last executing test programs: 11m58.267535337s ago: executing program 32 (id=6432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000008c0)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a00)="e1e64a18186ceb629278d0f5cbda492aacb7f48986910c207269f7698fd533e0275d43aa1ec7e81e3703064c9bf93a55bf873bff025815a9a8a52b5779bc7a2bc470f508449af2d7327cade4e0633b1f44a92dad34f8235eb341b24222eb66b1f8350f0a2bb3b9c473e5df99586a0fb938243f8f43a598f3ac8244af2b61777afccfc329ea97a06ac9d6eec8", 0x8c}, {&(0x7f00000015c0)="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", 0xff0}, {&(0x7f00000025c0)="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", 0xa41}], 0x3, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x18}}], 0x2, 0x4000000) 11m43.877961759s ago: executing program 33 (id=6773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 7m45.787952574s ago: executing program 34 (id=11054): syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) chdir(0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7m45.381067727s ago: executing program 35 (id=11057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$sock(r1, &(0x7f0000000200)={&(0x7f00000005c0)=@can={0x1d, r2, 0xc7}, 0x80, &(0x7f0000002700)=[{&(0x7f0000001500)="8482893aa9ef70d0270970ac11eef4dddc7ac7206d8bbcd602db863fd5eeef7df51074f29a8fdcbb314546763b0c0f002e5f780f5ec42bb137c114b08fc7c29914217133ff0e21b1d244f6ffc57b5912268d640d6a8adfe98045a533ec6b864496917e16dee1136758110329ceb707a4172f1f06582c3b430b8380c0b63c40ed9e8c99a365e6c26bad63485d03423256571441623807d89c693877027423d2dc95520ee180a9b9ce655f547e3e2a57d2add262cade361d221574eac30e4c8ca3437f4d53383cf7ac1147119ed2ba4d5f7397fa8c66caa00fb7c132ef6bc42cf3a9e5742e428ba79e34ecdda72cb406afc3d78096f7c5467abc715f5046ab0587947017fbf37fb7d1efa5aa914291472def86ff5de54c538ba7c4816afc0b6f939ea5f04d39787266cfde96f400fb5e07a792eb281b3c7761fdeb41418de0f5a38e79b15d2cae512615d5c4ba4c6cff33236afe96280f5968d87219aa101c4f2bea593c1c938782103c509578ae000b15c88e832b636a517563db90aee95e74d7413fad1d651c1f990193be4ff380e4511d45dd01e91fd101249e3a7a313312260d6e3c23c6d928485c269e5f9fe7307872ab6b5793a3a1d6d6f4bef7090b558ea1c20a805920409c6605d5e76a36a9c63fe93f406c924d39f00537944b1511461677a688b58c9a06155e19aff4643d7c58f31c779f89368c4be3eec3bba790be43525bbd9ffbb2089349adee3adf48192940ee3e491c5d1d3c209551370d4579de249876fe662f49b6c28f9794cef5aa3f36f66ab950a509cd45ebcf60d7096c24f9aa8a1fc4d792e83cdd5b819c6320a5c0cf22ad11d2558f96de84e4230284b6ada4a78599df8071491f2b9904f92ca6b17aa9a7505e85ecc2906b669e7e01253c801ebb3f2683baaa52ccbbf85ea237b94e0ce290ce565a16444e17b51af8738f78dc100bd0a4451a9dfff68b4539b3717ca7ada5c3a88d015a8bca262bc709f1c24a39a70bfae7d91e8dae11b06cbec0c962ac94634b20e7c58c24ab244853d88da4262efefb9d38623bd77e6b695b58d9de908e28033e8c608dd3c641d2cf67d59d2159579ceba0612ded13793e90a51c3af4bc1dc87d7e0dbc3ac6838b987694277a40c86f644dbf680b846db910d9b0ff419f75e70be8b1fa5cc0c19e8fb36439f561efd9f6abed18846686cd43a490a14f653f9303478d24078723f891bdbbc2a164e3c2fb392721162b50f10ab50a8af4d9248744f2b31c36", 0x37d}, {0x0}], 0x2}, 0x4008040) 7m37.683546602s ago: executing program 36 (id=11148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) setxattr$security_evm(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x3, 0x3, 0x9, 0x4}, 0x9, 0x1) 7m36.394392611s ago: executing program 37 (id=11152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 7m21.896078684s ago: executing program 38 (id=11351): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}}}}}}, 0x0) 7m20.758524732s ago: executing program 39 (id=11370): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000000)) 7m16.776271261s ago: executing program 40 (id=11403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6, 0x4, "e0e5"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) 7m11.052830091s ago: executing program 41 (id=11472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x14, r2, 0x1}, 0x14}}, 0x0) 7m1.255783891s ago: executing program 42 (id=11574): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r0, r2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) 6m55.432099522s ago: executing program 43 (id=11623): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1a0000000004000008000000fb0000", @ANYRES32, @ANYBLOB="00000000d6b86e78950c78655bb2", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="03000000030000000400"/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0xba6, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 6m50.807101255s ago: executing program 44 (id=11674): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08060001080006040002aaaaaaaaaa32ac1414acffaaaaaaaaaaac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 6m44.715467569s ago: executing program 45 (id=11726): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x41045508, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001dc00)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 6m40.642738928s ago: executing program 46 (id=11767): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b90703600000f007049e0ff086dd", 0x0, 0x104, 0xa000000, 0x29, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999", 0x0}, 0x34) 6m33.697680107s ago: executing program 47 (id=11830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x101}, 0xe) socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m27.083078784s ago: executing program 48 (id=11906): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x400105a8, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r8}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r9, 0x0) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r11 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa0002, 0x7c) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r11, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000100)=0x4) r12 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r12, &(0x7f0000000040), 0x10) listen(r12, 0x0) 6m25.411991926s ago: executing program 49 (id=11932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40) 6m23.47622274s ago: executing program 50 (id=11950): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 6m21.390198675s ago: executing program 51 (id=11967): close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x2) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "3cae78117e75c2375b0290fa828d974126c1a70b22f77a37a37b7154cc0c406c", "d27bd50a2942aa283aeb9677e3ef551e", {"e72158200581e0854e6657fe05a72fce", "98d47eff9de7a9dad98d6fde327bb9c3"}}}}}}}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) 6m13.55071195s ago: executing program 52 (id=12038): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="3673317415", 0x5}, {0x0}], 0x2) 6m12.30430166s ago: executing program 3 (id=12055): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 6m12.304013969s ago: executing program 53 (id=12055): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8) 6m10.627447292s ago: executing program 54 (id=12067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3f, 0x10, &(0x7f0000000000), 0x2ff}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000040), &(0x7f00000004c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b90703600000f007049e0ff086dd", 0x0, 0x104, 0xa000000, 0x29, 0x0, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999", 0x0}, 0x34) 6m5.912366025s ago: executing program 55 (id=12098): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3ff, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 5m58.940345495s ago: executing program 56 (id=12159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000030000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0xf5, 0x30e, &(0x7f00000003c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x88c02, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x71b5, &(0x7f0000000040)={0x0, 0x9272, 0xc000, 0xfffffffe, 0xad}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r4, 0xf00, 0x2, 0x17, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r5, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) 5m49.055074155s ago: executing program 57 (id=12323): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x4}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m39.531286953s ago: executing program 58 (id=12412): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x8041, 0x20, 0x1, 0x5}, [{0x3, 0x4, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r2, 0x0, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='1', 0x1}], 0x1}, 0x1) recvmsg(r2, 0x0, 0x22140) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000002c0)=""/199, 0xc7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x29, 0x0, 0x0) 5m35.354663812s ago: executing program 4 (id=12447): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5m32.242584775s ago: executing program 4 (id=12459): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x20, 0x15, 0x12, 0x1, 0x0, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001b00)=@newtfilter={0x154, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_ACT={0x11c, 0x2, [@m_sample={0xd8, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x8, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1000, 0x1000000c, 0xc08, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 5m32.191180995s ago: executing program 4 (id=12460): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4042, 0x55) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 5m31.920357447s ago: executing program 4 (id=12462): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 5m31.44587301s ago: executing program 3 (id=12414): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x10}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pipe(&(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf255e00000008000300", @ANYRES32=r3, @ANYBLOB="050019010e000005001801070000000800a1000002000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, 0x0, 0x0}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010304000000fcdbdf252400000018000180140002007465616d5f739b6176655f3000000000"], 0x2c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 5m31.347634001s ago: executing program 4 (id=12464): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000011c0)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, 0x0}, 0x1) 5m30.920986624s ago: executing program 3 (id=12469): syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x10007d89, 0x10100, 0x3, 0x85}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) syz_io_uring_submit(r0, r1, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000340)={{0x84, @loopback, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x2, 0x0, 0x12d61, 0xe}}, 0x44) 5m29.844314532s ago: executing program 4 (id=12471): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001800)=0x96a) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) open(&(0x7f0000000600)='./file1\x00', 0x80101, 0x181) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0xa}, 0x94) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) 5m29.715271223s ago: executing program 59 (id=12471): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001800)=0x96a) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) open(&(0x7f0000000600)='./file1\x00', 0x80101, 0x181) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0xa}, 0x94) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414"], 0x1c) 5m29.407220755s ago: executing program 3 (id=12474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 5m29.344822785s ago: executing program 3 (id=12476): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(0x0, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000000ec0)='afs_send_data\x00', r3, 0x0, 0x20000000000}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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") mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r5, 0x3) close_range(r4, 0xffffffffffffffff, 0x0) 5m25.251809504s ago: executing program 3 (id=12505): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 5m25.233164735s ago: executing program 60 (id=12505): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 5m23.01341526s ago: executing program 5 (id=12522): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x20, 0x15, 0x12, 0x1, 0x0, 0x6, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001b00)=@newtfilter={0x154, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0xa, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_ACT={0x11c, 0x2, [@m_sample={0xd8, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x8, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x1000, 0x1000000c, 0xc08, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 5m22.981555821s ago: executing program 5 (id=12524): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) 5m22.922452281s ago: executing program 5 (id=12527): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="270302005902140006000086ddffff1144ee163cd4b8bf6bc128f502c866", 0x1e}], 0x1}, 0x40408c4) 5m22.695498493s ago: executing program 5 (id=12530): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x8041, 0x20, 0x1, 0x5}, [{0x3, 0x4, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r2, 0x0, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='1', 0x1}], 0x1}, 0x1) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22140) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000002c0)=""/199, 0xc7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x29, 0x0, 0x0) 5m22.443304784s ago: executing program 5 (id=12533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xb870cb50772e38c8}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0}}], 0x1, 0x0) 5m22.107462457s ago: executing program 5 (id=12537): mkdirat(0xffffffffffffff9c, 0x0, 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 5m22.106486167s ago: executing program 61 (id=12537): mkdirat(0xffffffffffffff9c, 0x0, 0x108) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 3m53.483395698s ago: executing program 7 (id=13230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) 3m53.418772678s ago: executing program 7 (id=13233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000700000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) tgkill(0x0, 0x0, 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='fsi_master_acf_crc_rsp_error\x00', r5, 0x0, 0x1000000000000}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) brk(0x400000ffc000) 3m51.883874189s ago: executing program 7 (id=13240): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7ffff000) (fail_nth: 6) 3m50.591421408s ago: executing program 7 (id=13247): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x8041, 0x20, 0x1, 0x5}, [{0x3, 0x4, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(r1, 0x0, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='1', 0x1}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22140) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000002c0)=""/199, 0xc7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x29, 0x0, 0x0) 3m50.004996983s ago: executing program 7 (id=13252): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="00020201"], 0x18) (fail_nth: 1) 3m48.703193592s ago: executing program 7 (id=13257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) 3m48.675273472s ago: executing program 62 (id=13257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r1}, 0x38) 2m26.437795297s ago: executing program 8 (id=14137): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2m26.379402827s ago: executing program 8 (id=14140): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x8f0, &(0x7f0000002400)=0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$qrtrtun(r3, &(0x7f0000000340)="8f52eb24cc8080", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) io_destroy(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1a4, r10, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840) 2m26.04042213s ago: executing program 8 (id=14144): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b5e, 0x0, @perf_bp={0x0, 0xc}, 0x9092, 0x0, 0x43a1bd73, 0x6, 0x9, 0x6, 0x49, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x24040890) 2m25.773493852s ago: executing program 8 (id=14145): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000008000000000000000800a0018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000080085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x140b8, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m25.576324243s ago: executing program 8 (id=14148): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff92, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") 2m25.529051964s ago: executing program 8 (id=14149): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="0400040002000078bb0dd1000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usbip_server_init(0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0xf4240) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='selinux_audited\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0xc31, &(0x7f0000000300)={0x0, 0x8c40, 0x10100, 0x0, 0x1cf}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe3d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r12}, 0x10) quotactl_fd$Q_SETQUOTA(r14, 0xffffffff80000800, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r15 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0) fcntl$dupfd(r15, 0x0, 0xffffffffffffffff) 2m10.355257112s ago: executing program 63 (id=14149): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="0400040002000078bb0dd1000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000040), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usbip_server_init(0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0xf4240) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='selinux_audited\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) timer_create(0x3, 0x0, &(0x7f0000044000)) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r7 = syz_io_uring_setup(0xc31, &(0x7f0000000300)={0x0, 0x8c40, 0x10100, 0x0, 0x1cf}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r6}) io_uring_enter(r7, 0x44fd, 0x3, 0x1, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe3d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r10}, 0x18) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r12}, 0x10) quotactl_fd$Q_SETQUOTA(r14, 0xffffffff80000800, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xca, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r15 