 21.416716295s ago: executing program 3 (id=5639): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x25001a, &(0x7f0000000040)={[{@grpquota}, {@errors_continue}, {@quota}]}, 0x1, 0x51d, &(0x7f0000001000)="$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") r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x6, 0x2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x2000000001, {0x1, 0xf0, 0x4}, 0xff}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) r6 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x2]}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r7, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) sendfile(r1, r6, 0x0, 0x400009) 21.243424327s ago: executing program 3 (id=5642): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0x2}, 0x18) iopl(0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="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", 0xd18}], 0x2}, 0x20000000) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) dup(r3) (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) (async) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8040) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0x2}, 0x18) (async) iopl(0x3) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="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", 0xd18}], 0x2}, 0x20000000) (async) 6.262784439s ago: executing program 34 (id=5642): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8040) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0x2}, 0x18) iopl(0x3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="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", 0xd18}], 0x2}, 0x20000000) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) dup(r3) (async) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r2) (async) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8040) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8, 0x0, 0x2}, 0x18) (async) iopl(0x3) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000c40)="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", 0xd18}], 0x2}, 0x20000000) (async) 2.159947426s ago: executing program 7 (id=5824): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x408f4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181000, 0x10) openat(r5, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x2) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) 2.081255897s ago: executing program 4 (id=5827): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x4) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = getpid() r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_pidfd_open(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) close_range(r9, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r10}, 0x20) setresuid(0xee00, 0xee01, 0xee01) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.031048438s ago: executing program 4 (id=5829): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 1.89325728s ago: executing program 4 (id=5831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.85329569s ago: executing program 7 (id=5833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = dup2(r0, r0) r2 = fsmount(r1, 0x0, 0xc) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000bc0)=""/123, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x37, 0xb00, 0x3, 0x81, 0xffffffffffffffff, 0xdd, '\x00', 0x0, r2, 0x2, 0x0, 0x5, 0x3, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [0x0, 0x0, 0xc0], [], 'veth0_to_team\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x4, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x560, &(0x7f0000001600)="$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") r8 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) setresuid(0xee01, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(r4, 0x8, r9) fallocate(r8, 0x0, 0x0, 0x7000000) pwrite64(r8, &(0x7f00000000c0)='a', 0x1, 0x9000) 1.796037981s ago: executing program 4 (id=5834): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x1000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xff, 0x2, 0x8, 0xff, 0x0, 0x8, 0x41209, 0x5, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xee6d, 0x3}, 0xc00, 0x10, 0x4, 0x6, 0xfffffffffffffe01, 0x4, 0x8c, 0x0, 0x74, 0x0, 0x7}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 1.694829733s ago: executing program 7 (id=5836): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000c00)={'syztnl1\x00', 0x0, 0x2f, 0x10, 0x0, 0x4000000, 0x60, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x8000, 0x20, 0x4, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000c80)={'syztnl1\x00', r2, 0x10, 0x40, 0x6, 0x6, {{0x25, 0x4, 0x3, 0x2, 0x94, 0x68, 0x0, 0x2, 0x6, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0xf, 0x7b, [@local, @remote, @multicast2]}, @end, @noop, @ssrr={0x89, 0x1f, 0x2e, [@dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @rand_addr=0x64010100, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @rr={0x7, 0xf, 0xbc, [@loopback, @multicast2, @empty]}, @end, @timestamp_prespec={0x44, 0x3c, 0xf2, 0x3, 0xd, [{@private=0xa010100, 0x7}, {@empty, 0x9}, {@local, 0x401}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x50e}, {@multicast2, 0xffffffff}, {@rand_addr=0x64010102, 0x1}]}]}}}}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000007c0)={0x9, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x700, 0x7, 0x7, 0x5, {{0xd, 0x4, 0x1, 0x1, 0x34, 0x68, 0x0, 0x80, 0x2f, 0x0, @private=0xa010101, @multicast1, {[@lsrr={0x83, 0x1f, 0x56, [@remote, @remote, @remote, @local, @loopback, @multicast2, @private=0xa010101]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001e40)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f0000000300), 0x0, 0x783, &(0x7f0000002200)="$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") r8 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x44, 0x6, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@loopback, 0x1, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018130000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000005b88956a0400000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000000000008500000b5622928c0fcecfe4266e0000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x1000, &(0x7f0000000dc0)=""/4096, 0x41100, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x6, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r5, r5, r0, r0], 0x0, 0x10, 0x4, @void, @value}, 0x94) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000001e00)={0x0, 0x3, 0x2, 0x2, 0xa, "c3b4edf3229e0fda"}) r11 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x44042, 0x0) pwritev2(r12, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000001dc0)=',\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) timerfd_create(0x9, 0x0) 1.632054974s ago: executing program 5 (id=5837): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (fail_nth: 9) 1.631601894s ago: executing program 4 (id=5838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) fstat(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200c0d2, &(0x7f0000000140)={[{@user_xattr}]}, 0x21, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230005) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230040) close(r5) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100006000000070020"], 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) 1.312142629s ago: executing program 5 (id=5841): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) 1.26224386s ago: executing program 5 (id=5844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 1.200157351s ago: executing program 5 (id=5845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x2f}, @remote, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bc, 0xffffbc, 0x5, 0x6b}, 0x2c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.199519981s ago: executing program 7 (id=5846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0, @ANYBLOB="773a9e0654df2a63dd6f2cfd7703f417194d9b12976d6f3bd5ce4ff9ffd33b0b037861fbec2d2294cf9b7c557b9d7021008a2dc3f1acbf8abf06efbe45a7cfd142d819ef7ff97f4774e0fc415935cc75b1968fb2a559d4d97c8a173bef78f1e0087df29c2771105b62faeb9f2def306f94c04fb4704ecc3670021958a41443c5b19a0bbee8e79ad52679ee6533f6890ab1c4c598426425f1d155528a8376b12a170b38f70d01657e0aca2885a0d846d484b5ee04cf82b74805170bac", @ANYRES64], 0x64}, 0x1, 0x0, 0x0, 0x24004849}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000010000580090001"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000f7020900010000000000000000070000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x40080) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) write$sndseq(r3, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0x9e, 0xbdaf}, {0x5}, {0x5}, @control={0x4, 0x4, 0x4}}, {0x3, 0x5b, 0x0, 0x0, @tick=0x7, {}, {}, @ext={0x0, 0x0}}], 0x38) 1.169399131s ago: executing program 5 (id=5849): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000001000)='./file2\x00', 0x0, &(0x7f0000001080), 0x1, 0x514, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r1, &(0x7f0000004200)='t', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) dup(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) sendfile(r1, r0, 0x0, 0x7ffff000) 1.088718042s ago: executing program 2 (id=5852): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xf0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x97, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="293b27b95d84", @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x34, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @remote, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) r3 = socket(0x10, 0x803, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000480)=""/177) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xa3500, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000100)=0x7, 0x4) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000070601e50000000000000000070000040900020073797a30000000000900020073797a30000000000500010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8004) 1.068482343s ago: executing program 7 (id=5853): r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 978.307514ms ago: executing program 2 (id=5855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 960.257724ms ago: executing program 2 (id=5856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x3ff, 0x80) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000240)=[{&(0x7f0000000540)=""/254, 0xfe}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000180)=""/70, 0x46}], 0x3}, 0x4}, {{&(0x7f0000000340)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/25, 0x19}], 0x1, &(0x7f0000000740)=""/105, 0x69}, 0x9}], 0x2, 0x10001, &(0x7f0000000480)={0x77359400}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r6, 0x900, 0x62010}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x2}, {0x200008, 0x5}, {0xa, 0x2}, {0xb}]}, @func={0x9, 0x0, 0x0, 0xc, 0x5}, @struct={0xf, 0x3, 0x0, 0x4, 0x0, 0x5f, [{0x2, 0x4, 0x20d}, {0x2, 0x0, 0x2}, {0xf}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x6d}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x48, 0x0, 0x37, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e, 0x0]}}, &(0x7f0000001900)=""/202, 0xb0, 0xca, 0x1, 0x1000, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x81, '\x00', r6, r8, 0x1, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) mknod$loop(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x1) 919.283035ms ago: executing program 4 (id=5857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 864.003767ms ago: executing program 2 (id=5858): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000001800)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32SDbtJRTJ4R8giNiCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmx+ZXdy7JXXZXk88HnsyzM8/M9/vsbmZnZ55kAjizLkTE9YgYiYgXImKqnF8rS2wXJWv34cO3FrOSRJq+/tckknJe1iyJGEnKdc+Xq40Xk/0misn65tbthVaruVbOnu2s3Jld39y6vLyysNRcaq5evTr38vwr8y/NXzmRfmb9evWbf/rpj375rVd/+5U3/3DjL5d+kOU7WS7v9uOkFc9JI3sudtQjYq0fwYZgpOzPv9JCRbOxAacFAECF7Bj/sxHxpfz4fypG8qO5aqN76knfswMAAABOQnptMv6dRKTH1Dj2GgAAAMCw1PIxsEltphwLMBm12sxMMYb3qThXa7XXO1++1d5YvVmMlZ2ORu3Wcqt5JR9TOxYRjSR7PLdzRqF4/GLeNivJvjHAP5mayJfPLLZbN4dxwgMAAADOoPMHvv//Y6r4/g8AAACcMtPl9NyQ8wAAAAD6Z3rYCQAAAAB99xjf/0f7kQcAAADQF99+7bWspN37X998Y3PjdvuNyzeb67dnVjYWZxbba3dmltrtpVY6FrFy2PZa7fadr8bqxt3ZTnO9M7u+uXVjpb2x2rmxvO8W2AAAAMAAfeaL999PImL7axN5ie61/ZGKFfytAJwatSO2S7MfH/Q3F2Cwqj7mgdOv/ujFhvnCKdYoJsmw8wCG57AdwHhVi3cfK5zjCgAAGIKLn7//fpp88vp/fffcAHBKHfX6P3D6VFz/T6cGnQgwcJXX/w8ZGAD8/2sYAQhn3uHX/yu8my+6fniEND10WwAAQF9N5iWpzZTXAiej9lFaiOloJLeWW80rEfHpiPj9VGMsezyXr5n4owEAAAAAAAAAAAAAAAAAAAAAAAAAOKI0TSJ9DPXHWgsAAAAYhojan5PyPsAXp56fPHh+YDT5KL8V8Mdpmr75s9ffvrvQ6azNZfP/ls8fjYjOO9n80WGcvgAAAAD26N7lP//+/mJjyNkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFp9+PCtxW4ZZNwH34iI6V7x6zGeT8ejERHn/p5Efc96SUSMnED87XsR8XSv+EmWVkyXWRyMX4uIiTyLJ45fK6tV8Z9J07Rn/PNPHB3OtvvZ/ud6r9//WlzIp71//+tFufak8av3f7Wd/d/Iwfj1Yv/3qSPG+MJ7v57d8/B7u9WxYnm99/6vGz+p2P8+1ytY/ZOzvv/dra2q3NJfRFzsfv6kEbEn/t5Ys52VO7Prm1uXl1cWlppLzdWrV+denn9l/qX5K7O3llvN8ufuht9Od6o/fuY3H1fFf3Ah4lwZf7SbU/nBMl1Mvp7spDK6L6fns0qjasu7/vPe3YefK6p7W+dbfXAv4tJzvV//p/Npz+f/5/9Mc/nnQLb8YvmZkGwX9Yjy7RsRz/7qd89W9v/eeFk7/ut/6fCu5174zg//eMSmAMAArG9u3V5otZprfa+8k6bp0RpnR6XVbdLyaKw7J4nYPtgmO4A74V5MRETFov2xJspnNY665acqU/1gImJAr85xK9eO0zgdO9abLdn+H+jgGa6M5m/Ioe6WAACAPtg9+h92JgAAAAAAAAAAAAAAAAAAAHB2DeL/ih2MuT2crgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNJ/AwAA//97otHd") creat(&(0x7f00000000c0)='./file0/file1\x00', 0xe) 863.553176ms ago: executing program 6 (id=5859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x2f}, @remote, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bc, 0xffffbc, 0x5, 0x6b}, 0x2c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 853.846166ms ago: executing program 2 (id=5860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file1\x00', 0x320c81c, &(0x7f0000000380)=ANY=[], 0x1, 0x55c, &(0x7f0000000880)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0xffffffff, 0x3}, {0xa, 0x5}, {0x1, 0x4}, {0x6}, {0x7, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000000)=""/40, 0x57, 0x28, 0x3, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002f80)={r2, 0x20, &(0x7f0000002f40)={&(0x7f0000002e00)=""/110, 0x6e, 0x0, &(0x7f0000002e80)=""/162, 0xa2}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="83efffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e8ae76858e39e7af86a50bacd11ad3a0607d38c19c725f3e75d73c616182858c961649755442d254db7bdd03b7ffccd3fe771ac695"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r5, 0x0, 0x156, 0x4010, 0x0, 0x0) 828.780297ms ago: executing program 6 (id=5861): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 551.824531ms ago: executing program 6 (id=5862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) alarm(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x34, 