last executing test programs: 5m36.054421058s ago: executing program 32 (id=75): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0x6, 0x400}, {0x4000, 0x9, 0xae, 0xffff}]}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000580)={'security\x00'}, &(0x7f0000000740)=0x24) fdatasync(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x9, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x473}, @jmp={0x5, 0x1, 0xd, 0x5, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x81, 0x6, 0x6, 0x401, 0x1823}, @ldst={0x2, 0x1, 0x4, 0x2, 0x4, 0xffffffffffffffc0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0x2, 0x2, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x10001, 0x35, &(0x7f0000000280)=""/53, 0x41000, 0x1, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x401, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0xb1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x5}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m14.806966901s ago: executing program 2 (id=395): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000140)=@tcp6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x8a, 0x7, 0x8, 0x6, @mcast1, @mcast1, 0x8000, 0x8, 0x3c0, 0x6}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000040)) 5m14.790142861s ago: executing program 2 (id=397): r0 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) unshare(0x24060400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x282003) ioctl$BLKCRYPTOIMPORTKEY(r2, 0xc0401289, &(0x7f0000000140)={&(0x7f0000000080)="35cf78319663144203aa4eff8092b132bbd2ead64aae915125809d802a647945c9948f5ebba2a3e8316e8d51df4a258106185dd638aca3", 0x37, &(0x7f0000000100)=""/3, 0x3}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x800}, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, 0x0, 0x84842, 0x0) openat(r4, &(0x7f0000004400)='./bus\x00', 0x181202, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x2000}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000280)={0x1f, 0x100, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0x0) 5m14.757134102s ago: executing program 2 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4000000) 5m14.730952893s ago: executing program 2 (id=401): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000040), 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x105042, 0x1db) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = syz_clone(0x8801a400, &(0x7f0000001600)="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", 0x1000, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000ac0)="47e9317778ddd0d2ac2c0e67fb11f6169035cf102cf39751f97f0de21b2aeac850cae26b8814c9af9905bc89e9cfec73cfb2483656970db84e5fe56ac43999174c0659fe73591a6f28937ebdce8f172802d7a3ddcd6af6eb802d9add0d5de38c9ef3a7b333ed2188e21ea9f3280488ea16e0109b83779c831cc993ebcea7fec0e3b791c67f42cd392e6687ef74ae1675509e3fa9e0f06b82c6b0014ce37d4950789eb188e81d6cb702893cb0f8abba0e598f0afe20d31052a625caf55b3ef8a354b924aaaeeb88b43c07a86e2bd380cb1c5410552686f5a99a21f9d222ee5b0c2a47ec9441d5a1efcf7f") ptrace$cont(0x20, r2, 0x0, 0xf31) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@delalloc}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x3a00) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f00000009c0)=""/247) 5m14.611378135s ago: executing program 2 (id=404): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0x6, 0x400}, {0x4000, 0x9, 0xae, 0xffff}]}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000580)={'security\x00', 0xc4, "ec40c4729fb21803090c9f7451afe5e72202eb50a4eae5df159945f2947a29062ee7a38f113b19a7434fd65e521cebb2b587eaa365da05d5db8d8797f83ec402dfd09b129ca368062eea35a57134ed700f2f7a1c37418685c9cc18a5ea4ae9a2d84ed6c67ba3645063050dcb390914704451d9f5512813f2312cb9de3fa4c8679cee5c687d5bc988773e6d9d32b9847a2f3ba7eaa64285cf1499a0e3a27970a9b50241b520a6ef5550351bbf3af540a659c8007573ea19cb2b780b27f418dd96bd9559d2"}, &(0x7f0000000740)=0xe8) fdatasync(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x9, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x473}, @jmp={0x5, 0x1, 0xd, 0x5, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x81, 0x6, 0x6, 0x401, 0x1823}, @ldst={0x2, 0x1, 0x4, 0x2, 0x4, 0xffffffffffffffc0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0x2, 0x2, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x10001, 0x35, &(0x7f0000000280)=""/53, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x401, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0xb1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x5}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m10.538603835s ago: executing program 2 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$pptp(0x18, 0x1, 0x2) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) (async) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8003) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000380)) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) ftruncate(r2, 0x8) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r4, r4) (async, rerun: 64) keyctl$chown(0x4, r1, 0xee00, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000326bd7000fedbdf250e000000440004802c00078008000300020000000800030004000000080003000000000008000200e20a000008000300090000001300010062726f616400005982396c496e6b0000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) (rerun: 64) request_key(&(0x7f0000001100)='logon\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001140)='\x00$\x8a\x9e[U\xcf\x80#\x81v{?\x97\x18\x16?Bx\xee\xae\xb5\xbekl,\x1f\x1e\xda\x19\xf9\t\x02\'\xed\xb8\x9f+<\xe2\x89\x89\xfa\xf3\x96\\E\xdb\xffk\x15\xaen\xd7H(\xfa\x92\x1e\x1c\x16o\x91\xff\xb9\xd0\x80}p\xc6EL\xe1\xa6.\xdb*9 \xea\nm,\xab\xa1n\x9e4z\xd5\xa7\xce\x98G\xa9\x90^\x9d\bM\xc8\xc5\";\x81\xb0\x82\vx\xa2[>\xd0]\xd5', r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x839eef59733fa2ad, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m10.538249816s ago: executing program 33 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$pptp(0x18, 0x1, 0x2) (async) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) (async) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x8003) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (rerun: 64) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000380)) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32) ftruncate(r2, 0x8) (async) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r4, r4) (async, rerun: 64) keyctl$chown(0x4, r1, 0xee00, 0x0) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async, rerun: 64) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000326bd7000fedbdf250e000000440004802c00078008000300020000000800030004000000080003000000000008000200e20a000008000300090000001300010062726f616400005982396c496e6b0000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x40) (rerun: 64) request_key(&(0x7f0000001100)='logon\x00', &(0x7f00000010c0)={'syz', 0x3}, &(0x7f0000001140)='\x00$\x8a\x9e[U\xcf\x80#\x81v{?\x97\x18\x16?Bx\xee\xae\xb5\xbekl,\x1f\x1e\xda\x19\xf9\t\x02\'\xed\xb8\x9f+<\xe2\x89\x89\xfa\xf3\x96\\E\xdb\xffk\x15\xaen\xd7H(\xfa\x92\x1e\x1c\x16o\x91\xff\xb9\xd0\x80}p\xc6EL\xe1\xa6.\xdb*9 \xea\nm,\xab\xa1n\x9e4z\xd5\xa7\xce\x98G\xa9\x90^\x9d\bM\xc8\xc5\";\x81\xb0\x82\vx\xa2[>\xd0]\xd5', r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x839eef59733fa2ad, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m58.607021213s ago: executing program 5 (id=736): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10041, 0x0, 0x3, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu~=0||!') 4m58.514580505s ago: executing program 5 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x870b527, 0x8000, {0x0, 0x0, 0x0, r3, {0x48da3926d6923cd3, 0xc}, {}, {0x3, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x1d, 0x8}}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13730}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_pts(r5, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10041, 0x0, 0x3, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000180)='cpu~=0||!') 4m58.454675176s ago: executing program 5 (id=739): bind$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x2}, 0xb}, 0x1c) r0 = perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0xbc2c, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x2}, 0x0, 0x10000, 0x8, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) (async) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000580)='rxrpc_s\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4, 0x0, 0x3}, 0x18) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) (async) r5 = getpid() process_vm_readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1, 0x1a420, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x60d1a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x7}, 0x104020, 0x7, 0x81, 0xb26704a644f9fe81, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, r0, 0x9) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000e00)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x200001) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)="65f2", 0x2}], 0x1) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x801) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 4m58.324917539s ago: executing program 5 (id=743): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x10001, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) r1 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x3412c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000df4ea31535cce277000000000011000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000240)={@initdev, @multicast1}, &(0x7f0000000280)=0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r5, 0x0, 0x1000000000000000}, 0x18) readahead(0xffffffffffffffff, 0xfffffffffffffffa, 0x4) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000540)={0x0, 0x5f00, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf2517000000500006800800060006000000440004"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4804) 4m57.979827816s ago: executing program 5 (id=750): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0x6, 0x400}, {0x4000, 0x9, 0xae, 0xffff}]}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000580)={'security\x00', 0xc4, "ec40c4729fb21803090c9f7451afe5e72202eb50a4eae5df159945f2947a29062ee7a38f113b19a7434fd65e521cebb2b587eaa365da05d5db8d8797f83ec402dfd09b129ca368062eea35a57134ed700f2f7a1c37418685c9cc18a5ea4ae9a2d84ed6c67ba3645063050dcb390914704451d9f5512813f2312cb9de3fa4c8679cee5c687d5bc988773e6d9d32b9847a2f3ba7eaa64285cf1499a0e3a27970a9b50241b520a6ef5550351bbf3af540a659c8007573ea19cb2b780b27f418dd96bd9559d2"}, &(0x7f0000000740)=0xe8) fdatasync(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x9, &(0x7f0000000180)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x473}, @jmp={0x5, 0x1, 0xd, 0x5, 0x9, 0xfffffffffffffff8, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x14}, @generic={0x81, 0x6, 0x6, 0x401, 0x1823}, @ldst={0x2, 0x1, 0x4, 0x2, 0x4, 0xffffffffffffffc0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @generic={0x9, 0x2, 0x2, 0x7}], &(0x7f0000000200)='syzkaller\x00', 0x10001, 0x35, &(0x7f0000000280)=""/53, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000002c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x401, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0], 0x0, 0x10, 0x3}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0xb1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x5}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m57.727158631s ago: executing program 5 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m57.715885981s ago: executing program 34 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m6.609174329s ago: executing program 6 (id=5423): r0 = io_uring_setup(0x454b, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x7, 0xd215) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x0, 0xfa, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xd0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, 0x0, &(0x7f0000000540)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip6gre0\x00', 0x0, 0x2f, 0xed, 0x40, 0x7, 0x21, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x710, 0x0, 0xe}}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) fcntl$lock(r5, 0x5, &(0x7f0000000080)={0x1, 0x0, 0x5, 0x1}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x1}, 0x3548, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) 2m6.358700194s ago: executing program 6 (id=5425): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(0x0, r0, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 2m6.358238884s ago: executing program 6 (id=5426): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0xbc, &(0x7f0000000240)=0x0) r2 = eventfd(0x7dbf) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x4000, r0, 0x0, 0x0, 0x5f3, 0x0, 0x3, r2}]) (fail_nth: 1) 2m5.957613372s ago: executing program 6 (id=5433): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160003747265b17c848adb00dadf000000400400", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0d000000875a0000040000000100000000000000", @ANYRES32=r0, @ANYBLOB="0000000000ed3bcd000000000000000000000000000000d8eb8225fb533681f4bc7d941a7bf11d8d28fc0431435bf85d9360ced37a3278c225f873136fb1c5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xf, r1, 0x4, 0x8000000}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffee8, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="480601080000000000000000050000000400078000000300856173683a6e65742c2e65740000000000000780000003000100000005000400000000000900020073797a31000000a98b0004000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x200400c1}, 0x8000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) lseek(r5, 0x1, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2000015f, &(0x7f0000000880)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r12, {0x4, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmsg$nl_route_sched_retired(r10, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=@newtclass={0x160, 0x28, 0x8, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x1, 0xffff}, {0x6, 0xfff2}, {0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xb}}}, @c_atm={{0x8}, {0xac, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xa}}, @TCA_ATM_HDR={0x35, 0x3, "5d8e8a09f7bf2e88f56605376a2b03ccc8a979a069ac7ae6884291f2ead989c7a91718795ea95c7cd369f53cbf40437930"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x10}}, @TCA_ATM_HDR={0x36, 0x3, "387170542b3e6db75dd8c6feadaab32f4c08ec945f915821ce864b1853627efbce096d9cd7fceada1660b286f9a59d4091df"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x7, 0xfff1}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x1ffe4, 0xc}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r3}]}}, @c_atm={{0x8}, {0x28, 0x2, [@TCA_ATM_HDR={0x24, 0x3, "6ef9d3191215ae0bf4b6a88f9657ae10612a6adb10065c2f1dc9f0241db39561"}]}}, @c_atm={{0x8}, {0x20, 0x2, [@TCA_ATM_HDR={0x4}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_HDR={0xd, 0x3, "8a606f7fdc4b7ad4a9"}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x73}}}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004001}, 0x800) r13 = syz_open_pts(r10, 0x541a00) ioctl$GIO_CMAP(r13, 0x4b70, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r10, 0x40086602, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) 2m5.500879461s ago: executing program 6 (id=5443): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000380), &(0x7f00000005c0)=r4}, 0x20) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)={0x1c, 0x3, 0x1, 0x301, 0x0, 0x0, {0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x804) (async) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r9, r0, 0x0, r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) 2m4.975836281s ago: executing program 6 (id=5455): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f00000001c0)) 2m4.928393732s ago: executing program 35 (id=5455): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f00000001c0)) 1m0.853158608s ago: executing program 8 (id=7193): unlinkat(0xffffffffffffff9c, 0x0, 0x0) (fail_nth: 2) 1m0.736879551s ago: executing program 8 (id=7196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m0.735080601s ago: executing program 8 (id=7197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r2) 1m0.590341724s ago: executing program 8 (id=7199): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r3, 0x10001, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r7, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf0000000000000500"]) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r8, r8, 