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0) fcntl$dupfd(r15, 0x0, 0xffffffffffffffff) 3.670560474s ago: executing program 0 (id=15804): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x101}, 0xe) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r1) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) sendfile(r4, r4, &(0x7f0000001000), 0xffff) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@unspec, 0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x1c}}, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000040)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r9, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000084000000006bf07b08", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 3.555950565s ago: executing program 2 (id=15805): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4d00fd1ba9ec72bd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r3, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c", 0x15) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffffffffffffffd) 2.85534508s ago: executing program 2 (id=15810): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0xc0001480, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000003800010827bd7000ffdbdf2503000000977d619d876c2093166a6d9936facd815b8ed5de909b53d68cac6dbee30871d19dd78e22f189bf1e5465507ea1e54397c9bc4069c50e7323bccd614d80339652f3ada306568062926892b17ffa25dbd50cfbf7a3d19e9a7e12bb584ec3f94feefd929e994a079fa1d6c5c30a"], 0x18}, 0x1, 0x0, 0x0, 0x24004050}, 0x4008040) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x28}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000580)=[{0x8000, 0xfb, 0x8}, {0x8000, 0xd, 0x80}, {0x5, 0x6b, 0x5, 0x6}, {0x8, 0x7, 0xc9, 0x19a}, {0x5, 0x5, 0x6, 0x1}, {0x4, 0x3, 0x4}]}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x5, 0xc, 0x7f, 0x0, 0x0, 0x20010, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x4, @perf_config_ext={0x40, 0x2}, 0x2002, 0xfffffffffffffffd, 0x9, 0x3, 0x80, 0x5, 0x1, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001980)=""/179, 0xb3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000d2adb4ca366af1e3999b5925e8254cf405fe9029afc134385c41a2425f374f1ab2689d5077a0bce8fc978d5f89773aa9c0540", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd409d6e4edef3d93452a92954b43370e970161ed7875e585d924ed43df459cab16", 0xd8}], 0x1}, 0x0) 2.493518652s ago: executing program 2 (id=15814): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.484818112s ago: executing program 2 (id=15815): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xfffffffffffffffd, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000df", @ANYRES16=r2, @ANYBLOB="02002abd700001dcdf25380000000500040001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) rmdir(&(0x7f0000000300)='./control\x00') setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) r5 = syz_clone(0x21100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000231000/0x2000)=nil, 0x2000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x2026, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfc, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x100212, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="4c014889db276ed7acacf5c55886c4ddd770a7344f564015ae97e1a0efed2484eb765a90b84a3781ffbaf42d49a8cd20949a2dc8d8d5614803dcf5f7426e72d40baf06e7cf30338f497f1d7fd9cd92b2d12a9c5a77ec821585e61b6f08515801052a960ba07ecb281a077a62ce2980b5a54c32c8"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 2.358755333s ago: executing program 9 (id=15817): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 2.306698664s ago: executing program 9 (id=15818): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdebd1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.996100616s ago: executing program 2 (id=15820): io_setup(0x9, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) io_destroy(r0) 1.949910826s ago: executing program 0 (id=15821): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x9, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x1790) 1.877436437s ago: executing program 6 (id=15823): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000008b00000005000000090000000100"], 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f00000002c0)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 1.745298628s ago: executing program 2 (id=15824): mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) creat(0x0, 0x182) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) io_setup(0x41c, 0x0) 999.619583ms ago: executing program 6 (id=15826): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b10000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) syslog(0x3, 0xffffffffffffffff, 0x0) 988.623233ms ago: executing program 0 (id=15827): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)={[&(0x7f0000000140)='*[!%%@#\'\x00', &(0x7f0000000180)='*.\x00', &(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000200)=' :%@,%\x00', &(0x7f0000000240)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000280)='\xaa\xaa\xaa\xaa\xaa']}, &(0x7f0000000540)={[&(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000400)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', &(0x7f0000000440)='+&\x00', &(0x7f0000000480)='\xff\xff\xff\xff\xff\xff', &(0x7f00000004c0)='{/[-#R-!\x00', &(0x7f0000000500)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00']}, 0x1000) recvmmsg(r0, &(0x7f0000006080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/23, 0x17}, 0x7ff}], 0x1, 0x40000100, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x2a, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r4) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000500aaaaaaaaaaaaaaaaaaaaaa20aaaaaaaaaabbffffffffffffaac0aaaaaabb0a438314c6a7f4ba670fc10e63179a511d3ff6d47d02000000249757911babc0a108dd23c5a89468ad7061294d6d1d40ec54c77bb7e4d4a840289bfe2dbd835e261aa84f48f753062a1f761c53d5cdbd3d046ce85941bbd2c2a8d77c2850885caa8c0d24b129df10583e055f105902980d0cda87f6e5cb65a61265f703491c7b634b3c5a965443da2b904f48d803ecc6b63c7f770fa9e290b20aa362ad9b3265223fb0e9fbdfad4bb0de669d1ab9b4a6c71ce9552fe5b0481a5785217e0c12caf16550a4ad3939b29b"]) 912.384494ms ago: executing program 1 (id=15828): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 810.527274ms ago: executing program 6 (id=15829): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0xf3, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000580)="87ae33cc2448ad377bfae093d8c0442cf3ea013e472b457784e75b941deccaaf3d0ad3fdb9f8d54ce9928f0a1037e846d6737b7f9655f71fecadfa680bccb58a2e1a3093d0d2d8809c902cacafea31f5284dec118b3fd0f91b7cb28f3c0ce1cafed0cdcada2d90b0d41ac3cc1bf725d176e7d059604c3d6195c7871e0e79e295a3008f89119b3870b25c7d55e591d4a83c39e2da777a99618747377f37b0", &(0x7f0000001780)=""/4096}, 0x20) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000007c0)={[{@nolazytime}, {@commit={'commit', 0x3d, 0x91}}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1a08700, &(0x7f0000000700)={[{@nodioread_nolock}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@usrquota}, {@journal_dev={'journal_dev', 0x3d, 0x1}}]}, 0x0, 0x470, &(0x7f0000001040)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIFJR0EM9xiQtodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJvtJjHNphOzvx9s9n1n3t15nszXu++7G0DHGsj+JBE7IuL3iOirVxc3GKg/Xb96fvzG1fPjSczPv/FXkre7dvX8eNm0fN32ojKYRqQfJ8VGFps5e+7kWK02eaaoD8+eemd45uy5p947NXZi8sTk6dEjRw4fGnn2mdGn25Jnlte1fR9O79/78luXXh0/duntn7/N4t1RrG/Mo10GssT/ns81r3u83Rur2M6GctJdYSCsSldEZLurJz//+6Irbu68vnjpo0qDA9ZVdm/asvTquXlgE0ui6giAapQ3+uzzb/m4Q12PDeHK8/UPQFne14tHfU13pEWbnqbPt+00EBHH5v75MnvEOo1DAAA0+nT8i6O9EfHBjW9eyfoefQtr0rgvf/4j/7urmEPpj4i7I2J3RNwTEXsi4t6IvO39EfHAGuO5tf+TXl7jWy4r6/89V8xtLe7/lb2/6O8qajvz/HuS41O1yYPF/2QwerZk9ZFltvH9i799ttS6xv5f9si2X/YFizgudzcN0E2MzY7lndI2uHIxYl93q/yThZmAJCL2RsS+1b31rrIw9cTX+5dqtHL+rVxcXSTLmP8qS28uy38umvIvJY3zk1O3zE8Ob43a5MHh8qi41S+/fvL6Utu/vfzb58pk/blh/zc36U8a52tn2rv92zz+097kzXyeubdY9v7Y7OyZkYje5GheX7R89OZry3rZPjv+Bw+0Pv93F6/J8n8wIrKD+KGIeDgiHilifzQiHouIA8vk+NMLK+cfaUX7/2LERMvr38Lx37T/V1/oOvnjd0tt/7/t/8N5abBYkl//VtAqnOx61hzgWv53AAAA8H+R5t+BT9KhhXKaDg3Vv8O/J+5Ka9Mzs08en3739ET9u/L90ZOWI119xXhobao2OZLMFe9YHx8dLcaKy/HSQ8W48edd2/L60Ph0baLi3KHTbV/i/M/82VV1dMA629Zy6WjvHQ8EqEDz7zXTxdULr4WLAWxWfq8NnWuF87+pO6AzAJuJ+z90rlbn/4WmurkA2Jzc/6FzOf+hQ6U/VB0BUCH3f+hIa/ld/zoWtm6MMKopbNSdkhciykK6IeJRWKdC1VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vg3AAD//5wI5wQ=") r6 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r6, 0x7000000) r7 = dup(r6) preadv2(r7, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x24000643) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7, 0x8001, 0x6, 0x500, 0x4a040000, 0x4, 0x0, 0x2, 0x401, 0xffffffff, 0x4, 0xfffffff9, 0x1, 0x1ff, 0x7800, 0x0, 0x2, 0x8, 0x6, 0x3, 0x8, 0x5, 0xa, 0x9, 0x7, 0x0, 0x7, 0xd, 0x2, 0x7ff, 0x7, 0x6, 0xff, 0x9, 0x0, 0x27f4, 0x7, 0x7f, 0x80000, 0xa5d7, 0x8, 0x5, 0x6, 0x3a, 0xb, 0x6, 0x10, 0x3, 0x2, 0xfff, 0x8, 0xe86, 0x9, 0x1ff, 0x3, 0x6, 0x84d, 0x3, 0x8, 0x0, 0x10001, 0xfffffffa, 0x80000001, 0x3, 0x4, 0x0, 0x5, 0x9, 0x6, 0xfffffffd, 0x8, 0xfffffff8, 0xd2f, 0x4, 0x7, 0x0, 0x7, 0x0, 0x9, 0x81, 0x10, 0x2, 0x5, 0x7fff, 0x5, 0x7, 0x8, 0x400, 0x5, 0x1ff, 0x17, 0x4, 0x5179, 0x7e186316, 0x8, 0x10, 0x0, 0x200, 0x3, 0x8, 0xfffffffd, 0x10, 0x1, 0x7, 0x9, 0x8, 0x101, 0x0, 0x9, 0x8, 0x20, 0x1dab, 0x9, 0x10000, 0x215f7176, 0x5, 0x9b9, 0x7, 0x2, 0x2, 0xfdb, 0x2, 0x9, 0x1, 0x0, 0xff, 0x9, 0x6, 0x0, 0x8, 0x6, 0xfffffeff, 0x7, 0x7, 0xc27d, 0x0, 0x200, 0x8, 0x3, 0x2, 0xc, 0x2, 0x8f6, 0x6, 0x6, 0x0, 0x8, 0xfffff0c3, 0x17, 0x8, 0x6, 0x1, 0xffffffff, 0xffffffff, 0x4, 0xffff0001, 0x7f, 0x1, 0x0, 0x4d75, 0x1, 0xd15, 0x5, 0x8, 0x1, 0xe00, 0x5, 0x6, 0x7, 0x5, 0x1, 0x0, 0xffff, 0x6, 0x4, 0x6d85, 0x7f, 0x412, 0x80000001, 0x6, 0x4, 0x7, 0x7ff, 0x4, 0x1f, 0x2, 0x2, 0x8, 0x0, 0x4, 0x9, 0x1, 0x9, 0x0, 0x8, 0xa4fb, 0x1ff, 0x8fe80, 0x220f, 0x8, 0x6, 0xfffffffb, 0x8b, 0x2, 0x2, 0x7ff, 0x9, 0x4, 0xfffff2aa, 0x8, 0xfffffff7, 0x64a, 0x8, 0x8, 0xffffffff, 0x40, 0x29, 0xe6c, 0x3, 0x9, 0xc2, 0x3d0, 0x80, 0x9f, 0x7, 0x9, 0x1, 0x7fff, 0x40, 0x3, 0x7ff, 0x1ff, 0x7, 0x7, 0x7, 0x1, 0x1, 0x100, 0x80000000, 0x7ff, 0x9d76, 0x7f, 0x1, 0x81, 0x6, 0xffffffff, 0x6, 0x0, 0x2c, 0x4, 0xffffff5b, 0xcd, 0x400, 0xa, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0xfffffffd, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 807.815704ms ago: executing program 1 (id=15830): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000000080)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) read(r4, 0x0, 0x20) close(r4) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_getoverrun(r3) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x20, 0x0, @thr={&(0x7f0000000140)="6ac1b1fad60a4ed0b021aaeaecff141fcb2369471be00e7667152a4ee64cedc7fb5fb9d508", &(0x7f0000000180)="bbf5d3bd9d9e3b9d130667c86cd0282689fd295746c56d8cc96688"}}, &(0x7f0000000200)) 672.046375ms ago: executing program 9 (id=15831): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000000080)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) read(r4, 0x0, 0x20) close(r4) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_getoverrun(r3) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x20, 0x0, @thr={&(0x7f0000000140)="6ac1b1fad60a4ed0b021aaeaecff141fcb2369471be00e7667152a4ee64cedc7fb5fb9d508", &(0x7f0000000180)="bbf5d3bd9d9e3b9d130667c86cd0282689fd295746c56d8cc96688"}}, &(0x7f0000000200)) ptrace$ARCH_SET_GS(0x1e, r1, &(0x7f0000000000), 0x1001) 653.058355ms ago: executing program 1 (id=15832): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = msgget$private(0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x8d, 0x40) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000003c0)=0xf4) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r2, &(0x7f0000000200)={0x0, ""/1}, 0x9, 0x1, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0xb1, 0x1, 0x8, 0x7f, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x800005, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d9, &(0x7f0000000900)="$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") (fail_nth: 4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fadvise64(r4, 0xfcff, 0x20000, 0x3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0xc777ec1f, @rand_addr=' \x01\x00', 0x4}], 0x2c) 296.237358ms ago: executing program 6 (id=15833): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002d0001002dbd7000ffdbdf2508000d00", @ANYRES32, @ANYBLOB="20001a801c00db80189fe3a0d0f96995643c535e7f22ed6a733167edf3c3bcefe7bbc06d4a9527f718cce16617cb7396dbaf7e82aa0900000000000000005b378ee6db741a0afa6dfb78770661b4c579b6cdb8f5ef21ba95310a216a631119435bfcc89a0cdb408f3e6a0cb50f2a4a0d03ffa2581a19cbfcb415d33f14b7ab9e5d2a000000008bac193584"], 0x38}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000) 248.051388ms ago: executing program 1 (id=15834): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0xffffff1f, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x107, 0x45052}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x4008800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 247.370808ms ago: executing program 6 (id=15835): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="50020000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x4c000) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r8 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'wlan1\x00', 0x100}) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) accept$unix(r6, &(0x7f0000000180)=@abs, &(0x7f00000000c0)=0x6e) connect$unix(r5, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 216.771229ms ago: executing program 1 (id=15836): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 166.449869ms ago: executing program 1 (id=15837): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000008b00000005000000090000000100"], 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000c0000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f00000002c0)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 159.769349ms ago: executing program 9 (id=15838): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 120.049179ms ago: executing program 9 (id=15839): delete_module(&(0x7f0000000000)='&\x00', 0xa00) delete_module(&(0x7f0000000040)='#+\x00', 0x200) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x29, 0xba, 0x8, 0x4, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x700, 0x0, 0x9, 0x838}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@remote, 0x4e20, 0x3, 0x4e23, 0xff, 0xa, 0x0, 0x0, 0x21, r3, r4}, {0x7, 0x5, 0x7fffffff, 0x1, 0xc22, 0x0, 0x2d8000000000000, 0x7f}, {0x8, 0x2f, 0x7, 0x9}, 0x1, 0x6e6bbc, 0x1, 0x1, 0x2, 0x1}, {{@in=@rand_addr=0xa, 0x4d2, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x0, 0x3, 0x1, 0x5, 0x7, 0xd084, 0x190}}, 0xe8) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x2, 0x9, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7880, 0x40, 0x8, 0x7}}) socket$netlink(0x10, 0x3, 0x2) r6 = syz_open_dev$loop(&(0x7f0000000380), 0x8, 0x181040) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x2) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000400)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000480), 0x2, 0x4000) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000004c0)={r6, 0xfffff117, {0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x14, 0x4, "b81c3a2cfa49af07357844ab3873572bd6c53a19d8c06bc6adde21963763d2ef320ea5630b3d9d7be7f416eba74c86f5d1eb01cbd8f2c1597ecce6da06db0d90", "46d6d0abe0943f686eba3dc4e471c9b260239785bb8ac52f00be8bc5ed4f93ee0b212a5f2b8a8e383a01418e6394daa0fbbaa3f339d49d49ffbe030aec1ca903", "026a47da1c36292ed42049ea30b02caa0ed59fcc0ba34b57834afacf809159c7", [0x6, 0x7]}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000600)="151f0694968a8b6f709d5c81e7fdb38487f341529c38ced84f6a8a01eedb1b7c0b6fba73e084e9d1f212da9d9260fa15fd6aba1dcea6c9686a42ec77b63e48b88f39232f09914112b3846a2bd90416a340b2549ece2e37dc5b4158a09c71e220acfb12e5cb98f08663d5422b45dea1e577e037fd8b528d4716b5bcd1c032d738fe7dddaa1a7bdd5f8f2e6b", 0x8b, 0x4000, &(0x7f00000006c0)={0xa, 0x4e22, 0x10001, @mcast2, 0x4}, 0x1c) ioctl$BLKPG(r7, 0x1269, &(0x7f00000007c0)={0x0, 0x0, 0x98, &(0x7f0000000700)={0x8, 0x6, 0x7}}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000800)=0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000840)) syz_io_uring_setup(0x4c2d, &(0x7f0000000900)={0x0, 0x4f53, 0x4000, 0x3, 0x38b, 0x0, r8}, &(0x7f0000000980), &(0x7f00000009c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000b40)={0x5, &(0x7f0000000b00)=[{0x10, 0xd, 0xec, 0x401}, {0x8, 0x3, 0x0, 0x1d}, {0x5, 0xc0, 0xf7, 0x9}, {0xd4, 0x8, 0x5, 0x2}, {0xf, 0x9, 0x5, 0x3}]}) 93.367849ms ago: executing program 0 (id=15840): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) 51.60915ms ago: executing program 0 (id=15841): getpid() r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f00000005c0), 0x3, 0x45d, &(0x7f0000001780)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @local}}}, {{@in6=@private0}}}, &(0x7f0000000140)=0xe8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) r8 = syz_io_uring_setup(0x1ae2, &(0x7f0000000340)={0x0, 0xa582, 0x8000, 0x0, 0x2e7}, &(0x7f00000003c0), &(0x7f0000000480)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x9, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r5, r4, r0, r0, r5, r4, r5], 0x8, 0x0, 0x1, {0x0, r10}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0x0) setns(0xffffffffffffffff, 0x24020000) 6.48699ms ago: executing program 9 (id=15842): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x1, @tid=r1}, &(0x7f0000000080)=0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000400)='.