0x7, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x11, 0xb}}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0xffbf) 538.200481ms ago: executing program 7 (id=5863): syz_read_part_table(0x616, &(0x7f0000000380)="$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") 530.599361ms ago: executing program 2 (id=5864): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) creat(&(0x7f00000005c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe28, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) capset(&(0x7f0000000000)={0x20080522}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) connect$llc(r3, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2000, 0x0) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x5, 0x12) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) 475.024502ms ago: executing program 6 (id=5865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000ff00000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB="100003000006000020"], 0x2c, 0x0) (async) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 78.152389ms ago: executing program 6 (id=5866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 75.404019ms ago: executing program 5 (id=5867): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x148bc9a0}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp0\x00'}]}]}], {0x14, 0x11, 0x1, 0x74, 0x0, {0x1}}}, 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100627269646765000010000280"], 0x40}, 0x1, 0x0, 0x0, 0x14045047}, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 6 (id=5868): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfa7bf949c12fce01) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) get_robust_list(0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) kernel console output (not intermixed with test programs): [ 430.984070][T20050] RDX: 000000000000000f RSI: 00007ff6976670a0 RDI: 0000000000000004 [ 430.984143][T20050] RBP: 00007ff697667090 R08: 0000000000000000 R09: 0000000000000000 [ 430.984160][T20050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.984174][T20050] R13: 0000000000000000 R14: 00007ff699225fa0 R15: 00007ffcbcd6e9e8 [ 430.984194][T20050] [ 431.249770][T20059] loop4: detected capacity change from 0 to 512 [ 431.263317][T20059] loop4: detected capacity change from 0 to 512 [ 431.332079][T20065] loop4: detected capacity change from 0 to 512 [ 431.339443][T20065] EXT4-fs: Ignoring removed nobh option [ 431.351769][T20062] IPv6: Can't replace route, no match found [ 431.445789][T20065] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5520: invalid indirect mapped block 256 (level 2) [ 431.460445][T20065] EXT4-fs (loop4): 2 truncates cleaned up [ 431.630844][T20074] loop6: detected capacity change from 0 to 512 [ 431.662475][T20074] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 432.082619][T19904] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.099409][T19904] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.125218][T19904] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.150565][T19904] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.225485][T20092] lo speed is unknown, defaulting to 1000 [ 432.250951][T20092] dummy0 speed is unknown, defaulting to 1000 [ 432.579028][T20111] loop5: detected capacity change from 0 to 1024 [ 432.586954][T20113] loop3: detected capacity change from 0 to 164 [ 432.616251][T20113] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 432.646002][T20111] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.5536: Allocating blocks 497-513 which overlap fs metadata [ 432.664144][T20113] wireguard0: entered promiscuous mode [ 432.669884][T20113] wireguard0: entered allmulticast mode [ 432.676915][T20111] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 432.689451][T20111] EXT4-fs (loop5): This should not happen!! Data will be lost [ 432.689451][T20111] [ 432.702873][T20124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.711887][T20124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.727813][T20123] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 432.756258][T20120] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.856802][T20120] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.884319][T20133] FAULT_INJECTION: forcing a failure. [ 432.884319][T20133] name failslab, interval 1, probability 0, space 0, times 0 [ 432.897255][T20133] CPU: 1 UID: 0 PID: 20133 Comm: syz.3.5544 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 432.897363][T20133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 432.897432][T20133] Call Trace: [ 432.897439][T20133] [ 432.897447][T20133] dump_stack_lvl+0xf6/0x150 [ 432.897497][T20133] dump_stack+0x15/0x1a [ 432.897517][T20133] should_fail_ex+0x261/0x270 [ 432.897546][T20133] should_failslab+0x8f/0xb0 [ 432.897567][T20133] __kmalloc_cache_noprof+0x55/0x320 [ 432.897615][T20133] ? tcf_action_init_1+0x118/0x4c0 [ 432.897643][T20133] tcf_action_init_1+0x118/0x4c0 [ 432.897667][T20133] ? strcmp+0x21/0x50 [ 432.897704][T20133] tcf_action_init+0x1ce/0x620 [ 432.897766][T20133] tc_ctl_action+0x2be/0x880 [ 432.897811][T20133] ? __pfx_tc_ctl_action+0x10/0x10 [ 432.897876][T20133] rtnetlink_rcv_msg+0x6b7/0x740 [ 432.897982][T20133] ? ref_tracker_free+0x3b8/0x420 [ 432.898012][T20133] netlink_rcv_skb+0x12f/0x230 [ 432.898036][T20133] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.898080][T20133] rtnetlink_rcv+0x1c/0x30 [ 432.898147][T20133] netlink_unicast+0x605/0x6c0 [ 432.898191][T20133] netlink_sendmsg+0x609/0x720 [ 432.898222][T20133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.898248][T20133] __sock_sendmsg+0x140/0x180 [ 432.898336][T20133] ____sys_sendmsg+0x350/0x4e0 [ 432.898369][T20133] __sys_sendmsg+0x1a0/0x240 [ 432.898410][T20133] __x64_sys_sendmsg+0x46/0x50 [ 432.898438][T20133] x64_sys_call+0x26f3/0x2e10 [ 432.898519][T20133] do_syscall_64+0xc9/0x1a0 [ 432.898542][T20133] ? clear_bhb_loop+0x25/0x80 [ 432.898563][T20133] ? clear_bhb_loop+0x25/0x80 [ 432.898591][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.898618][T20133] RIP: 0033:0x7fb03d41e169 [ 432.898638][T20133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.898658][T20133] RSP: 002b:00007fb03ba87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.898708][T20133] RAX: ffffffffffffffda RBX: 00007fb03d645fa0 RCX: 00007fb03d41e169 [ 432.898723][T20133] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000006 [ 432.898738][T20133] RBP: 00007fb03ba87090 R08: 0000000000000000 R09: 0000000000000000 [ 432.898752][T20133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.898844][T20133] R13: 0000000000000000 R14: 00007fb03d645fa0 R15: 00007fff9bfdfd38 [ 432.898863][T20133] [ 433.179300][T20120] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.207564][T20136] lo speed is unknown, defaulting to 1000 [ 433.213767][T20136] dummy0 speed is unknown, defaulting to 1000 [ 433.241503][T20144] loop5: detected capacity change from 0 to 512 [ 433.259175][T20144] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 433.269291][T20120] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.301322][T20144] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 433.328894][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5545: corrupted inode contents [ 433.342187][T20144] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.5545: mark_inode_dirty error [ 433.356258][T20144] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5545: invalid indirect mapped block 1 (level 1) [ 433.379729][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5545: corrupted inode contents [ 433.380346][T20120] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.404733][T20120] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.432316][T20120] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.442311][T20144] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 433.468848][T20120] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.477660][T20144] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5545: corrupted inode contents [ 433.491157][T20144] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.5545: mark_inode_dirty error [ 433.511003][T20144] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 433.520168][T20144] EXT4-fs (loop5): 1 truncate cleaned up [ 433.610355][T20136] __nla_validate_parse: 8 callbacks suppressed [ 433.610375][T20136] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5545'. [ 434.382618][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 434.382638][ T29] audit: type=1326 audit(1745318774.389:26914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.455453][T20172] loop4: detected capacity change from 0 to 128 [ 434.456923][T20171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20171 comm=syz.3.5556 [ 434.485010][ T29] audit: type=1326 audit(1745318774.389:26915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.492158][T20169] bond1: entered promiscuous mode [ 434.508621][ T29] audit: type=1326 audit(1745318774.389:26916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.513661][T20169] bond1: entered allmulticast mode [ 434.542250][T20169] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.542498][ T29] audit: type=1326 audit(1745318774.389:26917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.572829][ T29] audit: type=1326 audit(1745318774.389:26918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.596495][ T29] audit: type=1326 audit(1745318774.389:26919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.602350][T20172] bio_check_eod: 38372 callbacks suppressed [ 434.602384][T20172] syz.4.5555: attempt to access beyond end of device [ 434.602384][T20172] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 434.620075][ T29] audit: type=1326 audit(1745318774.389:26920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.620114][ T29] audit: type=1326 audit(1745318774.389:26921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.686589][ T29] audit: type=1326 audit(1745318774.389:26922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.710238][ T29] audit: type=1326 audit(1745318774.389:26923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20168 comm="syz.4.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 434.738071][T20172] syz.4.5555: attempt to access beyond end of device [ 434.738071][T20172] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 434.751580][T20172] syz.4.5555: attempt to access beyond end of device [ 434.751580][T20172] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 434.765043][T20172] syz.4.5555: attempt to access beyond end of device [ 434.765043][T20172] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 434.778486][T20172] syz.4.5555: attempt to access beyond end of device [ 434.778486][T20172] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 434.792318][T20172] syz.4.5555: attempt to access beyond end of device [ 434.792318][T20172] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 434.805873][T20172] syz.4.5555: attempt to access beyond end of device [ 434.805873][T20172] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 434.819381][T20172] syz.4.5555: attempt to access beyond end of device [ 434.819381][T20172] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 434.832867][T20172] syz.4.5555: attempt to access beyond end of device [ 434.832867][T20172] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 434.846522][T20172] syz.4.5555: attempt to access beyond end of device [ 434.846522][T20172] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 434.882788][T20169] bond1 (unregistering): Released all slaves [ 434.936772][T20181] loop5: detected capacity change from 0 to 512 [ 434.974810][T20181] EXT4-fs mount: 65 callbacks suppressed [ 434.974830][T20181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.995090][T20181] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.045305][T20185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 435.051852][T20185] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 435.059663][T20185] vhci_hcd vhci_hcd.0: Device attached [ 435.065670][T20186] vhci_hcd: connection closed [ 435.066204][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.080025][ T51] vhci_hcd: stop threads [ 435.084281][ T51] vhci_hcd: release socket [ 435.088875][ T51] vhci_hcd: disconnect device [ 435.152180][T20193] loop5: detected capacity change from 0 to 512 [ 435.191670][T20193] EXT4-fs: Ignoring removed nobh option [ 435.272606][T20193] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #16: comm syz.5.5562: corrupted inode contents [ 435.352082][T20193] EXT4-fs (loop5): Remounting filesystem read-only [ 435.407315][T20193] EXT4-fs (loop5): 1 truncate cleaned up [ 435.425505][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 435.436179][ T12] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 435.468293][T20193] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.550808][T20193] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.571145][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 435.727578][T20193] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 435.738793][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.770466][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.793498][T20200] loop3: detected capacity change from 0 to 512 [ 435.815031][T20200] loop3: detected capacity change from 0 to 512 [ 435.817334][T20204] loop5: detected capacity change from 0 to 512 [ 435.829913][T20205] loop6: detected capacity change from 0 to 512 [ 435.847476][T20204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.851864][T20209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20209 comm=syz.3.5567 [ 435.872803][T20204] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.895939][T20213] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 435.895939][T20213] program syz.3.5568 not setting count and/or reply_len properly [ 435.900339][T20205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.934616][T20215] loop3: detected capacity change from 0 to 512 [ 435.970359][T20205] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 435.981555][T20216] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5565: corrupted inode contents [ 436.016166][T20216] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5565: mark_inode_dirty error [ 436.028832][T20215] journal_path: Non-blockdev passed as './bus' [ 436.035061][T20215] EXT4-fs: error: could not find journal device path [ 436.055551][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.064646][T20218] loop4: detected capacity change from 0 to 2048 [ 436.085790][T20216] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5565: corrupted inode contents [ 436.121685][T20204] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5565: corrupted inode contents [ 436.204988][T20222] wireguard0: entered promiscuous