0x21) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='kmem_cache_free\x00', r9, 0x0, 0xf}, 0x18) ioprio_set$pid(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000800), &(0x7f0000000200)=r6}, 0x20) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001080)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@errors_continue}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '{%'}}, {@dont_hash}, {@fowner_lt={'fowner<', r10}}, {@euid_lt}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 1m0.474720396s ago: executing program 8 (id=7204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1m0.454821966s ago: executing program 8 (id=7206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) unshare(0x20000400) 1m0.454626376s ago: executing program 36 (id=7206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) unshare(0x20000400) 46.650645081s ago: executing program 9 (id=7574): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszqbbZDfdttmdNPP5wGbnvZnd97778jJvZvJ2Aiit8exHGrEj4taJJGKsZd1oNFaO59vd/OPKyeyRRK325u9JJHlec/skf96aJ4Yj4vvDEY9XVpe7cOny6elqreGDiL2LZ87vXbh0ec/8melTs6dmz07te2n/gcmXp/ZPrUucW/PnI0ffePrTD999ce6H6p4kDsbxwfdnYkUc62U8xuNWHmJr/kBEHMgW2nwuD5tNEEKpVfLfx8GIeDLGolJPNYzF/CeFVg7oqVologaUVKL/Q0k1xwHNY/vujoOP93hU0j83DjUOgFbHP9A4NxLD9WOjLTeTliOjxrmNbetQflbGf1d2fpk94o7zEH8vt87AOpTTydLViHiqXfxJvW7b6pFm8aeRtrwuiYjJiBjK6/faA9QhaVnuxXmYtdxL/K3tkH0WB/PnLP/wfZY/viLd7/gBKKfrh/Id+VKWur3/y8YezfFPtBn/jLbZd92Povd/ncd/zf39cP0cebpiHJaNWY61f8vBlRm/fHzk807lt47/skdWfnMs2A83rkbsXBH/R/WBXrLc/kmb9s82OXGwuzJe//G3I53WFR1/7VrErrbHP7dHpdnSGtcn987NV2cnGz/blvHtd+983an8ouPP2n9Lh/hb2j9d+brsMznfZRnfHLt2ptO60bvGn/46lDSON4fynPemFxcvTEUMJUfzTVry961dl+Y2zffI4t/9XPv+f8fv/9U732ek+SezC+ffOn2z07r7af+Wi8m3al3WoZMs/pm7t/+q/p/lfdZlGX+9ffGZTuvWin/kQQIDAAAAAACAEkrr12CTdGJ5OU0nJhrzZZ+ILWn13MLi83PnLp6didhd/3/IwbR5pXuskU6y9FT+/7DN9L4V6RciYntEfFEZqacnTp6rzhQdPAAAAAAAAAAAAAAAAAAAAGwQW/P5/837VP9Zacz/B0qilzeYAzY2/R/Kq97/V93iCSgD+38oL/0fykv/h/LS/6G89H8oL/0fykv/h/LS/wEAAABgU9r+7PWfk4hYemWk/sgM5evMCILNbbDoCgCFqRRdAaAwy5f+DfahdLoa//+Tfzlg76sDFCBpl1kfHNTW7vzX274SAAAAAAAAAAAAAOiBXTs6z/83Nxg2N9P+oLweYP6/rw6Ah5yv/ofycowP3G0W/3CnFeb/AwAAAAAAAAAAAEDfjNYfSTqRzwUejTSdmIh4NCK2xWAyN1+dnYyIxyLip8rgI1l6quhKAwAAAAAAAAAAAAAAAAAAwCazcOny6elqdfZC68K/q3I290LzLqh9KOvVuMdXRdL/j2UkIgpvlJ4tDLTkJBFLWctviIpdWIiNUY36QsF/mAAAAAAAAAAAAAAAAAAAoIRa5h63t/OrPtcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrv9v3/e7dQdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMPp/wAAAP//4OFAKg==") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "4fafcda6ae287f1a1e6f7064414f5618bb0ae864c7a8eb79174ffdcb18c82d82", "401643b07b7d46c0c8efd19f8d4db33b", {"1f7ae9988c440b8678cc7f166e7febd6", "7a4e3ea557b01874c0453a0c5760d8c5"}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write$tcp_mem(r3, &(0x7f0000000340)={0xaac8, 0x20, 0xfffffffffffffff9, 0x20, 0xffffffffffffafec}, 0x48) 43.797452188s ago: executing program 9 (id=7681): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2003, @local, 0x2}, 0x1c) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x2, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r5, 0x0, 0x11000002) sendmmsg$inet(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$inet6(0xa, 0x3, 0x3c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4ffd, 0xd, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 43.569777703s ago: executing program 9 (id=7692): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d"], 0x2c}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7fffffff, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)={0x1, 0x10, [{0xa}, {0x3}, {0xf}, {0x3}, {0xb}, {0x4}, {0x8, 0x1}, {0xf}, {}, {0x8}, {0xa}, {0x1}, {0x7, 0x1}, {0x9}, {0x7}, {0x7}]}) 43.146718261s ago: executing program 9 (id=7702): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000280)=0x0, &(0x7f0000000600)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x30, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002680)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r0, 0x0, {0x0, r0}, 0x42, 0x0, 0x1, {0x0, r3, r0}}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 43.142341511s ago: executing program 37 (id=7702): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000280)=0x0, &(0x7f0000000600)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x1, 0x30, r0, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000002680)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r0, 0x0, {0x0, r0}, 0x42, 0x0, 0x1, {0x0, r3, r0}}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4.560839319s ago: executing program 3 (id=8418): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x17c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x26d, @mcast2, 0x28}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "794a00a4e4a8b59f5b6724e176a7610a76b88a9e8e5a8b63ac4b"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x303}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004800) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2, 0x2010, r0, 0xb9fc9000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x4, 0x38}, 0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@remote}, &(0x7f00000004c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480)={@remote, 0x0}, &(0x7f00000004c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7e, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x58}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x4, 0xe, 0xc}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x5, &(0x7f0000000440)=""/5, 0x41100, 0x9, '\x00', r4, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x1, 0x5, 0x4, 0xa}, {0x3, 0x5, 0x9}, {0x4, 0x2, 0xd, 0x3}, {0x4, 0x3, 0xc, 0x3}, {0x0, 0x4, 0x2}, {0x4, 0x3, 0x6}, {0x1, 0x3, 0x4, 0xc}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x58}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x1, 0xa, 0x4, 0xe, 0xc}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x5, &(0x7f0000000440)=""/5, 0x41100, 0x9, '\x00', r4, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[0xffffffffffffffff, r7], &(0x7f0000000940)=[{0x1, 0x5, 0x4, 0xa}, {0x3, 0x5, 0x9}, {0x4, 0x2, 0xd, 0x3}, {0x4, 0x3, 0xc, 0x3}, {0x0, 0x4, 0x2}, {0x4, 0x3, 0x6}, {0x1, 0x3, 0x4, 0xc}, {0x1, 0x3, 0x0, 0x6}], 0x10, 0x7}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000a80)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'veth0_to_team\x00'}}, 0x1e) fsmount(0xffffffffffffffff, 0x0, 0xa) (async) r8 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$inet6(r8, &(0x7f0000002180)={&(0x7f0000000ac0)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000b00)="3e601d653a20d551fd", 0x9}, {&(0x7f0000000b40)="eab2214688980fdccf2b2c5f83add399f07e9c5ee65c24c00c88f1374ad104eebb3222fcc3cbc32b6cfc335c03038c3a6a225c3d81669d300dde462265075c2c7ab3a130e8fb35adfe45e19f7e5fd3958cf5f375882c11", 0x57}, {&(0x7f0000000bc0)="55c359b136d5f3613997c42d013b1e1fd0e0411ba4fbec3fc1ed1b1159f047ba19a3d5101a89316abdff0b26cea422331edf461704770073abcf6218f29ef9335c2f9c347cc519e8886ed90f3d92707c916d6368d17d0c92a6c7f9246f3b8ea166f29efffe849108aea81fd1fb89f82251cdf7ee4ab608", 0x77}, {&(0x7f0000000c40)="3ef33168367d04a0b20fb1918f62b23b2eee88d45b9f3c49771919e1486740b2908c6be42df595ca8089dd2c7f9fe11568ccc47ddf2654163b59e75d9ff0a90e2e08a4d8841890e77782b5115dbfa605d40ca45a132db35217a193884763dfe6222553203661cb39492f47dcd1f01a3fc17ff88a349f3e8cb9b6d674d2ac0d0c41301bc9bcb987cb2217baadc4c0a6ee311255a649f39a19652fa1925e227cf99a3e435ade4b0a121a57e33c79ecaa7ec17cd31c17e0edcb325cff586807a9f209ce4b4843a1249891370ed6ca46d45b98a9b84cf6f010ec9457556246169ab20c576522052ca520248b6b6239a1f2024e26a851b1aae758eabf3c9779eceacbc9861bfa9dd740c38084b1de8c64a4ad742cb8acc25b4b290c0eb6fa77bfa285408bf2a43f654b1733531262ab78233add8fd4c745d5a627d68b01c5892785255f44aabd69bac80ad7e9d9f6fe4e91cbb052f4f0afb665967f59732c81ec89680b6b5854985792f6f983af333008d7bc724ebfde119211d32039cb119b14f9589fdee533aa0af03cd2c20ec127f4f295a4510cebf4e9180a78f6b1aa2c601e8d4b56d3612e3a2be5ea691e5dc4801f40c45d6aaf5711a80d15a7924d5ed52a2be55eade0fb5e0253d38e887a0b093892ee3e7b4a8e2441a2f765cc9acbbebc5c87a9f902c44cb46a9dca2d48c47fad5fdf0e928342d50de63cc98657a1fb8e0e14a717f00cca4ebd6904496e0136ecf5f1982b3e2ebbb787db85fcb152383406c566cbb1e01e8be75d89d4d0e2002d7c947e1d6320d1d3af7f05d01ff551401d5f4dcb6268abc84427d51092ce37d0a4f75acda2dfba87c0f8229fe137e439cfbee1ba2a6eb35617a630ea028e3327b856933fb3f3d4a00a0f1364f89b71ba6748dd32edd3a75d915cfe654ab07c296224645cc459fe202c95ba1fadb1d003219e492a910384d08f8d2e070f69d365f29af0b1e68fe28c42867ef165c1a3674165177da111224bf13d5d83633e7815ebaadde8e18039eabc09a9035b26191679c20a07380316ef64bab113905a72acee6fdc4f43f55e6519993f5c8b6b4079489e226971cf4de8283e2005ff444b79508ae7c42ed1f9968019685cb176aa29f5c33de06fe0525348bee95bc6f82693ccb07eb3c2a2f00a1f3eb2eb1ae67db339d3f9a02390c6f2f73aeb670ac0e8548e43089e7c0d5004b203646c897fb8039a2b12556a7a207e0844a9002c45dc91adfc768e7d86b9dc63265c2b62c131b8674349387e193febd45d22751070beac98f71da577c27ace331c5dc4ef7136a289a6ce22c57e2209f8166eb01dfc429bb374933ad947691a50e8005b88fbf33b715df244493d21d886c536b2226e985fd98f25f68f3423f56b2a086e1e7838d1b5ca8f1193eb7175bd7e186a2a5019afbbcbcff5fb221b20685a6b5b40f179fff745423e7e7d20435082b79c200c8a813da509d2c083775afecfd16e64d46e775eae37c8bf8dd44c690fa2e368bbae3c17343f876f9321f54aae8b842785b5831a75a980770e565aa8e96bfaaf9a94dc9248667de3f99dac2ec1c04208054ef668355af9ab465b0d6eb64dd36dbf6cadf4325750832631a8598d405b52647ae35713c7276e9c11a03aecfa2d0d62efae4de561ac5950ecef6bd92e416a62b0dc0be5c27f0d238abef6092df0932742da99e37371028006e2011ab64fe80135125a942ebea88d9e81c181d303eabb22ac92059ca6381dde2be89a2a2f4d932800a8b6c112ca3691b4516a90521e9ba29af51926546a920c9e0b779ec61cfb533a4d04f561f880f3aaae97617bc513576b99e7f628cd610a63cace741d5dc474cbe75523aae4e2ce68985b5335acddea5a213c971949f97890561313fe0981d228ff213b788b858386affcc11cdf9931a4f2f7c5ed75d6746ff4e745f765f014dc7ab5b1d84c30e1c5eb4fc7c087547f9f8150f989caa5dcdc27d713fe4918e862713213c631d6797a6742e8075479f84693d5c689ca5fa731dfecd815138a1528824686853c1f42e4295641390252b63f1f14843e8d5e283cc25a75b6704b2adc06ac39deec22fe0e27ab1be295c493e20ed023ac44626a01a81dac35c51b748aefdb3d1bbf7809b3890b103ba00c40c1f7c55b39d54405c5d1af2f80c4543e2b40c43cecd38c9b04b47928bbc25e9607aee13fcfa8629b4392aff2ea76b94fc8c98b2c3f65ef3991290181968bf6244d5b0d4cb3df07d73a93a0c972ade4ae9f25b14d2a05ba6e360e6f7e3e4f22308df3cf16379aa6a6ece01b57010d589829e93435436a961ac5f1ab846604ef7252828388715bc38be095bcbd2b95f5cbdd4db819b9179ef146eccaba7bbaf8550096b0b9825952cbc429f2c70f8c0afc13bb3d563e9820ba4f1a4be788b0a767a870e8c4697fdacc70a5ea994a3f51491f747a0d2f85e86c96f30f2ee376dcf91f0e5dfdbc041eca579b68076e470fa8ebf6d5f891485602a4eea24aba98b4cac26f5188966bab67748db84d7b9d51e84ba6ba45695d6003fbcefe9fc2a7062fd70eb4363e6cd96f9d1f6ac911bdf870f09bdd9fe85d47e35cc566b3dca69965e1ce6532655d441b222b5331ce2ab4f7cc041d2017e970bc29a524f3e80d507fa4b94c05b8bc115979adac359a39a35c7e92e9300fb78d51558342971d1565c43211e05d03a475fae59466c8e22a78bb59a8a62e6c532a2c233be8f169087f50ed19e5d262b28f2f4859ffc8c3fd8c205521d2294408ddd97bc0ea0ea6a9beaeee0a802acc150c8fae3760424d78c483e25e22c1119a619fb7bf6caa209ebef0ca6f6e04d8d462c5936e070e77fb5e3e6a5121242e937e98319a84705be73f553bc1bd5fc2f0ef88e291c6b85e44addd4c08f6d7c4b6ad9090cbcef14fce549008602bf9d2c8859dc65644b50f0ed1e33684489222616ae896483a4d5ed651db7fc1bf89e44ac7498b7a719b78f81b2455bd0b80f1dd66f7a42d3c8ed1da6a75ef925f56f55bef358dd8d4a4b73d4c7bbf69f538d94558160df3d668f8f9cfaa0b60d1b8d97153d1e404752d0ed7642d8dbe3d1fc3f3de0623e615fd54d84ec51666f4590d732b64c0c3055b9f4eb71f759f6710d71d20c53eb8d83e18e62e1a13243809c3ebaec9b99718ec1cff41e8982340c494622fd28159bbc7473dea160665e6931cd5254134747d983f166a9b3e8388271b77c6a9b15e2982c86f515fd41b0ba47e815e42c1246194fd65e452117817fbf7e2aa3ea32d784e6905ab564e35cd60569e821e357a651830a0177305826e5b7ebb341c90d584272bec07f0f194810497402cc283fe4fa9946e7e3cd155ba50d23b4d6c372ec52b332dc2dd94a745a2ec9d45db845d7ab72c22c3b61ca9d8c9b3565fea048c78974bbe6d248a739f33a4b2b4f53578bce726f16ac046e900ba162155af964ab751d3a73c45fcf3f0a37d070e00327717e32709cf1bca33860b437e30540ae4b6ed68efcd5cd9c1a51fcde9769a73ebee7277bb43adacfd5548c1513d044dfc2e360181c474f978804368095c1466e7229df2bff844beac9453e64701487c1d65e6a1bf6658b52355ebd9aba60f03b126ec805490a681a74450ad5b5ada03ac33083dbb14d35c92a2e310047258750370c6c72e898db470f6defab83e3adea22585b7ee90e1e374864630e181c88a97e3fb238a2a724213b8b09815d95d5c086faa90d4c4b9fe8eb47d41c1c32ffdfee72370e10a0ee68a7e0959992dd5a6534fca8580b3cb1648a2ab9139f32540484188a51ca1a3a8d206c2940f9a4b3d70c61bbd78cce9810573e404dd6ae12908e63049eecb92020874e180e3ffb32e6e06e9be927fbfae2a8a7c6732b3bd2dde886e2bb56a8cc5cefa7e6426ff848e4953e66b47654f0d7eb62eba14222108c2293c0d66af513237984336471080fb7be4767641850faab305a1c711acc10c8178053458dedcf71d342d09fa71e5c8dbf03fd3ae6fa3cabab0083b5b2514711b9950087fa3acf69c57374640d6f3b231cbb703b24590f39a0313b31ff973ae5b3a649c218ace646c9ba2bef68a3226b31aac6b74e9ff8d4db83631f7589b82be9c6c107426d632158aac60ebff665c764d50291c375943b3ead5a8dbb863500b6b7f6a9cf4b84d85a32166c65584fbc5706d75ac0d93372ad79d03c0d11e4a8d195a8a3bb59d3e3b554520524aa210ee341a5d0ccb603947aa607fc5be8410a926320b81499b6886f33ed2c71db84aa676d42d98d9f50065029e31191b35fd4b317ad7d507ab380d38cc4f10c3b86cc014fce44aabab4422da154b454742f7135e0c7f465c504331bf491ff766b6a6c26fe1f402b5b79e9c3d02168095e4d0b64d67fa165c1ba11f027259796072109f519bd1ccf39d2577e0c041a2543ddad4cfbd77fbf6033c88edea5ab56876901442db23037940f2ba58754d65068de44da09b01fb1a6aa6d29d65928bd15b48b6c7da2724488369d4f89bb1d244756acc3c157fb3aaecca3991e58de71696057591226efb7dd72cd4cbd302e78edf1bdec093f7a01f4fa7f0da6fb3dc1e2e27b938aa2e4ff5b32bf2b89606e48248a0f712a4fb681ab1eab75104faac9b65d76073abb3bf4c60e40a318577c6ec5e008c2f1bf1cf3b81c7062897aecb6459a5c367eef2a4bf89b1abf23da9baf1edc152f05eebb0dcaeb3b8045bf94af876b1fdfc1d9efe050b7acdae267bd3b494952f319a965f8f7a86981ba1281504242e249db9af60656999574ebc877b9a683439db5f01811d25d4bdbb1707512350b8bf4b46fefd0ba1b7412ab5fc067774f80919773402df715e27e76170be4ace68d48c734a709fe52457dad9c1b79f4277e106cf59cbd13e20c00c3edb88c5f6a7368440c7c4439e87cd4c4504875ac4f240da2d44f9c9e244c8768aca8d1ab593368b2c08e19fac9d5f260c660c78a1edc325481f552527c8b69f1882064bdebeed483bc133c25e64d58cfae0b210ec7143dfde48a8779ae5872b984ccc4ae72370f9a4c8fe6373ac9ea32b5880eaaee6bf1ef12aa841fdc406f1128ff35c01dbf56c4e6ab61015f65e198321b7ce091fd72f089ee79a6e916d0b81ee998bff3b0b035f326f548fe089364cbb434a016f609e758fb70c9d76d2239ecc4b3406284936bfa9ad2d6248aed3065d4f941a6317cbcb8c5b4d4ed3768b4aac63bc1d3768ea0e79e9b97d0e9b29fde106a31a84b63c878aa68b400527ca3352212ab0e1c97cd89c4c68f6b500804de130c5a0cb76f3fb3bbec77f2675b7a6fa6dfdead8341bfe31be3abc9c9c3ec3efd11aff0334d18c28234c467e3ac4b9983768c057b49d4d6d67d88ffbc05150ebc67cb6abfb02c7ef6c208c97f6ba1ae1f649156102664ed9c680a46eb15b2e80dbac65c6e404f145e74e0a63860e570877ae11671e6a4c411f5b6df07d9df7f7113bfcf8ee9a68b68568facd4863132fbc1da6699383e3c7eb477f78c3f38347daf78c8b6b26f52e6ef11c950820e5181f9df0c4d64e91194e40bd49680fcd58be38f55819a72270855be11b4c09cc5156c54617603469ca9266c71c829d061d61f7514d6802816d08644015293d5212e52ad13e226febe7ef0f259754e451afed895feabd287e59ba723db47118889f04817d5f17bcf1f847607fc1502ab4ad71e1f6f3f1ab4f00102f98e383fdae82399f83d48fa71cfdc709719e59148570387adfa15d84f7193ea6f85008ff2dd8b0bd23ec2f3bca8b320aa759e43cbfa13bba3b553c30aa48a3a8c46de5", 0x1000}, {&(0x7f0000001c40)="9b90409c51100cd2e594eb698a93746380199bd58d6789a2674624238f961ffe43f0faea41295c9c79e3cdd0594243c53fa88ee94972cb8b3f852d07a45c405091c21afc8510eef391e29dbb3934796502cd83b0e3c8793a5a4b04c43a7b9fc1b4bf14ebc56712d8809b524034cf2a84205fe51e4768d3516400f83527038ba0a960335d50c735f0c29744c94c76f8955de79931dd97fea2f48d86f8bbf2b19de3f3b2a8217dd22b861cbaeb887775d7341fe4942ae2494d469534", 0xbb}, {&(0x7f0000001d00)="d6176a8f185edeff2438ba8e3e340c80deb525532439101732c288080e98688c67a69be85ca91e35204382355cf9d156e05d9d51899adf2b778953b2301c118b362c9f26936f713a6168835f4460aba92af7d69b94746ede392f1e2b12262e432baccb41705073dad5f17af642e574e081e67af99cf6ed0818c8bc057ac48b7423390f550a914f984c920be3f4de62d3dd1bfdf789fe017655d6", 0x9a}, {&(0x7f0000001dc0)="24c9903cf0141335a21a2f099895c73c82613273b1fdb1b802862d1e97417b689aa347fee7a1c6c979a12b30be99e479bc29ab4b669735ec9f8346f6a4e1de2d4de9318e1833", 0x46}], 0x7, &(0x7f0000001ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x2c, 0x1c, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x9, 0x9d, "7a3645c994acdcb30db1b69353b8370fbcdc80605f6d2c9dfaa467715e93c4dff79146a8fcff22d2aea0627cba3c5430fad319d29c8fdbb6bfeacd1259f5e5de1bb0a057d124bee9d2738146c538a80d951a841ac13a72981c42c85d5a2b6397596f231c8adb00388fca6c3bb3b46326abe2ced46af3149773464ae4a1b931a49ee5cc32b8934bd2635e5f004a155ff44aab47c2fae0ef3acf51da1989"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7f, 