\x00', 0xa4000021) read(r4, 0x0, 0x20) close(r4) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_getoverrun(r3) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.47584ms ago: executing program 0 (id=15843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r5, 0x0, 0x1000, 0x1, &(0x7f0000000100)) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000ec0)=r3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c0001"], 0xe8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x5}, 0x18) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000e80)={&(0x7f0000000cc0)="febd3431dc079d521cf7aff93ee5cc7435c7f27b354687efc9898f1e5f7e8aac7cd25eaf7cc43944b959081bd855b48026815aca50bdb9f6494bf1270bc57be36057ffbd99b410bc5170062ffa2fbaf3f403b340aeddd38114334ee21d277ba03f58cfa34f0e2f1947891aa43fc033e0689a7ab74286f4e33b084006", &(0x7f0000001bc0)=""/4096, &(0x7f0000000d40)="2f4b1c758a8d32a1836f29142d453a85209fb749e8cc4c3c64ec722befe0fd81f161536ae8ab1e1793c08927b797142d6be4d1418cef24ab491af6fcb2c7f6d51c0fba42290a144227cb062ebea61faa199b2a68883c61543d88fdf2e1835e9a7baa40f2b44e4721dc1fa79057c56b3ab803b86b08cb7b73f64c19b9b09f089cea7060c075199384862affbd3ac195d224fe876d22d6cf4a4fb6d63579fcb3b188c15ccbddab43795f5c4f6e13b8915dbbea662472f843839f48624f1c5854", &(0x7f0000000e00)="fff676e3f7326f36ff3334da20e8d99ba4f98e934b988a6617be25dfb99f3f348d766b9e98b19553cd0b6f56dab04168f254b12e0061d4dc97dfbfa7091c4524d2b323db362ea8938905990b7e7927d2a0bc461fdaf09551a7ec32bf2b5416cda44b4c4bde4174ca9c4c82b911f803b3", 0x7ff, r2}, 0x38) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x4, 0xd38b, {{0x32, 0x4, 0x3, 0x18, 0xc8, 0x68, 0x0, 0xb6, 0x2f, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0xb, 0xab, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0xe8, [@loopback, @remote, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x14, 0x50, 0x1, 0x4, [{@loopback, 0x8001}, {@broadcast, 0x9cb}]}, @timestamp_prespec={0x44, 0x3c, 0x40, 0x3, 0x8, [{@multicast1, 0x1ff}, {@remote, 0x200}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x44fd}, {@local, 0x10000}, {@private=0xa010102, 0xd}, {@rand_addr=0x64010102, 0xf1}, {@multicast2, 0x9}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x46, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010102, 0x3dbf}, {@local, 0x4}, {@private=0xa010101, 0xfffffffc}, {@broadcast, 0x4}, {@empty, 0x4}, {@local, 0x1f}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r9, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xca, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x27, &(0x7f00000007c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0x64, 0x0, 0x0, 0x80, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63f1a3e2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], &(0x7f0000000580)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xc, '\x00', r10, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r7, 0x0, &(0x7f0000000bc0)=[r2], 0x0, 0x10, 0x5}, 0x94) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@const={0x3, 0x0, 0x0, 0xa, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x30, 0x0, 0xa8907c7cba5b1d39, 0x2e]}}, &(0x7f0000000200)=""/48, 0x4e, 0x30, 0x1, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x11, 0x6, 0x3, 0x4, 0x608, r2, 0x80, '\x00', r10, r12, 0x0, 0x2, 0x2}, 0x50) llistxattr(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x59032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=15844): getpid() r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f00000005c0), 0x3, 0x45d, &(0x7f0000001780)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @local}}}, {{@in6=@private0}}}, &(0x7f0000000140)=0xe8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) r8 = syz_io_uring_setup(0x1ae2, &(0x7f0000000340)={0x0, 0xa582, 0x8000, 0x0, 0x2e7}, &(0x7f00000003c0), &(0x7f0000000480)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x9, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r5, r4, r0, r0, r5, r4, r5], 0x8, 0x0, 0x1, {0x0, r10}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setuid(0x0) setns(0xffffffffffffffff, 0x24020000) kernel console output (not intermixed with test programs): ] loop6: detected capacity change from 0 to 4096 [ 1080.229187][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.229187][T15701] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1080.229235][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.229235][T15701] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1080.457556][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.457556][T15701] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1080.471104][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.471104][T15701] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1080.484657][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.484657][T15701] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1080.498206][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.498206][T15701] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1080.527376][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.527376][T15701] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1080.541022][T15701] syz.2.15269: attempt to access beyond end of device [ 1080.541022][T15701] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1080.555542][T15720] loop6: detected capacity change from 0 to 512 [ 1080.577705][T15720] EXT4-fs: Ignoring removed bh option [ 1080.590090][T15722] loop9: detected capacity change from 0 to 512 [ 1080.603500][T15726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15278'. [ 1080.612991][T15726] IPVS: Error connecting to the multicast addr [ 1080.639366][T15722] EXT4-fs: Ignoring removed bh option [ 1080.645655][T15722] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1080.654847][T15722] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1080.669482][T15729] loop2: detected capacity change from 0 to 512 [ 1080.676193][T15729] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1080.698287][T15722] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1080.707683][T15729] EXT4-fs (loop2): 1 truncate cleaned up [ 1080.713830][T15729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.726152][T15722] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1080.734918][T15722] System zones: 0-2, 18-18, 34-35 [ 1080.740712][T15722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.865780][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.916532][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.949090][ T29] kauditd_printk_skb: 541 callbacks suppressed [ 1080.949123][ T29] audit: type=1326 audit(2000000205.730:119301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1080.979147][ T29] audit: type=1326 audit(2000000205.730:119302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.002908][ T29] audit: type=1326 audit(2000000205.730:119303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.026659][ T29] audit: type=1326 audit(2000000205.730:119304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.050427][ T29] audit: type=1326 audit(2000000205.730:119305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.074199][ T29] audit: type=1326 audit(2000000205.730:119306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.097930][ T29] audit: type=1326 audit(2000000205.730:119307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.121735][ T29] audit: type=1326 audit(2000000205.730:119308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.145487][ T29] audit: type=1326 audit(2000000205.730:119309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.169341][ T29] audit: type=1326 audit(2000000205.730:119310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15742 comm="syz.6.15283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1081.277235][T15753] SELinux: failed to load policy [ 1081.302331][T15760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15288'. [ 1081.310461][T15758] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15287'. [ 1081.324707][T15760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15760 comm=syz.0.15288 [ 1081.349952][T15762] tipc: Started in network mode [ 1081.354889][T15762] tipc: Node identity ac14140f, cluster identity 4711 [ 1081.361930][T15762] tipc: New replicast peer: 255.255.255.255 [ 1081.368018][T15762] tipc: Enabled bearer , priority 10 [ 1081.437637][T15775] loop9: detected capacity change from 0 to 512 [ 1081.455645][T15775] EXT4-fs: Ignoring removed bh option [ 1081.461973][T15775] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1081.471113][T15775] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1081.488671][T15775] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1081.505544][T15775] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1081.516065][T15775] System zones: 0-2, 18-18, 34-35 [ 1081.524451][T15775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.642574][T15758] loop2: detected capacity change from 0 to 164 [ 1081.652498][T15758] iso9660: Unknown parameter 'ÿÿÿÿ ' [ 1081.658578][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.742945][T15790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15296'. [ 1081.877805][T15797] SELinux: failed to load policy [ 1081.894278][T15799] loop6: detected capacity change from 0 to 512 [ 1081.999155][T15809] netlink: 332 bytes leftover after parsing attributes in process `syz.9.15304'. [ 1082.008643][T15809] netlink: 'syz.9.15304': attribute type 9 has an invalid length. [ 1082.016482][T15809] netlink: 108 bytes leftover after parsing attributes in process `syz.9.15304'. [ 1082.035335][T15809] IPVS: Unknown mcast interface: vetN1_macvtap [ 1082.193614][T15821] No such timeout policy "syz1" [ 1082.279276][T15828] loop9: detected capacity change from 0 to 512 [ 1082.288652][T15830] SELinux: failed to load policy [ 1082.295432][T15828] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1082.318625][T15828] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.331980][T15828] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.478290][ T10] tipc: Node number set to 2886997007 [ 1082.519153][T15854] No such timeout policy "syz1" [ 1082.612406][T15860] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.15322' sets config #1 [ 1082.643944][T15864] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1082.653909][T15864] SELinux: failed to load policy [ 1082.769245][T15864] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1082.800596][T15864] SELinux: failed to load policy [ 1082.842542][T15882] xt_connbytes: Forcing CT accounting to be enabled [ 1082.865681][T15882] Cannot find set identified by id 0 to match [ 1082.911647][T15886] loop2: detected capacity change from 0 to 2048 [ 1082.999588][T15886] GPT:first_usable_lbas don't match. [ 1083.004929][T15886] GPT:34 != 290 [ 1083.008418][T15886] GPT: Use GNU Parted to correct GPT errors. [ 1083.014598][T15886] loop2: p1 p2 p3 [ 1084.316471][T15916] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1084.330868][T15916] SELinux: failed to load policy [ 1084.339588][T15918] Cannot find del_set index 16384 as target [ 1084.394608][T15923] __nla_validate_parse: 2 callbacks suppressed [ 1084.394622][T15923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15345'. [ 1084.411859][T15916] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1084.434441][T15916] SELinux: failed to load policy [ 1084.556848][T15933] loop6: detected capacity change from 0 to 512 [ 1084.564375][T15931] SELinux: failed to load policy [ 1084.758712][T15943] loop6: detected capacity change from 0 to 128 [ 1084.766641][T15943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15354'. [ 1084.973760][T15952] loop6: detected capacity change from 0 to 1024 [ 1084.981060][T15952] EXT4-fs: Ignoring removed orlov option [ 1084.993761][T15954] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1085.004776][T15954] SELinux: failed to load policy [ 1085.036917][T15954] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1085.055548][T15954] SELinux: failed to load policy [ 1085.063372][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15359'. [ 1085.123290][T15958] SELinux: failed to load policy [ 1085.171364][T15960] loop2: detected capacity change from 0 to 512 [ 1085.186013][T15960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1085.220041][T15960] EXT4-fs (loop2): 1 truncate cleaned up [ 1085.226566][T15960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1085.275552][T15967] bridge_slave_0: default FDB implementation only supports local addresses [ 1085.284779][T15967] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15967 comm=syz.6.15364 [ 1085.339904][T15962] SELinux: failed to load policy [ 1085.370046][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1085.447582][T15976] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.15368'. [ 1085.457738][T15975] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.15368'. [ 1085.473060][T15975] loop2: detected capacity change from 0 to 1024 [ 1085.479680][T15975] EXT4-fs: inline encryption not supported [ 1085.485498][T15975] ext4: Unknown parameter 'smackfsdef' [ 1085.498630][T15975] netlink: 'syz.2.15368': attribute type 10 has an invalid length. [ 1085.520131][T15978] loop9: detected capacity change from 0 to 128 [ 1085.556096][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15368'. [ 1085.601894][T15985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15372'. [ 1085.688183][T15989] loop2: detected capacity change from 0 to 8192 [ 1085.963839][ T29] kauditd_printk_skb: 844 callbacks suppressed [ 1085.963853][ T29] audit: type=1326 audit(2000000210.760:120155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.088472][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 1086.096216][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 1086.133810][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.141621][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.149362][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.157006][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.164729][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.172492][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.172597][ T29] audit: type=1326 audit(2000000210.800:120156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.180195][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.180219][ T10] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 1086.204713][ T10] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 1086.211648][ T29] audit: type=1326 audit(2000000210.800:120157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.211685][ T29] audit: type=1326 audit(2000000210.800:120158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.276674][ T29] audit: type=1326 audit(2000000210.810:120159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.300470][ T29] audit: type=1326 audit(2000000210.860:120160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.324224][ T29] audit: type=1326 audit(2000000210.860:120161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.347989][ T29] audit: type=1326 audit(2000000210.860:120162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15991 comm="syz.2.15375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1086.372163][ T29] audit: type=1400 audit(2000000210.870:120163): avc: denied { read write } for pid=15991 comm="syz.2.15375" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1086.396101][ T29] audit: type=1400 audit(2000000210.870:120164): avc: denied { open } for pid=15991 comm="syz.2.15375" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1086.436071][T15999] SELinux: failed to load policy [ 1086.439389][T16001] loop6: detected capacity change from 0 to 512 [ 1086.522965][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15381'. [ 1086.570912][T16006] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15381'. [ 1086.637824][T16016] No such timeout policy "syz1" [ 1086.719315][T16027] loop9: detected capacity change from 0 to 512 [ 1086.725905][T16027] EXT4-fs: Ignoring removed bh option [ 1086.808334][T16027] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1086.817481][T16027] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1086.827404][T16029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21896 sclass=netlink_route_socket pid=16029 comm=syz.1.15389 [ 1086.840967][T16027] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1086.859432][T16027] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1086.871286][T16027] System zones: 0-2, 18-18, 34-35 [ 1087.180844][T16037] SELinux: failed to load policy [ 1087.188560][T16027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1087.431947][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.496229][T16048] loop6: detected capacity change from 0 to 128 [ 1087.531561][T16055] No such timeout policy "syz1" [ 1087.534463][T16053] vhci_hcd: invalid port number 254 [ 1087.541910][T16053] vhci_hcd: default hub control req: 600d v0004 i00fe l0 [ 1087.738329][T16057] SELinux: failed to load policy [ 1087.935151][T16068] FAULT_INJECTION: forcing a failure. [ 1087.935151][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.947992][T16068] CPU: 1 UID: 0 PID: 16068 Comm: syz.9.15403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1087.948027][T16068] Tainted: [W]=WARN [ 1087.948036][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1087.948051][T16068] Call Trace: [ 1087.948134][T16068] [ 1087.948144][T16068] __dump_stack+0x1d/0x30 [ 1087.948170][T16068] dump_stack_lvl+0xe8/0x140 [ 1087.948193][T16068] dump_stack+0x15/0x1b [ 1087.948212][T16068] should_fail_ex+0x265/0x280 [ 1087.948237][T16068] should_failslab+0x8c/0xb0 [ 1087.948274][T16068] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1087.948311][T16068] ? perf_event_alloc+0x14c/0x1740 [ 1087.948338][T16068] perf_event_alloc+0x14c/0x1740 [ 1087.948486][T16068] __se_sys_perf_event_open+0x615/0x11c0 [ 1087.948532][T16068] ? __rcu_read_unlock+0x4f/0x70 [ 1087.948593][T16068] __x64_sys_perf_event_open+0x67/0x80 [ 1087.948621][T16068] x64_sys_call+0x7bd/0x3000 [ 1087.948657][T16068] do_syscall_64+0xd2/0x200 [ 1087.948675][T16068] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1087.948782][T16068] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1087.948927][T16068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.948955][T16068] RIP: 0033:0x7fe66cd5efc9 [ 1087.948975][T16068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.949000][T16068] RSP: 002b:00007fe66b7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1087.949020][T16068] RAX: ffffffffffffffda RBX: 00007fe66cfb5fa0 RCX: 00007fe66cd5efc9 [ 1087.949033][T16068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1087.949068][T16068] RBP: 00007fe66b7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.949084][T16068] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1087.949098][T16068] R13: 00007fe66cfb6038 R14: 00007fe66cfb5fa0 R15: 00007ffe9c5b19a8 [ 1087.949123][T16068] [ 1088.163403][T16072] loop2: detected capacity change from 0 to 512 [ 1088.183927][T16072] EXT4-fs: Ignoring removed bh option [ 