mode [ 436.210502][T20222] wireguard0: entered allmulticast mode [ 436.217731][T20204] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5565: mark_inode_dirty error [ 436.296371][T20204] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5565: corrupted inode contents [ 436.357726][T20204] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.5565: mark_inode_dirty error [ 436.383919][T20204] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5565: corrupted inode contents [ 436.399208][T20235] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 436.405751][T20235] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 436.413758][T20235] vhci_hcd vhci_hcd.0: Device attached [ 436.419748][T20236] vhci_hcd: connection closed [ 436.421154][T20204] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5565: mark_inode_dirty error [ 436.421172][ T31] vhci_hcd: stop threads [ 436.441459][ T31] vhci_hcd: release socket [ 436.445945][ T31] vhci_hcd: disconnect device [ 436.521927][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.557117][T20242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20242 comm=syz.6.5578 [ 436.687757][T20257] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.731013][T20261] loop5: detected capacity change from 0 to 512 [ 436.738371][T20264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.739224][T20257] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.767104][T20264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.792246][T20261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.809514][T20261] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.826293][T20257] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.887254][T20257] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.899058][T20261] FAULT_INJECTION: forcing a failure. [ 436.899058][T20261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.912189][T20261] CPU: 1 UID: 0 PID: 20261 Comm: syz.5.5584 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 436.912222][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 436.912284][T20261] Call Trace: [ 436.912290][T20261] [ 436.912298][T20261] dump_stack_lvl+0xf6/0x150 [ 436.912319][T20261] dump_stack+0x15/0x1a [ 436.912333][T20261] should_fail_ex+0x261/0x270 [ 436.912355][T20261] should_fail+0xb/0x10 [ 436.912373][T20261] should_fail_usercopy+0x1a/0x20 [ 436.912451][T20261] _copy_to_iter+0xd8/0xd10 [ 436.912475][T20261] ? chacha_block_generic+0x253/0x280 [ 436.912531][T20261] get_random_bytes_user+0x131/0x290 [ 436.912663][T20261] ? vfs_write+0x669/0x950 [ 436.912684][T20261] ? import_ubuf+0xeb/0x120 [ 436.912758][T20261] __x64_sys_getrandom+0xba/0x190 [ 436.912783][T20261] x64_sys_call+0x29cd/0x2e10 [ 436.912802][T20261] do_syscall_64+0xc9/0x1a0 [ 436.912824][T20261] ? clear_bhb_loop+0x25/0x80 [ 436.912843][T20261] ? clear_bhb_loop+0x25/0x80 [ 436.912931][T20261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.912949][T20261] RIP: 0033:0x7f66c08de169 [ 436.912961][T20261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.912977][T20261] RSP: 002b:00007f66bef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 436.912993][T20261] RAX: ffffffffffffffda RBX: 00007f66c0b05fa0 RCX: 00007f66c08de169 [ 436.913004][T20261] RDX: 0000000000000002 RSI: fffffffffffffdde RDI: 0000200000000040 [ 436.913015][T20261] RBP: 00007f66bef47090 R08: 0000000000000000 R09: 0000000000000000 [ 436.913100][T20261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.913110][T20261] R13: 0000000000000000 R14: 00007f66c0b05fa0 R15: 00007fffc28ec008 [ 436.913127][T20261] [ 437.109193][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.129969][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5589'. [ 437.134779][T20257] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.150774][T20257] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.159922][T20281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20281 comm=syz.5.5589 [ 437.163607][T20257] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.184301][T20257] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.200587][T20283] loop4: detected capacity change from 0 to 512 [ 437.217398][T20285] loop5: detected capacity change from 0 to 512 [ 437.220210][T20283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.236539][T20283] ext4 filesystem being mounted at /379/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.236624][T20285] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 437.269920][T20285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 437.279157][T20285] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5591: corrupted in-inode xattr: e_value size too large [ 437.293695][T20285] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5591: couldn't read orphan inode 15 (err -117) [ 437.312301][T20285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.354564][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.377506][T20292] loop5: detected capacity change from 0 to 512 [ 437.398019][T20292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.412027][T20292] ext4 filesystem being mounted at /494/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.446147][T20296] netlink: 'syz.2.5594': attribute type 4 has an invalid length. [ 437.464029][T20296] netlink: '+}[@': attribute type 4 has an invalid length. [ 437.487267][T20292] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5593: corrupted inode contents [ 437.499604][T20292] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5593: mark_inode_dirty error [ 437.514328][T20292] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5593: corrupted inode contents [ 437.528506][T20292] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5593: corrupted inode contents [ 437.540577][T20292] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5593: mark_inode_dirty error [ 437.552187][T20292] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5593: corrupted inode contents [ 437.564754][T20292] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.5593: mark_inode_dirty error [ 437.576603][T20292] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5593: corrupted inode contents [ 437.591759][T20292] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5593: mark_inode_dirty error [ 437.667236][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.800496][T20313] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5601'. [ 437.839489][T20315] loop3: detected capacity change from 0 to 512 [ 437.846101][T20313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20313 comm=syz.6.5601 [ 437.895749][T20319] FAULT_INJECTION: forcing a failure. [ 437.895749][T20319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.908883][T20319] CPU: 1 UID: 0 PID: 20319 Comm: syz.6.5603 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 437.908919][T20319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.908935][T20319] Call Trace: [ 437.908944][T20319] [ 437.908953][T20319] dump_stack_lvl+0xf6/0x150 [ 437.909040][T20319] dump_stack+0x15/0x1a [ 437.909062][T20319] should_fail_ex+0x261/0x270 [ 437.909092][T20319] should_fail+0xb/0x10 [ 437.909118][T20319] should_fail_usercopy+0x1a/0x20 [ 437.909150][T20319] _copy_from_user+0x1c/0xa0 [ 437.909249][T20319] copy_from_sockptr_offset+0x6d/0xb0 [ 437.909278][T20319] do_arpt_set_ctl+0x5d1/0x9b0 [ 437.909305][T20319] ? _raw_spin_unlock_bh+0x36/0x40 [ 437.909343][T20319] ? release_sock+0x117/0x150 [ 437.909465][T20319] nf_setsockopt+0x195/0x1b0 [ 437.909490][T20319] ip_setsockopt+0xea/0x100 [ 437.909519][T20319] udp_setsockopt+0x95/0xb0 [ 437.909546][T20319] sock_common_setsockopt+0x64/0x80 [ 437.909621][T20319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 437.909673][T20319] __sys_setsockopt+0x187/0x200 [ 437.909702][T20319] __x64_sys_setsockopt+0x66/0x80 [ 437.909811][T20319] x64_sys_call+0x2a09/0x2e10 [ 437.909834][T20319] do_syscall_64+0xc9/0x1a0 [ 437.909865][T20319] ? clear_bhb_loop+0x25/0x80 [ 437.909892][T20319] ? clear_bhb_loop+0x25/0x80 [ 437.909917][T20319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.910011][T20319] RIP: 0033:0x7f77fc16e169 [ 437.910029][T20319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.910048][T20319] RSP: 002b:00007f77fa7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 437.910071][T20319] RAX: ffffffffffffffda RBX: 00007f77fc395fa0 RCX: 00007f77fc16e169 [ 437.910086][T20319] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 437.910202][T20319] RBP: 00007f77fa7d7090 R08: 0000000000000418 R09: 0000000000000000 [ 437.910291][T20319] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 437.910302][T20319] R13: 0000000000000000 R14: 00007f77fc395fa0 R15: 00007fff30d8fc38 [ 437.910321][T20319] [ 438.128871][T20315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.159282][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.171753][T20315] ext4 filesystem being mounted at /508/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.182462][T20321] netlink: 'syz.5.5602': attribute type 11 has an invalid length. [ 438.190435][T20321] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5602'. [ 438.200746][T20324] loop6: detected capacity change from 0 to 128 [ 438.219108][T20326] loop4: detected capacity change from 0 to 512 [ 438.238336][T20324] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 438.255098][T20324] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.255148][T20326] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 438.308174][T20324] vhci_hcd: invalid port number 236 [ 438.313494][T20324] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 438.335272][T20333] SELinux: failed to load policy [ 438.352174][T20333] loop5: detected capacity change from 0 to 2048 [ 438.359126][T20326] EXT4-fs (loop4): mount failed [ 438.414646][T20333] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 438.415934][T20333] loop5: p4 start 1654784 is beyond EOD, [ 438.486641][T20342] siw: device registration error -23 [ 438.507319][T20333] truncated [ 438.565209][T20344] FAULT_INJECTION: forcing a failure. [ 438.565209][T20344] name failslab, interval 1, probability 0, space 0, times 0 [ 438.578068][T20344] CPU: 1 UID: 0 PID: 20344 Comm: syz.2.5610 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 438.578098][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 438.578110][T20344] Call Trace: [ 438.578117][T20344] [ 438.578124][T20344] dump_stack_lvl+0xf6/0x150 [ 438.578148][T20344] dump_stack+0x15/0x1a [ 438.578222][T20344] should_fail_ex+0x261/0x270 [ 438.578258][T20344] should_failslab+0x8f/0xb0 [ 438.578285][T20344] __kmalloc_cache_noprof+0x55/0x320 [ 438.578314][T20344] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 438.578399][T20344] __se_sys_memfd_create+0x1ea/0x5a0 [ 438.578471][T20344] __x64_sys_memfd_create+0x31/0x40 [ 438.578513][T20344] x64_sys_call+0x1163/0x2e10 [ 438.578540][T20344] do_syscall_64+0xc9/0x1a0 [ 438.578572][T20344] ? clear_bhb_loop+0x25/0x80 [ 438.578599][T20344] ? clear_bhb_loop+0x25/0x80 [ 438.578641][T20344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.578661][T20344] RIP: 0033:0x7f1238cfe169 [ 438.578717][T20344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.578740][T20344] RSP: 002b:00007f1237366d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 438.578763][T20344] RAX: ffffffffffffffda RBX: 00000000000005c9 RCX: 00007f1238cfe169 [ 438.578778][T20344] RDX: 00007f1237366dec RSI: 0000000000000000 RDI: 00007f1238d81404 [ 438.578793][T20344] RBP: 0000200000000880 R08: 00007f1237366b07 R09: 0000000000000000 [ 438.578807][T20344] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 438.578820][T20344] R13: 00007f1237366dec R14: 00007f1237366df0 R15: 00007ffd388336c8 [ 438.578888][T20344] [ 438.593162][T20345] futex_wake_op: syz.5.5606 tries to shift op by -1; fix this program [ 438.769452][T14754] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.803622][T20350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5613'. [ 438.813237][T20350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20350 comm=syz.2.5613 [ 438.847536][T20352] loop6: detected capacity change from 0 to 2048 [ 439.172505][T20360] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5616'. [ 440.040762][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 440.040799][ T29] audit: type=1400 audit(1745318780.049:27048): avc: denied { lock } for pid=20418 comm="syz.2.5619" path="socket:[75501]" dev="sockfs" ino=75501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 440.204065][T20433] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 440.204065][T20433] program syz.4.5620 not setting count and/or reply_len properly [ 440.254623][T20439] loop4: detected capacity change from 0 to 512 [ 440.277821][T20439] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 440.287964][T20439] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 440.297921][T20439] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5621: Failed to acquire dquot type 1 [ 440.312578][T20439] EXT4-fs (loop4): 1 truncate cleaned up [ 440.319475][T20439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.332273][T20439] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.344872][T20439] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5621'. [ 440.355762][ T29] audit: type=1400 audit(1745318780.369:27049): avc: denied { getopt } for pid=20437 comm="syz.4.5621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 440.399722][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.605709][T20489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5624'. [ 440.651657][T20489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20489 comm=syz.4.5624 [ 440.959639][T20529] loop4: detected capacity change from 0 to 512 [ 440.985402][T20529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.002608][T20529] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.075588][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.144291][ T29] audit: type=1326 audit(1745318781.139:27050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.168138][ T29] audit: type=1326 audit(1745318781.139:27051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.192010][ T29] audit: type=1326 audit(1745318781.139:27052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.215694][ T29] audit: type=1326 audit(1745318781.139:27053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.239694][ T29] audit: type=1326 audit(1745318781.139:27054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.263408][ T29] audit: type=1326 audit(1745318781.139:27055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20550 comm="syz.4.5629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 441.290400][T11700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.301934][T20565] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 