0x7, [0x4, 0x5, 0x8, 0x40105c6e]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2f, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x8, [0x400, 0x8fe, 0x5, 0x8, 0x8]}}]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x2c, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @generic={0x3, 0xa7, "9ff3b058a65b552e582048e3a2f497a4c716f770aa724588302a04c3afdb83a11e6a541ec8c01c1ddda33726f3f8843efaf400d6504f483c0f51b7bb93803b4e4d6409472833f9a25a4f4c83540104f5ae7549f36d18a0c5ff56822d39c5f7aa41e7fd038070ea3677b48587b91c812463644f7f30fc834480651340b202b9483d67667d533414e3ebbffd7a005c9cdf944d67219f5fac9968abb03eee890245aa869cf5d2d636"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x2a0}, 0x8000) (async) sendmsg$inet6(r8, &(0x7f0000002180)={&(0x7f0000000ac0)={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000b00)="3e601d653a20d551fd", 0x9}, {&(0x7f0000000b40)="eab2214688980fdccf2b2c5f83add399f07e9c5ee65c24c00c88f1374ad104eebb3222fcc3cbc32b6cfc335c03038c3a6a225c3d81669d300dde462265075c2c7ab3a130e8fb35adfe45e19f7e5fd3958cf5f375882c11", 0x57}, {&(0x7f0000000bc0)="55c359b136d5f3613997c42d013b1e1fd0e0411ba4fbec3fc1ed1b1159f047ba19a3d5101a89316abdff0b26cea422331edf461704770073abcf6218f29ef9335c2f9c347cc519e8886ed90f3d92707c916d6368d17d0c92a6c7f9246f3b8ea166f29efffe849108aea81fd1fb89f82251cdf7ee4ab608", 0x77}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="9b90409c51100cd2e594eb698a93746380199bd58d6789a2674624238f961ffe43f0faea41295c9c79e3cdd0594243c53fa88ee94972cb8b3f852d07a45c405091c21afc8510eef391e29dbb3934796502cd83b0e3c8793a5a4b04c43a7b9fc1b4bf14ebc56712d8809b524034cf2a84205fe51e4768d3516400f83527038ba0a960335d50c735f0c29744c94c76f8955de79931dd97fea2f48d86f8bbf2b19de3f3b2a8217dd22b861cbaeb887775d7341fe4942ae2494d469534", 0xbb}, {&(0x7f0000001d00)="d6176a8f185edeff2438ba8e3e340c80deb525532439101732c288080e98688c67a69be85ca91e35204382355cf9d156e05d9d51899adf2b778953b2301c118b362c9f26936f713a6168835f4460aba92af7d69b94746ede392f1e2b12262e432baccb41705073dad5f17af642e574e081e67af99cf6ed0818c8bc057ac48b7423390f550a914f984c920be3f4de62d3dd1bfdf789fe017655d6", 0x9a}, {&(0x7f0000001dc0)="24c9903cf0141335a21a2f099895c73c82613273b1fdb1b802862d1e97417b689aa347fee7a1c6c979a12b30be99e479bc29ab4b669735ec9f8346f6a4e1de2d4de9318e1833", 0x46}], 0x7, &(0x7f0000001ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x5}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x2c, 0x1c, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x9, 0x9d, "7a3645c994acdcb30db1b69353b8370fbcdc80605f6d2c9dfaa467715e93c4dff79146a8fcff22d2aea0627cba3c5430fad319d29c8fdbb6bfeacd1259f5e5de1bb0a057d124bee9d2738146c538a80d951a841ac13a72981c42c85d5a2b6397596f231c8adb00388fca6c3bb3b46326abe2ced46af3149773464ae4a1b931a49ee5cc32b8934bd2635e5f004a155ff44aab47c2fae0ef3acf51da1989"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7f, 0x7, [0x4, 0x5, 0x8, 0x40105c6e]}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r4}}}, @hoplimit={{0x14, 0x29, 0x34, 0x200}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x2f, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x0, 0x8, [0x400, 0x8fe, 0x5, 0x8, 0x8]}}]}}}, @dstopts={{0xc8, 0x29, 0x37, {0x2c, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x10001}, @generic={0x3, 0xa7, "9ff3b058a65b552e582048e3a2f497a4c716f770aa724588302a04c3afdb83a11e6a541ec8c01c1ddda33726f3f8843efaf400d6504f483c0f51b7bb93803b4e4d6409472833f9a25a4f4c83540104f5ae7549f36d18a0c5ff56822d39c5f7aa41e7fd038070ea3677b48587b91c812463644f7f30fc834480651340b202b9483d67667d533414e3ebbffd7a005c9cdf944d67219f5fac9968abb03eee890245aa869cf5d2d636"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x2a0}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f00000021c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$team(&(0x7f00000021c0), 0xffffffffffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000002200)=""/83, &(0x7f0000002280)=0x53) openat$cgroup_devices(r8, &(0x7f00000022c0)='devices.allow\x00', 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000002300), r0) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x48, 0x7, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004008}, 0x4000000) setsockopt$inet6_IPV6_ADDRFORM(r8, 0x29, 0x1, &(0x7f0000002480), 0x4) fsetxattr$security_capability(r3, &(0x7f00000024c0), &(0x7f0000002500)=@v1={0x1000000, [{0x4, 0xdd}]}, 0xc, 0x3) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000d48000/0x2000)=nil) (async) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000d48000/0x2000)=nil) sendmsg$nl_generic(r8, &(0x7f0000002740)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002580)={0x16c, 0x2a, 0x800, 0x70bd29, 0x25dfdbfe, {0x7}, [@typed={0x4, 0xe2}, @generic="8ddd63bc91b471f8bda182597595fb3e4de21a2d0aea746b341f4f31c11398ab6008e8a8604d9e46e07581d580e2ae3dc9f5910fadc8c1b1a858b010bafc68de3ce823a386988c6a1a9ab3552d9fcd19bfa6e35554f3f127269c4c", @generic="80513dbab61556415b7ebade8f7a0836ed2f7841f0eaa8223079b2951c2da3ccae6872b8e0e31c2d2178ba05ffd346553f6eec1434cb65aac8d5dfa60507a2c0afa1210f5131b686bd498232a1e413c616ab3c989012d7b097d2d0e290cb67015fd352029f1ddafa53bd1f64e23142189395bfe24cc975063e1f2dc60d4900bc4e3b835b02cb837d8e806a6c3f099800e49a205b64a85df078b9c2a1960257e68270e96a46097e97a62ffd5fb13e8dab78d75bea7a4351de1c92971c4d1cc12145392dd6e460d890876a3e0a564f51dea7346d60b421a722a1d7eb2e67765979b65feefddc965728ed8d550c506e6465a1843754a86635c5"]}, 0x16c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4048001) getsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000002780), &(0x7f00000027c0)=0x4) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002800), 0x200000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002840)={0x1b, 0x0, 0x0, 0x0, 0x0, r7, 0xb7, '\x00', r4, r9, 0x4, 0x4, 0x1}, 0x50) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002900), r0) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x100) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x20, r10, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x100) socket$unix(0x1, 0x5, 0x0) getsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f0000002a00)=""/112, &(0x7f0000002a80)=0x70) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000002e00)={&(0x7f0000002ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x120, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000040) 4.482994111s ago: executing program 3 (id=8420): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60703, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.653919747s ago: executing program 3 (id=8427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "4fafcda6ae287f1a1e6f7064414f5618bb0ae864c7a8eb79174ffdcb18c82d82", "401643b07b7d46c0c8efd19f8d4db33b", {"1f7ae9988c440b8678cc7f166e7febd6", "7a4e3ea557b01874c0453a0c5760d8c5"}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write$tcp_mem(r4, &(0x7f0000000340)={0xaac8, 0x20, 0xfffffffffffffff9, 0x20, 0xffffffffffffafec}, 0x48) 3.290245265s ago: executing program 0 (id=8440): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.282159024s ago: executing program 0 (id=8442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000000140), 0x1, 0x200200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = dup(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000300)=0xc6c5, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.198792546s ago: executing program 0 (id=8445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60703, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 3.144179127s ago: executing program 0 (id=8448): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 2.983289521s ago: executing program 0 (id=8450): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioprio_set$pid(0x3, r0, 0x2004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents(r1, &(0x7f00000000c0)=""/35, 0x23) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd7", 0x4}], 0x1, 0xa) fcntl$setpipe(r2, 0x407, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000002850000001b00000000000000000000000000000000000000adc16523f1d2fe6d4b56afa3a75a6e0e3026dee871e74d9829c2d4f33ff41ec0a608826901b95d44fba76d56d8bd966ad0d906cdd1510239640c9ea8331084fd0f0c1f64764d3382b5d0597c9887705337b1584c858e3e3271e0c15081bd577ed2a3bc824461f9574513f9e6354e168eae55463cd1223bdc83f147e3358243b55f89b98d3c8a5e099be1ff0dab847003396e624902edf7a86c082f9332c60e531f12acfe54b6b752fdf56c3b59fa4985fd40b30c8a413bb9adf5bb0be3fb0986a133f35f7fed70f3b129d2bfd075edcc9cff606a7b0c80be6c459d2857a0e846c7a492"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x800000000000000}, 0x18) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) 1.862375533s ago: executing program 0 (id=8459): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xa1881000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.273537875s ago: executing program 7 (id=8460): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 1.174161897s ago: executing program 7 (id=8461): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000044010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000003020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc010000000000000000000000000001feffffff00000000000800000008000000000000fc0200000000000000000000000000010000000032000000000000007f0000010000000000000000000000000335000003000000000000000000000000000000000000000000000000000000000000000000000033000000000000000a010101000000000000000000000000041f0f1edf"], 0x1fc}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents64(r4, 0x0, 0x22) io_uring_setup(0x7925, &(0x7f0000000500)={0x0, 0x2002, 0x8000, 0x3, 0x366, 0x0, r4}) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x89}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff34f0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.093123278s ago: executing program 7 (id=8462): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 979.51316ms ago: executing program 1 (id=8465): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 978.231641ms ago: executing program 1 (id=8466): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) (fail_nth: 1) 940.802531ms ago: executing program 4 (id=8467): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x60703, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 884.948132ms ago: executing program 1 (id=8468): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents64(r4, 0x0, 0x22) io_uring_setup(0x7925, &(0x7f0000000500)={0x0, 0x2002, 0x8000, 0x3, 0x366, 0x0, r4}) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x89}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff34f0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 706.587456ms ago: executing program 3 (id=8469): r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x4000000}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1d}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x8, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffcfffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x6a44, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0x4}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 619.954298ms ago: executing program 1 (id=8470): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) 570.563229ms ago: executing program 4 (id=8471): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x18) write$selinux_load(r0, &(0x7f0000000080)={0xf97cff8c, 0x8, 'SE Linux', "9a37ac62c6a5f7da0ed1695f807ae9bf4599d675b7f266b3f5a39d7546867fd1ac46aeda100014fbbf5e5097d6de3e1bc3af2cff970f29c4728a1982f94390c10cc9d09f9032f554d44a87f74da34687a842b3db70d29e55b83c28fd22af11f3d8f2b6a9347e1efb93660c10c541e83f414d9d29f1504106a87ae59aed993a94f23bd730ae9a42e5e27269e7479cc885f0229b2b49d1be77876481d3399f83f16b8c22e506c0006ae5d0f08c29f20b421c56ad"}, 0xc3) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}, {&(0x7f0000000100)='0', 0x1}], 0x2) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$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") 549.983589ms ago: executing program 3 (id=8472): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x4000004, &(0x7f0000000c00)={[{@errors_remount}, {@data_ordered}], [{@smackfstransmute}, {@subj_user={'subj_user', 0x3d, '*]'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@dont_hash}, {@seclabel}, {@seclabel}]}, 0xfe, 0x47a, &(0x7f0000001080)="$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") 530.98931ms ago: executing program 3 (id=8473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc9000000000000000000000070000000000000000000"], &(0x7f0000000100)='GPL\x00', 0xe2a8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file3\x00', 0xc8d0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES64=r5, @ANYRESHEX=r6, @ANYRES8=r6, @ANYRES16=r4], 0x0, 0x30e, &(0x7f0000000f00)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000000700)="3b53cc3c693414996d7d2a48a891f4cc0bd79c37ff2ffd8da31e36bf532f8fae1d2e98afaf120381f89e65531da520947ba816002f0c02fb489f57f19e7c5195b9a52a9edafabfa3c8f3768361f457e2ea11f07557d4b96dad560d12afdde88cfff2410d848b9df83a6bf96e735d071c4002a596a0844fb2085a2841ebdd7178fb789c5200f1263d1cb01af5352bd8d4796053fa1a9146488dc767bc16b012bd715b4bd2227e52a47a376a022ac67c27aff804be7356638edc2d3b9158ed68ecbc75c0bef856162a32fe0bc771b491a44d125d2595b1af4a87ee25a1015e", 0xde) sendfile(r8, r7, 0x0, 0x3ffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000702, r10, &(0x7f0000000400)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r12, 0x0, 0x83, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0x0, [0xf, 0x4, 0x0, 0x7, 0x9, 0x1200000000000000], 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x78) pwritev(r12, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000680)=ANY=[@ANYRES64=r9, @ANYRES64=r12, @ANYRES64, @ANYRESDEC=r5, @ANYRESOCT=r7], 0x32600) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 511.2829ms ago: executing program 4 (id=8474): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents64(r4, 0x0, 0x22) io_uring_setup(0x7925, &(0x7f0000000500)={0x0, 0x2002, 0x8000, 0x3, 0x366, 0x0, r4}) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x89}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff34f0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 366.575653ms ago: executing program 7 (id=8475): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x4, 0x81, 0x9, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7, 0x7800, 0x0, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB='\a\x00', @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000100080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0x1e}, @GTPA_LINK={0x8, 0x1, r0}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_VERSION={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 313.232574ms ago: executing program 1 (id=8476): r0 = add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r1, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x10}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000cddf0dfefa369a5f228d1898d63849801a91d0fd77c3b9dd4fc2b3b92222ca0000000000000000"]) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYBLOB="010000000d0000001c001700000000000000006574683a73797a6b616c6c657230000000000000000000000001000000"], 0x38}}, 0x26001) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, 0x0, 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x80) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f00000000c0)=""/226, 0xe2) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f00000001c0)={0x3, 0x20800006, 0xa, 0xfbffffcf, 0x7, "65bd218c5fe001cafd41f5c2a95eec23bd62f8", 0x5, 0xe}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0xfd, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x10, 0x10, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000202070250000000000205320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 258.117335ms ago: executing program 7 (id=8477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000002f40), r0) 226.879815ms ago: executing program 4 (id=8478): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], &(0x7f0000000100)=""/108, 0x4b, 0x6c, 0x0, 0xb11}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000580)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x17, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xd2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940), &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='f2fs_truncate_data_blocks_range\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 216.520196ms ago: executing program 1 (id=8479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f0000000f40)=""/199, 