1088.190159][T16072] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1088.199256][T16072] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1088.208691][T16072] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1088.218097][T16072] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1088.226410][T16072] System zones: 0-2, 18-18, 34-35 [ 1088.230530][T16084] No such timeout policy "syz1" [ 1088.232467][T16072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.361701][T16092] loop6: detected capacity change from 0 to 512 [ 1088.373742][T16092] EXT4-fs: Ignoring removed bh option [ 1088.393673][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.431540][T16099] FAULT_INJECTION: forcing a failure. [ 1088.431540][T16099] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.444241][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.9.15418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1088.444278][T16099] Tainted: [W]=WARN [ 1088.444286][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.444302][T16099] Call Trace: [ 1088.444357][T16099] [ 1088.444366][T16099] __dump_stack+0x1d/0x30 [ 1088.444423][T16099] dump_stack_lvl+0xe8/0x140 [ 1088.444456][T16099] dump_stack+0x15/0x1b [ 1088.444473][T16099] should_fail_ex+0x265/0x280 [ 1088.444491][T16099] should_failslab+0x8c/0xb0 [ 1088.444530][T16099] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1088.444567][T16099] ? perf_event_alloc+0x14c/0x1740 [ 1088.444601][T16099] perf_event_alloc+0x14c/0x1740 [ 1088.444629][T16099] __se_sys_perf_event_open+0x615/0x11c0 [ 1088.444702][T16099] ? __rcu_read_unlock+0x4f/0x70 [ 1088.444732][T16099] __x64_sys_perf_event_open+0x67/0x80 [ 1088.444758][T16099] x64_sys_call+0x7bd/0x3000 [ 1088.444803][T16099] do_syscall_64+0xd2/0x200 [ 1088.444894][T16099] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1088.444926][T16099] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1088.444992][T16099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.445012][T16099] RIP: 0033:0x7fe66cd5efc9 [ 1088.445026][T16099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.445108][T16099] RSP: 002b:00007fe66b7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1088.445146][T16099] RAX: ffffffffffffffda RBX: 00007fe66cfb5fa0 RCX: 00007fe66cd5efc9 [ 1088.445163][T16099] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1088.445177][T16099] RBP: 00007fe66b7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.445189][T16099] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1088.445260][T16099] R13: 00007fe66cfb6038 R14: 00007fe66cfb5fa0 R15: 00007ffe9c5b19a8 [ 1088.445280][T16099] [ 1088.667435][T16105] No such timeout policy "syz1" [ 1088.715444][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15421'. [ 1088.795078][T16121] FAULT_INJECTION: forcing a failure. [ 1088.795078][T16121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1088.808296][T16121] CPU: 1 UID: 0 PID: 16121 Comm: syz.0.15425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1088.808327][T16121] Tainted: [W]=WARN [ 1088.808335][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1088.808347][T16121] Call Trace: [ 1088.808353][T16121] [ 1088.808361][T16121] __dump_stack+0x1d/0x30 [ 1088.808389][T16121] dump_stack_lvl+0xe8/0x140 [ 1088.808441][T16121] dump_stack+0x15/0x1b [ 1088.808462][T16121] should_fail_ex+0x265/0x280 [ 1088.808481][T16121] should_fail+0xb/0x20 [ 1088.808495][T16121] should_fail_usercopy+0x1a/0x20 [ 1088.808540][T16121] _copy_from_iter+0xd2/0xe80 [ 1088.808585][T16121] ? __rcu_read_unlock+0x4f/0x70 [ 1088.808708][T16121] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1088.808735][T16121] memcpy_from_msg+0x3c/0xa0 [ 1088.808759][T16121] isotp_sendmsg+0x506/0xbf0 [ 1088.808812][T16121] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1088.808933][T16121] __sock_sendmsg+0x145/0x180 [ 1088.808962][T16121] ____sys_sendmsg+0x345/0x4e0 [ 1088.809000][T16121] ___sys_sendmsg+0x17b/0x1d0 [ 1088.809095][T16121] __sys_sendmmsg+0x178/0x300 [ 1088.809124][T16121] __x64_sys_sendmmsg+0x57/0x70 [ 1088.809146][T16121] x64_sys_call+0x1c4a/0x3000 [ 1088.809167][T16121] do_syscall_64+0xd2/0x200 [ 1088.809213][T16121] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1088.809247][T16121] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1088.809287][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.809336][T16121] RIP: 0033:0x7f6e9e89efc9 [ 1088.809350][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.809367][T16121] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1088.809384][T16121] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1088.809396][T16121] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 1088.809408][T16121] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.809463][T16121] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000001 [ 1088.809516][T16121] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1088.809539][T16121] [ 1088.810973][T16123] loop9: detected capacity change from 0 to 512 [ 1088.861462][T16124] syzkaller0: entered allmulticast mode [ 1088.865335][T16123] EXT4-fs: Ignoring removed bh option [ 1089.044748][T16124] syzkaller0 (unregistering): left allmulticast mode [ 1089.058506][T16123] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1089.067565][T16123] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1089.097620][T16123] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1089.117415][T16123] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1089.136627][T16123] System zones: 0-2, 18-18, 34-35 [ 1089.168010][T16123] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1089.246681][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.272103][T16148] FAULT_INJECTION: forcing a failure. [ 1089.272103][T16148] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.284835][T16148] CPU: 0 UID: 0 PID: 16148 Comm: syz.6.15436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1089.284913][T16148] Tainted: [W]=WARN [ 1089.284920][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1089.284932][T16148] Call Trace: [ 1089.284938][T16148] [ 1089.284945][T16148] __dump_stack+0x1d/0x30 [ 1089.284967][T16148] dump_stack_lvl+0xe8/0x140 [ 1089.284989][T16148] dump_stack+0x15/0x1b [ 1089.285034][T16148] should_fail_ex+0x265/0x280 [ 1089.285055][T16148] should_failslab+0x8c/0xb0 [ 1089.285088][T16148] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1089.285193][T16148] ? __alloc_skb+0x101/0x320 [ 1089.285232][T16148] __alloc_skb+0x101/0x320 [ 1089.285262][T16148] netlink_alloc_large_skb+0xbf/0xf0 [ 1089.285358][T16148] netlink_sendmsg+0x3cf/0x6b0 [ 1089.285379][T16148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.285398][T16148] __sock_sendmsg+0x145/0x180 [ 1089.285422][T16148] ____sys_sendmsg+0x31e/0x4e0 [ 1089.285524][T16148] ___sys_sendmsg+0x17b/0x1d0 [ 1089.285663][T16148] __x64_sys_sendmsg+0xd4/0x160 [ 1089.285693][T16148] x64_sys_call+0x191e/0x3000 [ 1089.285723][T16148] do_syscall_64+0xd2/0x200 [ 1089.285748][T16148] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1089.285806][T16148] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1089.285838][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.285915][T16148] RIP: 0033:0x7f72abeaefc9 [ 1089.285934][T16148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.285976][T16148] RSP: 002b:00007f72aa90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.285994][T16148] RAX: ffffffffffffffda RBX: 00007f72ac105fa0 RCX: 00007f72abeaefc9 [ 1089.286007][T16148] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 1089.286023][T16148] RBP: 00007f72aa90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.286044][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.286060][T16148] R13: 00007f72ac106038 R14: 00007f72ac105fa0 R15: 00007fff06eb5eb8 [ 1089.286081][T16148] [ 1089.572497][T16156] loop6: detected capacity change from 0 to 128 [ 1089.762363][T16164] SELinux: failed to load policy [ 1089.938478][T16176] FAULT_INJECTION: forcing a failure. [ 1089.938478][T16176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.953329][T16176] CPU: 1 UID: 0 PID: 16176 Comm: syz.1.15448 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1089.953365][T16176] Tainted: [W]=WARN [ 1089.953374][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1089.953391][T16176] Call Trace: [ 1089.953400][T16176] [ 1089.953409][T16176] __dump_stack+0x1d/0x30 [ 1089.953439][T16176] dump_stack_lvl+0xe8/0x140 [ 1089.953530][T16176] dump_stack+0x15/0x1b [ 1089.953554][T16176] should_fail_ex+0x265/0x280 [ 1089.953597][T16176] should_fail+0xb/0x20 [ 1089.953618][T16176] should_fail_usercopy+0x1a/0x20 [ 1089.953645][T16176] _copy_from_iter+0xd2/0xe80 [ 1089.953696][T16176] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 1089.953823][T16176] copy_page_from_iter+0x178/0x2a0 [ 1089.953852][T16176] ? anon_pipe_write+0x81/0xb30 [ 1089.953884][T16176] anon_pipe_write+0x541/0xb30 [ 1089.953921][T16176] ? anon_pipe_write+0x81/0xb30 [ 1089.954026][T16176] ? __pfx_anon_pipe_write+0x10/0x10 [ 1089.954080][T16176] vfs_write+0x52a/0x960 [ 1089.954113][T16176] ksys_write+0xda/0x1a0 [ 1089.954160][T16176] __x64_sys_write+0x40/0x50 [ 1089.954250][T16176] x64_sys_call+0x2802/0x3000 [ 1089.954297][T16176] do_syscall_64+0xd2/0x200 [ 1089.954322][T16176] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1089.954358][T16176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.954421][T16176] RIP: 0033:0x7fb4663eefc9 [ 1089.954451][T16176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1089.954475][T16176] RSP: 002b:00007fb464e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1089.954498][T16176] RAX: ffffffffffffffda RBX: 00007fb466645fa0 RCX: 00007fb4663eefc9 [ 1089.954511][T16176] RDX: 00000000fffffecc RSI: 0000200000000000 RDI: 0000000000000008 [ 1089.954527][T16176] RBP: 00007fb464e57090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.954557][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.954581][T16176] R13: 00007fb466646038 R14: 00007fb466645fa0 R15: 00007fffe9742928 [ 1089.954603][T16176] [ 1090.182863][T16181] FAULT_INJECTION: forcing a failure. [ 1090.182863][T16181] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.195622][T16181] CPU: 0 UID: 0 PID: 16181 Comm: syz.0.15450 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1090.195728][T16181] Tainted: [W]=WARN [ 1090.195737][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1090.195764][T16181] Call Trace: [ 1090.195770][T16181] [ 1090.195777][T16181] __dump_stack+0x1d/0x30 [ 1090.195805][T16181] dump_stack_lvl+0xe8/0x140 [ 1090.195829][T16181] dump_stack+0x15/0x1b [ 1090.195919][T16181] should_fail_ex+0x265/0x280 [ 1090.195938][T16181] should_failslab+0x8c/0xb0 [ 1090.196015][T16181] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 1090.196061][T16181] ? __get_vm_area_node+0x106/0x1d0 [ 1090.196156][T16181] __get_vm_area_node+0x106/0x1d0 [ 1090.196274][T16181] __vmalloc_node_range_noprof+0x28c/0xed0 [ 1090.196305][T16181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.196341][T16181] ? __rcu_read_unlock+0x4f/0x70 [ 1090.196382][T16181] ? cred_has_capability+0x210/0x280 [ 1090.196463][T16181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.196494][T16181] __vmalloc_noprof+0x83/0xc0 [ 1090.196581][T16181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.196621][T16181] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.196758][T16181] ? bpf_prog_alloc+0x2a/0x150 [ 1090.196793][T16181] bpf_prog_alloc+0x3c/0x150 [ 1090.196896][T16181] bpf_prog_load+0x506/0x1100 [ 1090.196923][T16181] ? security_bpf+0x2b/0x90 [ 1090.196966][T16181] __sys_bpf+0x469/0x7c0 [ 1090.196997][T16181] __x64_sys_bpf+0x41/0x50 [ 1090.197031][T16181] x64_sys_call+0x2aee/0x3000 [ 1090.197057][T16181] do_syscall_64+0xd2/0x200 [ 1090.197080][T16181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1090.197174][T16181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1090.197213][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.197238][T16181] RIP: 0033:0x7f6e9e89efc9 [ 1090.197256][T16181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.197347][T16181] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1090.197370][T16181] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1090.197386][T16181] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1090.197400][T16181] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.197415][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.197430][T16181] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1090.197459][T16181] [ 1090.197511][T16181] syz.0.15450: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1090.203018][T16179] loop9: detected capacity change from 0 to 1024 [ 1090.209080][T16181] ,cpuset= [ 1090.222460][T16179] EXT4-fs: Ignoring removed nobh option [ 1090.223002][T16181] / [ 1090.226287][T16179] EXT4-fs: Ignoring removed bh option [ 1090.229221][T16181] ,mems_allowed=0 [ 1090.440257][T16179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.440696][T16181] [ 1090.440709][T16181] CPU: 0 UID: 0 PID: 16181 Comm: syz.0.15450 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1090.440739][T16181] Tainted: [W]=WARN [ 1090.440745][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1090.440831][T16181] Call Trace: [ 1090.440839][T16181] [ 1090.440849][T16181] __dump_stack+0x1d/0x30 [ 1090.440904][T16181] dump_stack_lvl+0xe8/0x140 [ 1090.440930][T16181] dump_stack+0x15/0x1b [ 1090.440952][T16181] warn_alloc+0x12b/0x1a0 [ 1090.440998][T16181] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 1090.441117][T16181] ? __rcu_read_unlock+0x4f/0x70 [ 1090.441180][T16181] ? cred_has_capability+0x210/0x280 [ 1090.441219][T16181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.441261][T16181] __vmalloc_noprof+0x83/0xc0 [ 1090.441299][T16181] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.441388][T16181] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 1090.441431][T16181] ? bpf_prog_alloc+0x2a/0x150 [ 1090.441532][T16181] bpf_prog_alloc+0x3c/0x150 [ 1090.441577][T16181] bpf_prog_load+0x506/0x1100 [ 1090.441632][T16181] ? security_bpf+0x2b/0x90 [ 1090.441702][T16181] __sys_bpf+0x469/0x7c0 [ 1090.441740][T16181] __x64_sys_bpf+0x41/0x50 [ 1090.441787][T16181] x64_sys_call+0x2aee/0x3000 [ 1090.441820][T16181] do_syscall_64+0xd2/0x200 [ 1090.441847][T16181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1090.441915][T16181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1090.441961][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.441990][T16181] RIP: 0033:0x7f6e9e89efc9 [ 1090.442035][T16181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.442063][T16181] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1090.442096][T16181] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1090.442113][T16181] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 1090.442160][T16181] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.442177][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1090.442194][T16181] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1090.442224][T16181] [ 1090.442233][T16181] Mem-Info: [ 1090.629737][T16186] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1090.630502][T16181] active_anon:27047 inactive_anon:10 isolated_anon:0 [ 1090.630502][T16181] active_file:16791 inactive_file:14017 isolated_file:0 [ 1090.630502][T16181] unevictable:18 dirty:512 writeback:0 [ 1090.630502][T16181] slab_reclaimable:3863 slab_unreclaimable:32333 [ 1090.630502][T16181] mapped:41685 shmem:21485 pagetables:1486 [ 1090.630502][T16181] sec_pagetables:0 bounce:0 [ 1090.630502][T16181] kernel_misc_reclaimable:0 [ 1090.630502][T16181] free:1836819 free_pcp:10540 free_cma:0 [ 1090.767959][T16181] Node 0 active_anon:108304kB inactive_anon:40kB active_file:67164kB inactive_file:56068kB unevictable:72kB isolated(anon):0kB isolated(file):0kB mapped:124284kB dirty:2048kB writeback:0kB shmem:85940kB kernel_stack:3856kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1090.795722][T16181] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1090.825510][T16181] lowmem_reserve[]: 0 2881 7859 7859 [ 1090.830937][T16181] Node 0 DMA32 free:2946636kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 1090.862214][T16181] lowmem_reserve[]: 0 0 4978 4978 [ 1090.867272][T16181] Node 0 Normal free:4385280kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:84060kB inactive_anon:40kB active_file:67164kB inactive_file:56068kB unevictable:72kB writepending:2048kB zspages:0kB present:5242880kB managed:5098240kB mlocked:72kB bounce:0kB free_pcp:62852kB local_pcp:33304kB free_cma:0kB [ 1090.900623][T16181] lowmem_reserve[]: 0 0 0 0 [ 1090.905181][T16181] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1090.918185][T16181] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946636kB [ 1090.934358][T16181] Node 0 Normal: 438*4kB (UE) 1607*8kB (UME) 1303*16kB (UE) 1013*32kB (UE) 831*64kB (UME) 396*128kB (UME) 425*256kB (UME) 229*512kB (UME) 102*1024kB (UME) 56*2048kB (UME) 920*4096kB (UM) = 4385248kB [ 1090.954098][T16181] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1090.963420][T16181] 37930 total pagecache pages [ 1090.968144][T16181] 44 pages in swap cache [ 1090.972437][T16181] Free swap = 124380kB [ 1090.976587][T16181] Total swap = 124996kB [ 1090.980842][T16181] 2097051 pages RAM [ 1090.984644][T16181] 0 pages HighMem/MovableOnly [ 1090.989375][T16181] 81084 pages reserved [ 1091.009289][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 1091.009304][ T29] audit: type=1326 audit(2000000215.810:120542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.062705][ T29] audit: type=1326 audit(2000000215.840:120543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.086579][ T29] audit: type=1326 audit(2000000215.840:120544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.110487][ T29] audit: type=1326 audit(2000000215.840:120545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.134169][ T29] audit: type=1326 audit(2000000215.840:120546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.157933][ T29] audit: type=1326 audit(2000000215.840:120547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.181615][ T29] audit: type=1326 audit(2000000215.840:120548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.205391][ T29] audit: type=1326 