441.347692][T20574] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 441.347692][T20574] program syz.3.5632 not setting count and/or reply_len properly [ 442.677227][T20621] loop3: detected capacity change from 0 to 512 [ 442.747798][T20631] loop6: detected capacity change from 0 to 128 [ 442.835909][T20642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.849395][T20642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.869998][T20649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 442.879332][T20649] IPVS: Error joining to the multicast group [ 442.985534][T20672] loop6: detected capacity change from 0 to 512 [ 443.006450][T20672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.029170][T20672] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 443.669433][T20720] FAULT_INJECTION: forcing a failure. [ 443.669433][T20720] name failslab, interval 1, probability 0, space 0, times 0 [ 443.682246][T20720] CPU: 1 UID: 0 PID: 20720 Comm: syz.2.5647 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 443.682309][T20720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 443.682321][T20720] Call Trace: [ 443.682328][T20720] [ 443.682337][T20720] dump_stack_lvl+0xf6/0x150 [ 443.682366][T20720] dump_stack+0x15/0x1a [ 443.682386][T20720] should_fail_ex+0x261/0x270 [ 443.682416][T20720] should_failslab+0x8f/0xb0 [ 443.682476][T20720] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 443.682587][T20720] ? __alloc_skb+0x10d/0x320 [ 443.682630][T20720] __alloc_skb+0x10d/0x320 [ 443.682652][T20720] ? mntput_no_expire+0x73/0x3e0 [ 443.682743][T20720] _sctp_make_chunk+0x53/0x210 [ 443.682778][T20720] sctp_make_shutdown+0x66/0x200 [ 443.682807][T20720] sctp_sf_do_9_2_start_shutdown+0x27/0x270 [ 443.682856][T20720] sctp_sf_do_9_2_prm_shutdown+0x97/0xc0 [ 443.682977][T20720] sctp_do_sm+0xba/0x31c0 [ 443.683001][T20720] ? _parse_integer+0x27/0x30 [ 443.683055][T20720] ? kstrtoull+0x115/0x140 [ 443.683094][T20720] sctp_primitive_SHUTDOWN+0x75/0x90 [ 443.683133][T20720] sctp_shutdown+0xb1/0xd0 [ 443.683218][T20720] ? __pfx_sctp_shutdown+0x10/0x10 [ 443.683245][T20720] inet_shutdown+0x17e/0x210 [ 443.683286][T20720] __x64_sys_shutdown+0xd2/0x130 [ 443.683312][T20720] x64_sys_call+0x2879/0x2e10 [ 443.683414][T20720] do_syscall_64+0xc9/0x1a0 [ 443.683437][T20720] ? clear_bhb_loop+0x25/0x80 [ 443.683456][T20720] ? clear_bhb_loop+0x25/0x80 [ 443.683480][T20720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.683649][T20720] RIP: 0033:0x7f1238cfe169 [ 443.683665][T20720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.683687][T20720] RSP: 002b:00007f1237367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 443.683709][T20720] RAX: ffffffffffffffda RBX: 00007f1238f25fa0 RCX: 00007f1238cfe169 [ 443.683724][T20720] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 443.683739][T20720] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 443.683754][T20720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.683767][T20720] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 443.683827][T20720] [ 444.002192][T20728] loop4: detected capacity change from 0 to 512 [ 444.010574][T20728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 444.030730][T20728] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 444.094721][T20735] loop4: detected capacity change from 0 to 512 [ 444.122539][T20735] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 444.134997][T20735] EXT4-fs (loop4): orphan cleanup on readonly fs [ 444.144508][T20735] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5650: invalid indirect mapped block 256 (level 2) [ 444.165273][T20735] EXT4-fs (loop4): 2 truncates cleaned up [ 444.171656][T20735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 444.411157][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.439728][T20764] loop4: detected capacity change from 0 to 164 [ 444.448756][T20764] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 444.461492][T20764] wireguard0: entered promiscuous mode [ 444.467194][T20764] wireguard0: entered allmulticast mode [ 444.516644][T20771] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 444.658662][T20787] loop4: detected capacity change from 0 to 128 [ 444.666978][T20787] @: renamed from vlan0 (while UP) [ 445.344238][T20870] lo speed is unknown, defaulting to 1000 [ 445.366189][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.375353][T20870] dummy0 speed is unknown, defaulting to 1000 [ 445.420703][T20881] loop6: detected capacity change from 0 to 512 [ 445.445020][T20881] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.5658: corrupted in-inode xattr: invalid ea_ino [ 445.459941][T20860] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5657'. [ 445.469751][T20881] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.5658: couldn't read orphan inode 15 (err -117) [ 445.484759][T20881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.499045][T20881] FAULT_INJECTION: forcing a failure. [ 445.499045][T20881] name failslab, interval 1, probability 0, space 0, times 0 [ 445.511850][T20881] CPU: 0 UID: 0 PID: 20881 Comm: syz.6.5658 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 445.511876][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.511889][T20881] Call Trace: [ 445.511897][T20881] [ 445.511906][T20881] dump_stack_lvl+0xf6/0x150 [ 445.511934][T20881] dump_stack+0x15/0x1a [ 445.511955][T20881] should_fail_ex+0x261/0x270 [ 445.512063][T20881] should_failslab+0x8f/0xb0 [ 445.512084][T20881] __kmalloc_noprof+0xad/0x410 [ 445.512122][T20881] ? ext4_mb_init_cache+0x11e/0xbd0 [ 445.512148][T20881] ext4_mb_init_cache+0x11e/0xbd0 [ 445.512235][T20881] ? filemap_add_folio+0x135/0x1b0 [ 445.512260][T20881] ? __filemap_get_folio+0x481/0x6b0 [ 445.512287][T20881] ext4_mb_init_group+0x245/0x3e0 [ 445.512327][T20881] ext4_mb_regular_allocator+0xc3e/0x23f0 [ 445.512358][T20881] ? should_fail_ex+0xd7/0x270 [ 445.512444][T20881] ext4_mb_new_blocks+0x81d/0x2020 [ 445.512533][T20881] ? maybe_free_verifier_state+0x23d/0x270 [ 445.512573][T20881] ? pop_stack+0x74/0x220 [ 445.512605][T20881] ? ext4_get_branch+0x323/0x3a0 [ 445.512632][T20881] ? ext4_ind_map_blocks+0x822/0x14d0 [ 445.512700][T20881] ext4_ind_map_blocks+0xb51/0x14d0 [ 445.512749][T20881] ? ext4_map_query_blocks+0x10e/0x180 [ 445.512853][T20881] ext4_map_blocks+0x578/0xd00 [ 445.512894][T20881] _ext4_get_block+0x10d/0x380 [ 445.512931][T20881] ext4_get_block+0x39/0x50 [ 445.513002][T20881] ext4_block_write_begin+0x350/0x9d0 [ 445.513034][T20881] ? __pfx_ext4_get_block+0x10/0x10 [ 445.513075][T20881] ? folio_mapping+0xb8/0x120 [ 445.513115][T20881] ext4_write_begin+0x468/0xc30 [ 445.513166][T20881] ext4_da_write_begin+0x1f8/0x590 [ 445.513267][T20881] generic_perform_write+0x189/0x4b0 [ 445.513425][T20881] ext4_buffered_write_iter+0x1ed/0x3c0 [ 445.513456][T20881] ext4_file_write_iter+0xe49/0xf80 [ 445.513491][T20881] vfs_write+0x79b/0x950 [ 445.513519][T20881] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 445.513622][T20881] ksys_write+0xeb/0x1b0 [ 445.513647][T20881] __x64_sys_write+0x42/0x50 [ 445.513670][T20881] x64_sys_call+0x2a45/0x2e10 [ 445.513696][T20881] do_syscall_64+0xc9/0x1a0 [ 445.513727][T20881] ? clear_bhb_loop+0x25/0x80 [ 445.513822][T20881] ? clear_bhb_loop+0x25/0x80 [ 445.513849][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.513874][T20881] RIP: 0033:0x7f77fc16e169 [ 445.513893][T20881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.513914][T20881] RSP: 002b:00007f77fa7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.513936][T20881] RAX: ffffffffffffffda RBX: 00007f77fc395fa0 RCX: 00007f77fc16e169 [ 445.514033][T20881] RDX: 0000000000032600 RSI: 00002000000003c0 RDI: 0000000000000008 [ 445.514048][T20881] RBP: 00007f77fa7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 445.514062][T20881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.514076][T20881] R13: 0000000000000000 R14: 00007f77fc395fa0 R15: 00007fff30d8fc38 [ 445.514098][T20881] [ 445.514666][T20881] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.5658: invalid indirect mapped block 234881024 (level 0) [ 445.883345][T20934] veth0_macvtap: left promiscuous mode [ 445.891495][T20934] macvtap0: refused to change device tx_queue_len [ 445.948882][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.974108][T20942] loop6: detected capacity change from 0 to 512 [ 445.992192][T20942] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 446.000292][T20942] EXT4-fs (loop6): orphan cleanup on readonly fs [ 446.008228][T20942] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5661: invalid indirect mapped block 256 (level 2) [ 446.022127][T20942] EXT4-fs (loop6): 2 truncates cleaned up [ 446.029135][T20942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.306615][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.095428][T21017] FAULT_INJECTION: forcing a failure. [ 447.095428][T21017] name failslab, interval 1, probability 0, space 0, times 0 [ 447.108113][T21017] CPU: 0 UID: 0 PID: 21017 Comm: syz.4.5664 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 447.108215][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 447.108284][T21017] Call Trace: [ 447.108292][T21017] [ 447.108302][T21017] dump_stack_lvl+0xf6/0x150 [ 447.108330][T21017] dump_stack+0x15/0x1a [ 447.108351][T21017] should_fail_ex+0x261/0x270 [ 447.108446][T21017] should_failslab+0x8f/0xb0 [ 447.108466][T21017] __kmalloc_noprof+0xad/0x410 [ 447.108566][T21017] ? sel_write_create+0x184/0x4f0 [ 447.108593][T21017] sel_write_create+0x184/0x4f0 [ 447.108625][T21017] selinux_transaction_write+0xba/0x100 [ 447.108653][T21017] ? __pfx_selinux_transaction_write+0x10/0x10 [ 447.108694][T21017] vfs_write+0x295/0x950 [ 447.108713][T21017] ? __fget_files+0x186/0x1c0 [ 447.108784][T21017] ksys_write+0xeb/0x1b0 [ 447.108808][T21017] __x64_sys_write+0x42/0x50 [ 447.108832][T21017] x64_sys_call+0x2a45/0x2e10 [ 447.108859][T21017] do_syscall_64+0xc9/0x1a0 [ 447.108897][T21017] ? clear_bhb_loop+0x25/0x80 [ 447.108917][T21017] ? clear_bhb_loop+0x25/0x80 [ 447.108939][T21017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.109040][T21017] RIP: 0033:0x7ff698ffe169 [ 447.109057][T21017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.109074][T21017] RSP: 002b:00007ff697667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.109092][T21017] RAX: ffffffffffffffda RBX: 00007ff699225fa0 RCX: 00007ff698ffe169 [ 447.109103][T21017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 447.109189][T21017] RBP: 00007ff697667090 R08: 0000000000000000 R09: 0000000000000000 [ 447.109203][T21017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.109218][T21017] R13: 0000000000000000 R14: 00007ff699225fa0 R15: 00007ffcbcd6e9e8 [ 447.109241][T21017] [ 447.336637][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 447.336656][ T29] audit: type=1326 audit(1745318787.349:27122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.367790][ T29] audit: type=1326 audit(1745318787.349:27123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.391565][ T29] audit: type=1326 audit(1745318787.349:27124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.415161][ T29] audit: type=1326 audit(1745318787.349:27125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.438814][ T29] audit: type=1326 audit(1745318787.349:27126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.462415][ T29] audit: type=1326 audit(1745318787.349:27127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.486091][ T29] audit: type=1326 audit(1745318787.349:27128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.5.5666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c08de169 code=0x7ffc0000 [ 447.536941][ T29] audit: type=1326 audit(1745318787.409:27129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.2.5667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 447.560675][ T29] audit: type=1326 audit(1745318787.409:27130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.2.5667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 447.584303][ T29] audit: type=1326 audit(1745318787.409:27131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21024 comm="syz.2.5667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 447.629223][T21029] bond1: entered promiscuous mode [ 447.634309][T21029] bond1: entered allmulticast mode [ 447.641966][T21029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.687000][T21029] bond1 (unregistering): Released all slaves [ 447.780895][T21040] loop4: detected capacity change from 0 to 512 [ 447.817690][T21040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.885954][T21040] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.902197][T21049] dvmrp5: entered allmulticast mode [ 447.919013][T21050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.927601][T21050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.099867][T21054] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5671: corrupted inode contents [ 448.113306][T21054] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5671: mark_inode_dirty error [ 448.136606][T21054] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5671: corrupted inode contents [ 448.153467][T21058] loop5: detected capacity change from 0 to 1024 [ 448.161485][T21040] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5671: corrupted inode contents [ 448.177106][T21058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.184550][T21040] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5671: mark_inode_dirty error [ 448.197089][T21058] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.5676: Allocating blocks 497-513 which overlap fs metadata [ 448.215860][T21058] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 448.228329][T21058] EXT4-fs (loop5): This should not happen!! Data will be lost [ 448.228329][T21058] [ 448.236834][T21040] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5671: corrupted inode contents [ 448.251431][T21040] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5671: mark_inode_dirty error [ 448.263194][T21040] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5671: corrupted inode contents [ 448.277008][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.293478][T21040] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5671: mark_inode_dirty error [ 448.307829][T21063] loop5: detected capacity change from 0 to 512 [ 448.326989][T21063] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 448.341934][T21063] EXT4-fs (loop5): mount failed [ 448.376390][T21063] siw: device registration error -23 [ 448.376830][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.416608][T21068] loop5: detected capacity change from 0 to 512 [ 448.428136][T21068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.441186][T21068] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.490766][T21074] loop4: detected