0xffffff92) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fe, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x86, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "4fafcda6ae287f1a1e6f7064414f5618bb0ae864c7a8eb79174ffdcb18c82d82", "401643b07b7d46c0c8efd19f8d4db33b", {"1f7ae9988c440b8678cc7f166e7febd6", "7a4e3ea557b01874c0453a0c5760d8c5"}}}}}}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x4) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write$tcp_mem(r4, &(0x7f0000000340)={0xaac8, 0x20, 0xfffffffffffffff9, 0x20, 0xffffffffffffafec}, 0x48) 201.574996ms ago: executing program 7 (id=8480): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 137.114508ms ago: executing program 4 (id=8481): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000000000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4975e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x10008, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname$inet6(r3, &(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000480)=0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x3, 0x0) getdents64(r4, 0x0, 0x22) io_uring_setup(0x7925, &(0x7f0000000500)={0x0, 0x2002, 0x8000, 0x3, 0x366, 0x0, r4}) bind$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x89}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 4 (id=8482): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x108100, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_vlan\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) readlinkat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/216, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) lchown(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): _sectors = 4 limit=164 [ 346.831625][T25109] FAULT_INJECTION: forcing a failure. [ 346.831625][T25109] name failslab, interval 1, probability 0, space 0, times 0 [ 346.842672][T25107] syz.3.8104: attempt to access beyond end of device [ 346.842672][T25107] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 346.855167][T25109] CPU: 0 UID: 0 PID: 25109 Comm: syz.4.8103 Not tainted syzkaller #0 PREEMPT(voluntary) [ 346.855274][T25109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.855287][T25109] Call Trace: [ 346.855294][T25109] [ 346.855368][T25109] __dump_stack+0x1d/0x30 [ 346.855390][T25109] dump_stack_lvl+0xe8/0x140 [ 346.855416][T25109] dump_stack+0x15/0x1b [ 346.855433][T25109] should_fail_ex+0x265/0x280 [ 346.855455][T25109] should_failslab+0x8c/0xb0 [ 346.855579][T25109] kmem_cache_alloc_node_noprof+0x57/0x320 [ 346.855652][T25109] ? __alloc_skb+0x101/0x320 [ 346.855676][T25109] __alloc_skb+0x101/0x320 [ 346.855696][T25109] netlink_alloc_large_skb+0xba/0xf0 [ 346.855732][T25109] netlink_sendmsg+0x3cf/0x6b0 [ 346.855810][T25109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.855833][T25109] __sock_sendmsg+0x142/0x180 [ 346.855863][T25109] ____sys_sendmsg+0x31e/0x4e0 [ 346.855889][T25109] ___sys_sendmsg+0x17b/0x1d0 [ 346.856055][T25109] __x64_sys_sendmsg+0xd4/0x160 [ 346.856089][T25109] x64_sys_call+0x191e/0x2ff0 [ 346.856111][T25109] do_syscall_64+0xd2/0x200 [ 346.856140][T25109] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 346.856210][T25109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.856276][T25109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.856297][T25109] RIP: 0033:0x7fa828cdebe9 [ 346.856313][T25109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.856330][T25109] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.856374][T25109] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 346.856387][T25109] RDX: 0000000024008824 RSI: 0000200000000440 RDI: 0000000000000003 [ 346.856399][T25109] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 346.856412][T25109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.856424][T25109] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 346.856443][T25109] [ 346.886211][T25113] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8105'. [ 347.108040][T25121] loop3: detected capacity change from 0 to 128 [ 347.147129][T25127] FAULT_INJECTION: forcing a failure. [ 347.147129][T25127] name failslab, interval 1, probability 0, space 0, times 0 [ 347.147163][T25127] CPU: 0 UID: 0 PID: 25127 Comm: syz.3.8111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 347.147236][T25127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.147250][T25127] Call Trace: [ 347.147256][T25127] [ 347.147264][T25127] __dump_stack+0x1d/0x30 [ 347.147282][T25127] dump_stack_lvl+0xe8/0x140 [ 347.147304][T25127] dump_stack+0x15/0x1b [ 347.147320][T25127] should_fail_ex+0x265/0x280 [ 347.147387][T25127] should_failslab+0x8c/0xb0 [ 347.147410][T25127] __kmalloc_cache_node_noprof+0x54/0x320 [ 347.147508][T25127] ? __get_vm_area_node+0x106/0x1d0 [ 347.147540][T25127] __get_vm_area_node+0x106/0x1d0 [ 347.147720][T25127] __vmalloc_node_range_noprof+0x273/0xe00 [ 347.147762][T25127] ? vc_do_resize+0x273/0xd70 [ 347.147835][T25127] ? __schedule+0x6b9/0xb30 [ 347.147920][T25127] ? should_fail_ex+0xdb/0x280 [ 347.147941][T25127] ? vc_do_resize+0x273/0xd70 [ 347.147968][T25127] vzalloc_noprof+0x82/0xc0 [ 347.147995][T25127] ? vc_do_resize+0x273/0xd70 [ 347.148025][T25127] vc_do_resize+0x273/0xd70 [ 347.148123][T25127] ? kcsan_setup_watchpoint+0x415/0x430 [ 347.148337][T25127] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 347.148426][T25127] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 347.148446][T25127] ? vgacon_set_cursor_size+0x2b3/0x310 [ 347.148474][T25127] __vc_resize+0x3c/0x50 [ 347.148504][T25127] vgacon_adjust_height+0x3cb/0x450 [ 347.148559][T25127] vgacon_font_set+0x191/0x1b0 [ 347.148654][T25127] ? __pfx_vgacon_font_set+0x10/0x10 [ 347.148680][T25127] con_font_op+0x8b9/0x930 [ 347.148771][T25127] ? selinux_capable+0x31/0x40 [ 347.148804][T25127] vt_ioctl+0x153c/0x1880 [ 347.148900][T25127] tty_ioctl+0x7db/0xb80 [ 347.148930][T25127] ? __pfx_tty_ioctl+0x10/0x10 [ 347.148963][T25127] __se_sys_ioctl+0xce/0x140 [ 347.148985][T25127] __x64_sys_ioctl+0x43/0x50 [ 347.149008][T25127] x64_sys_call+0x1816/0x2ff0 [ 347.149089][T25127] do_syscall_64+0xd2/0x200 [ 347.149159][T25127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.149186][T25127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 347.149213][T25127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.149257][T25127] RIP: 0033:0x7fe459e3ebe9 [ 347.149271][T25127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.149290][T25127] RSP: 002b:00007fe45889f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.149311][T25127] RAX: ffffffffffffffda RBX: 00007fe45a075fa0 RCX: 00007fe459e3ebe9 [ 347.149325][T25127] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 000000000000000e [ 347.149339][T25127] RBP: 00007fe45889f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.149353][T25127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.149430][T25127] R13: 00007fe45a076038 R14: 00007fe45a075fa0 R15: 00007fffb5c6c7a8 [ 347.149450][T25127] [ 347.149476][T25127] warn_alloc: 1 callbacks suppressed [ 347.149485][T25127] syz.3.8111: vmalloc error: size 9840, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 347.149532][T25127] CPU: 0 UID: 0 PID: 25127 Comm: syz.3.8111 Not tainted syzkaller #0 PREEMPT(voluntary) [ 347.149559][T25127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.149572][T25127] Call Trace: [ 347.149637][T25127] [ 347.149643][T25127] __dump_stack+0x1d/0x30 [ 347.149660][T25127] dump_stack_lvl+0xe8/0x140 [ 347.149681][T25127] dump_stack+0x15/0x1b [ 347.149699][T25127] warn_alloc+0x12b/0x1a0 [ 347.149839][T25127] __vmalloc_node_range_noprof+0x297/0xe00 [ 347.149889][T25127] ? __schedule+0x6b9/0xb30 [ 347.149961][T25127] ? should_fail_ex+0xdb/0x280 [ 347.149983][T25127] ? vc_do_resize+0x273/0xd70 [ 347.150012][T25127] vzalloc_noprof+0x82/0xc0 [ 347.150064][T25127] ? vc_do_resize+0x273/0xd70 [ 347.150091][T25127] vc_do_resize+0x273/0xd70 [ 347.150124][T25127] ? kcsan_setup_watchpoint+0x415/0x430 [ 347.150173][T25127] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 347.150194][T25127] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 347.150216][T25127] ? vgacon_set_cursor_size+0x2b3/0x310 [ 347.150245][T25127] __vc_resize+0x3c/0x50 [ 347.150279][T25127] vgacon_adjust_height+0x3cb/0x450 [ 347.150306][T25127] vgacon_font_set+0x191/0x1b0 [ 347.150340][T25127] ? __pfx_vgacon_font_set+0x10/0x10 [ 347.150361][T25127] con_font_op+0x8b9/0x930 [ 347.150458][T25127] ? selinux_capable+0x31/0x40 [ 347.150489][T25127] vt_ioctl+0x153c/0x1880 [ 347.150515][T25127] tty_ioctl+0x7db/0xb80 [ 347.150602][T25127] ? __pfx_tty_ioctl+0x10/0x10 [ 347.150679][T25127] __se_sys_ioctl+0xce/0x140 [ 347.150699][T25127] __x64_sys_ioctl+0x43/0x50 [ 347.150769][T25127] x64_sys_call+0x1816/0x2ff0 [ 347.150792][T25127] do_syscall_64+0xd2/0x200 [ 347.150845][T25127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.150866][T25127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 347.150923][T25127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.150966][T25127] RIP: 0033:0x7fe459e3ebe9 [ 347.150980][T25127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.150999][T25127] RSP: 002b:00007fe45889f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.151018][T25127] RAX: ffffffffffffffda RBX: 00007fe45a075fa0 RCX: 00007fe459e3ebe9 [ 347.151032][T25127] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 000000000000000e [ 347.151045][T25127] RBP: 00007fe45889f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.151134][T25127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.151152][T25127] R13: 00007fe45a076038 R14: 00007fe45a075fa0 R15: 00007fffb5c6c7a8 [ 347.151236][T25127] [ 347.151243][T25127] Mem-Info: [ 347.151250][T25127] active_anon:6341 inactive_anon:4 isolated_anon:0 [ 347.151250][T25127] active_file:23484 inactive_file:5250 isolated_file:0 [ 347.151250][T25127] unevictable:0 dirty:1089 writeback:0 [ 347.151250][T25127] slab_reclaimable:3805 slab_unreclaimable:15586 [ 347.151250][T25127] mapped:31069 shmem:2401 pagetables:1717 [ 347.151250][T25127] sec_pagetables:0 bounce:0 [ 347.151250][T25127] kernel_misc_reclaimable:0 [ 347.151250][T25127] free:1855572 free_pcp:18140 free_cma:0 [ 347.151350][T25127] Node 0 active_anon:25480kB inactive_anon:16kB active_file:93936kB inactive_file:21000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124276kB dirty:4356kB writeback:0kB shmem:9604kB kernel_stack:3968kB pagetables:6868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 347.151509][T25127] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 347.151572][T25127] lowmem_reserve[]: 0 2883 7862 7862 [ 347.151672][T25127] Node 0 DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 347.151733][T25127] lowmem_reserve[]: 0 0 4978 4978 [ 347.151789][T25127] Node 0 Normal free:4457736kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25480kB inactive_anon:16kB active_file:93936kB inactive_file:21000kB unevictable:0kB writepending:4356kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:68852kB local_pcp:37424kB free_cma:0kB [ 347.151860][T25127] lowmem_reserve[]: 0 0 0 0 [ 347.151884][T25127] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.152107][T25127] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB [ 347.152331][T25127] Node 0 Normal: 1864*4kB (UM) 2507*8kB (UM) 1023*16kB (UME) 225*32kB (UME) 360*64kB (UME) 315*128kB (UME) 188*256kB (UME) 83*512kB (UME) 83*1024kB (UME) 41*2048kB (UM) 997*4096kB (UM) = 4457736kB [ 347.152629][T25127] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 347.152692][T25127] 31190 total pagecache pages [ 347.152698][T25127] 9 pages in swap cache [ 347.152703][T25127] Free swap = 124960kB [ 347.152709][T25127] Total swap = 124996kB [ 347.152715][T25127] 2097051 pages RAM [ 347.152721][T25127] 0 pages HighMem/MovableOnly [ 347.152727][T25127] 80445 pages reserved [ 347.767027][T25068] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.062485][T25068] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.128977][T25148] FAULT_INJECTION: forcing a failure. [ 348.128977][T25148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.142105][T25148] CPU: 0 UID: 0 PID: 25148 Comm: syz.4.8119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.142130][T25148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.142168][T25148] Call Trace: [ 348.142174][T25148] [ 348.142182][T25148] __dump_stack+0x1d/0x30 [ 348.142201][T25148] dump_stack_lvl+0xe8/0x140 [ 348.142218][T25148] dump_stack+0x15/0x1b [ 348.142232][T25148] should_fail_ex+0x265/0x280 [ 348.142269][T25148] should_fail+0xb/0x20 [ 348.142290][T25148] should_fail_usercopy+0x1a/0x20 [ 348.142310][T25148] _copy_to_user+0x20/0xa0 [ 348.142335][T25148] bpf_verifier_vlog+0x36e/0x5b0 [ 348.142384][T25148] __btf_verifier_log+0x7f/0xb0 [ 348.142406][T25148] ? btf_parse_hdr+0x1e2/0x3b0 [ 348.142446][T25148] ? should_failslab+0x8c/0xb0 [ 348.142487][T25148] btf_parse_hdr+0x1f5/0x3b0 [ 348.142556][T25148] btf_new_fd+0x241/0x790 [ 348.142574][T25148] bpf_btf_load+0x112/0x130 [ 348.142600][T25148] __sys_bpf+0x352/0x7b0 [ 348.142629][T25148] __x64_sys_bpf+0x41/0x50 [ 348.142697][T25148] x64_sys_call+0x2aea/0x2ff0 [ 348.142753][T25148] do_syscall_64+0xd2/0x200 [ 348.142779][T25148] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 348.142801][T25148] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 348.142823][T25148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.142854][T25148] RIP: 0033:0x7fa828cdebe9 [ 348.142866][T25148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.142882][T25148] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.142899][T25148] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 348.142910][T25148] RDX: 0000000000000028 RSI: 0000200000000800 RDI: 0000000000000012 [ 348.142921][T25148] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 348.142932][T25148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.142992][T25148] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 348.143008][T25148] [ 348.348513][T25068] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.440595][T25156] FAULT_INJECTION: forcing a failure. [ 348.440595][T25156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.453819][T25156] CPU: 0 UID: 0 PID: 25156 Comm: syz.4.8123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 348.453846][T25156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 348.453893][T25156] Call Trace: [ 348.453899][T25156] [ 348.453906][T25156] __dump_stack+0x1d/0x30 [ 348.453926][T25156] dump_stack_lvl+0xe8/0x140 [ 348.453946][T25156] dump_stack+0x15/0x1b [ 348.453964][T25156] should_fail_ex+0x265/0x280 [ 348.453988][T25156] should_fail+0xb/0x20 [ 348.454161][T25156] should_fail_usercopy+0x1a/0x20 [ 348.454186][T25156] _copy_from_iter+0xd2/0xe80 [ 348.454211][T25156] ? __build_skb_around+0x1a0/0x200 [ 348.454233][T25156] ? __alloc_skb+0x223/0x320 [ 348.454325][T25156] netlink_sendmsg+0x471/0x6b0 [ 348.454352][T25156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.454374][T25156] __sock_sendmsg+0x142/0x180 [ 348.454403][T25156] sock_write_iter+0x165/0x1b0 [ 348.454430][T25156] do_iter_readv_writev+0x499/0x540 [ 348.454470][T25156] vfs_writev+0x2df/0x8b0 [ 348.454509][T25156] do_writev+0xe7/0x210 [ 348.454602][T25156] __x64_sys_writev+0x45/0x50 [ 348.454667][T25156] x64_sys_call+0x1e9a/0x2ff0 [ 348.454690][T25156] do_syscall_64+0xd2/0x200 [ 348.454874][T25156] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 348.454897][T25156] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 348.454987][T25156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.455009][T25156] RIP: 0033:0x7fa828cdebe9 [ 348.455023][T25156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.455040][T25156] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 348.455061][T25156] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 348.455074][T25156] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000007 [ 348.455088][T25156] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 348.455153][T25156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.455163][T25156] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 348.455180][T25156] [ 348.715634][T25163] loop3: detected capacity change from 0 to 164 [ 348.724127][T25163] syz.3.8126: attempt to access beyond end of device [ 348.724127][T25163] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 348.727140][T25164] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8124'. [ 348.738049][T25163] syz.3.8126: attempt to access beyond end of device [ 348.738049][T25163] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 348.747000][T25164] 0ªX¹¦D: renamed from gretap0 (while UP) [ 348.771626][T25164] 0ªX¹¦D: entered allmulticast mode [ 348.777681][T25164] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 348.815935][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8129'. [ 348.826221][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8129'. [ 348.844494][T25174] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8130'. [ 348.852713][T25176] loop3: detected capacity change from 0 to 512 [ 348.860287][T25176] EXT4-fs: Ignoring removed nobh option [ 348.872321][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8131: corrupted inode contents [ 348.884211][T25176] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8131: mark_inode_dirty error [ 348.895945][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8131: corrupted inode contents [ 348.907833][T25176] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8131: mark_inode_dirty error [ 348.919442][T25176] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8131: Failed to acquire dquot type 0 [ 348.931549][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8131: corrupted inode contents [ 348.943506][T25176] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8131: mark_inode_dirty error [ 348.954975][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8131: corrupted inode contents [ 348.967065][T25176] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8131: mark_inode_dirty error [ 348.979333][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8131: corrupted inode contents [ 348.991354][T25176] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 349.000134][T25176] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8131: corrupted inode contents [ 349.012175][T25176] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8131: mark_inode_dirty error [ 349.023369][T25176] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 349.032807][T25176] EXT4-fs (loop3): 1 truncate cleaned up [ 349.038948][T25176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.076524][T24051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.109482][T25184] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.132408][T25186] loop7: detected capacity change from 0 to 128 [ 349.166707][T25184] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.240259][T25184] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.274824][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8135'. [ 349.284992][T25192] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8135'. [ 349.307556][T25184] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.377213][T20318] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.393775][T20318] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.411668][T20318] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.421382][T20318] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.436515][T25206] FAULT_INJECTION: forcing a failure. [ 349.436515][T25206] name failslab, interval 1, probability 0, space 0, times 0 [ 349.449199][T25206] CPU: 0 UID: 0 PID: 25206 Comm: syz.7.8141 Not tainted syzkaller #0 PREEMPT(voluntary) [ 349.449230][T25206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.449262][T25206] Call Trace: [ 349.449269][T25206] [ 349.449277][T25206] __dump_stack+0x1d/0x30 [ 349.449356][T25206] dump_stack_lvl+0xe8/0x140 [ 349.449382][T25206] dump_stack+0x15/0x1b [ 349.449402][T25206] should_fail_ex+0x265/0x280 [ 349.449427][T25206] should_failslab+0x8c/0xb0 [ 349.449455][T25206] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 349.449550][T25206] ? __d_alloc+0x3d/0x340 [ 349.449634][T25206] __d_alloc+0x3d/0x340 [ 349.449664][T25206] ? __account_obj_stock+0x2cc/0x350 [ 349.449691][T25206] d_alloc_parallel+0x53/0xc60 [ 349.449728][T25206] ? __rcu_read_unlock+0x4f/0x70 [ 349.449761][T25206] ? __d_lookup+0x316/0x340 [ 349.449792][T25206] ? default_pointer+0xf2/0x5e0 [ 349.449819][T25206] ? try_charge_memcg+0x200/0x9e0 [ 349.449857][T25206] __lookup_slow+0x8c/0x250 [ 349.449936][T25206] lookup_noperm+0xc9/0x180 [ 349.450037][T25206] simple_start_creating+0x97/0x120 [ 349.450066][T25206] start_creating+0xe9/0x160 [ 349.450111][T25206] __debugfs_create_file+0x6b/0x330 [ 349.450193][T25206] debugfs_create_file_full+0x3f/0x60 [ 349.450222][T25206] ? __pfx_tun_setup+0x10/0x10 [ 349.450252][T25206] ref_tracker_dir_debugfs+0x100/0x1e0 [ 349.450286][T25206] alloc_netdev_mqs+0x1a2/0xa30 [ 349.450328][T25206] tun_set_iff+0x42c/0x890 [ 349.450364][T25206] __tun_chr_ioctl+0x5f0/0x14c0 [ 349.450401][T25206] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 349.450469][T25206] tun_chr_ioctl+0x27/0x40 [ 349.450541][T25206] __se_sys_ioctl+0xce/0x140 [ 349.450560][T25206] __x64_sys_ioctl+0x43/0x50 [ 349.450575][T25206] x64_sys_call+0x1816/0x2ff0 [ 349.450662][T25206] do_syscall_64+0xd2/0x200 [ 349.450693][T25206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 349.450718][T25206] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 349.450748][T25206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.450824][T25206] RIP: 0033:0x7f9c18a8ebe9 [ 349.450838][T25206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.450854][T25206] RSP: 002b:00007f9c174f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.450871][T25206] RAX: ffffffffffffffda RBX: 00007f9c18cc5fa0 RCX: 00007f9c18a8ebe9 [ 349.450882][T25206] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 349.450921][T25206] RBP: 00007f9c174f7090 R08: 0000000000000000 R09: 0000000000000000 [ 349.450940][T25206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.450951][T25206] R13: 00007f9c18cc6038 R14: 00007f9c18cc5fa0 R15: 00007fff9caff158 [ 349.450968][T25206] [ 349.737576][T25210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8143'. [ 349.756253][T25210] netlink: 'syz.4.8143': attribute type 3 has an invalid length. [ 349.785613][T25210] lo speed is unknown, defaulting to 1000 [ 349.845348][T25219] FAULT_INJECTION: forcing a failure. [ 349.845348][T25219] name failslab, interval 1, probability 0, space 0, times 0 [ 349.857983][T25219] CPU: 0 UID: 0 PID: 25219 Comm: syz.4.8147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 349.858009][T25219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.858022][T25219] Call Trace: [ 349.858028][T25219] [ 349.858035][T25219] __dump_stack+0x1d/0x30 [ 349.858110][T25219] dump_stack_lvl+0xe8/0x140 [ 349.858127][T25219] dump_stack+0x15/0x1b [ 349.858142][T25219] should_fail_ex+0x265/0x280 [ 349.858161][T25219] should_failslab+0x8c/0xb0 [ 349.858273][T25219] kmem_cache_alloc_node_noprof+0x57/0x320 [ 349.858298][T25219] ? __alloc_skb+0x101/0x320 [ 349.858318][T25219] __alloc_skb+0x101/0x320 [ 349.858398][T25219] tipc_msg_build+0xbe/0x840 [ 349.858417][T25219] ? avc_has_perm_noaudit+0x1b1/0x200 [ 349.858443][T25219] __tipc_sendmsg+0x1725/0x1b00 [ 349.858503][T25219] ? selinux_socket_sendmsg+0x175/0x1b0 [ 349.858529][T25219] ? __pfx_woken_wake_function+0x10/0x10 [ 349.858549][T25219] tipc_sendmsg+0x3e/0x60 [ 349.858565][T25219] ? __pfx_tipc_sendmsg+0x10/0x10 [ 349.858581][T25219] __sock_sendmsg+0x142/0x180 [ 349.858618][T25219] ____sys_sendmsg+0x31e/0x4e0 [ 349.858640][T25219] ___sys_sendmsg+0x17b/0x1d0 [ 349.858710][T25219] __x64_sys_sendmsg+0xd4/0x160 [ 349.858733][T25219] x64_sys_call+0x191e/0x2ff0 [ 349.858752][T25219] do_syscall_64+0xd2/0x200 [ 349.858817][T25219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 349.858877][T25219] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 349.858907][T25219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.858962][T25219] RIP: 0033:0x7fa828cdebe9 [ 349.858975][T25219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.858992][T25219] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.859008][T25219] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 349.859027][T25219] RDX: 0000000004000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 349.859039][T25219] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 349.859050][T25219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.859077][T25219] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 349.859107][T25219] [ 350.088085][T25221] FAULT_INJECTION: forcing a failure. [ 350.088085][T25221] name failslab, interval 1, probability 0, space 0, times 0 [ 350.100842][T25221] CPU: 1 UID: 0 PID: 25221 Comm: syz.7.8148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 350.100872][T25221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.100886][T25221] Call Trace: [ 350.100895][T25221] [ 350.100903][T25221] __dump_stack+0x1d/0x30 [ 350.100991][T25221] dump_stack_lvl+0xe8/0x140 [ 350.101020][T25221] dump_stack+0x15/0x1b [ 350.101038][T25221] should_fail_ex+0x265/0x280 [ 350.101061][T25221] should_failslab+0x8c/0xb0 [ 350.101088][T25221] kmem_cache_alloc_node_noprof+0x57/0x320 [ 350.101120][T25221] ? __alloc_skb+0x101/0x320 [ 350.101219][T25221] __alloc_skb+0x101/0x320 [ 350.101241][T25221] sock_omalloc+0x81/0xf0 [ 350.101267][T25221] msg_zerocopy_realloc+0x84/0x420 [ 350.101346][T25221] __ip6_append_data+0xa80/0x2390 [ 350.101377][T25221] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 350.101435][T25221] ? __rcu_read_lock+0x37/0x50 [ 350.101489][T25221] ? __rcu_read_unlock+0x4f/0x70 [ 350.101511][T25221] ? __pfx_ip6_mtu+0x10/0x10 [ 350.101551][T25221] ? ip6_mtu+0xf5/0x120 [ 350.101571][T25221] ip6_make_skb+0x1da/0x4a0 [ 350.101597][T25221] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 350.101723][T25221] udpv6_sendmsg+0x137e/0x1590 [ 350.101758][T25221] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 350.101789][T25221] ? __rcu_read_unlock+0x4f/0x70 [ 350.101892][T25221] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 350.101926][T25221] inet6_sendmsg+0xac/0xd0 [ 350.101989][T25221] __sock_sendmsg+0x8b/0x180 [ 350.102021][T25221] ____sys_sendmsg+0x345/0x4e0 [ 350.102068][T25221] ___sys_sendmsg+0x17b/0x1d0 [ 350.102103][T25221] __sys_sendmmsg+0x178/0x300 [ 350.102146][T25221] __x64_sys_sendmmsg+0x57/0x70 [ 350.102172][T25221] x64_sys_call+0x1c4a/0x2ff0 [ 350.102194][T25221] do_syscall_64+0xd2/0x200 [ 350.102231][T25221] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 350.102308][T25221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.102332][T25221] RIP: 0033:0x7f9c18a8ebe9 [ 350.102349][T25221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.102390][T25221] RSP: 002b:00007f9c174f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.102411][T25221] RAX: ffffffffffffffda RBX: 00007f9c18cc5fa0 RCX: 00007f9c18a8ebe9 [ 350.102425][T25221] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 350.102514][T25221] RBP: 00007f9c174f7090 R08: 0000000000000000 R09: 0000000000000000 [ 350.102528][T25221] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 350.102541][T25221] R13: 00007f9c18cc6038 R14: 00007f9c18cc5fa0 R15: 00007fff9caff158 [ 350.102561][T25221] [ 350.504836][T20318] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.519186][ T8460] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.537147][ T8460] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.563293][ T8460] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.822904][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8153'. [ 351.134940][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 351.134961][ T29] audit: type=1326 audit(361.778:29190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.164542][ T29] audit: type=1326 audit(361.778:29191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.187577][ T29] audit: type=1326 audit(361.788:29192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.210530][ T29] audit: type=1326 audit(361.788:29193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.233596][ T29] audit: type=1326 audit(361.788:29194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.239606][T25256] loop3: detected capacity change from 0 to 1024 [ 351.256653][ T29] audit: type=1326 audit(361.788:29195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.285899][ T29] audit: type=1326 audit(361.788:29196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.297596][T25256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8160'. [ 351.308713][ T29] audit: type=1326 audit(361.788:29197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.340630][ T29] audit: type=1326 audit(361.788:29198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.363623][ T29] audit: type=1326 audit(361.788:29199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25252 comm="syz.0.8159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 351.440525][T25261] netlink: 'syz.3.8162': attribute type 1 has an invalid length. [ 351.453392][T25261] bond1: entered promiscuous mode [ 351.458587][T25261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.471089][T25261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.478241][T25261] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 351.488913][T25261] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 351.501135][T25261] bond1: (slave wireguard0): making interface the new active one [ 351.508977][T25261] wireguard0: entered promiscuous mode [ 351.515609][T25261] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 351.516127][T25265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.531687][T25265] IPv6: NLM_F_CREATE should be set when creating new route [ 351.538866][T25265] IPv6: NLM_F_CREATE should be set when creating new route [ 351.547237][T25265] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.749129][T25275] netlink: 'syz.3.8166': attribute type 1 has an invalid length. [ 352.187113][T25293] syzkaller0: refused to change device tx_queue_len [ 352.281350][T25304] FAULT_INJECTION: forcing a failure. [ 352.281350][T25304] name failslab, interval 1, probability 0, space 0, times 0 [ 352.294022][T25304] CPU: 0 UID: 0 PID: 25304 Comm: syz.4.8177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 352.294084][T25304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.294108][T25304] Call Trace: [ 352.294112][T25304] [ 352.294117][T25304] __dump_stack+0x1d/0x30 [ 352.294130][T25304] dump_stack_lvl+0xe8/0x140 [ 352.294141][T25304] dump_stack+0x15/0x1b [ 352.294154][T25304] should_fail_ex+0x265/0x280 [ 352.294252][T25304] should_failslab+0x8c/0xb0 [ 352.294267][T25304] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 352.294286][T25304] ? strncmp+0x34/0x70 [ 352.294378][T25304] ? match_strdup+0x37/0x40 [ 352.294420][T25304] ? strcmp+0x22/0x50 [ 352.294436][T25304] kmemdup_nul+0x36/0xc0 [ 352.294451][T25304] match_strdup+0x37/0x40 [ 352.294475][T25304] p9_client_create+0x2c9/0xbc0 [ 352.294562][T25304] v9fs_session_init+0xf7/0xde0 [ 352.294576][T25304] ? avc_has_perm_noaudit+0x1b1/0x200 [ 352.294590][T25304] ? should_fail_ex+0xdb/0x280 [ 352.294612][T25304] ? v9fs_mount+0x51/0x5c0 [ 352.294695][T25304] ? should_failslab+0x8c/0xb0 [ 352.294747][T25304] ? __kmalloc_cache_noprof+0x189/0x320 [ 352.294764][T25304] v9fs_mount+0x67/0x5c0 [ 352.294778][T25304] ? selinux_capable+0x31/0x40 [ 352.294809][T25304] ? __pfx_v9fs_mount+0x10/0x10 [ 352.294866][T25304] legacy_get_tree+0x78/0xd0 [ 352.294889][T25304] vfs_get_tree+0x57/0x1d0 [ 352.294902][T25304] do_new_mount+0x207/0x5e0 [ 352.294914][T25304] ? security_capable+0x83/0x90 [ 352.294986][T25304] path_mount+0x4a4/0xb20 [ 352.294999][T25304] ? user_path_at+0x109/0x130 [ 352.295031][T25304] __se_sys_mount+0x28f/0x2e0 [ 352.295099][T25304] ? fput+0x8f/0xc0 [ 352.295117][T25304] __x64_sys_mount+0x67/0x80 [ 352.295204][T25304] x64_sys_call+0x2b4d/0x2ff0 [ 352.295227][T25304] do_syscall_64+0xd2/0x200 [ 352.295245][T25304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 352.295259][T25304] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 352.295293][T25304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.295305][T25304] RIP: 0033:0x7fa828cdebe9 [ 352.295314][T25304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.295372][T25304] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.295384][T25304] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 352.295391][T25304] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 352.295398][T25304] RBP: 00007fa827747090 R08: 0000200000000280 R09: 0000000000000000 [ 352.295467][T25304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.295474][T25304] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 352.295485][T25304] [ 352.625180][T25318] loop3: detected capacity change from 0 to 128 [ 352.651699][T25320] loop3: detected capacity change from 0 to 512 [ 352.658235][T25320] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 352.683601][T25322] loop3: detected capacity change from 