audit(2000000215.840:120549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.229195][ T29] audit: type=1326 audit(2000000215.840:120550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.252986][ T29] audit: type=1326 audit(2000000215.840:120551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.15451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f96cecbefc9 code=0x7ffc0000 [ 1091.280008][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.296287][T16192] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1091.304610][T16192] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1091.345831][T16208] __nla_validate_parse: 1 callbacks suppressed [ 1091.345901][T16208] netlink: 332 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1091.376814][T16208] netlink: 'syz.0.15459': attribute type 9 has an invalid length. [ 1091.384732][T16208] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1091.393896][T16208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1091.433829][T16215] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15459'. [ 1091.443218][T16215] IPVS: Unknown mcast interface: vetN1_macvtap [ 1091.468092][T16218] tipc: Started in network mode [ 1091.473029][T16218] tipc: Node identity ac14140f, cluster identity 4711 [ 1091.495106][T16222] loop6: detected capacity change from 0 to 256 [ 1091.498428][T16218] tipc: New replicast peer: 255.255.255.255 [ 1091.507494][T16218] tipc: Enabled bearer , priority 10 [ 1091.533626][T16222] loop6: detected capacity change from 0 to 1024 [ 1091.538987][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15463'. [ 1091.540743][T16226] FAULT_INJECTION: forcing a failure. [ 1091.540743][T16226] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.561772][T16226] CPU: 0 UID: 0 PID: 16226 Comm: syz.9.15466 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1091.561808][T16226] Tainted: [W]=WARN [ 1091.561817][T16226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1091.561843][T16226] Call Trace: [ 1091.561850][T16226] [ 1091.561859][T16226] __dump_stack+0x1d/0x30 [ 1091.561885][T16226] dump_stack_lvl+0xe8/0x140 [ 1091.561910][T16226] dump_stack+0x15/0x1b [ 1091.561996][T16226] should_fail_ex+0x265/0x280 [ 1091.562020][T16226] should_failslab+0x8c/0xb0 [ 1091.562108][T16226] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1091.562143][T16226] ? __alloc_skb+0x101/0x320 [ 1091.562254][T16226] __alloc_skb+0x101/0x320 [ 1091.562288][T16226] netlink_alloc_large_skb+0xbf/0xf0 [ 1091.562324][T16226] netlink_sendmsg+0x3cf/0x6b0 [ 1091.562350][T16226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1091.562469][T16226] __sock_sendmsg+0x145/0x180 [ 1091.562534][T16226] ____sys_sendmsg+0x31e/0x4e0 [ 1091.562620][T16226] ___sys_sendmsg+0x17b/0x1d0 [ 1091.562703][T16226] __x64_sys_sendmsg+0xd4/0x160 [ 1091.562735][T16226] x64_sys_call+0x191e/0x3000 [ 1091.562766][T16226] do_syscall_64+0xd2/0x200 [ 1091.562840][T16226] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1091.562878][T16226] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1091.562920][T16226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.562949][T16226] RIP: 0033:0x7fe66cd5efc9 [ 1091.562997][T16226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.563102][T16226] RSP: 002b:00007fe66b7c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1091.563127][T16226] RAX: ffffffffffffffda RBX: 00007fe66cfb5fa0 RCX: 00007fe66cd5efc9 [ 1091.563143][T16226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1091.563159][T16226] RBP: 00007fe66b7c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.563217][T16226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.563233][T16226] R13: 00007fe66cfb6038 R14: 00007fe66cfb5fa0 R15: 00007ffe9c5b19a8 [ 1091.563338][T16226] [ 1091.807833][T16228] loop9: detected capacity change from 0 to 1024 [ 1091.814879][T16228] EXT4-fs: Ignoring removed orlov option [ 1091.865186][T16228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.957052][T16239] FAULT_INJECTION: forcing a failure. [ 1091.957052][T16239] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.969878][T16239] CPU: 1 UID: 0 PID: 16239 Comm: syz.1.15469 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1091.969973][T16239] Tainted: [W]=WARN [ 1091.969982][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1091.969997][T16239] Call Trace: [ 1091.970004][T16239] [ 1091.970012][T16239] __dump_stack+0x1d/0x30 [ 1091.970033][T16239] dump_stack_lvl+0xe8/0x140 [ 1091.970105][T16239] dump_stack+0x15/0x1b [ 1091.970126][T16239] should_fail_ex+0x265/0x280 [ 1091.970154][T16239] should_failslab+0x8c/0xb0 [ 1091.970189][T16239] kmem_cache_alloc_noprof+0x50/0x480 [ 1091.970339][T16239] ? io_submit_one+0xb8/0x11d0 [ 1091.970378][T16239] io_submit_one+0xb8/0x11d0 [ 1091.970414][T16239] __se_sys_io_submit+0xfb/0x280 [ 1091.970461][T16239] __x64_sys_io_submit+0x43/0x50 [ 1091.970497][T16239] x64_sys_call+0x2d6c/0x3000 [ 1091.970524][T16239] do_syscall_64+0xd2/0x200 [ 1091.970543][T16239] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1091.970633][T16239] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1091.970670][T16239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.970696][T16239] RIP: 0033:0x7fb4663eefc9 [ 1091.970714][T16239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.970736][T16239] RSP: 002b:00007fb464e57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1091.970806][T16239] RAX: ffffffffffffffda RBX: 00007fb466645fa0 RCX: 00007fb4663eefc9 [ 1091.970822][T16239] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007fb464e13000 [ 1091.970837][T16239] RBP: 00007fb464e57090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.970920][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.970931][T16239] R13: 00007fb466646038 R14: 00007fb466645fa0 R15: 00007fffe9742928 [ 1091.970952][T16239] [ 1092.287208][T16247] SELinux: failed to load policy [ 1092.318138][T16255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15475'. [ 1092.428352][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15467'. [ 1092.437587][T16235] netlink: 312 bytes leftover after parsing attributes in process `syz.9.15467'. [ 1092.446859][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15467'. [ 1092.484623][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.578216][ T5133] tipc: Node number set to 2886997007 [ 1092.614366][T16279] FAULT_INJECTION: forcing a failure. [ 1092.614366][T16279] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.627228][T16279] CPU: 1 UID: 0 PID: 16279 Comm: syz.0.15483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1092.627270][T16279] Tainted: [W]=WARN [ 1092.627279][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1092.627317][T16279] Call Trace: [ 1092.627325][T16279] [ 1092.627335][T16279] __dump_stack+0x1d/0x30 [ 1092.627364][T16279] dump_stack_lvl+0xe8/0x140 [ 1092.627392][T16279] dump_stack+0x15/0x1b [ 1092.627412][T16279] should_fail_ex+0x265/0x280 [ 1092.627434][T16279] should_failslab+0x8c/0xb0 [ 1092.627533][T16279] kmem_cache_alloc_noprof+0x50/0x480 [ 1092.627570][T16279] ? alloc_empty_file+0x76/0x200 [ 1092.627609][T16279] alloc_empty_file+0x76/0x200 [ 1092.627709][T16279] alloc_file_pseudo+0xc6/0x160 [ 1092.627737][T16279] sock_alloc_file+0x9c/0x1e0 [ 1092.627776][T16279] __sys_socket+0x116/0x180 [ 1092.627806][T16279] __x64_sys_socket+0x3f/0x50 [ 1092.627832][T16279] x64_sys_call+0x1147/0x3000 [ 1092.627871][T16279] do_syscall_64+0xd2/0x200 [ 1092.627889][T16279] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1092.627976][T16279] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1092.628045][T16279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.628071][T16279] RIP: 0033:0x7f6e9e89efc9 [ 1092.628085][T16279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.628137][T16279] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1092.628166][T16279] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1092.628221][T16279] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000025 [ 1092.628234][T16279] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.628246][T16279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.628261][T16279] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1092.628280][T16279] [ 1092.821985][T16280] No such timeout policy "syz1" [ 1092.871933][T16283] SELinux: failed to load policy [ 1092.934177][T16297] loop6: detected capacity change from 0 to 512 [ 1092.945132][T16297] loop6: detected capacity change from 0 to 128 [ 1092.954310][T16297] netlink: 'syz.6.15485': attribute type 4 has an invalid length. [ 1093.039757][T16310] loop2: detected capacity change from 0 to 512 [ 1093.050333][T16310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.063367][T16310] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.076915][T16310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.079186][T16308] SELinux: failed to load policy [ 1093.109225][T16308] SELinux: failed to load policy [ 1093.113385][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15497'. [ 1093.142409][T16317] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1093.154317][T16317] SELinux: failed to load policy [ 1093.272205][T16324] FAULT_INJECTION: forcing a failure. [ 1093.272205][T16324] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.285046][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.0.15502 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1093.285173][T16324] Tainted: [W]=WARN [ 1093.285180][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1093.285193][T16324] Call Trace: [ 1093.285212][T16324] [ 1093.285222][T16324] __dump_stack+0x1d/0x30 [ 1093.285250][T16324] dump_stack_lvl+0xe8/0x140 [ 1093.285315][T16324] dump_stack+0x15/0x1b [ 1093.285340][T16324] should_fail_ex+0x265/0x280 [ 1093.285367][T16324] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1093.285398][T16324] should_failslab+0x8c/0xb0 [ 1093.285437][T16324] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 1093.285502][T16324] ? shmem_alloc_inode+0x34/0x50 [ 1093.285532][T16324] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1093.285562][T16324] shmem_alloc_inode+0x34/0x50 [ 1093.285653][T16324] alloc_inode+0x40/0x170 [ 1093.285760][T16324] new_inode+0x1d/0xe0 [ 1093.285797][T16324] shmem_get_inode+0x244/0x750 [ 1093.285856][T16324] shmem_mknod+0x46/0x180 [ 1093.285892][T16324] shmem_create+0x34/0x50 [ 1093.285923][T16324] ? __pfx_shmem_create+0x10/0x10 [ 1093.285956][T16324] path_openat+0x1105/0x2170 [ 1093.285997][T16324] do_filp_open+0x109/0x230 [ 1093.286060][T16324] do_sys_openat2+0xa6/0x110 [ 1093.286089][T16324] __x64_sys_openat+0xf2/0x120 [ 1093.286118][T16324] x64_sys_call+0x2eab/0x3000 [ 1093.286222][T16324] do_syscall_64+0xd2/0x200 [ 1093.286244][T16324] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1093.286369][T16324] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1093.286418][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.286448][T16324] RIP: 0033:0x7f6e9e89efc9 [ 1093.286468][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.286554][T16324] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1093.286581][T16324] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1093.286598][T16324] RDX: 000000000000275a RSI: 0000200000000840 RDI: ffffffffffffff9c [ 1093.286650][T16324] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.286666][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.286683][T16324] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1093.286707][T16324] [ 1093.550815][T16332] loop2: detected capacity change from 0 to 128 [ 1093.820058][T16323] chnl_net:caif_netlink_parms(): no params data found [ 1093.841442][T16338] bio_check_eod: 83 callbacks suppressed [ 1093.841460][T16338] syz.2.15503: attempt to access beyond end of device [ 1093.841460][T16338] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1093.860704][T16338] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1093.875647][T16332] syz.2.15503: attempt to access beyond end of device [ 1093.875647][T16332] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1093.889211][T16332] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1093.925639][T16323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.932775][T16323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.946644][T16323] bridge_slave_0: entered allmulticast mode [ 1093.954003][T16323] bridge_slave_0: entered promiscuous mode [ 1093.963796][T16323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.970913][T16323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.980169][T16323] bridge_slave_1: entered allmulticast mode [ 1093.986768][T16323] bridge_slave_1: entered promiscuous mode [ 1094.085074][T16364] serio: Serial port ptm0 [ 1094.158946][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.169731][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.400587][T16367] wg2: entered promiscuous mode [ 1094.405585][T16367] wg2: entered allmulticast mode [ 1094.569609][T16374] loop2: detected capacity change from 0 to 512 [ 1094.587268][T13729] tipc: Disabling bearer [ 1094.592541][T13729] tipc: Left network mode [ 1094.607308][T16374] EXT4-fs (loop2): 1 orphan inode deleted [ 1094.614196][T16374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1094.615755][T16359] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 1094.634729][T16380] random: crng reseeded on system resumption [ 1094.635461][T13729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.648691][T16374] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.657904][T13729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.665940][T13729] pimreg (unregistering): left allmulticast mode [ 1094.700939][T13729] team0 (unregistering): Port device team_slave_1 removed [ 1094.713207][T13729] team0 (unregistering): Port device team_slave_0 removed [ 1094.754072][T16323] team0: Port device team_slave_0 added [ 1094.762690][T16323] team0: Port device team_slave_1 added [ 1094.789620][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.796594][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.822572][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.847993][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.855204][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.881177][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.893916][T16391] loop2: detected capacity change from 0 to 1024 [ 1094.908960][T16391] EXT4-fs: Ignoring removed nobh option [ 1094.914558][T16391] EXT4-fs: Ignoring removed bh option [ 1094.923281][T16394] loop6: detected capacity change from 0 to 512 [ 1094.945931][T16323] hsr_slave_0: entered promiscuous mode [ 1094.952991][T16323] hsr_slave_1: entered promiscuous mode [ 1094.959529][T16391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.972472][T16323] debugfs: 'hsr0' already exists in 'hsr' [ 1094.978243][T16323] Cannot create hsr debugfs directory [ 1095.057627][T16408] loop6: detected capacity change from 0 to 164 [ 1095.074019][T16408] Unable to read rock-ridge attributes [ 1095.091577][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.109496][T13729] IPVS: stop unused estimator thread 0... [ 1095.121728][T16412] netlink: 'syz.2.15526': attribute type 9 has an invalid length. [ 1095.137067][T16412] IPVS: Unknown mcast interface: vetN1_macvtap [ 1095.151564][T16414] netlink: 'syz.0.15527': attribute type 1 has an invalid length. [ 1095.234012][T16423] loop2: detected capacity change from 0 to 512 [ 1095.240870][T16423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1095.271817][T16423] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.278335][T16423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.340436][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.363991][T16427] loop2: detected capacity change from 0 to 512 [ 1095.368941][T16323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1095.377778][T16427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1095.389962][T16323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1095.426023][T16323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1095.437958][T16427] EXT4-fs (loop2): 1 truncate cleaned up [ 1095.444137][T16427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.458937][T16323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1095.484864][T16437] loop9: detected capacity change from 0 to 1024 [ 1095.508455][T16437] EXT4-fs: Ignoring removed nobh option [ 1095.514092][T16437] EXT4-fs: Ignoring removed bh option [ 1095.553240][T16437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.596420][T16455] netlink: 'syz.6.15537': attribute type 1 has an invalid length. [ 1095.607970][T16427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58274 sclass=netlink_route_socket pid=16427 comm=syz.2.15532 [ 1095.629430][T16323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.649095][T16323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1095.660650][T16459] netlink: 'syz.0.15538': attribute type 30 has an invalid length. [ 1095.669490][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.676542][T13729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1095.687836][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.694921][T13729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1095.707292][T11905] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.719655][T16462] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1095.728630][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.752094][T16463] loop6: detected capacity change from 0 to 512 [ 1095.754918][T11905] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.777884][T16465] netlink: 'syz.2.15540': attribute type 9 has an invalid length. [ 1095.791308][T11905] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.803070][T16465] IPVS: Unknown mcast interface: vetN1_macvtap [ 1095.809415][T11905] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1095.824245][T16323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1095.901629][T16477] loop2: detected capacity change from 0 to 128 [ 1095.936868][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.283986][T16488] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1096.440763][T16488] SELinux: failed to load policy [ 1096.473388][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.501849][T16323] veth0_vlan: entered promiscuous mode [ 