capacity change from 0 to 1024 [ 448.498540][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.508794][T21074] EXT4-fs: Ignoring removed nobh option [ 448.514391][T21074] journal_path: Non-blockdev passed as './file1' [ 448.520868][T21074] EXT4-fs: error: could not find journal device path [ 448.537427][T21074] FAULT_INJECTION: forcing a failure. [ 448.537427][T21074] name failslab, interval 1, probability 0, space 0, times 0 [ 448.550139][T21074] CPU: 1 UID: 0 PID: 21074 Comm: syz.4.5680 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 448.550171][T21074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 448.550198][T21074] Call Trace: [ 448.550206][T21074] [ 448.550215][T21074] dump_stack_lvl+0xf6/0x150 [ 448.550243][T21074] dump_stack+0x15/0x1a [ 448.550264][T21074] should_fail_ex+0x261/0x270 [ 448.550290][T21074] should_failslab+0x8f/0xb0 [ 448.550310][T21074] __kmalloc_cache_noprof+0x55/0x320 [ 448.550378][T21074] ? audit_log_d_path+0x8e/0x150 [ 448.550487][T21074] audit_log_d_path+0x8e/0x150 [ 448.550533][T21074] audit_log_d_path_exe+0x42/0x70 [ 448.550569][T21074] audit_log_task+0x1f1/0x250 [ 448.550604][T21074] audit_seccomp+0x62/0x100 [ 448.550639][T21074] __seccomp_filter+0x694/0x10e0 [ 448.550663][T21074] ? __rcu_read_unlock+0x4e/0x70 [ 448.550683][T21074] ? mntput_no_expire+0x73/0x3e0 [ 448.550719][T21074] __secure_computing+0x7e/0x150 [ 448.550742][T21077] loop6: detected capacity change from 0 to 512 [ 448.550744][T21074] syscall_trace_enter+0xcf/0x1f0 [ 448.550802][T21074] do_syscall_64+0xaa/0x1a0 [ 448.550885][T21074] ? clear_bhb_loop+0x25/0x80 [ 448.550913][T21074] ? clear_bhb_loop+0x25/0x80 [ 448.550940][T21074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.550967][T21074] RIP: 0033:0x7ff698ffcb7c [ 448.551057][T21074] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 448.551091][T21074] RSP: 002b:00007ff697667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 448.551115][T21074] RAX: ffffffffffffffda RBX: 00007ff699225fa0 RCX: 00007ff698ffcb7c [ 448.551130][T21074] RDX: 000000000000000f RSI: 00007ff6976670a0 RDI: 000000000000000c [ 448.551146][T21074] RBP: 00007ff697667090 R08: 0000000000000000 R09: 0000000000000000 [ 448.551161][T21074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.551226][T21074] R13: 0000000000000000 R14: 00007ff699225fa0 R15: 00007ffcbcd6e9e8 [ 448.551250][T21074] [ 448.615250][T21081] loop5: detected capacity change from 0 to 128 [ 448.655512][T21077] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 448.666078][T21078] @: renamed from vlan0 (while UP) [ 448.668532][T21077] EXT4-fs (loop6): invalid journal inode [ 448.779812][T21077] EXT4-fs (loop6): can't get journal size [ 448.794666][T21077] EXT4-fs (loop6): 1 truncate cleaned up [ 448.803314][T21077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.825463][T21077] sd 0:0:1:0: device reset [ 448.830135][T21080] loop4: detected capacity change from 0 to 512 [ 448.857188][T21080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.871198][T21080] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.894379][T21096] loop5: detected capacity change from 0 to 1024 [ 448.902940][T21080] EXT4-fs (loop4): shut down requested (0) [ 448.909930][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.911040][T21096] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 448.930023][T21096] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 448.941187][T21080] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 448.951636][T21080] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 448.983843][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.993863][T21096] JBD2: no valid journal superblock found [ 448.999696][T21096] EXT4-fs (loop5): Could not load journal inode [ 449.013682][T21098] loop6: detected capacity change from 0 to 8192 [ 449.031244][T21101] loop4: detected capacity change from 0 to 512 [ 449.043969][T21098] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 449.052553][T21098] FAT-fs (loop6): Filesystem has been set read-only [ 449.068263][T21101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.073944][T21098] bond1: entered promiscuous mode [ 449.082091][T21101] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.086015][T21098] bond1: entered allmulticast mode [ 449.102102][T21098] 8021q: adding VLAN 0 to HW filter on device bond1 [ 449.113052][T21098] bond1 (unregistering): Released all slaves [ 449.119830][T21106] netlink: 372 bytes leftover after parsing attributes in process `syz.6.5686'. [ 449.131184][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.708853][T21120] loop5: detected capacity change from 0 to 512 [ 449.753161][T21120] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.810231][T21120] ext4 filesystem being mounted at /512/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.860895][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.904445][T21153] loop6: detected capacity change from 0 to 128 [ 450.941130][T21153] bond1: entered promiscuous mode [ 450.946466][T21153] bond1: entered allmulticast mode [ 450.962012][T21153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 450.987492][T21153] bond1 (unregistering): Released all slaves [ 451.000171][T21157] loop5: detected capacity change from 0 to 512 [ 451.007368][T21157] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 451.017264][T21157] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 451.032382][T21157] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5702: corrupted inode contents [ 451.046837][T21157] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.5702: mark_inode_dirty error [ 451.058852][T21157] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.5702: invalid indirect mapped block 1 (level 1) [ 451.101537][T21161] loop4: detected capacity change from 0 to 512 [ 451.108924][T21157] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5702: corrupted inode contents [ 451.129383][T21161] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 451.142581][T21154] lo speed is unknown, defaulting to 1000 [ 451.148516][T21161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 451.156186][T21161] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5703: invalid indirect mapped block 256 (level 2) [ 451.168593][T21154] dummy0 speed is unknown, defaulting to 1000 [ 451.178539][T21161] EXT4-fs (loop4): 2 truncates cleaned up [ 451.184546][T21157] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 451.221178][T21161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 451.247813][T21166] @: renamed from vlan0 (while UP) [ 451.275758][T21157] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.5702: corrupted inode contents [ 451.326539][T21157] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.5702: mark_inode_dirty error [ 451.340660][T21157] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 451.351927][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5709'. [ 451.361479][T21157] EXT4-fs (loop5): 1 truncate cleaned up [ 451.368193][T21157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.483872][T21152] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5702'. [ 451.546271][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.567154][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.895060][T21200] loop5: detected capacity change from 0 to 128 [ 451.924620][T21200] bond1: entered promiscuous mode [ 451.929810][T21200] bond1: entered allmulticast mode [ 451.935389][T21200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.946301][T21200] bond1 (unregistering): Released all slaves [ 452.045577][T21198] bio_check_eod: 6 callbacks suppressed [ 452.045635][T21198] syz.5.5715: attempt to access beyond end of device [ 452.045635][T21198] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 452.065305][T21198] syz.5.5715: attempt to access beyond end of device [ 452.065305][T21198] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 452.079078][T21198] syz.5.5715: attempt to access beyond end of device [ 452.079078][T21198] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 452.092600][T21198] syz.5.5715: attempt to access beyond end of device [ 452.092600][T21198] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 452.106701][T21198] syz.5.5715: attempt to access beyond end of device [ 452.106701][T21198] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 452.120348][T21198] syz.5.5715: attempt to access beyond end of device [ 452.120348][T21198] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 452.134060][T21198] syz.5.5715: attempt to access beyond end of device [ 452.134060][T21198] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 452.148178][T21198] syz.5.5715: attempt to access beyond end of device [ 452.148178][T21198] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 452.161972][T21198] syz.5.5715: attempt to access beyond end of device [ 452.161972][T21198] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 452.175664][T21198] syz.5.5715: attempt to access beyond end of device [ 452.175664][T21198] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 452.229623][T21204] loop5: detected capacity change from 0 to 512 [ 452.248687][T21204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.261435][T21204] ext4 filesystem being mounted at /518/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.299129][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.311447][T21208] FAULT_INJECTION: forcing a failure. [ 452.311447][T21208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.324582][T21208] CPU: 1 UID: 0 PID: 21208 Comm: syz.6.5717 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 452.324632][T21208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 452.324647][T21208] Call Trace: [ 452.324655][T21208] [ 452.324665][T21208] dump_stack_lvl+0xf6/0x150 [ 452.324695][T21208] dump_stack+0x15/0x1a [ 452.324716][T21208] should_fail_ex+0x261/0x270 [ 452.324743][T21208] should_fail+0xb/0x10 [ 452.324762][T21208] should_fail_usercopy+0x1a/0x20 [ 452.324812][T21208] strncpy_from_user+0x25/0x230 [ 452.324853][T21208] ? getname_flags+0x81/0x3b0 [ 452.324955][T21208] getname_flags+0xb0/0x3b0 [ 452.324979][T21208] io_renameat_prep+0x101/0x1b0 [ 452.325004][T21208] io_submit_sqes+0x607/0x1050 [ 452.325043][T21208] __se_sys_io_uring_enter+0x1e8/0x1b70 [ 452.325074][T21208] ? 0xffffffff81000000 [ 452.325091][T21208] ? get_pid_task+0x94/0xd0 [ 452.325206][T21208] ? proc_fail_nth_write+0x12d/0x160 [ 452.325248][T21208] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.325303][T21208] ? __rcu_read_unlock+0x4e/0x70 [ 452.325325][T21208] ? bpf_trace_run2+0x12c/0x1d0 [ 452.325350][T21208] ? __bpf_trace_sys_enter+0x10/0x30 [ 452.325370][T21208] ? trace_sys_enter+0xcd/0x110 [ 452.325457][T21208] __x64_sys_io_uring_enter+0x78/0x90 [ 452.325484][T21208] x64_sys_call+0x26cb/0x2e10 [ 452.325515][T21208] do_syscall_64+0xc9/0x1a0 [ 452.325539][T21208] ? clear_bhb_loop+0x25/0x80 [ 452.325574][T21208] ? clear_bhb_loop+0x25/0x80 [ 452.325599][T21208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.325623][T21208] RIP: 0033:0x7f77fc16e169 [ 452.325646][T21208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.325734][T21208] RSP: 002b:00007f77fa7d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 452.325753][T21208] RAX: ffffffffffffffda RBX: 00007f77fc395fa0 RCX: 00007f77fc16e169 [ 452.325767][T21208] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 452.325846][T21208] RBP: 00007f77fa7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.325857][T21208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.325870][T21208] R13: 0000000000000000 R14: 00007f77fc395fa0 R15: 00007fff30d8fc38 [ 452.325893][T21208] [ 452.647831][T21212] loop4: detected capacity change from 0 to 512 [ 452.657157][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 452.657174][ T29] audit: type=1400 audit(1745318792.669:27324): avc: denied { read } for pid=21211 comm="syz.6.5720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 452.677607][T21215] netlink: 'syz.5.5718': attribute type 13 has an invalid length. [ 452.721004][T21212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.744519][T21212] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.783233][T21215] bridge0: port 3(batadv0) entered disabled state [ 452.789911][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.797159][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.806421][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.824819][T21223] loop6: detected capacity change from 0 to 512 [ 452.837256][T21225] loop4: detected capacity change from 0 to 512 [ 452.844025][T21225] EXT4-fs: Ignoring removed orlov option [ 452.850162][T21225] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.855822][T21223] EXT4-fs: Ignoring removed orlov option [ 452.869176][T21225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.881875][T21225] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.899211][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.908416][T21223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.918087][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.937720][T21215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.947523][T21229] loop4: detected capacity change from 0 to 512 [ 452.959725][T21223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.963023][T21229] EXT4-fs: Ignoring removed orlov option [ 452.972349][T21223] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.991944][T21223] FAULT_INJECTION: forcing a failure. [ 452.991944][T21223] name failslab, interval 1, probability 0, space 0, times 0 [ 452.994977][T21229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.004745][T21223] CPU: 0 UID: 0 PID: 21223 Comm: syz.6.5723 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 453.004783][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 453.004829][T21223] Call Trace: [ 453.004837][T21223] [ 453.004848][T21223] dump_stack_lvl+0xf6/0x150 [ 453.004885][T21223] dump_stack+0x15/0x1a [ 453.004906][T21223] should_fail_ex+0x261/0x270 [ 453.004938][T21223] should_failslab+0x8f/0xb0 [ 453.005008][T21223] kmem_cache_alloc_noprof+0x59/0x340 [ 453.005045][T21223] ? getname_flags+0x81/0x3b0 [ 453.005078][T21223] getname_flags+0x81/0x3b0 [ 453.005108][T21223] do_sys_openat2+0x65/0x110 [ 453.005145][T21223] __x64_sys_openat+0xf8/0x120 [ 453.005207][T21223] x64_sys_call+0x1ac/0x2e10 [ 453.005236][T21223] do_syscall_64+0xc9/0x1a0 [ 453.005268][T21223] ? clear_bhb_loop+0x25/0x80 [ 453.005348][T21223] ? clear_bhb_loop+0x25/0x80 [ 453.005376][T21223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.005402][T21223] RIP: 0033:0x7f77fc16e169 [ 453.005422][T21223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.005466][T21223] RSP: 002b:00007f77fa7d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.005489][T21223] RAX: ffffffffffffffda RBX: 00007f77fc395fa0 RCX: 00007f77fc16e169 [ 453.005506][T21223] RDX: 0000000000515027 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 453.005521][T21223] RBP: 00007f77fa7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 453.005537][T21223] R10: 0000000000000408 R11: 0000000000000246 R12: 0000000000000001 [ 453.005552][T21223] R13: 0000000000000000 R14: 00007f77fc395fa0 R15: 00007fff30d8fc38 [ 453.005579][T21223] [ 453.191815][T14754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.202514][T21215] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.211002][T21215] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.219485][T21215] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.227991][T21215] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.239001][T21229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.251836][T21229] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.293837][T14336] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.306772][T21237] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 453.306772][T21237] program syz.5.5727 not setting count and/or reply_len properly [ 453.893945][T21250] lo speed is unknown, defaulting to 1000 [ 453.900090][T21250] dummy0 speed is unknown, defaulting to 1000 [ 453.944157][T21249] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5730'. [ 454.338279][T21261] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5734'. [ 454.348493][T21261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5734'. [ 454.357492][T21261] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5734'. [ 454.392744][T21261] batadv_slave_1: entered promiscuous mode [ 454.411039][T21260] batadv_slave_1: left promiscuous mode [ 454.462125][T21269] loop4: detected capacity change from 0 to 512 [ 454.492875][T21269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.506708][T21265] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5736'. [ 454.528905][T21265] loop5: detected capacity change from 0 to 512 [ 454.535488][T21269] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.576429][T21265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.595042][T21265] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.849665][T21279] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5737: corrupted inode contents [ 454.864357][T21265] EXT4-fs (loop5): shut down requested (0) [ 454.871927][T21279] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5737: mark_inode_dirty error [ 454.886316][T21265] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 454.909821][T21265] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 455.027378][T12036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.037312][T21279] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5737: corrupted inode contents [ 455.054067][T21280] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5737: corrupted inode contents [ 455.072303][T21280] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5737: mark_inode_dirty error [ 455.087626][T21282] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 455.087626][T21282] program syz.5.5739 not setting count and/or reply_len properly [ 455.116668][T21280] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5737: corrupted inode contents [ 455.129951][T21280] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5737: mark_inode_dirty error [ 455.144009][T21280] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5737: corrupted inode contents [ 455.156970][T21280] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5737: mark_inode_dirty error [ 455.230964][T21286] loop6: detected capacity change from 0 to 512 [ 455.296147][T21286] ext4 filesystem being mounted at /324/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.318590][T21291] loop4: detected capacity change from 0 to 512 [ 455.337393][T21291] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.350607][T21294] loop5: detected capacity change from 0 to 512 [ 455.357186][T21298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5744'. [ 455.376898][T21298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21298 comm=syz.2.5744 [ 455.396391][T21294] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.444452][T21306] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5742: corrupted inode contents [ 455.456945][T21306] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5742: mark_inode_dirty error [ 455.471226][T21306] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5742: corrupted inode contents [ 455.479888][T21309] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5743: corrupted inode contents [ 455.497390][T21291] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5742: corrupted inode contents [ 455.509686][T21309] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5743: mark_inode_dirty error [ 455.522681][T21291] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5742: mark_inode_dirty error [ 455.536005][T21309] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5743: corrupted inode contents [ 455.548601][T21291] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5742: corrupted inode contents [ 455.561846][T21291] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5742: mark_inode_dirty error [ 455.573933][T21291] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5742: corrupted inode contents [ 455.586524][T21310] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5743: corrupted inode contents [ 455.625175][T21291] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5742: mark_inode_dirty error [ 455.637591][T21310] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5743: mark_inode_dirty error [ 455.649949][T21310] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5743: corrupted inode contents [ 455.672306][T21310] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.5743: mark_inode_dirty error [ 455.688717][T21310] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5743: corrupted inode contents [ 455.721051][T21310] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5743: mark_inode_dirty error [ 455.743353][ T29] audit: type=1326 audit(1745318795.749:27325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.767191][ T29] audit: type=1326 audit(1745318795.749:27326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.791035][ T29] audit: type=1326 audit(1745318795.749:27327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.804119][T21316] loop4: detected capacity change from 0 to 128 [ 455.814637][ T29] audit: type=1326 audit(1745318795.749:27328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.844658][ T29] audit: type=1326 audit(1745318795.749:27329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.868840][ T29] audit: type=1326 audit(1745318795.749:27330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.892493][ T29] audit: type=1326 audit(1745318795.749:27331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.916089][ T29] audit: type=1326 audit(1745318795.749:27332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.939905][ T29] audit: type=1326 audit(1745318795.749:27333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21313 comm="syz.4.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 455.985637][T21316] bond1: entered promiscuous mode [ 455.990756][T21316] bond1: entered allmulticast mode [ 455.996426][T21316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.006623][T21316] bond1 (unregistering): Released all slaves [ 456.387769][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5750'. [ 456.400350][T21326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5751'. [ 456.422495][T21324] IPv6: Can't replace route, no match found [ 456.673941][T21338] FAULT_INJECTION: forcing a failure. [ 456.673941][T21338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.687060][T21338] CPU: 1 UID: 0 PID: 21338 Comm: syz.5.5756 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 456.687168][T21338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 456.687183][T21338] Call Trace: [ 456.687190][T21338] [ 456.687199][T21338] dump_stack_lvl+0xf6/0x150 [ 456.687228][T21338] dump_stack+0x15/0x1a [ 456.687247][T21338] should_fail_ex+0x261/0x270 [ 456.687326][T21338] should_fail+0xb/0x10 [ 456.687350][T21338] should_fail_usercopy+0x1a/0x20 [ 456.687415][T21338] _copy_from_user+0x1c/0xa0 [ 456.687448][T21338] copy_msghdr_from_user+0x54/0x2b0 [ 456.687546][T21338] ? __fget_files+0x186/0x1c0 [ 456.687595][T21338] __sys_sendmsg+0x141/0x240 [ 456.687642][T21338] __x64_sys_sendmsg+0x46/0x50 [ 456.687669][T21338] x64_sys_call+0x26f3/0x2e10 [ 456.687691][T21338] do_syscall_64+0xc9/0x1a0 [ 456.687721][T21338] ? clear_bhb_loop+0x25/0x80 [ 456.687799][T21338] ? clear_bhb_loop+0x25/0x80 [ 456.687870][T21338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.687893][T21338] RIP: 0033:0x7f66c08de169 [ 456.687907][T21338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.687924][T21338] RSP: 002b:00007f66bef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.687999][T21338] RAX: ffffffffffffffda RBX: 00007f66c0b05fa0 RCX: 00007f66c08de169 [ 456.688086][T21338] RDX: 0000000000008010 RSI: 0000200000000380 RDI: 0000000000000003 [ 456.688097][T21338] RBP: 00007f66bef47090 R08: 0000000000000000 R09: 0000000000000000 [ 456.688108][T21338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.688121][T21338] R13: 0000000000000000 R14: 00007f66c0b05fa0 R15: 00007fffc28ec008 [ 456.688143][T21338] [ 456.914644][T21341] loop6: detected capacity change from 0 to 8192 [ 456.936873][T21341] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 456.945517][T21341] FAT-fs (loop6): Filesystem has been set read-only [ 456.967872][T21341] bond1: entered promiscuous mode [ 456.972950][T21341] bond1: entered allmulticast mode [ 456.979589][T21341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.990059][T21341] bond1 (unregistering): Released all slaves [ 457.006547][T21346] netlink: 372 bytes leftover after parsing attributes in process `syz.6.5757'. [ 457.369640][T21348] FAULT_INJECTION: forcing a failure. [ 457.369640][T21348] name failslab, interval 1, probability 0, space 0, times 0 [ 457.382353][T21348] CPU: 1 UID: 0 PID: 21348 Comm: syz.2.5759 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 457.382441][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.382456][T21348] Call Trace: [ 457.382464][T21348] [ 457.382473][T21348] dump_stack_lvl+0xf6/0x150 [ 457.382502][T21348] dump_stack+0x15/0x1a [ 457.382518][T21348] should_fail_ex+0x261/0x270 [ 457.382584][T21348] should_failslab+0x8f/0xb0 [ 457.382602][T21348] __kmalloc_noprof+0xad/0x410 [ 457.382676][T21348] ? nla_strdup+0x7d/0xc0 [ 457.382699][T21348] nla_strdup+0x7d/0xc0 [ 457.382793][T21348] nf_tables_newset+0xd9c/0x1450 [ 457.382820][T21348] nfnetlink_rcv+0xb6e/0x1610 [ 457.382930][T21348] netlink_unicast+0x605/0x6c0 [ 457.383103][T21348] netlink_sendmsg+0x609/0x720 [ 457.383141][T21348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.383235][T21348] __sock_sendmsg+0x140/0x180 [ 457.383261][T21348] ____sys_sendmsg+0x350/0x4e0 [ 457.383423][T21348] __sys_sendmsg+0x1a0/0x240 [ 457.383460][T21348] __x64_sys_sendmsg+0x46/0x50 [ 457.383480][T21348] x64_sys_call+0x26f3/0x2e10 [ 457.383500][T21348] do_syscall_64+0xc9/0x1a0 [ 457.383579][T21348] ? clear_bhb_loop+0x25/0x80 [ 457.383598][T21348] ? clear_bhb_loop+0x25/0x80 [ 457.383615][T21348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.383712][T21348] RIP: 0033:0x7f1238cfe169 [ 457.383725][T21348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.383853][T21348] RSP: 002b:00007f1237367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.383868][T21348] RAX: ffffffffffffffda RBX: 00007f1238f25fa0 RCX: 00007f1238cfe169 [ 457.383879][T21348] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 457.383889][T21348] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 457.383899][T21348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.383909][T21348] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 457.383927][T21348] [ 457.721037][T21356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5763'. [ 457.786550][T21360] FAULT_INJECTION: forcing a failure. [ 457.786550][T21360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.799751][T21360] CPU: 1 UID: 0 PID: 21360 Comm: syz.2.5766 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 457.799785][T21360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.799800][T21360] Call Trace: [ 457.799809][T21360] [ 457.799862][T21360] dump_stack_lvl+0xf6/0x150 [ 457.799892][T21360] dump_stack+0x15/0x1a [ 457.799912][T21360] should_fail_ex+0x261/0x270 [ 457.799936][T21360] should_fail+0xb/0x10 [ 457.799955][T21360] should_fail_usercopy+0x1a/0x20 [ 457.799984][T21360] _copy_from_user+0x1c/0xa0 [ 457.800053][T21360] kstrtouint_from_user+0x84/0x100 [ 457.800083][T21360] ? 