0 to 512 [ 352.690398][T25322] EXT4-fs: Ignoring removed nobh option [ 352.705706][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8184: corrupted inode contents [ 352.717735][T25322] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8184: mark_inode_dirty error [ 352.729319][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8184: corrupted inode contents [ 352.741365][T25322] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8184: mark_inode_dirty error [ 352.752916][T25322] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8184: Failed to acquire dquot type 0 [ 352.764953][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8184: corrupted inode contents [ 352.777296][T25322] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8184: mark_inode_dirty error [ 352.788788][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8184: corrupted inode contents [ 352.800730][T25322] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8184: mark_inode_dirty error [ 352.812217][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8184: corrupted inode contents [ 352.824174][T25322] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 352.832842][T25322] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8184: corrupted inode contents [ 352.844781][T25322] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8184: mark_inode_dirty error [ 352.856010][T25322] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 352.865466][T25322] EXT4-fs (loop3): 1 truncate cleaned up [ 352.871376][T25322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.888433][T25322] syzkaller0: refused to change device tx_queue_len [ 352.936474][T24051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.953458][T25333] loop3: detected capacity change from 0 to 512 [ 352.960222][T25333] EXT4-fs: Ignoring removed nobh option [ 352.976056][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8187: corrupted inode contents [ 352.991221][T25333] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8187: mark_inode_dirty error [ 353.002997][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8187: corrupted inode contents [ 353.014862][T25333] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8187: mark_inode_dirty error [ 353.027201][T25333] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8187: Failed to acquire dquot type 0 [ 353.042430][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8187: corrupted inode contents [ 353.054569][T25333] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8187: mark_inode_dirty error [ 353.066187][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8187: corrupted inode contents [ 353.078322][T25333] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8187: mark_inode_dirty error [ 353.091410][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8187: corrupted inode contents [ 353.103558][T25333] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 353.112288][T25333] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8187: corrupted inode contents [ 353.124340][T25333] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8187: mark_inode_dirty error [ 353.135519][T25333] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 353.144854][T25333] EXT4-fs (loop3): 1 truncate cleaned up [ 353.151245][T25333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.165382][T25340] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.175232][T25340] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.189496][T25333] syzkaller0: refused to change device tx_queue_len [ 353.214233][T25340] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.224132][T25340] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.251588][T24051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.263081][T25340] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.273146][T25340] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.303432][T25352] loop3: detected capacity change from 0 to 128 [ 353.318484][T25340] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 353.328398][T25340] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.406800][T25364] loop3: detected capacity change from 0 to 512 [ 353.413591][T25364] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 353.439908][T25366] loop3: detected capacity change from 0 to 512 [ 353.446579][T25366] EXT4-fs: Ignoring removed nobh option [ 353.463719][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8198: corrupted inode contents [ 353.475707][T25366] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8198: mark_inode_dirty error [ 353.493973][ T8460] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.502291][ T8460] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.511856][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8198: corrupted inode contents [ 353.520811][ T8460] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.531850][ T8460] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.535470][T25366] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8198: mark_inode_dirty error [ 353.540312][ T8460] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.559477][ T8460] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.568038][ T8460] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.576281][ T8460] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.594825][T25370] loop7: detected capacity change from 0 to 1024 [ 353.602300][T25370] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 353.613194][T25370] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 353.624394][T25370] JBD2: no valid journal superblock found [ 353.630134][T25370] EXT4-fs (loop7): Could not load journal inode [ 353.684631][T25366] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8198: Failed to acquire dquot type 0 [ 353.728828][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8198: corrupted inode contents [ 353.760176][T25366] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8198: mark_inode_dirty error [ 353.800144][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8198: corrupted inode contents [ 353.833338][T25376] syzkaller0: refused to change device tx_queue_len [ 353.845860][T25366] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8198: mark_inode_dirty error [ 353.857659][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8198: corrupted inode contents [ 353.869853][T25366] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 353.878604][T25366] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8198: corrupted inode contents [ 353.935645][T25366] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8198: mark_inode_dirty error [ 353.948080][T25366] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 353.957450][T25366] EXT4-fs (loop3): 1 truncate cleaned up [ 353.963576][T25366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.983313][T25366] syzkaller0: refused to change device tx_queue_len [ 354.024907][T24051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.038297][T25388] FAULT_INJECTION: forcing a failure. [ 354.038297][T25388] name failslab, interval 1, probability 0, space 0, times 0 [ 354.051016][T25388] CPU: 0 UID: 0 PID: 25388 Comm: syz.0.8207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.051043][T25388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.051055][T25388] Call Trace: [ 354.051060][T25388] [ 354.051067][T25388] __dump_stack+0x1d/0x30 [ 354.051092][T25388] dump_stack_lvl+0xe8/0x140 [ 354.051113][T25388] dump_stack+0x15/0x1b [ 354.051132][T25388] should_fail_ex+0x265/0x280 [ 354.051155][T25388] should_failslab+0x8c/0xb0 [ 354.051177][T25388] __kvmalloc_node_noprof+0x123/0x4e0 [ 354.051310][T25388] ? vmemdup_user+0x26/0xd0 [ 354.051339][T25388] ? should_fail_usercopy+0x1a/0x20 [ 354.051423][T25388] vmemdup_user+0x26/0xd0 [ 354.051449][T25388] path_setxattrat+0x1b6/0x310 [ 354.051498][T25388] __x64_sys_fsetxattr+0x6b/0x80 [ 354.051557][T25388] x64_sys_call+0x1ced/0x2ff0 [ 354.051577][T25388] do_syscall_64+0xd2/0x200 [ 354.051680][T25388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.051702][T25388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 354.051806][T25388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.051828][T25388] RIP: 0033:0x7fefc1b0ebe9 [ 354.051841][T25388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.051857][T25388] RSP: 002b:00007fefc0577038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 354.051874][T25388] RAX: ffffffffffffffda RBX: 00007fefc1d45fa0 RCX: 00007fefc1b0ebe9 [ 354.051892][T25388] RDX: 00002000000004c0 RSI: 0000200000000340 RDI: 0000000000000003 [ 354.051940][T25388] RBP: 00007fefc0577090 R08: 0000000000000000 R09: 0000000000000000 [ 354.051953][T25388] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 354.051967][T25388] R13: 00007fefc1d46038 R14: 00007fefc1d45fa0 R15: 00007ffd241790d8 [ 354.051986][T25388] [ 354.246310][T25393] loop3: detected capacity change from 0 to 512 [ 354.253063][T25393] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 354.281695][T25396] FAULT_INJECTION: forcing a failure. [ 354.281695][T25396] name failslab, interval 1, probability 0, space 0, times 0 [ 354.294341][T25396] CPU: 1 UID: 0 PID: 25396 Comm: syz.3.8210 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.294366][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.294384][T25396] Call Trace: [ 354.294390][T25396] [ 354.294397][T25396] __dump_stack+0x1d/0x30 [ 354.294438][T25396] dump_stack_lvl+0xe8/0x140 [ 354.294457][T25396] dump_stack+0x15/0x1b [ 354.294499][T25396] should_fail_ex+0x265/0x280 [ 354.294528][T25396] should_failslab+0x8c/0xb0 [ 354.294587][T25396] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 354.294688][T25396] ? __d_alloc+0x3d/0x340 [ 354.294728][T25396] __d_alloc+0x3d/0x340 [ 354.294755][T25396] ? mpol_shared_policy_init+0xbd/0x4c0 [ 354.294777][T25396] d_alloc_pseudo+0x1e/0x80 [ 354.294874][T25396] alloc_file_pseudo+0x71/0x160 [ 354.294908][T25396] __shmem_file_setup+0x1de/0x210 [ 354.294999][T25396] shmem_file_setup+0x3b/0x50 [ 354.295048][T25396] __se_sys_memfd_create+0x2c3/0x590 [ 354.295108][T25396] __x64_sys_memfd_create+0x31/0x40 [ 354.295128][T25396] x64_sys_call+0x2abe/0x2ff0 [ 354.295150][T25396] do_syscall_64+0xd2/0x200 [ 354.295255][T25396] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.295277][T25396] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 354.295327][T25396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.295349][T25396] RIP: 0033:0x7fe459e3ebe9 [ 354.295399][T25396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.295415][T25396] RSP: 002b:00007fe45889ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 354.295440][T25396] RAX: ffffffffffffffda RBX: 0000000000000550 RCX: 00007fe459e3ebe9 [ 354.295451][T25396] RDX: 00007fe45889eef0 RSI: 0000000000000000 RDI: 00007fe459ec27e8 [ 354.295462][T25396] RBP: 0000200000001780 R08: 00007fe45889ebb7 R09: 00007fe45889ee40 [ 354.295473][T25396] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 354.295520][T25396] R13: 00007fe45889eef0 R14: 00007fe45889eeb0 R15: 00002000000003c0 [ 354.295539][T25396] [ 354.585285][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8215'. [ 354.617721][T25413] syzkaller0: refused to change device tx_queue_len [ 354.622175][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8215'. [ 354.812403][T25428] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.870904][T25428] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.913874][T25431] FAULT_INJECTION: forcing a failure. [ 354.913874][T25431] name failslab, interval 1, probability 0, space 0, times 0 [ 354.926646][T25431] CPU: 1 UID: 0 PID: 25431 Comm: syz.3.8222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 354.926730][T25431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.926743][T25431] Call Trace: [ 354.926751][T25431] [ 354.926758][T25431] __dump_stack+0x1d/0x30 [ 354.926778][T25431] dump_stack_lvl+0xe8/0x140 [ 354.926795][T25431] dump_stack+0x15/0x1b [ 354.926830][T25431] should_fail_ex+0x265/0x280 [ 354.926850][T25431] should_failslab+0x8c/0xb0 [ 354.926873][T25431] kmem_cache_alloc_noprof+0x50/0x310 [ 354.926901][T25431] ? security_file_alloc+0x32/0x100 [ 354.927077][T25431] security_file_alloc+0x32/0x100 [ 354.927152][T25431] init_file+0x5c/0x1d0 [ 354.927178][T25431] alloc_empty_file+0x8b/0x200 [ 354.927233][T25431] alloc_file_pseudo+0xc6/0x160 [ 354.927291][T25431] sock_alloc_file+0x9c/0x1e0 [ 354.927324][T25431] do_accept+0x1e4/0x3a0 [ 354.927362][T25431] __sys_accept4+0xbf/0x140 [ 354.927382][T25431] __x64_sys_accept+0x42/0x50 [ 354.927479][T25431] x64_sys_call+0x212c/0x2ff0 [ 354.927503][T25431] do_syscall_64+0xd2/0x200 [ 354.927529][T25431] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 354.927551][T25431] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 354.927618][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.927672][T25431] RIP: 0033:0x7fe459e3ebe9 [ 354.927685][T25431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.927751][T25431] RSP: 002b:00007fe45887e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 354.927771][T25431] RAX: ffffffffffffffda RBX: 00007fe45a076090 RCX: 00007fe459e3ebe9 [ 354.927783][T25431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 354.927794][T25431] RBP: 00007fe45887e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.927849][T25431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.927862][T25431] R13: 00007fe45a076128 R14: 00007fe45a076090 R15: 00007fffb5c6c7a8 [ 354.927882][T25431] [ 355.167078][T25428] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.233874][T25428] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.285899][ T8460] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.302864][ T8460] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.311466][ T8460] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.330994][ T8460] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.371217][T25438] loop3: detected capacity change from 0 to 2048 [ 355.378221][T25438] EXT4-fs: Mount option(s) incompatible with ext3 [ 355.388903][T25438] devtmpfs: Unknown parameter 'dont_appraise' [ 355.414671][T25440] netlink: 'syz.3.8225': attribute type 3 has an invalid length. [ 355.422832][T25440] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8225'. [ 355.432584][T25440] netlink: 'syz.3.8225': attribute type 10 has an invalid length. [ 355.504428][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8228'. [ 355.513479][T25444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8228'. [ 355.522453][T25444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8228'. [ 355.531585][T25444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8228'. [ 355.540535][T25444] netlink: 'syz.3.8228': attribute type 6 has an invalid length. [ 355.550969][T25444] netlink: 'syz.3.8228': attribute type 3 has an invalid length. [ 355.575098][T25447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8229'. [ 355.609386][T25451] syzkaller0: refused to change device tx_queue_len [ 355.758210][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8239'. [ 355.831801][T25481] FAULT_INJECTION: forcing a failure. [ 355.831801][T25481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.845138][T25481] CPU: 0 UID: 0 PID: 25481 Comm: syz.4.8241 Not tainted syzkaller #0 PREEMPT(voluntary) [ 355.845169][T25481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.845182][T25481] Call Trace: [ 355.845189][T25481] [ 355.845198][T25481] __dump_stack+0x1d/0x30 [ 355.845221][T25481] dump_stack_lvl+0xe8/0x140 [ 355.845241][T25481] dump_stack+0x15/0x1b [ 355.845259][T25481] should_fail_ex+0x265/0x280 [ 355.845322][T25481] should_fail+0xb/0x20 [ 355.845341][T25481] should_fail_usercopy+0x1a/0x20 [ 355.845436][T25481] _copy_from_user+0x1c/0xb0 [ 355.845466][T25481] memdup_user+0x5e/0xd0 [ 355.845490][T25481] ptp_ioctl+0x4b8/0x17d0 [ 355.845507][T25481] ? do_vfs_ioctl+0x866/0xe10 [ 355.845527][T25481] ? selinux_file_ioctl+0x308/0x3a0 [ 355.845618][T25481] ? __pfx_ptp_ioctl+0x10/0x10 [ 355.845633][T25481] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 355.845657][T25481] posix_clock_ioctl+0x96/0xd0 [ 355.845682][T25481] __se_sys_ioctl+0xce/0x140 [ 355.845701][T25481] __x64_sys_ioctl+0x43/0x50 [ 355.845718][T25481] x64_sys_call+0x1816/0x2ff0 [ 355.845738][T25481] do_syscall_64+0xd2/0x200 [ 355.845801][T25481] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 355.845828][T25481] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 355.845934][T25481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.845954][T25481] RIP: 0033:0x7fa828cdebe9 [ 