1096.532171][T16477] syz.2.15543: attempt to access beyond end of device [ 1096.532171][T16477] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1096.545883][T16477] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1096.549377][T16323] veth1_vlan: entered promiscuous mode [ 1096.560144][T16483] syz.2.15543: attempt to access beyond end of device [ 1096.560144][T16483] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1096.573759][T16483] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1096.584258][T16483] syz.2.15543: attempt to access beyond end of device [ 1096.584258][T16483] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1096.597967][T16483] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1096.608042][T16323] veth0_macvtap: entered promiscuous mode [ 1096.611261][T16498] loop6: detected capacity change from 0 to 512 [ 1096.616847][T16323] veth1_macvtap: entered promiscuous mode [ 1096.631723][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1096.640383][T16498] EXT4-fs: Ignoring removed bh option [ 1096.648330][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1096.665053][T13729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.687614][T13729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.700877][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 1096.700892][ T29] audit: type=1400 audit(2000000221.500:120937): avc: denied { mounton } for pid=16323 comm="syz-executor" path="/root/syzkaller.UAcJZC/syz-tmp" dev="sda1" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1096.728296][T13729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.758394][T13729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.772923][ T29] audit: type=1400 audit(2000000221.500:120938): avc: denied { mount } for pid=16323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1096.795405][ T29] audit: type=1400 audit(2000000221.500:120939): avc: denied { mount } for pid=16323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1096.817697][ T29] audit: type=1400 audit(2000000221.500:120940): avc: denied { mounton } for pid=16323 comm="syz-executor" path="/root/syzkaller.UAcJZC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1096.844890][ T29] audit: type=1400 audit(2000000221.500:120941): avc: denied { mounton } for pid=16323 comm="syz-executor" path="/root/syzkaller.UAcJZC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=171784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1096.865691][T16513] loop9: detected capacity change from 0 to 512 [ 1096.872932][ T29] audit: type=1400 audit(2000000221.540:120942): avc: denied { relabelfrom } for pid=16503 comm="syz.9.15548" name="NETLINK" dev="sockfs" ino=172325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1096.903647][ T29] audit: type=1400 audit(2000000221.540:120943): avc: denied { relabelto } for pid=16503 comm="syz.9.15548" name="NETLINK" dev="sockfs" ino=172325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 1096.910366][T16513] EXT4-fs: Ignoring removed bh option [ 1096.928871][ T29] audit: type=1400 audit(2000000221.540:120944): avc: denied { mounton } for pid=16323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1096.957356][ T29] audit: type=1400 audit(2000000221.540:120945): avc: denied { mount } for pid=16323 comm="syz-executor" name="/" dev="gadgetfs" ino=4607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1097.000716][ T29] audit: type=1400 audit(2000000221.790:120946): avc: denied { mounton } for pid=16506 comm=77DEA305FF07 path="/proc/1217/task" dev="proc" ino=172335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1097.025551][T16513] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1097.034756][T16513] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1097.046197][T16513] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1097.055963][T16513] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1097.064643][T16513] System zones: 0-2, 18-18, 34-35 [ 1097.070929][T16513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1097.107236][T16522] loop6: detected capacity change from 0 to 512 [ 1097.119941][T16522] loop6: detected capacity change from 0 to 512 [ 1097.139273][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.170867][T16525] loop9: detected capacity change from 0 to 512 [ 1097.177511][T16525] EXT4-fs: Ignoring removed oldalloc option [ 1097.189568][T16525] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.15554: Parent and EA inode have the same ino 15 [ 1097.204851][T16525] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.15554: Parent and EA inode have the same ino 15 [ 1097.217531][T16525] EXT4-fs (loop9): 1 orphan inode deleted [ 1097.225535][T16525] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.277936][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.326735][T16531] SELinux: failed to load policy [ 1097.327106][T16522] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=16522 comm=syz.6.15553 [ 1097.475782][T16546] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 1097.486269][T16546] SELinux: failed to load policy [ 1097.518696][T16550] FAULT_INJECTION: forcing a failure. [ 1097.518696][T16550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.531818][T16550] CPU: 1 UID: 0 PID: 16550 Comm: syz.6.15563 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1097.531917][T16550] Tainted: [W]=WARN [ 1097.531925][T16550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1097.531949][T16550] Call Trace: [ 1097.531956][T16550] [ 1097.531965][T16550] __dump_stack+0x1d/0x30 [ 1097.531992][T16550] dump_stack_lvl+0xe8/0x140 [ 1097.532017][T16550] dump_stack+0x15/0x1b [ 1097.532054][T16550] should_fail_ex+0x265/0x280 [ 1097.532079][T16550] should_fail+0xb/0x20 [ 1097.532096][T16550] should_fail_usercopy+0x1a/0x20 [ 1097.532121][T16550] _copy_to_user+0x20/0xa0 [ 1097.532207][T16550] rng_dev_read+0x3ef/0x740 [ 1097.532234][T16550] ? __pfx_rng_dev_read+0x10/0x10 [ 1097.532256][T16550] vfs_readv+0x3fb/0x690 [ 1097.532317][T16550] __x64_sys_preadv+0xfd/0x1c0 [ 1097.532347][T16550] x64_sys_call+0x282e/0x3000 [ 1097.532392][T16550] do_syscall_64+0xd2/0x200 [ 1097.532409][T16550] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1097.532459][T16550] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1097.532512][T16550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.532532][T16550] RIP: 0033:0x7f72abeaefc9 [ 1097.532546][T16550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.532563][T16550] RSP: 002b:00007f72aa90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1097.532641][T16550] RAX: ffffffffffffffda RBX: 00007f72ac105fa0 RCX: 00007f72abeaefc9 [ 1097.532653][T16550] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 1097.532664][T16550] RBP: 00007f72aa90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.532675][T16550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.532686][T16550] R13: 00007f72ac106038 R14: 00007f72ac105fa0 R15: 00007fff06eb5eb8 [ 1097.532770][T16550] [ 1097.793476][T13207] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.805497][T16552] lo speed is unknown, defaulting to 1000 [ 1097.811660][T16552] lo speed is unknown, defaulting to 1000 [ 1097.817691][T16552] lo speed is unknown, defaulting to 1000 [ 1097.825035][T16552] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1097.837282][T16552] lo speed is unknown, defaulting to 1000 [ 1097.843632][T16552] lo speed is unknown, defaulting to 1000 [ 1097.850006][T16552] lo speed is unknown, defaulting to 1000 [ 1097.856517][T16552] lo speed is unknown, defaulting to 1000 [ 1097.863240][T16552] lo speed is unknown, defaulting to 1000 [ 1097.866252][T13207] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.877835][T16552] lo speed is unknown, defaulting to 1000 [ 1097.884451][T13207] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.893273][T13207] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.902006][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa7ea00: rx timeout, send abort [ 1097.902072][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa7f600: rx timeout, send abort [ 1097.910313][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa7ea00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1097.910454][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa7f600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1097.949214][T16552] lo speed is unknown, defaulting to 1000 [ 1098.049770][T16574] No such timeout policy "syz1" [ 1098.055822][T16573] __nla_validate_parse: 13 callbacks suppressed [ 1098.055839][T16573] netlink: 332 bytes leftover after parsing attributes in process `syz.6.15571'. [ 1098.073125][T16573] netlink: 'syz.6.15571': attribute type 9 has an invalid length. [ 1098.081003][T16573] netlink: 108 bytes leftover after parsing attributes in process `syz.6.15571'. [ 1098.090292][T16573] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15571'. [ 1098.102741][T16573] netlink: 52 bytes leftover after parsing attributes in process `syz.6.15571'. [ 1098.102765][T16573] IPVS: Unknown mcast interface: vetN1_macvtap [ 1098.107026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa7ec00: rx timeout, send abort [ 1098.129327][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811aa7e200: rx timeout, send abort [ 1098.137607][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa7ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1098.152075][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811aa7e200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1098.196333][T16581] loop9: detected capacity change from 0 to 1024 [ 1098.214723][T16581] EXT4-fs: Ignoring removed nobh option [ 1098.220435][T16581] EXT4-fs: Ignoring removed bh option [ 1098.265963][T16581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.351618][T16594] loop2: detected capacity change from 0 to 128 [ 1098.408301][T16597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=16597 comm=syz.9.15576 [ 1098.466795][T16600] loop6: detected capacity change from 0 to 512 [ 1098.468777][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.474919][T16600] FAULT_INJECTION: forcing a failure. [ 1098.474919][T16600] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.494760][T16600] CPU: 1 UID: 0 PID: 16600 Comm: syz.6.15582 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1098.494802][T16600] Tainted: [W]=WARN [ 1098.494811][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1098.494827][T16600] Call Trace: [ 1098.494833][T16600] [ 1098.494842][T16600] __dump_stack+0x1d/0x30 [ 1098.494922][T16600] dump_stack_lvl+0xe8/0x140 [ 1098.494943][T16600] dump_stack+0x15/0x1b [ 1098.494961][T16600] should_fail_ex+0x265/0x280 [ 1098.494987][T16600] should_failslab+0x8c/0xb0 [ 1098.495026][T16600] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 1098.495114][T16600] ? alloc_inode+0x9a/0x170 [ 1098.495140][T16600] alloc_inode+0x9a/0x170 [ 1098.495166][T16600] new_inode+0x1d/0xe0 [ 1098.495201][T16600] ramfs_get_inode+0x24/0x1b0 [ 1098.495231][T16600] ramfs_tmpfile+0x36/0x100 [ 1098.495260][T16600] vfs_tmpfile+0x226/0x4d0 [ 1098.495365][T16600] do_tmpfile+0xa8/0x190 [ 1098.495420][T16600] path_openat+0x1dd7/0x2170 [ 1098.495501][T16600] ? path_openat+0x1bf8/0x2170 [ 1098.495584][T16600] ? _parse_integer_limit+0x170/0x190 [ 1098.495626][T16600] ? _parse_integer+0x27/0x40 [ 1098.495663][T16600] do_filp_open+0x109/0x230 [ 1098.495724][T16600] do_sys_openat2+0xa6/0x110 [ 1098.495752][T16600] __se_sys_openat2+0x194/0x1f0 [ 1098.495809][T16600] __x64_sys_openat2+0x55/0x70 [ 1098.495830][T16600] x64_sys_call+0x1121/0x3000 [ 1098.495855][T16600] do_syscall_64+0xd2/0x200 [ 1098.495879][T16600] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1098.495918][T16600] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1098.495998][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.496027][T16600] RIP: 0033:0x7f72abeaefc9 [ 1098.496046][T16600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.496081][T16600] RSP: 002b:00007f72aa90f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1098.496113][T16600] RAX: ffffffffffffffda RBX: 00007f72ac105fa0 RCX: 00007f72abeaefc9 [ 1098.496158][T16600] RDX: 0000200000000280 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 1098.496173][T16600] RBP: 00007f72aa90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.496187][T16600] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1098.496253][T16600] R13: 00007f72ac106038 R14: 00007f72ac105fa0 R15: 00007fff06eb5eb8 [ 1098.496279][T16600] [ 1098.496310][T16590] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1098.790731][T16603] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15584'. [ 1098.799857][T16603] netlink: 48 bytes leftover after parsing attributes in process `syz.0.15584'. [ 1098.877494][T16609] loop9: detected capacity change from 0 to 512 [ 1098.904147][T16611] netlink: 332 bytes leftover after parsing attributes in process `syz.6.15587'. [ 1098.920348][T16609] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.937346][T16611] netlink: 'syz.6.15587': attribute type 9 has an invalid length. [ 1098.945348][T16611] netlink: 108 bytes leftover after parsing attributes in process `syz.6.15587'. [ 1098.954595][T16611] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15587'. [ 1098.968070][T16609] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.985687][T16609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.030201][T16617] netlink: 52 bytes leftover after parsing attributes in process `syz.6.15587'. [ 1099.049758][T16617] IPVS: Unknown mcast interface: vetN1_macvtap [ 1099.115713][T16625] FAULT_INJECTION: forcing a failure. [ 1099.115713][T16625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1099.128885][T16625] CPU: 1 UID: 0 PID: 16625 Comm: syz.0.15591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1099.128926][T16625] Tainted: [W]=WARN [ 1099.128936][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1099.129032][T16625] Call Trace: [ 1099.129040][T16625] [ 1099.129049][T16625] __dump_stack+0x1d/0x30 [ 1099.129132][T16625] dump_stack_lvl+0xe8/0x140 [ 1099.129160][T16625] dump_stack+0x15/0x1b [ 1099.129183][T16625] should_fail_ex+0x265/0x280 [ 1099.129208][T16625] should_fail+0xb/0x20 [ 1099.129256][T16625] should_fail_usercopy+0x1a/0x20 [ 1099.129289][T16625] _copy_to_user+0x20/0xa0 [ 1099.129322][T16625] simple_read_from_buffer+0xb5/0x130 [ 1099.129362][T16625] proc_fail_nth_read+0x10e/0x150 [ 1099.129469][T16625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1099.129594][T16625] vfs_read+0x1a8/0x770 [ 1099.129624][T16625] ? __rcu_read_unlock+0x4f/0x70 [ 1099.129724][T16625] ? __fget_files+0x184/0x1c0 [ 1099.129822][T16625] ksys_read+0xda/0x1a0 [ 1099.129909][T16625] __x64_sys_read+0x40/0x50 [ 1099.129942][T16625] x64_sys_call+0x27c0/0x3000 [ 1099.129971][T16625] do_syscall_64+0xd2/0x200 [ 1099.129996][T16625] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1099.130060][T16625] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1099.130136][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.130163][T16625] RIP: 0033:0x7f6e9e89d9dc [ 1099.130181][T16625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1099.130244][T16625] RSP: 002b:00007f6e9d2ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1099.130269][T16625] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89d9dc [ 1099.130292][T16625] RDX: 000000000000000f RSI: 00007f6e9d2ff0a0 RDI: 0000000000000003 [ 1099.130308][T16625] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.130324][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.130354][T16625] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1099.130380][T16625] [ 1099.420679][T16646] loop2: detected capacity change from 0 to 512 [ 1099.427433][T16646] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1099.438726][T16646] EXT4-fs (loop2): 1 truncate cleaned up [ 1099.444749][T16646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1099.489592][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.513257][T16650] loop2: detected capacity change from 0 to 1024 [ 1099.520817][T16650] EXT4-fs: Ignoring removed nobh option [ 1099.526387][T16650] EXT4-fs: Ignoring removed bh option [ 1099.539968][T16650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.612163][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.772652][T16657] loop6: detected capacity change from 0 to 512 [ 1099.805542][T16660] loop6: detected capacity change from 0 to 512 [ 1099.846629][T16662] loop2: detected capacity change from 0 to 128 [ 1099.961861][T16671] loop9: detected capacity change from 0 to 512 [ 1100.000745][T16671] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1100.012301][T16671] EXT4-fs (loop9): 1 truncate cleaned up [ 1100.018544][T16671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.111541][T16662] syz.2.15604: attempt to access beyond end of device [ 1100.111541][T16662] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1100.125202][T16662] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1100.133748][T16669] loop6: detected capacity change from 0 to 164 [ 1100.156149][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.168726][T16667] syz.2.15604: attempt to access beyond end of device [ 1100.168726][T16667] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1100.182315][T16667] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1100.196929][T16679] netlink: 'syz.0.15612': attribute type 9 has an invalid length. [ 1100.283586][T16669] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.295182][T16669] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.433059][T16679] IPVS: Unknown mcast interface: vetN1_macvtap [ 1100.482590][T16698] program syz.9.15617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.702883][T16669] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1100.714246][T16669] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.024942][T16669] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.035290][T16669] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.411106][T16709] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 1101.468396][T16709] 0ªî{X¹¦: entered allmulticast mode [ 