0xffffffff81000000 [ 457.800096][T21360] ? selinux_file_permission+0x22d/0x360 [ 457.800253][T21360] proc_fail_nth_write+0x54/0x160 [ 457.800289][T21360] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.800323][T21360] vfs_write+0x295/0x950 [ 457.800397][T21360] ? __fget_files+0x186/0x1c0 [ 457.800425][T21360] ksys_write+0xeb/0x1b0 [ 457.800450][T21360] __x64_sys_write+0x42/0x50 [ 457.800473][T21360] x64_sys_call+0x2a45/0x2e10 [ 457.800500][T21360] do_syscall_64+0xc9/0x1a0 [ 457.800589][T21360] ? clear_bhb_loop+0x25/0x80 [ 457.800615][T21360] ? clear_bhb_loop+0x25/0x80 [ 457.800642][T21360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.800668][T21360] RIP: 0033:0x7f1238cfcc1f [ 457.800695][T21360] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 457.800801][T21360] RSP: 002b:00007f1237367030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 457.800824][T21360] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1238cfcc1f [ 457.800839][T21360] RDX: 0000000000000001 RSI: 00007f12373670a0 RDI: 0000000000000006 [ 457.800853][T21360] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 457.800910][T21360] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 457.800924][T21360] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 457.800948][T21360] [ 457.992284][T21365] lo speed is unknown, defaulting to 1000 [ 458.011453][T21363] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 458.011453][T21363] program syz.5.5767 not setting count and/or reply_len properly [ 458.028902][T21365] dummy0 speed is unknown, defaulting to 1000 [ 458.057970][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 458.057986][ T29] audit: type=1326 audit(1745318798.069:27351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.088028][ T29] audit: type=1326 audit(1745318798.069:27352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.114502][T21387] loop4: detected capacity change from 0 to 512 [ 458.125084][ T29] audit: type=1326 audit(1745318798.129:27353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.148737][ T29] audit: type=1326 audit(1745318798.129:27354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.172368][ T29] audit: type=1326 audit(1745318798.129:27355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.206844][T21387] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.5772: corrupted in-inode xattr: invalid ea_ino [ 458.220614][T21387] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.5772: couldn't read orphan inode 15 (err -117) [ 458.226149][T21382] FAULT_INJECTION: forcing a failure. [ 458.226149][T21382] name failslab, interval 1, probability 0, space 0, times 0 [ 458.245106][T21382] CPU: 0 UID: 0 PID: 21382 Comm: syz.2.5771 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 458.245193][T21382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.245209][T21382] Call Trace: [ 458.245217][T21382] [ 458.245227][T21382] dump_stack_lvl+0xf6/0x150 [ 458.245255][T21382] dump_stack+0x15/0x1a [ 458.245271][T21382] should_fail_ex+0x261/0x270 [ 458.245295][T21382] should_failslab+0x8f/0xb0 [ 458.245344][T21382] __kmalloc_cache_noprof+0x55/0x320 [ 458.245380][T21382] ? register_netdevice+0x1fc/0xee0 [ 458.245410][T21382] ? rb_insert_color+0x284/0x290 [ 458.245489][T21382] register_netdevice+0x1fc/0xee0 [ 458.245550][T21382] tun_set_iff+0x609/0x8c0 [ 458.245572][T21382] __tun_chr_ioctl+0x6a6/0x1590 [ 458.245597][T21382] tun_chr_ioctl+0x27/0x30 [ 458.245652][T21382] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 458.245675][T21382] __se_sys_ioctl+0xc9/0x140 [ 458.245710][T21382] __x64_sys_ioctl+0x43/0x50 [ 458.245763][T21382] x64_sys_call+0x168d/0x2e10 [ 458.245786][T21382] do_syscall_64+0xc9/0x1a0 [ 458.245816][T21382] ? clear_bhb_loop+0x25/0x80 [ 458.245858][T21382] ? clear_bhb_loop+0x25/0x80 [ 458.245884][T21382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.245942][T21382] RIP: 0033:0x7f1238cfe169 [ 458.245957][T21382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.245977][T21382] RSP: 002b:00007f1237367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.245999][T21382] RAX: ffffffffffffffda RBX: 00007f1238f25fa0 RCX: 00007f1238cfe169 [ 458.246013][T21382] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000005 [ 458.246025][T21382] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 458.246036][T21382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.246047][T21382] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 458.246113][T21382] [ 458.246350][ T29] audit: type=1326 audit(1745318798.239:27356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.465946][ T29] audit: type=1326 audit(1745318798.239:27357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.489631][ T29] audit: type=1326 audit(1745318798.239:27358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.513205][ T29] audit: type=1326 audit(1745318798.239:27359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.536852][ T29] audit: type=1326 audit(1745318798.239:27360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21383 comm="syz.4.5772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff698ffe169 code=0x7ffc0000 [ 458.582695][T21365] chnl_net:caif_netlink_parms(): no params data found [ 458.640461][T21365] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.647754][T21365] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.656146][T21404] FAULT_INJECTION: forcing a failure. [ 458.656146][T21404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.669302][T21404] CPU: 1 UID: 0 PID: 21404 Comm: syz.2.5777 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 458.669330][T21404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.669423][T21404] Call Trace: [ 458.669430][T21404] [ 458.669439][T21404] dump_stack_lvl+0xf6/0x150 [ 458.669466][T21404] dump_stack+0x15/0x1a [ 458.669484][T21404] should_fail_ex+0x261/0x270 [ 458.669579][T21404] should_fail+0xb/0x10 [ 458.669609][T21404] should_fail_usercopy+0x1a/0x20 [ 458.669636][T21404] _copy_to_user+0x20/0xa0 [ 458.669667][T21404] copy_siginfo_to_user+0x24/0xb0 [ 458.669700][T21404] x64_setup_rt_frame+0x2bf/0x5a0 [ 458.669738][T21404] arch_do_signal_or_restart+0x279/0x480 [ 458.669826][T21404] syscall_exit_to_user_mode+0x62/0x120 [ 458.669852][T21404] do_syscall_64+0xd6/0x1a0 [ 458.669878][T21404] ? clear_bhb_loop+0x25/0x80 [ 458.669908][T21404] ? clear_bhb_loop+0x25/0x80 [ 458.669991][T21404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.670012][T21404] RIP: 0033:0x7f1238cfcace [ 458.670028][T21404] Code: 24 30 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 <0f> 05 48 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 [ 458.670046][T21404] RSP: 002b:00007f1237366b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 458.670064][T21404] RAX: 0000000000000101 RBX: 0000000000000000 RCX: 00007f1238cfcad0 [ 458.670076][T21404] RDX: 0000000000000000 RSI: 00007f1237366c10 RDI: 00000000ffffff9c [ 458.670089][T21404] RBP: 00007f1237366c10 R08: 0000000000000000 R09: 002367732f766564 [ 458.670112][T21404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 458.670280][T21404] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 458.670301][T21404] [ 458.673467][T21365] bridge_slave_0: entered allmulticast mode [ 458.765874][T21408] FAULT_INJECTION: forcing a failure. [ 458.765874][T21408] name failslab, interval 1, probability 0, space 0, times 0 [ 458.772181][T21365] bridge_slave_0: entered promiscuous mode [ 458.775563][T21408] CPU: 0 UID: 0 PID: 21408 Comm: syz.2.5778 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 458.775600][T21408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.775616][T21408] Call Trace: [ 458.775625][T21408] [ 458.775634][T21408] dump_stack_lvl+0xf6/0x150 [ 458.775729][T21408] dump_stack+0x15/0x1a [ 458.775751][T21408] should_fail_ex+0x261/0x270 [ 458.775829][T21408] should_failslab+0x8f/0xb0 [ 458.775856][T21408] __kmalloc_cache_noprof+0x55/0x320 [ 458.775894][T21408] ? selinux_netlbl_sock_genattr+0x87/0x260 [ 458.775947][T21408] ? __pfx_tcp_compressed_ack_kick+0x10/0x10 [ 458.775983][T21408] selinux_netlbl_sock_genattr+0x87/0x260 [ 458.776025][T21408] selinux_netlbl_socket_post_create+0x69/0x100 [ 458.776068][T21408] selinux_socket_post_create+0x211/0x2a0 [ 458.776166][T21408] security_socket_post_create+0x5b/0xa0 [ 458.776289][T21408] __sock_create+0x35b/0x5a0 [ 458.776342][T21408] sock_create_kern+0x38/0x50 [ 458.776382][T21408] mptcp_subflow_create_socket+0x87/0x640 [ 458.776424][T21408] __mptcp_nmpc_sk+0xb9/0x3d0 [ 458.776502][T21408] mptcp_bind+0x6f/0x2f0 [ 458.776600][T21408] __sys_bind+0x111/0x190 [ 458.776645][T21408] __x64_sys_bind+0x41/0x50 [ 458.776684][T21408] x64_sys_call+0x1e4a/0x2e10 [ 458.776791][T21408] do_syscall_64+0xc9/0x1a0 [ 458.776821][T21408] ? clear_bhb_loop+0x25/0x80 [ 458.776848][T21408] ? clear_bhb_loop+0x25/0x80 [ 458.776889][T21408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.776926][T21408] RIP: 0033:0x7f1238cfe169 [ 458.776945][T21408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.776967][T21408] RSP: 002b:00007f1237367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 458.776992][T21408] RAX: ffffffffffffffda RBX: 00007f1238f25fa0 RCX: 00007f1238cfe169 [ 458.777008][T21408] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000005 [ 458.777023][T21408] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 458.777039][T21408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.777113][T21408] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 458.777135][T21408] [ 459.092930][T21365] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.100072][T21365] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.109464][T21365] bridge_slave_1: entered allmulticast mode [ 459.116228][T21365] bridge_slave_1: entered promiscuous mode [ 459.126382][T21415] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5780'. [ 459.164614][T21365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.174588][T21423] loop5: detected capacity change from 0 to 512 [ 459.182939][T21365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.195296][T21423] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5781: corrupted in-inode xattr: invalid ea_ino [ 459.209213][T21423] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5781: couldn't read orphan inode 15 (err -117) [ 459.228854][T21365] team0: Port device team_slave_0 added [ 459.237178][T21365] team0: Port device team_slave_1 added [ 459.255200][T21365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.262174][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.288282][T21365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.302892][T21365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.310064][T21365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.336064][T21365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.393073][T21365] hsr_slave_0: entered promiscuous mode [ 459.399997][T21365] hsr_slave_1: entered promiscuous mode [ 459.408990][T21365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.416794][T21365] Cannot create hsr debugfs directory [ 459.427199][T21434] loop5: detected capacity change from 0 to 512 [ 459.447776][T21434] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.479002][T21442] loop6: detected capacity change from 0 to 512 [ 459.497771][T21442] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.530205][T21447] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5786: corrupted inode contents [ 459.546262][T21365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.555693][T21447] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #2: comm syz.5.5786: mark_inode_dirty error [ 459.556718][T21365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.574087][T21449] loop4: detected capacity change from 0 to 512 [ 459.581104][T21447] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #2: comm syz.5.5786: corrupted inode contents [ 459.595383][T21365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.605963][T21447] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.5786: mark_inode_dirty error [ 459.616091][T21450] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5787: corrupted inode contents [ 459.629426][T21449] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 459.639379][T21449] EXT4-fs (loop4): orphan cleanup on readonly fs [ 459.646464][T21450] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5787: mark_inode_dirty error [ 459.660552][T21449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5789: invalid indirect mapped block 256 (level 2) [ 459.661427][T21365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.682873][T21449] EXT4-fs (loop4): 2 truncates cleaned up [ 459.716430][T21450] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5787: corrupted inode contents [ 459.742288][T21442] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5787: corrupted inode contents [ 459.764697][T21365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.785253][T21442] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5787: mark_inode_dirty error [ 459.803095][T21365] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.803188][T21442] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5787: corrupted inode contents [ 459.837979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.845166][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.866331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.873435][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.881378][T21442] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.5787: mark_inode_dirty error [ 459.899307][T21442] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5787: corrupted inode contents [ 459.930315][T21442] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5787: mark_inode_dirty error [ 459.942716][T21365] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.953156][T21365] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.975609][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'. [ 459.998443][T21457] loop5: detected capacity change from 0 to 512 [ 460.028142][T21457] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.044452][T21457] EXT4-fs (loop5): shut down requested (0) [ 460.063847][T21457] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 460.073434][T21457] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 460.112141][T21471] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 460.112141][T21471] program syz.4.5794 not setting count and/or reply_len properly [ 460.149153][T21365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.169082][T21476] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 460.169082][T21476] program syz.6.5796 not setting count and/or reply_len properly [ 460.293838][T21365] veth0_vlan: entered promiscuous mode [ 460.302184][T21365] veth1_vlan: entered promiscuous mode [ 460.319007][T21365] veth0_macvtap: entered promiscuous mode [ 460.334054][T21365] veth1_macvtap: entered promiscuous mode [ 460.345010][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.355545][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.365400][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.375865][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.393744][T21365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.406966][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.417495][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.427391][T21365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.437835][T21365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.450747][T21365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.460834][T21365] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.469603][T21365] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.478391][T21365] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.487116][T21365] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.511666][T21491] loop6: detected capacity change from 0 to 512 [ 460.523336][T21492] loop5: detected capacity change from 0 to 512 [ 460.536645][T21492] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 460.547269][T21491] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.582383][T21492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 460.597094][T21492] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.5795: corrupted in-inode xattr: e_value size too large [ 460.611927][T21492] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.5795: couldn't read orphan inode 15 (err -117) [ 460.620167][T21505] loop7: detected capacity change from 0 to 1024 [ 460.630833][T21505] EXT4-fs: Ignoring removed orlov option [ 460.636649][T21505] EXT4-fs: Ignoring removed nomblk_io_submit option [ 460.682487][T21513] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 460.682487][T21513] program syz.6.5803 not