355.845968][T25481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.845983][T25481] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.846000][T25481] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 355.846040][T25481] RDX: 0000200000000f80 RSI: 0000000043403d05 RDI: 0000000000000006 [ 355.846095][T25481] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 355.846108][T25481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.846120][T25481] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 355.846136][T25481] [ 356.060217][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 356.060268][ T29] audit: type=1326 audit(366.943:29385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.089474][ T29] audit: type=1326 audit(366.943:29386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.112461][ T29] audit: type=1326 audit(366.943:29387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.135898][ T29] audit: type=1326 audit(366.943:29388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.159031][ T29] audit: type=1326 audit(366.943:29389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.181991][ T29] audit: type=1326 audit(366.943:29390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.204997][ T29] audit: type=1326 audit(366.943:29391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.228028][ T29] audit: type=1326 audit(366.943:29392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25482 comm="syz.0.8242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.298779][ T29] audit: type=1400 audit(367.184:29393): avc: denied { getopt } for pid=25491 comm="syz.4.8246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.394802][T25497] SELinux: Context system_u:object_r:systemd_unit_file_t:s0 is not valid (left unmapped). [ 356.405544][ T29] audit: type=1326 audit(367.289:29394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25494 comm="syz.0.8247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefc1b0ebe9 code=0x7ffc0000 [ 356.480990][T25501] FAULT_INJECTION: forcing a failure. [ 356.480990][T25501] name failslab, interval 1, probability 0, space 0, times 0 [ 356.493675][T25501] CPU: 0 UID: 0 PID: 25501 Comm: syz.1.8249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.493700][T25501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.493712][T25501] Call Trace: [ 356.493718][T25501] [ 356.493726][T25501] __dump_stack+0x1d/0x30 [ 356.493792][T25501] dump_stack_lvl+0xe8/0x140 [ 356.493811][T25501] dump_stack+0x15/0x1b [ 356.493877][T25501] should_fail_ex+0x265/0x280 [ 356.493897][T25501] should_failslab+0x8c/0xb0 [ 356.493923][T25501] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 356.493951][T25501] ? __d_alloc+0x3d/0x340 [ 356.494018][T25501] __d_alloc+0x3d/0x340 [ 356.494080][T25501] d_alloc_parallel+0x53/0xc60 [ 356.494157][T25501] ? __rcu_read_unlock+0x4f/0x70 [ 356.494181][T25501] ? __d_lookup+0x316/0x340 [ 356.494213][T25501] path_openat+0x6b5/0x2170 [ 356.494252][T25501] do_filp_open+0x109/0x230 [ 356.494319][T25501] do_sys_openat2+0xa6/0x110 [ 356.494349][T25501] __x64_sys_openat+0xf2/0x120 [ 356.494379][T25501] x64_sys_call+0x2e9c/0x2ff0 [ 356.494464][T25501] do_syscall_64+0xd2/0x200 [ 356.494496][T25501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.494574][T25501] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 356.494602][T25501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.494663][T25501] RIP: 0033:0x7f45ea7febe9 [ 356.494677][T25501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.494693][T25501] RSP: 002b:00007f45e925f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 356.494790][T25501] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7febe9 [ 356.494804][T25501] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 356.494817][T25501] RBP: 00007f45e925f090 R08: 0000000000000000 R09: 0000000000000000 [ 356.494828][T25501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.494839][T25501] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 356.494854][T25501] [ 356.728684][T25503] FAULT_INJECTION: forcing a failure. [ 356.728684][T25503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.741881][T25503] CPU: 0 UID: 0 PID: 25503 Comm: syz.1.8250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.741910][T25503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.741982][T25503] Call Trace: [ 356.741989][T25503] [ 356.741995][T25503] __dump_stack+0x1d/0x30 [ 356.742015][T25503] dump_stack_lvl+0xe8/0x140 [ 356.742032][T25503] dump_stack+0x15/0x1b [ 356.742046][T25503] should_fail_ex+0x265/0x280 [ 356.742093][T25503] should_fail+0xb/0x20 [ 356.742112][T25503] should_fail_usercopy+0x1a/0x20 [ 356.742174][T25503] _copy_from_user+0x1c/0xb0 [ 356.742220][T25503] memdup_user+0x5e/0xd0 [ 356.742244][T25503] strndup_user+0x68/0xb0 [ 356.742269][T25503] __se_sys_mount+0x4d/0x2e0 [ 356.742291][T25503] ? fput+0x8f/0xc0 [ 356.742356][T25503] ? ksys_write+0x192/0x1a0 [ 356.742379][T25503] __x64_sys_mount+0x67/0x80 [ 356.742402][T25503] x64_sys_call+0x2b4d/0x2ff0 [ 356.742517][T25503] do_syscall_64+0xd2/0x200 [ 356.742546][T25503] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 356.742571][T25503] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 356.742674][T25503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.742697][T25503] RIP: 0033:0x7f45ea7febe9 [ 356.742712][T25503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.742728][T25503] RSP: 002b:00007f45e925f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.742820][T25503] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7febe9 [ 356.742833][T25503] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 356.742846][T25503] RBP: 00007f45e925f090 R08: 0000200000000540 R09: 0000000000000000 [ 356.742859][T25503] R10: 0000000002000004 R11: 0000000000000246 R12: 0000000000000001 [ 356.742873][T25503] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 356.742891][T25503] [ 357.117820][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8254'. [ 357.376143][T25535] FAULT_INJECTION: forcing a failure. [ 357.376143][T25535] name failslab, interval 1, probability 0, space 0, times 0 [ 357.388827][T25535] CPU: 0 UID: 0 PID: 25535 Comm: syz.7.8264 Not tainted syzkaller #0 PREEMPT(voluntary) [ 357.388857][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.388868][T25535] Call Trace: [ 357.388874][T25535] [ 357.388954][T25535] __dump_stack+0x1d/0x30 [ 357.388973][T25535] dump_stack_lvl+0xe8/0x140 [ 357.388990][T25535] dump_stack+0x15/0x1b [ 357.389006][T25535] should_fail_ex+0x265/0x280 [ 357.389028][T25535] ? sctp_auth_set_key+0x115/0x4f0 [ 357.389094][T25535] should_failslab+0x8c/0xb0 [ 357.389118][T25535] __kmalloc_cache_noprof+0x4c/0x320 [ 357.389263][T25535] sctp_auth_set_key+0x115/0x4f0 [ 357.389294][T25535] sctp_setsockopt_auth_key+0x2d7/0x3e0 [ 357.389362][T25535] sctp_setsockopt+0x4ba/0xe30 [ 357.389408][T25535] sock_common_setsockopt+0x66/0x80 [ 357.389437][T25535] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 357.389475][T25535] __sys_setsockopt+0x181/0x200 [ 357.389537][T25535] __x64_sys_setsockopt+0x64/0x80 [ 357.389561][T25535] x64_sys_call+0x20ec/0x2ff0 [ 357.389642][T25535] do_syscall_64+0xd2/0x200 [ 357.389668][T25535] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 357.389692][T25535] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 357.389717][T25535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.389737][T25535] RIP: 0033:0x7f9c18a8ebe9 [ 357.389754][T25535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.389774][T25535] RSP: 002b:00007f9c174f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 357.389794][T25535] RAX: ffffffffffffffda RBX: 00007f9c18cc5fa0 RCX: 00007f9c18a8ebe9 [ 357.389847][T25535] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 357.389859][T25535] RBP: 00007f9c174f7090 R08: 0000000000000009 R09: 0000000000000000 [ 357.389871][T25535] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 357.389884][T25535] R13: 00007f9c18cc6038 R14: 00007f9c18cc5fa0 R15: 00007fff9caff158 [ 357.389902][T25535] [ 357.606817][T25539] bridge0: port 4(macsec1) entered blocking state [ 357.613512][T25539] bridge0: port 4(macsec1) entered disabled state [ 357.620264][T25539] macsec1: entered allmulticast mode [ 357.626324][T25539] macsec1: left allmulticast mode [ 357.652839][T25542] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25542 comm=syz.7.8266 [ 358.010344][T25578] netlink: 'syz.3.8280': attribute type 7 has an invalid length. [ 358.019655][T25574] netlink: 'syz.3.8280': attribute type 7 has an invalid length. [ 358.102651][T25582] lo speed is unknown, defaulting to 1000 [ 358.270485][T25591] FAULT_INJECTION: forcing a failure. [ 358.270485][T25591] name failslab, interval 1, probability 0, space 0, times 0 [ 358.283235][T25591] CPU: 1 UID: 0 PID: 25591 Comm: syz.4.8284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 358.283292][T25591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 358.283304][T25591] Call Trace: [ 358.283311][T25591] [ 358.283318][T25591] __dump_stack+0x1d/0x30 [ 358.283342][T25591] dump_stack_lvl+0xe8/0x140 [ 358.283387][T25591] dump_stack+0x15/0x1b [ 358.283405][T25591] should_fail_ex+0x265/0x280 [ 358.283424][T25591] should_failslab+0x8c/0xb0 [ 358.283447][T25591] kmem_cache_alloc_node_noprof+0x57/0x320 [ 358.283492][T25591] ? __alloc_skb+0x101/0x320 [ 358.283564][T25591] __alloc_skb+0x101/0x320 [ 358.283582][T25591] netlink_alloc_large_skb+0xba/0xf0 [ 358.283618][T25591] netlink_sendmsg+0x3cf/0x6b0 [ 358.283654][T25591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.283680][T25591] __sock_sendmsg+0x142/0x180 [ 358.283725][T25591] ____sys_sendmsg+0x31e/0x4e0 [ 358.283757][T25591] ___sys_sendmsg+0x17b/0x1d0 [ 358.283794][T25591] __x64_sys_sendmsg+0xd4/0x160 [ 358.283823][T25591] x64_sys_call+0x191e/0x2ff0 [ 358.283887][T25591] do_syscall_64+0xd2/0x200 [ 358.283966][T25591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 358.283991][T25591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 358.284022][T25591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.284042][T25591] RIP: 0033:0x7fa828cdebe9 [ 358.284101][T25591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.284158][T25591] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.284177][T25591] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 358.284191][T25591] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 358.284204][T25591] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 358.284218][T25591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.284231][T25591] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 358.284307][T25591] [ 358.836908][T25620] loop3: detected capacity change from 0 to 512 [ 358.843671][T25620] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 359.768186][T25638] FAULT_INJECTION: forcing a failure. [ 359.768186][T25638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.781300][T25638] CPU: 0 UID: 0 PID: 25638 Comm: syz.4.8300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 359.781325][T25638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.781338][T25638] Call Trace: [ 359.781346][T25638] [ 359.781396][T25638] __dump_stack+0x1d/0x30 [ 359.781417][T25638] dump_stack_lvl+0xe8/0x140 [ 359.781466][T25638] dump_stack+0x15/0x1b [ 359.781485][T25638] should_fail_ex+0x265/0x280 [ 359.781509][T25638] should_fail+0xb/0x20 [ 359.781529][T25638] should_fail_usercopy+0x1a/0x20 [ 359.781603][T25638] _copy_from_user+0x1c/0xb0 [ 359.781633][T25638] sg_new_write+0x71a/0x890 [ 359.781717][T25638] ? do_vfs_ioctl+0x866/0xe10 [ 359.781739][T25638] sg_ioctl+0xb81/0x1360 [ 359.781789][T25638] ? __pfx_sg_ioctl+0x10/0x10 [ 359.781821][T25638] __se_sys_ioctl+0xce/0x140 [ 359.781897][T25638] __x64_sys_ioctl+0x43/0x50 [ 359.781916][T25638] x64_sys_call+0x1816/0x2ff0 [ 359.781940][T25638] do_syscall_64+0xd2/0x200 [ 359.781998][T25638] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 359.782020][T25638] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 359.782049][T25638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.782089][T25638] RIP: 0033:0x7fa828cdebe9 [ 359.782103][T25638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.782118][T25638] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.782134][T25638] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 359.782145][T25638] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000007 [ 359.782157][T25638] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 359.782260][T25638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.782325][T25638] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 359.782342][T25638] [ 360.085560][T25642] loop3: detected capacity change from 0 to 512 [ 360.111024][T25646] __nla_validate_parse: 10 callbacks suppressed [ 360.111039][T25646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8305'. [ 360.151533][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8304'. [ 360.161764][T25646] team0 (unregistering): Port device team_slave_0 removed [ 360.203646][T25646] team0 (unregistering): Port device team_slave_1 removed [ 360.221109][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8304'. [ 360.268993][T25648] rdma_op ffff888119f27580 conn xmit_rdma 0000000000000000 [ 360.319176][T25671] netlink: 'syz.1.8313': attribute type 21 has an invalid length. [ 360.327049][T25671] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8313'. [ 360.340847][T25670] netlink: 'syz.1.8313': attribute type 21 has an invalid length. [ 360.348826][T25670] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8313'. [ 360.423636][T25670] netlink: 'syz.1.8313': attribute type 5 has an invalid length. [ 360.431407][T25670] netlink: 'syz.1.8313': attribute type 6 has an invalid length. [ 360.439265][T25670] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8313'. [ 360.448595][T25671] netlink: 'syz.1.8313': attribute type 5 has an invalid length. [ 360.456381][T25671] netlink: 'syz.1.8313': attribute type 6 has an invalid length. [ 360.464214][T25671] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8313'. [ 361.182881][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 361.182895][ T29] audit: type=1400 audit(372.328:29645): avc: denied { mount } for pid=25689 comm="syz.7.8319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 361.221219][ T29] audit: type=1326 audit(372.328:29646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25689 comm="syz.7.8319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c18a8ebe9 code=0x7ffc0000 [ 361.277571][ T29] audit: type=1326 audit(372.423:29647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.300804][ T29] audit: type=1326 audit(372.454:29648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.327678][ T29] audit: type=1326 audit(372.475:29649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.339246][T25693] serio: Serial port ptm0 [ 361.350675][ T29] audit: type=1326 audit(372.475:29650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.377894][ T29] audit: type=1326 audit(372.475:29651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.378781][T25703] FAULT_INJECTION: forcing a failure. [ 361.378781][T25703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.400853][ T29] audit: type=1326 audit(372.475:29652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.413845][T25703] CPU: 1 UID: 0 PID: 25703 Comm: syz.1.8322 Not tainted syzkaller #0 PREEMPT(voluntary) [ 361.413975][T25703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.413988][T25703] Call Trace: [ 361.413994][T25703] [ 361.414002][T25703] __dump_stack+0x1d/0x30 [ 361.414048][T25703] dump_stack_lvl+0xe8/0x140 [ 361.414074][T25703] dump_stack+0x15/0x1b [ 361.414091][T25703] should_fail_ex+0x265/0x280 [ 361.414112][T25703] should_fail+0xb/0x20 [ 361.414131][T25703] should_fail_usercopy+0x1a/0x20 [ 361.414177][T25703] _copy_from_user+0x1c/0xb0 [ 361.414206][T25703] memdup_user+0x5e/0xd0 [ 361.414287][T25703] ptp_ioctl+0x4b8/0x17d0 [ 361.414306][T25703] ? do_vfs_ioctl+0x866/0xe10 [ 361.414468][T25703] ? selinux_file_ioctl+0x308/0x3a0 [ 361.414490][T25703] ? __fget_files+0x184/0x1c0 [ 361.414514][T25703] ? __pfx_ptp_ioctl+0x10/0x10 [ 361.414575][T25703] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 361.414603][T25703] posix_clock_ioctl+0x96/0xd0 [ 361.414629][T25703] __se_sys_ioctl+0xce/0x140 [ 361.414647][T25703] __x64_sys_ioctl+0x43/0x50 [ 361.414691][T25703] x64_sys_call+0x1816/0x2ff0 [ 361.414713][T25703] do_syscall_64+0xd2/0x200 [ 361.414815][T25703] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 