1101.498754][T16709] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1101.526792][T16669] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.537333][T16669] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.640832][T16716] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1101.671236][T13729] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.679530][T13729] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.716538][T13729] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.724898][T13729] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.753387][T16716] SELinux: failed to load policy [ 1101.803917][T13729] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.812174][T13729] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.824771][T16720] loop6: detected capacity change from 0 to 512 [ 1101.860904][T16722] lo speed is unknown, defaulting to 1000 [ 1101.888025][T16722] lo speed is unknown, defaulting to 1000 [ 1101.899370][T13729] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1101.907584][T13729] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.916888][T16722] lo speed is unknown, defaulting to 1000 [ 1101.932831][ T29] kauditd_printk_skb: 453 callbacks suppressed [ 1101.932847][ T29] audit: type=1326 audit(2000000226.730:121398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1101.962944][ T29] audit: type=1326 audit(2000000226.730:121399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1101.986700][ T29] audit: type=1326 audit(2000000226.730:121400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.010610][ T29] audit: type=1326 audit(2000000226.730:121401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.034516][ T29] audit: type=1326 audit(2000000226.730:121402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.058293][ T29] audit: type=1326 audit(2000000226.730:121403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.235485][T16722] infiniband sz1: set active [ 1102.240253][T16722] infiniband sz1: added lo [ 1102.250963][ T10] lo speed is unknown, defaulting to 1000 [ 1102.285350][T16718] loop9: detected capacity change from 0 to 164 [ 1102.308624][T16718] iso9660: Unknown parameter 'ÿÿÿÿ ' [ 1102.321297][T16722] RDS/IB: sz1: added [ 1102.343484][T16722] smc: adding ib device sz1 with port count 1 [ 1102.348833][ T29] audit: type=1326 audit(2000000226.730:121404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.360380][T16722] smc: ib device sz1 port 1 has no pnetid [ 1102.373407][ T29] audit: type=1326 audit(2000000226.880:121405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16719 comm="syz.6.15623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f72abeaefc9 code=0x7ffc0000 [ 1102.379614][ T10] lo speed is unknown, defaulting to 1000 [ 1102.409920][ T29] audit: type=1326 audit(2000000226.890:121406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.1.15619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1102.433852][ T29] audit: type=1326 audit(2000000226.890:121407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16702 comm="syz.1.15619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1102.444785][T16722] lo speed is unknown, defaulting to 1000 [ 1102.509993][T16738] netlink: 'syz.2.15630': attribute type 9 has an invalid length. [ 1102.512067][T16722] lo speed is unknown, defaulting to 1000 [ 1102.524233][T16738] IPVS: Unknown mcast interface: vetN1_macvtap [ 1102.562618][T16722] lo speed is unknown, defaulting to 1000 [ 1102.646546][T16722] lo speed is unknown, defaulting to 1000 [ 1102.735080][T16722] lo speed is unknown, defaulting to 1000 [ 1102.752056][T16752] loop9: detected capacity change from 0 to 512 [ 1102.766078][T16752] EXT4-fs (loop9): 1 orphan inode deleted [ 1102.775553][T16750] loop6: detected capacity change from 0 to 512 [ 1102.781904][T16722] lo speed is unknown, defaulting to 1000 [ 1102.784536][T16752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.820407][T16722] lo speed is unknown, defaulting to 1000 [ 1102.886020][T16752] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1102.936236][T16770] IPVS: Unknown mcast interface: [ 1102.971057][T16773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1102.993915][T16777] netlink: 'syz.9.15641': attribute type 12 has an invalid length. [ 1103.068650][T16781] loop9: detected capacity change from 0 to 512 [ 1103.083024][T16781] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1103.123800][T16785] tipc: New replicast peer: 255.255.255.255 [ 1103.130207][T16785] tipc: Enabled bearer , priority 10 [ 1103.137395][T16785] __nla_validate_parse: 19 callbacks suppressed [ 1103.137440][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15645'. [ 1103.455455][T16793] lo speed is unknown, defaulting to 1000 [ 1103.462879][T16793] lo speed is unknown, defaulting to 1000 [ 1103.996614][T16803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.039401][T16803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.244589][T16829] loop9: detected capacity change from 0 to 1024 [ 1105.251557][T16829] EXT4-fs: Ignoring removed nobh option [ 1105.257151][T16829] EXT4-fs: Ignoring removed bh option [ 1105.366100][T16830] lo speed is unknown, defaulting to 1000 [ 1105.387924][T16830] lo speed is unknown, defaulting to 1000 [ 1105.469072][T16829] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1105.539837][T16833] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1106.045532][T16840] loop2: detected capacity change from 0 to 512 [ 1106.069900][T16840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.082461][T16840] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.093217][T16840] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.113040][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.242808][T16850] loop2: detected capacity change from 0 to 512 [ 1106.251149][T16850] EXT4-fs: Ignoring removed nobh option [ 1106.269371][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.15667: corrupted inode contents [ 1106.281655][T16850] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #3: comm syz.2.15667: mark_inode_dirty error [ 1106.295692][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.15667: corrupted inode contents [ 1106.309491][T16850] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.15667: mark_inode_dirty error [ 1106.321608][T16850] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.15667: Failed to acquire dquot type 0 [ 1106.343292][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.15667: corrupted inode contents [ 1106.358730][T16850] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #16: comm syz.2.15667: mark_inode_dirty error [ 1106.373222][T16860] SELinux: Context system_u:object is not valid (left unmapped). [ 1106.383847][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.15667: corrupted inode contents [ 1106.396502][T16850] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.15667: mark_inode_dirty error [ 1106.408578][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.15667: corrupted inode contents [ 1106.421058][T16850] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 1106.429877][T16850] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm syz.2.15667: corrupted inode contents [ 1106.442714][T16850] EXT4-fs error (device loop2): ext4_truncate:4637: inode #16: comm syz.2.15667: mark_inode_dirty error [ 1106.476251][T16850] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem [ 1106.486638][T16850] EXT4-fs (loop2): 1 truncate cleaned up [ 1106.494209][T16850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.507068][T16850] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.609751][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.691313][T16881] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1106.691313][T16881] program syz.6.15677 not setting count and/or reply_len properly [ 1106.735379][T16887] loop6: detected capacity change from 0 to 512 [ 1106.742527][T16887] EXT4-fs: Ignoring removed bh option [ 1106.792819][T16885] loop2: detected capacity change from 0 to 512 [ 1106.800474][T16885] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1106.815335][T16891] loop6: detected capacity change from 0 to 512 [ 1106.850891][T16885] EXT4-fs (loop2): 1 truncate cleaned up [ 1106.858757][T16885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.944270][T16902] lo speed is unknown, defaulting to 1000 [ 1106.950480][T16902] lo speed is unknown, defaulting to 1000 [ 1106.978419][T16896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1107.005363][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 1107.005379][ T29] audit: type=1326 audit(2000000231.750:121718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.035337][ T29] audit: type=1326 audit(2000000231.750:121719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.059060][ T29] audit: type=1326 audit(2000000231.750:121720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.082820][ T29] audit: type=1326 audit(2000000231.760:121721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.106523][ T29] audit: type=1326 audit(2000000231.760:121722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.130331][ T29] audit: type=1326 audit(2000000231.760:121723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.154120][ T29] audit: type=1326 audit(2000000231.760:121724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.179002][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.179588][ T29] audit: type=1326 audit(2000000231.860:121725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.212048][ T29] audit: type=1326 audit(2000000231.860:121726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16867 comm="syz.0.15674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9e89efc9 code=0x7ffc0000 [ 1107.297974][T16914] FAULT_INJECTION: forcing a failure. [ 1107.297974][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 1107.310773][T16914] CPU: 1 UID: 0 PID: 16914 Comm: syz.6.15691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1107.310866][T16914] Tainted: [W]=WARN [ 1107.310875][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1107.310892][T16914] Call Trace: [ 1107.310900][T16914] [ 1107.310909][T16914] __dump_stack+0x1d/0x30 [ 1107.311018][T16914] dump_stack_lvl+0xe8/0x140 [ 1107.311044][T16914] dump_stack+0x15/0x1b [ 1107.311067][T16914] should_fail_ex+0x265/0x280 [ 1107.311093][T16914] should_failslab+0x8c/0xb0 [ 1107.311199][T16914] __kmalloc_noprof+0xa5/0x570 [ 1107.311238][T16914] ? security_bpf_map_create+0x51/0x130 [ 1107.311278][T16914] security_bpf_map_create+0x51/0x130 [ 1107.311392][T16914] map_create+0xcae/0xda0 [ 1107.311417][T16914] ? security_bpf+0x2b/0x90 [ 1107.311450][T16914] __sys_bpf+0x54e/0x7c0 [ 1107.311484][T16914] __x64_sys_bpf+0x41/0x50 [ 1107.311521][T16914] x64_sys_call+0x2aee/0x3000 [ 1107.311649][T16914] do_syscall_64+0xd2/0x200 [ 1107.311679][T16914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1107.311716][T16914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1107.311810][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.311837][T16914] RIP: 0033:0x7f72abeaefc9 [ 1107.311856][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.311880][T16914] RSP: 002b:00007f72aa90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1107.311904][T16914] RAX: ffffffffffffffda RBX: 00007f72ac105fa0 RCX: 00007f72abeaefc9 [ 1107.311962][T16914] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 1107.311979][T16914] RBP: 00007f72aa90f090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.311995][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.312011][T16914] R13: 00007f72ac106038 R14: 00007f72ac105fa0 R15: 00007fff06eb5eb8 [ 1107.312037][T16914] [ 1107.536813][ T29] audit: type=1326 audit(2000000232.330:121727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16888 comm="syz.9.15682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66cd5efc9 code=0x7ffc0000 [ 1107.562273][T16918] loop2: detected capacity change from 0 to 2048 [ 1107.580470][T16918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1107.592877][T16918] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.623142][T11905] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 345: padding at end of block bitmap is not set [ 1107.638145][T11905] EXT4-fs (loop2): Remounting filesystem read-only [ 1107.644842][T22534] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 1107.659961][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.687882][T16932] loop2: detected capacity change from 0 to 512 [ 1107.700079][T16932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1107.712942][T16932] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1107.806523][T16939] loop9: detected capacity change from 0 to 512 [ 1107.832543][T16939] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 1107.846654][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.930560][T16951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15704'. [ 1107.970574][T16953] loop9: detected capacity change from 0 to 512 [ 1107.989994][T16953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.008612][T16953] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.038706][T16953] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.139444][T16965] netlink: 332 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1108.156482][T16965] netlink: 'syz.0.15708': attribute type 9 has an invalid length. [ 1108.164428][T16965] netlink: 108 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1108.173808][T16965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1108.206107][T16965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15708'. [ 1108.218210][T16965] IPVS: Unknown mcast interface: vetN1_macvtap [ 1108.237087][T16969] lo speed is unknown, defaulting to 1000 [ 1108.253505][T16969] lo speed is unknown, defaulting to 1000 [ 1108.362882][T16975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15712'. [ 1108.372126][T16975] netlink: 44 bytes leftover after parsing attributes in process `syz.1.15712'. [ 1108.496352][T16984] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15716'. [ 1108.544166][T16982] loop9: detected capacity change from 0 to 512 [ 1108.566732][T16982] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1108.594175][T16990] netlink: 'syz.0.15717': attribute type 1 has an invalid length. [ 1108.627015][T16982] EXT4-fs (loop9): 1 truncate cleaned up [ 1108.644136][T16982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1108.800829][T16996] loop6: detected capacity change from 0 to 128 [ 1108.828104][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.881061][T17001] loop9: detected capacity change from 0 to 512 [ 1108.887596][T17001] EXT4-fs: Ignoring removed bh option [ 1108.910067][T17001] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1108.919277][T17001] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 1108.956014][T17006] loop2: detected capacity change from 0 to 512 [ 1108.963447][T17006] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1108.975234][T17001] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1109.007572][T17001] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 1109.028317][T17001] System zones: 0-2, 18-18, 34-35 [ 1109.042599][T17010] SELinux: failed to load policy [ 1109.052447][T17001] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.098396][T17014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15728'. [ 1109.184500][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.238950][T17022] loop2: detected capacity change from 0 to 512 [ 1109.254607][T17022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1109.300425][T17028] loop9: detected capacity change from 0 to 1024 [ 1109.307244][T17028] EXT4-fs: Ignoring removed nobh option [ 1109.312882][T17028] EXT4-fs: Ignoring removed bh option [ 1109.319625][T17022] EXT4-fs (loop2): 1 truncate cleaned up [ 1109.327063][T17022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1109.380242][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.390150][T17028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.480543][T17042] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15740'. [ 1109.515790][T17047] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1109.701776][T17065] FAULT_INJECTION: forcing a failure. [ 1109.701776][T17065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.714972][T17065] CPU: 0 UID: 0 PID: 17065 Comm: syz.0.15749 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1109.715011][T17065] Tainted: [W]=WARN [ 1109.715019][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1109.715034][T17065] Call Trace: [ 1109.715041][T17065] [ 1109.715049][T17065] __dump_stack+0x1d/0x30 [ 1109.715100][T17065] dump_stack_lvl+0xe8/0x140 [ 1109.715124][T17065] dump_stack+0x15/0x1b [ 1109.715145][T17065] should_fail_ex+0x265/0x280 [ 1109.715174][T17065] should_fail+0xb/0x20 [ 1109.715193][T17065] should_fail_usercopy+0x1a/0x20 [ 1109.715240][T17065] _copy_from_iter+0xd2/0xe80 [ 1109.715319][T17065] ? __rcu_read_unlock+0x4f/0x70 [ 1109.715349][T17065] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1109.715377][T17065] memcpy_from_msg+0x3c/0xa0 [ 1109.715401][T17065] isotp_sendmsg+0x506/0xbf0 [ 1109.715461][T17065] ? __pfx_isotp_sendmsg+0x10/0x10 [ 1109.715498][T17065] __sock_sendmsg+0x145/0x180 [ 1109.715527][T17065] ____sys_sendmsg+0x345/0x4e0 [ 1109.715617][T17065] ___sys_sendmsg+0x17b/0x1d0 [ 1109.715671][T17065] __sys_sendmmsg+0x178/0x300 [ 1109.715705][T17065] __x64_sys_sendmmsg+0x57/0x70 [ 1109.715773][T17065] x64_sys_call+0x1c4a/0x3000 [ 1109.715799][T17065] do_syscall_64+0xd2/0x200 [ 1109.715820][T17065] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1109.715931][T17065] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1109.716046][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.716118][T17065] RIP: 0033:0x7f6e9e89efc9 [ 1109.716135][T17065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1109.716209][T17065] RSP: 002b:00007f6e9d2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1109.716231][T17065] RAX: ffffffffffffffda RBX: 00007f6e9eaf5fa0 RCX: 00007f6e9e89efc9 [ 1109.716245][T17065] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000005 [ 1109.716310][T17065] RBP: 00007f6e9d2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.716325][T17065] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000001 [ 1109.716339][T17065] R13: 00007f6e9eaf6038 R14: 00007f6e9eaf5fa0 R15: 00007ffe6b153278 [ 1109.716361][T17065] [ 