setting count and/or reply_len properly [ 460.757982][T21523] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 460.757982][T21523] program syz.5.5806 not setting count and/or reply_len properly [ 460.767322][T21529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5808'. [ 460.790151][T21529] FAULT_INJECTION: forcing a failure. [ 460.790151][T21529] name failslab, interval 1, probability 0, space 0, times 0 [ 460.802904][T21529] CPU: 0 UID: 0 PID: 21529 Comm: syz.2.5808 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 460.802936][T21529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.803005][T21529] Call Trace: [ 460.803012][T21529] [ 460.803022][T21529] dump_stack_lvl+0xf6/0x150 [ 460.803049][T21529] dump_stack+0x15/0x1a [ 460.803068][T21529] should_fail_ex+0x261/0x270 [ 460.803156][T21529] should_failslab+0x8f/0xb0 [ 460.803177][T21529] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 460.803222][T21529] ? __alloc_skb+0x10d/0x320 [ 460.803301][T21529] ? security_capable+0x81/0x90 [ 460.803331][T21529] __alloc_skb+0x10d/0x320 [ 460.803357][T21529] netlink_ack+0xf1/0x4f0 [ 460.803385][T21529] ? avc_has_perm_noaudit+0x1cc/0x210 [ 460.803420][T21529] netlink_rcv_skb+0x19f/0x230 [ 460.803521][T21529] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.803567][T21529] rtnetlink_rcv+0x1c/0x30 [ 460.803603][T21529] netlink_unicast+0x605/0x6c0 [ 460.803646][T21529] netlink_sendmsg+0x609/0x720 [ 460.803678][T21529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.803714][T21529] __sock_sendmsg+0x140/0x180 [ 460.803753][T21529] ____sys_sendmsg+0x350/0x4e0 [ 460.803788][T21529] __sys_sendmsg+0x1a0/0x240 [ 460.803914][T21529] __x64_sys_sendmsg+0x46/0x50 [ 460.803944][T21529] x64_sys_call+0x26f3/0x2e10 [ 460.803973][T21529] do_syscall_64+0xc9/0x1a0 [ 460.804059][T21529] ? clear_bhb_loop+0x25/0x80 [ 460.804086][T21529] ? clear_bhb_loop+0x25/0x80 [ 460.804114][T21529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.804140][T21529] RIP: 0033:0x7f1238cfe169 [ 460.804159][T21529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.804224][T21529] RSP: 002b:00007f1237367038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.804248][T21529] RAX: ffffffffffffffda RBX: 00007f1238f25fa0 RCX: 00007f1238cfe169 [ 460.804265][T21529] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 460.804280][T21529] RBP: 00007f1237367090 R08: 0000000000000000 R09: 0000000000000000 [ 460.804295][T21529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.804310][T21529] R13: 0000000000000000 R14: 00007f1238f25fa0 R15: 00007ffd388336c8 [ 460.804333][T21529] [ 460.821681][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5805'. [ 460.824577][T21521] loop7: detected capacity change from 0 to 512 [ 460.839607][T21535] loop5: detected capacity change from 0 to 512 [ 460.909799][T21521] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.918200][T21537] wireguard0: entered promiscuous mode [ 460.924489][T21521] EXT4-fs (loop7): shut down requested (0) [ 460.926467][T21537] wireguard0: entered allmulticast mode [ 460.932218][T21535] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.5810: bad orphan inode 15 [ 461.104107][T21535] ext4_test_bit(bit=14, block=18) = 1 [ 461.109691][T21535] is_bad_inode(inode)=0 [ 461.113943][T21535] NEXT_ORPHAN(inode)=1023 [ 461.118412][T21535] max_ino=32 [ 461.121623][T21535] i_nlink=0 [ 461.125233][T21535] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.5810: corrupted xattr block 19: invalid header [ 461.139866][T21535] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 461.150146][T21535] ext4 filesystem being mounted at /544/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 461.177934][T21548] loop6: detected capacity change from 0 to 512 [ 461.185159][T21549] loop7: detected capacity change from 0 to 512 [ 461.193837][T21549] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 461.206015][T21549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 461.214522][T21549] EXT4-fs error (device loop7): ext4_iget_extra_inode:4693: inode #15: comm syz.7.5812: corrupted in-inode xattr: e_value size too large [ 461.230666][T21549] EXT4-fs error (device loop7): ext4_orphan_get:1395: comm syz.7.5812: couldn't read orphan inode 15 (err -117) [ 461.258286][T21548] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.379939][T21548] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5813: corrupted inode contents [ 461.441920][T21548] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5813: mark_inode_dirty error [ 461.510585][T21548] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5813: corrupted inode contents [ 461.583073][T21565] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5813: corrupted inode contents [ 461.600140][T21565] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5813: mark_inode_dirty error [ 461.617079][T21572] loop4: detected capacity change from 0 to 164 [ 461.623951][T21565] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5813: corrupted inode contents [ 461.644114][T21572] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 461.644964][T21565] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.5813: mark_inode_dirty error [ 461.677507][T21576] netlink: 'syz.7.5823': attribute type 10 has an invalid length. [ 461.687210][T21576] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.697950][T21565] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #2: comm syz.6.5813: corrupted inode contents [ 461.712994][T21576] bridge_slave_1: left allmulticast mode [ 461.718729][T21576] bridge_slave_1: left promiscuous mode [ 461.724440][T21576] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.731971][T21565] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #2: comm syz.6.5813: mark_inode_dirty error [ 461.746017][T21576] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 461.764459][T21572] wireguard0: entered promiscuous mode [ 461.770091][T21572] wireguard0: entered allmulticast mode [ 461.942859][T21584] loop5: detected capacity change from 0 to 128 [ 461.991128][T21592] wg2: entered promiscuous mode [ 461.996072][T21592] wg2: entered allmulticast mode [ 462.003901][T21584] ext4 filesystem being mounted at /545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 462.041064][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5829'. [ 462.051039][T21592] block device autoloading is deprecated and will be removed. [ 462.059323][T21584] EXT4-fs error (device loop5): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.5.5826: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 462.060456][T21592] bio_check_eod: 11907 callbacks suppressed [ 462.060474][T21592] syz.2.5830: attempt to access beyond end of device [ 462.060474][T21592] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 462.109972][T21584] lo speed is unknown, defaulting to 1000 [ 462.116602][T21584] dummy0 speed is unknown, defaulting to 1000 [ 462.188547][T21607] loop4: detected capacity change from 0 to 512 [ 462.193080][T21605] loop7: detected capacity change from 0 to 1024 [ 462.215148][T21607] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.257246][T21605] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.5833: Allocating blocks 497-513 which overlap fs metadata [ 462.274127][T21605] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 462.286648][T21605] EXT4-fs (loop7): This should not happen!! Data will be lost [ 462.286648][T21605] [ 462.351823][T21616] FAULT_INJECTION: forcing a failure. [ 462.351823][T21616] name failslab, interval 1, probability 0, space 0, times 0 [ 462.364614][T21616] CPU: 1 UID: 0 PID: 21616 Comm: syz.5.5837 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 462.364654][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.364669][T21616] Call Trace: [ 462.364675][T21616] [ 462.364683][T21616] dump_stack_lvl+0xf6/0x150 [ 462.364710][T21616] dump_stack+0x15/0x1a [ 462.364731][T21616] should_fail_ex+0x261/0x270 [ 462.364760][T21616] should_failslab+0x8f/0xb0 [ 462.364786][T21616] kmem_cache_alloc_noprof+0x59/0x340 [ 462.364820][T21616] ? mas_alloc_nodes+0x1f4/0x4a0 [ 462.364843][T21616] ? __mod_memcg_state+0x122/0x280 [ 462.364866][T21616] mas_alloc_nodes+0x1f4/0x4a0 [ 462.364899][T21616] mas_preallocate+0x48d/0x6b0 [ 462.364932][T21616] vma_link+0x8f/0x220 [ 462.364965][T21616] insert_vm_struct+0x15a/0x210 [ 462.364995][T21616] alloc_bprm+0x439/0x680 [ 462.365034][T21616] do_execveat_common+0x12b/0x7e0 [ 462.365058][T21616] __x64_sys_execve+0x5c/0x70 [ 462.365087][T21616] x64_sys_call+0x1362/0x2e10 [ 462.365112][T21616] do_syscall_64+0xc9/0x1a0 [ 462.365143][T21616] ? clear_bhb_loop+0x25/0x80 [ 462.365169][T21616] ? clear_bhb_loop+0x25/0x80 [ 462.365195][T21616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.365221][T21616] RIP: 0033:0x7f66c08de169 [ 462.365238][T21616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.365259][T21616] RSP: 002b:00007f66bef47038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 462.365277][T21616] RAX: ffffffffffffffda RBX: 00007f66c0b05fa0 RCX: 00007f66c08de169 [ 462.365292][T21616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 462.365306][T21616] RBP: 00007f66bef47090 R08: 0000000000000000 R09: 0000000000000000 [ 462.365321][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.365334][T21616] R13: 0000000000000000 R14: 00007f66c0b05fa0 R15: 00007fffc28ec008 [ 462.365352][T21616] [ 462.572980][T21619] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 462.572980][T21619] program syz.6.5839 not setting count and/or reply_len properly [ 462.613572][T21623] loop4: detected capacity change from 0 to 512 [ 462.640447][T21620] loop7: detected capacity change from 0 to 2048 [ 462.681578][T21623] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.707963][T21620] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.720190][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5841'. [ 462.768087][T21623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5838: corrupted inode contents [ 462.768174][T21642] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 462.780369][T21623] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.5838: mark_inode_dirty error [ 462.816379][T21623] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.5838: corrupted inode contents [ 462.851425][T21650] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 462.851425][T21650] program syz.2.5848 not setting count and/or reply_len properly [ 462.871762][T21654] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 462.871762][T21654] program syz.7.5846 not setting count and/or reply_len properly [ 462.899251][T21655] loop5: detected capacity change from 0 to 512 [ 462.906179][T21623] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.5838: mark_inode_dirty error [ 462.941060][T21655] ext4 filesystem being mounted at /550/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.962507][T21669] loop7: detected capacity change from 0 to 512 [ 463.057767][T21669] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 463.067901][T21669] EXT4-fs (loop7): orphan cleanup on readonly fs [ 463.074776][T21669] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5853: invalid indirect mapped block 256 (level 2) [ 463.092477][T21669] EXT4-fs (loop7): 2 truncates cleaned up [ 463.112373][T21680] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 463.197687][T21684] wireguard0: entered promiscuous mode [ 463.294530][T21684] wireguard0: entered allmulticast mode [ 463.493350][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 463.493387][ T29] audit: type=1326 audit(1745318803.499:27626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.524318][T21698] loop7: detected capacity change from 0 to 2048 [ 463.535099][ T29] audit: type=1326 audit(1745318803.499:27627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.558776][ T29] audit: type=1326 audit(1745318803.499:27628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.582569][ T29] audit: type=1326 audit(1745318803.499:27629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.606667][ T29] audit: type=1326 audit(1745318803.509:27630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.606696][ T29] audit: type=1326 audit(1745318803.509:27631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.606774][ T29] audit: type=1326 audit(1745318803.509:27632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.606805][ T29] audit: type=1326 audit(1745318803.509:27633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.606974][ T29] audit: type=1326 audit(1745318803.509:27634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.607035][ T29] audit: type=1326 audit(1745318803.509:27635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21696 comm="syz.2.5864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1238cfe169 code=0x7ffc0000 [ 463.615286][T21698] loop7: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 463.755348][T21704] ================================================================== [ 463.755391][T21704] BUG: KCSAN: data-race in choose_mountpoint_rcu / umount_tree [ 463.755448][T21704] [ 463.755455][T21704] write to 0xffff888108512d98 of 8 bytes by task 21705 on cpu 1: [ 463.755490][T21704] umount_tree+0x6f0/0xb10 [ 463.755527][T21704] path_umount+0x9c1/0xa40 [ 463.755556][T21704] __x64_sys_umount+0xb7/0xe0 [ 463.755591][T21704] x64_sys_call+0x2883/0x2e10 [ 463.755612][T21704] do_syscall_64+0xc9/0x1a0 [ 463.755640][T21704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.755663][T21704] [ 463.755669][T21704] read to 0xffff888108512d98 of 8 bytes by task 21704 on cpu 0: [ 463.755687][T21704] choose_mountpoint_rcu+0x3d/0x130 [ 463.755715][T21704] handle_dots+0x559/0x790 [ 463.755741][T21704] link_path_walk+0x5f6/0x840 [ 463.755762][T21704] path_lookupat+0x6c/0x2a0 [ 463.755788][T21704] filename_lookup+0x14b/0x340 [ 463.755816][T21704] filename_setxattr+0x59/0x2b0 [ 463.755837][T21704] path_setxattrat+0x28a/0x320 [ 463.755864][T21704] __x64_sys_setxattr+0x6e/0x90 [ 463.755885][T21704] x64_sys_call+0x28e7/0x2e10 [ 463.755908][T21704] do_syscall_64+0xc9/0x1a0 [ 463.755936][T21704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.755960][T21704] [ 463.755965][T21704] value changed: 0xffff888116147cc0 -> 0xffff8881065c23c0 [ 463.755979][T21704] [ 463.755984][T21704] Reported by Kernel Concurrency Sanitizer on: [ 463.755997][T21704] CPU: 0 UID: 0 PID: 21704 Comm: syz.6.5865 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(voluntary) [ 463.756034][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.756050][T21704] ================================================================== [ 463.853631][T21698] loop7: p4 start 1654784 is beyond EOD, truncated [ 463.986256][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5867'. [ 463.986278][T21711] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5867'.