1109.940581][T17050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15742'. [ 1109.976310][T17069] loop6: detected capacity change from 0 to 512 [ 1110.140714][ T7035] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.203498][T17082] loop9: detected capacity change from 0 to 512 [ 1110.243028][T17082] EXT4-fs (loop9): 1 orphan inode deleted [ 1110.254556][T17082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.267905][T17074] loop6: detected capacity change from 0 to 164 [ 1110.268697][T17088] No such timeout policy "syz1" [ 1110.274905][T17082] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.290721][T17074] iso9660: Unknown parameter 'ÿÿÿÿ ' [ 1110.407302][T17100] lo speed is unknown, defaulting to 1000 [ 1110.421389][T17100] lo speed is unknown, defaulting to 1000 [ 1110.572500][T22534] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.605717][T17101] lo speed is unknown, defaulting to 1000 [ 1110.611927][T17101] lo speed is unknown, defaulting to 1000 [ 1110.631128][T22534] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.697171][T17116] loop2: detected capacity change from 0 to 1024 [ 1110.705516][T17116] EXT4-fs: Ignoring removed nobh option [ 1110.711164][T17116] EXT4-fs: Ignoring removed bh option [ 1110.718796][T22534] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.741460][T17116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.776170][T22534] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.794341][T17101] chnl_net:caif_netlink_parms(): no params data found [ 1110.882365][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.889536][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.908352][T17101] bridge_slave_0: entered allmulticast mode [ 1110.914878][T17101] bridge_slave_0: entered promiscuous mode [ 1110.915402][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1110.932044][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.939155][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.946568][T17101] bridge_slave_1: entered allmulticast mode [ 1110.954339][T17101] bridge_slave_1: entered promiscuous mode [ 1111.018632][T17135] No such timeout policy "syz1" [ 1111.074321][T22534] bridge0 (unregistering): left allmulticast mode [ 1111.106011][T17146] netlink: 'syz.2.15774': attribute type 1 has an invalid length. [ 1111.221058][T22534] bond0 (unregistering): Released all slaves [ 1111.325184][T17146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1111.352696][T17147] bond2: (slave geneve2): making interface the new active one [ 1111.362174][T17147] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1111.374331][T22534] tipc: Disabling bearer [ 1111.379431][T22534] tipc: Disabling bearer [ 1111.384764][T22534] tipc: Left network mode [ 1111.390387][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.439801][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.488346][T22534] hsr_slave_0: left promiscuous mode [ 1111.494428][T22534] hsr_slave_1: left promiscuous mode [ 1111.502283][T22534] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 1111.509402][T22534] batman_adv: batadv0: Removing interface: veth1_vlan [ 1111.535436][T22534] veth1_macvtap: left promiscuous mode [ 1111.541873][T22534] veth0_macvtap: left promiscuous mode [ 1111.547382][T22534] veth1_vlan: left promiscuous mode [ 1111.555469][T22534] veth0_vlan: left promiscuous mode [ 1111.624463][T22534] pimreg (unregistering): left allmulticast mode [ 1111.766137][T17172] No such timeout policy "syz1" [ 1111.817933][T17101] team0: Port device team_slave_0 added [ 1111.832143][T17101] team0: Port device team_slave_1 added [ 1111.948808][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.955795][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.981787][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.031069][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.038053][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.064091][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.157192][T17101] hsr_slave_0: entered promiscuous mode [ 1112.164159][T17101] hsr_slave_1: entered promiscuous mode [ 1112.172754][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 1112.178530][T17101] Cannot create hsr debugfs directory [ 1112.293667][T22534] IPVS: stop unused estimator thread 0... [ 1112.341406][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 1112.341426][ T29] audit: type=1326 audit(2000000237.130:122734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.371574][ T29] audit: type=1326 audit(2000000237.130:122735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.395356][ T29] audit: type=1326 audit(2000000237.130:122736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.419272][ T29] audit: type=1326 audit(2000000237.130:122737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.443102][ T29] audit: type=1326 audit(2000000237.130:122738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.466863][ T29] audit: type=1326 audit(2000000237.130:122739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.490681][ T29] audit: type=1326 audit(2000000237.130:122740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.514438][ T29] audit: type=1326 audit(2000000237.130:122741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.538206][ T29] audit: type=1326 audit(2000000237.130:122742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.562295][ T29] audit: type=1326 audit(2000000237.130:122743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17191 comm="syz.1.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f408fc0efc9 code=0x7ffc0000 [ 1112.901212][T17207] loop2: detected capacity change from 0 to 512 [ 1112.918794][T17207] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1112.922223][T17101] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1112.946820][T17207] EXT4-fs (loop2): 1 truncate cleaned up [ 1112.953187][T17207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1112.954373][T17101] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1112.975757][T17210] No such timeout policy "syz1" [ 1113.006210][T17212] loop6: detected capacity change from 0 to 512 [ 1113.018905][T17101] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1113.029088][ T9514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1113.040634][T17101] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1113.154028][T17101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.179415][T17101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.188446][T17231] loop2: detected capacity change from 0 to 512 [ 1113.199088][T13207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.206237][T13207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.220668][T17231] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 1113.225957][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.236456][T13729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.241909][T17237] loop6: detected capacity change from 0 to 512 [ 1113.253747][T17233] lo speed is unknown, defaulting to 1000 [ 1113.314198][T17237] FAULT_INJECTION: forcing a failure. [ 1113.314198][T17237] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.326928][T17237] CPU: 1 UID: 0 PID: 17237 Comm: syz.6.15803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1113.326981][T17237] Tainted: [W]=WARN [ 1113.326990][T17237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1113.327061][T17237] Call Trace: [ 1113.327069][T17237] [ 1113.327079][T17237] __dump_stack+0x1d/0x30 [ 1113.327110][T17237] dump_stack_lvl+0xe8/0x140 [ 1113.327214][T17237] dump_stack+0x15/0x1b [ 1113.327239][T17237] should_fail_ex+0x265/0x280 [ 1113.327266][T17237] should_failslab+0x8c/0xb0 [ 1113.327306][T17237] kmem_cache_alloc_noprof+0x50/0x480 [ 1113.327396][T17237] ? dst_alloc+0xbd/0x100 [ 1113.327520][T17237] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1113.327551][T17237] dst_alloc+0xbd/0x100 [ 1113.327594][T17237] ip6_pol_route+0x6bf/0xb40 [ 1113.327676][T17237] ? ip6_pol_route+0x389/0xb40 [ 1113.327714][T17237] ip6_pol_route_output+0x40/0x50 [ 1113.327746][T17237] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1113.327797][T17237] fib6_rule_lookup+0x112/0x470 [ 1113.327834][T17237] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1113.327872][T17237] ? cred_has_capability+0x210/0x280 [ 1113.327982][T17237] ip6_route_output_flags+0x1e0/0x2c0 [ 1113.328031][T17237] ip6_dst_lookup_tail+0xb6/0xab0 [ 1113.328055][T17237] ? ns_capable+0x7d/0xb0 [ 1113.328082][T17237] ? ip6_datagram_send_ctl+0xbaa/0xd70 [ 1113.328194][T17237] ip6_dst_lookup_flow+0x47/0xc0 [ 1113.328227][T17237] l2tp_ip6_sendmsg+0x9a0/0xd20 [ 1113.328271][T17237] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 1113.328366][T17237] inet_sendmsg+0xc5/0xd0 [ 1113.328393][T17237] __sock_sendmsg+0x102/0x180 [ 1113.328424][T17237] ____sys_sendmsg+0x31e/0x4e0 [ 1113.328468][T17237] ___sys_sendmsg+0x17b/0x1d0 [ 1113.328563][T17237] __x64_sys_sendmsg+0xd4/0x160 [ 1113.328594][T17237] x64_sys_call+0x191e/0x3000 [ 1113.328639][T17237] do_syscall_64+0xd2/0x200 [ 1113.328664][T17237] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1113.328694][T17237] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1113.328737][T17237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.328809][T17237] RIP: 0033:0x7f72abeaefc9 [ 1113.328856][T17237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.328880][T17237] RSP: 002b:00007f72aa8ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.328905][T17237] RAX: ffffffffffffffda RBX: 00007f72ac106090 RCX: 00007f72abeaefc9 [ 1113.328978][T17237] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000006 [ 1113.328995][T17237] RBP: 00007f72aa8ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.329010][T17237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.329027][T17237] R13: 00007f72ac106128 R14: 00007f72ac106090 R15: 00007fff06eb5eb8 [ 1113.329052][T17237] [ 1113.359229][T17101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.378755][T17246] netlink: 'syz.6.15803': attribute type 21 has an invalid length. [ 1113.463507][T17244] loop2: detected capacity change from 0 to 128 [ 1113.478013][T17233] lo speed is unknown, defaulting to 1000 [ 1113.807640][T17249] syz.2.15805: attempt to access beyond end of device [ 1113.807640][T17249] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1113.821389][T17249] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1113.830524][T17244] syz.2.15805: attempt to access beyond end of device [ 1113.830524][T17244] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1113.844111][T17244] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1113.900484][T17244] syz.2.15805: attempt to access beyond end of device [ 1113.900484][T17244] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 1113.914236][T17244] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 1114.000058][T17101] veth0_vlan: entered promiscuous mode [ 1114.023814][T17101] veth1_vlan: entered promiscuous mode [ 1114.034563][T17265] SELinux: Context @ is not valid (left unmapped). [ 1114.063053][T17101] veth0_macvtap: entered promiscuous mode [ 1114.072756][T17277] loop2: detected capacity change from 0 to 512 [ 1114.076206][T17101] veth1_macvtap: entered promiscuous mode [ 1114.089329][T17276] lo speed is unknown, defaulting to 1000 [ 1114.096478][T17277] EXT4-fs (loop2): too many log groups per flexible block group [ 1114.101054][T17101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.111667][T17277] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 1114.111931][T17276] lo speed is unknown, defaulting to 1000 [ 1114.128918][T17101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.137694][T17279] __nla_validate_parse: 9 callbacks suppressed [ 1114.137707][T17279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15811'. [ 1114.155868][T17277] EXT4-fs (loop2): mount failed [ 1114.165957][T11908] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.195153][T11908] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.211306][T11908] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.219934][T17277] netlink: 'syz.2.15810': attribute type 21 has an invalid length. [ 1114.238780][T11908] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.923671][T17310] lo speed is unknown, defaulting to 1000 [ 1114.940327][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15822'. [ 1114.980450][T17310] lo speed is unknown, defaulting to 1000 [ 1115.018399][T17315] loop6: detected capacity change from 0 to 1024 [ 1115.038422][T17315] EXT4-fs: Ignoring removed nobh option [ 1115.044026][T17315] EXT4-fs: Ignoring removed bh option [ 1115.282418][T17320] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1115.652181][T17326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.15825'. [ 1115.661421][T17326] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15825'. [ 1115.720307][T17324] SELinux: failed to load policy [ 1116.078649][T17335] netlink: 'syz.6.15829': attribute type 64 has an invalid length. [ 1116.114747][ T3368] lo speed is unknown, defaulting to 1000 [ 1116.146979][T17335] loop6: detected capacity change from 0 to 512 [ 1116.162222][T17335] EXT4-fs: dax option not supported [ 1116.196672][T17335] loop6: detected capacity change from 0 to 512 [ 1116.327997][T17342] FAULT_INJECTION: forcing a failure. [ 1116.327997][T17342] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.340728][T17342] CPU: 0 UID: 0 PID: 17342 Comm: syz.1.15832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1116.340763][T17342] Tainted: [W]=WARN [ 1116.340770][T17342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1116.340887][T17342] Call Trace: [ 1116.340895][T17342] [ 1116.340905][T17342] __dump_stack+0x1d/0x30 [ 1116.340927][T17342] dump_stack_lvl+0xe8/0x140 [ 1116.340945][T17342] dump_stack+0x15/0x1b [ 1116.341034][T17342] should_fail_ex+0x265/0x280 [ 1116.341057][T17342] should_failslab+0x8c/0xb0 [ 1116.341094][T17342] kmem_cache_alloc_noprof+0x50/0x480 [ 1116.341130][T17342] ? security_inode_alloc+0x37/0x100 [ 1116.341158][T17342] security_inode_alloc+0x37/0x100 [ 1116.341177][T17342] inode_init_always_gfp+0x4b7/0x500 [ 1116.341202][T17342] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1116.341229][T17342] alloc_inode+0x58/0x170 [ 1116.341261][T17342] new_inode+0x1d/0xe0 [ 1116.341294][T17342] shmem_get_inode+0x244/0x750 [ 1116.341316][T17342] __shmem_file_setup+0x113/0x210 [ 1116.341336][T17342] shmem_file_setup+0x3b/0x50 [ 1116.341438][T17342] __se_sys_memfd_create+0x2c3/0x590 [ 1116.341542][T17342] __x64_sys_memfd_create+0x31/0x40 [ 1116.341642][T17342] x64_sys_call+0x2ac2/0x3000 [ 1116.341723][T17342] do_syscall_64+0xd2/0x200 [ 1116.341745][T17342] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1116.341787][T17342] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1116.341825][T17342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.341854][T17342] RIP: 0033:0x7f408fc0efc9 [ 1116.341893][T17342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1116.341911][T17342] RSP: 002b:00007f408e66ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1116.341930][T17342] RAX: ffffffffffffffda RBX: 00000000000004d9 RCX: 00007f408fc0efc9 [ 1116.341942][T17342] RDX: 00007f408e66eef0 RSI: 0000000000000000 RDI: 00007f408fc92960 [ 1116.342007][T17342] RBP: 0000200000000900 R08: 00007f408e66ebb7 R09: 00007f408e66ee40 [ 1116.342019][T17342] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 1116.342034][T17342] R13: 00007f408e66eef0 R14: 00007f408e66eeb0 R15: 0000200000000840 [ 1116.342057][T17342] [ 1116.575587][T17347] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15833'. [ 1116.631039][T17351] netlink: 332 bytes leftover after parsing attributes in process `syz.6.15835'. [ 1116.652095][T17351] netlink: 'syz.6.15835': attribute type 9 has an invalid length. [ 1116.659992][T17351] netlink: 108 bytes leftover after parsing attributes in process `syz.6.15835'. [ 1116.669194][T17351] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15835'. [ 1116.804303][T17361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1116.875217][T17372] netlink: 200 bytes leftover after parsing attributes in process `syz.0.15843'. [ 1116.886294][T17319] ================================================================== [ 1116.894398][T17319] BUG: KCSAN: data-race in __htab_map_lookup_elem / bpf_lru_pop_free [ 1116.902482][T17319] [ 1116.904826][T17319] write to 0xffff8881195f6468 of 4 bytes by task 17372 on cpu 0: [ 1116.912565][T17319] bpf_lru_pop_free+0xbea/0xcc0 [ 1116.917430][T17319] __htab_lru_percpu_map_update_elem+0xea/0x600 [ 1116.923692][T17319] bpf_percpu_hash_update+0x61/0xa0 [ 1116.928914][T17319] bpf_map_update_value+0x36b/0x570 [ 1116.934122][T17319] generic_map_update_batch+0x3ff/0x550 [ 1116.939682][T17319] bpf_map_do_batch+0x25c/0x380 [ 1116.944543][T17319] __sys_bpf+0x5f8/0x7c0 [ 1116.948789][T17319] __x64_sys_bpf+0x41/0x50 [ 1116.953218][T17319] x64_sys_call+0x2aee/0x3000 [ 1116.957906][T17319] do_syscall_64+0xd2/0x200 [ 1116.962421][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.968406][T17319] [ 1116.970729][T17319] read to 0xffff8881195f6468 of 4 bytes by task 17319 on cpu 1: [ 1116.978360][T17319] __htab_map_lookup_elem+0xab/0x150 [ 1116.983653][T17319] htab_lru_percpu_map_lookup_elem+0x20/0xb0 [ 1116.989650][T17319] bpf_prog_1908f35e458ae2da+0x48/0x50 [ 1116.995117][T17319] bpf_trace_run2+0x107/0x1c0 [ 1116.999809][T17319] __traceiter_kfree+0x2e/0x50 [ 1117.004578][T17319] kfree+0x351/0x400 [ 1117.008484][T17319] ___sys_recvmsg+0x135/0x370 [ 1117.013168][T17319] do_recvmmsg+0x1ef/0x540 [ 1117.017600][T17319] __x64_sys_recvmmsg+0xe5/0x170 [ 1117.022543][T17319] x64_sys_call+0x27aa/0x3000 [ 1117.027237][T17319] do_syscall_64+0xd2/0x200 [ 1117.031746][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.037641][T17319] [ 1117.039964][T17319] value changed: 0xd4d94076 -> 0x797086f1 [ 1117.045673][T17319] [ 1117.047999][T17319] Reported by Kernel Concurrency Sanitizer on: [ 1117.054144][T17319] CPU: 1 UID: 0 PID: 17319 Comm: syz.2.15824 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1117.065619][T17319] Tainted: [W]=WARN [ 1117.069422][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1117.079475][T17319] ================================================================== [ 1117.160272][T17373] loop6: detected capacity change from 0 to 512