361.414839][T25703] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.414888][T25703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.414911][T25703] RIP: 0033:0x7f45ea7febe9 [ 361.414926][T25703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.414943][T25703] RSP: 002b:00007f45e923e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.414962][T25703] RAX: ffffffffffffffda RBX: 00007f45eaa36090 RCX: 00007f45ea7febe9 [ 361.414974][T25703] RDX: 0000200000000f80 RSI: 0000000043403d05 RDI: 0000000000000003 [ 361.415056][T25703] RBP: 00007f45e923e090 R08: 0000000000000000 R09: 0000000000000000 [ 361.415072][T25703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.415085][T25703] R13: 00007f45eaa36128 R14: 00007f45eaa36090 R15: 00007ffd8a2c75e8 [ 361.415103][T25703] [ 361.643903][ T29] audit: type=1326 audit(372.475:29653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.666817][ T29] audit: type=1326 audit(372.475:29654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25692 comm="syz.4.8321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa828cdebe9 code=0x7ffc0000 [ 361.707225][T25708] loop7: detected capacity change from 0 to 512 [ 361.713746][T25708] EXT4-fs: Ignoring removed nobh option [ 361.741516][T25711] FAULT_INJECTION: forcing a failure. [ 361.741516][T25711] name failslab, interval 1, probability 0, space 0, times 0 [ 361.754258][T25711] CPU: 0 UID: 0 PID: 25711 Comm: syz.0.8326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 361.754287][T25711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.754299][T25711] Call Trace: [ 361.754305][T25711] [ 361.754321][T25711] __dump_stack+0x1d/0x30 [ 361.754349][T25711] dump_stack_lvl+0xe8/0x140 [ 361.754365][T25711] dump_stack+0x15/0x1b [ 361.754380][T25711] should_fail_ex+0x265/0x280 [ 361.754405][T25711] should_failslab+0x8c/0xb0 [ 361.754426][T25711] kmem_cache_alloc_node_noprof+0x57/0x320 [ 361.754452][T25711] ? __alloc_skb+0x101/0x320 [ 361.754539][T25711] __alloc_skb+0x101/0x320 [ 361.754622][T25711] netlink_alloc_large_skb+0xba/0xf0 [ 361.754653][T25711] netlink_sendmsg+0x3cf/0x6b0 [ 361.754675][T25711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.754695][T25711] __sock_sendmsg+0x142/0x180 [ 361.754848][T25711] ____sys_sendmsg+0x31e/0x4e0 [ 361.754870][T25711] ___sys_sendmsg+0x17b/0x1d0 [ 361.754900][T25711] __x64_sys_sendmsg+0xd4/0x160 [ 361.754923][T25711] x64_sys_call+0x191e/0x2ff0 [ 361.755001][T25711] do_syscall_64+0xd2/0x200 [ 361.755026][T25711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 361.755129][T25711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 361.755152][T25711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.755172][T25711] RIP: 0033:0x7fefc1b0ebe9 [ 361.755184][T25711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.755200][T25711] RSP: 002b:00007fefc0577038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.755216][T25711] RAX: ffffffffffffffda RBX: 00007fefc1d45fa0 RCX: 00007fefc1b0ebe9 [ 361.755233][T25711] RDX: 0000000020008000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 361.755248][T25711] RBP: 00007fefc0577090 R08: 0000000000000000 R09: 0000000000000000 [ 361.755259][T25711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.755269][T25711] R13: 00007fefc1d46038 R14: 00007fefc1d45fa0 R15: 00007ffd241790d8 [ 361.755285][T25711] [ 361.759324][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8325: corrupted inode contents [ 361.789293][T25718] syzkaller0: refused to change device tx_queue_len [ 361.800921][T25708] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8325: mark_inode_dirty error [ 361.988063][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8325: corrupted inode contents [ 362.000370][T25708] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8325: mark_inode_dirty error [ 362.012083][T25708] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8325: Failed to acquire dquot type 0 [ 362.032085][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8325: corrupted inode contents [ 362.044961][T25708] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8325: mark_inode_dirty error [ 362.057616][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8325: corrupted inode contents [ 362.081196][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8330'. [ 362.091726][T25723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8330'. [ 362.101641][T25708] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8325: mark_inode_dirty error [ 362.118749][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8325: corrupted inode contents [ 362.121828][T25729] loop3: detected capacity change from 0 to 512 [ 362.137315][T25729] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 362.164275][T25733] FAULT_INJECTION: forcing a failure. [ 362.164275][T25733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.177403][T25733] CPU: 1 UID: 0 PID: 25733 Comm: syz.4.8335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 362.177434][T25733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.177448][T25733] Call Trace: [ 362.177456][T25733] [ 362.177464][T25733] __dump_stack+0x1d/0x30 [ 362.177487][T25733] dump_stack_lvl+0xe8/0x140 [ 362.177571][T25733] dump_stack+0x15/0x1b [ 362.177589][T25733] should_fail_ex+0x265/0x280 [ 362.177612][T25733] should_fail+0xb/0x20 [ 362.177632][T25733] should_fail_usercopy+0x1a/0x20 [ 362.177655][T25733] copy_folio_from_iter_atomic+0x278/0x11b0 [ 362.177748][T25733] ? shmem_write_begin+0xa8/0x190 [ 362.177767][T25733] ? shmem_write_begin+0xe1/0x190 [ 362.177785][T25733] generic_perform_write+0x2c2/0x490 [ 362.177854][T25733] shmem_file_write_iter+0xc5/0xf0 [ 362.177877][T25733] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 362.177900][T25733] vfs_write+0x527/0x960 [ 362.177944][T25733] ksys_write+0xda/0x1a0 [ 362.178006][T25733] __x64_sys_write+0x40/0x50 [ 362.178029][T25733] x64_sys_call+0x27fe/0x2ff0 [ 362.178050][T25733] do_syscall_64+0xd2/0x200 [ 362.178089][T25733] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 362.178111][T25733] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 362.178138][T25733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.178158][T25733] RIP: 0033:0x7fa828cdebe9 [ 362.178231][T25733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.178250][T25733] RSP: 002b:00007fa827747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.178271][T25733] RAX: ffffffffffffffda RBX: 00007fa828f15fa0 RCX: 00007fa828cdebe9 [ 362.178283][T25733] RDX: 0000000000000058 RSI: 0000200000000a00 RDI: 0000000000000008 [ 362.178375][T25733] RBP: 00007fa827747090 R08: 0000000000000000 R09: 0000000000000000 [ 362.178457][T25733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.178468][T25733] R13: 00007fa828f16038 R14: 00007fa828f15fa0 R15: 00007ffcbffcdb98 [ 362.178487][T25733] [ 362.179870][T25708] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 362.235695][T25741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8339'. [ 362.240049][T25708] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8325: corrupted inode contents [ 362.309154][T25742] lo speed is unknown, defaulting to 1000 [ 362.362598][T25708] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8325: mark_inode_dirty error [ 362.427596][T25708] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 362.437173][T25708] EXT4-fs (loop7): 1 truncate cleaned up [ 362.444299][T25708] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.469353][T25747] serio: Serial port ptm0 [ 362.504305][T25749] syzkaller0: refused to change device tx_queue_len [ 362.545954][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.732873][T25763] lo speed is unknown, defaulting to 1000 [ 362.804472][T25773] syzkaller0: refused to change device tx_queue_len [ 362.945746][ T36] IPVS: starting estimator thread 0... [ 363.036328][T25778] IPVS: using max 2736 ests per chain, 136800 per kthread [ 363.043046][T25780] Falling back ldisc for ttyS3. [ 363.095163][ T36] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 363.119893][ T36] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 363.371287][T25787] loop7: detected capacity change from 0 to 1024 [ 363.378919][T25787] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 363.389923][T25787] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 363.401139][T25787] JBD2: no valid journal superblock found [ 363.406870][T25787] EXT4-fs (loop7): Could not load journal inode [ 363.465791][T25790] syzkaller0: refused to change device tx_queue_len [ 363.853794][T25804] FAULT_INJECTION: forcing a failure. [ 363.853794][T25804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.866882][T25804] CPU: 0 UID: 0 PID: 25804 Comm: syz.3.8359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 363.866913][T25804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.866965][T25804] Call Trace: [ 363.866972][T25804] [ 363.866981][T25804] __dump_stack+0x1d/0x30 [ 363.867073][T25804] dump_stack_lvl+0xe8/0x140 [ 363.867091][T25804] dump_stack+0x15/0x1b [ 363.867106][T25804] should_fail_ex+0x265/0x280 [ 363.867125][T25804] should_fail+0xb/0x20 [ 363.867143][T25804] should_fail_usercopy+0x1a/0x20 [ 363.867165][T25804] _copy_from_user+0x1c/0xb0 [ 363.867191][T25804] memdup_user+0x5e/0xd0 [ 363.867220][T25804] ptp_ioctl+0x4b8/0x17d0 [ 363.867258][T25804] ? do_vfs_ioctl+0x866/0xe10 [ 363.867306][T25804] ? selinux_file_ioctl+0x308/0x3a0 [ 363.867326][T25804] ? __pfx_ptp_ioctl+0x10/0x10 [ 363.867353][T25804] ? __pfx_posix_clock_ioctl+0x10/0x10 [ 363.867382][T25804] posix_clock_ioctl+0x96/0xd0 [ 363.867406][T25804] __se_sys_ioctl+0xce/0x140 [ 363.867497][T25804] __x64_sys_ioctl+0x43/0x50 [ 363.867513][T25804] x64_sys_call+0x1816/0x2ff0 [ 363.867576][T25804] do_syscall_64+0xd2/0x200 [ 363.867608][T25804] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 363.867629][T25804] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 363.867792][T25804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.867812][T25804] RIP: 0033:0x7fe459e3ebe9 [ 363.867826][T25804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.867843][T25804] RSP: 002b:00007fe45889f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.867860][T25804] RAX: ffffffffffffffda RBX: 00007fe45a075fa0 RCX: 00007fe459e3ebe9 [ 363.867890][T25804] RDX: 0000000000000000 RSI: 0000000043403d05 RDI: 0000000000000006 [ 363.867901][T25804] RBP: 00007fe45889f090 R08: 0000000000000000 R09: 0000000000000000 [ 363.867914][T25804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.867944][T25804] R13: 00007fe45a076038 R14: 00007fe45a075fa0 R15: 00007fffb5c6c7a8 [ 363.867964][T25804] [ 364.208218][T25824] syzkaller0: refused to change device tx_queue_len [ 364.249010][T25829] netlink: 'syz.7.8370': attribute type 4 has an invalid length. [ 364.283828][T25835] loop3: detected capacity change from 0 to 128 [ 364.300645][T25837] loop7: detected capacity change from 0 to 512 [ 364.308802][T25837] EXT4-fs (loop7): orphan cleanup on readonly fs [ 364.315851][T25837] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8373: bad orphan inode 13 [ 364.327758][T25837] ext4_test_bit(bit=12, block=18) = 1 [ 364.333172][T25837] is_bad_inode(inode)=0 [ 364.337395][T25837] NEXT_ORPHAN(inode)=2130706432 [ 364.342252][T25837] max_ino=32 [ 364.345428][T25837] i_nlink=1 [ 364.348993][T25837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.371507][T25837] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 364.399036][T25837] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 364.433017][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.499618][T25855] FAULT_INJECTION: forcing a failure. [ 364.499618][T25855] name failslab, interval 1, probability 0, space 0, times 0 [ 364.512301][T25855] CPU: 1 UID: 0 PID: 25855 Comm: syz.1.8380 Not tainted syzkaller #0 PREEMPT(voluntary) [ 364.512395][T25855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.512407][T25855] Call Trace: [ 364.512412][T25855] [ 364.512418][T25855] __dump_stack+0x1d/0x30 [ 364.512436][T25855] dump_stack_lvl+0xe8/0x140 [ 364.512453][T25855] dump_stack+0x15/0x1b [ 364.512467][T25855] should_fail_ex+0x265/0x280 [ 364.512559][T25855] should_failslab+0x8c/0xb0 [ 364.512581][T25855] kmem_cache_alloc_node_noprof+0x57/0x320 [ 364.512606][T25855] ? __alloc_skb+0x101/0x320 [ 364.512624][T25855] __alloc_skb+0x101/0x320 [ 364.512644][T25855] ? audit_log_start+0x365/0x6c0 [ 364.512687][T25855] audit_log_start+0x380/0x6c0 [ 364.512715][T25855] audit_seccomp+0x48/0x100 [ 364.512738][T25855] ? __seccomp_filter+0x68c/0x10d0 [ 364.512762][T25855] __seccomp_filter+0x69d/0x10d0 [ 364.512780][T25855] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 364.512880][T25855] ? vfs_write+0x7e8/0x960 [ 364.512936][T25855] __secure_computing+0x82/0x150 [ 364.512955][T25855] syscall_trace_enter+0xcf/0x1e0 [ 364.512976][T25855] do_syscall_64+0xac/0x200 [ 364.513001][T25855] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 364.513122][T25855] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 364.513196][T25855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.513215][T25855] RIP: 0033:0x7f45ea7febe9 [ 364.513228][T25855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.513243][T25855] RSP: 002b:00007f45e925f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 364.513369][T25855] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7febe9 [ 364.513381][T25855] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 364.513392][T25855] RBP: 00007f45e925f090 R08: 0000000000000000 R09: 0000000000000000 [ 364.513402][T25855] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 364.513413][T25855] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 364.513504][T25855] [ 364.679356][T25861] smc: net device bond0 applied user defined pnetid SYZ0 [ 364.740087][T25864] syzkaller0: refused to change device tx_queue_len [ 364.884363][T25875] __nla_validate_parse: 8 callbacks suppressed [ 364.884376][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8387'. [ 364.984090][T25875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8387'. [ 365.192652][T25888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8391'. [ 365.201662][T25888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8391'. [ 365.302584][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8397'. [ 365.324616][T25896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8397'. [ 365.386890][T25900] loop7: detected capacity change from 0 to 512 [ 365.393482][T25900] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 365.417850][T25902] vlan0: entered allmulticast mode [ 365.423123][T25902] bond0: entered allmulticast mode [ 365.428254][T25902] bond_slave_0: entered allmulticast mode [ 365.434019][T25902] bond_slave_1: entered allmulticast mode [ 365.523203][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8403'. [ 365.558958][T25911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8403'. [ 365.596724][T25914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8414'. [ 365.606623][T25914] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8414'. [ 365.636249][T25917] serio: Serial port ptm0 [ 365.637831][T25919] loop7: detected capacity change from 0 to 512 [ 365.647247][T25919] EXT4-fs: Ignoring removed nobh option [ 365.673538][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8406: corrupted inode contents [ 365.685447][T25919] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8406: mark_inode_dirty error [ 365.697237][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8406: corrupted inode contents [ 365.709152][T25919] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8406: mark_inode_dirty error [ 365.720764][T25919] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8406: Failed to acquire dquot type 0 [ 365.733045][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8406: corrupted inode contents [ 365.745018][T25919] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8406: mark_inode_dirty error [ 365.756576][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8406: corrupted inode contents [ 365.768578][T25919] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8406: mark_inode_dirty error [ 365.780031][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8406: corrupted inode contents [ 365.792140][T25919] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 365.800888][T25919] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8406: corrupted inode contents [ 365.812955][T25919] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8406: mark_inode_dirty error [ 365.824317][T25919] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 365.833704][T25919] EXT4-fs (loop7): 1 truncate cleaned up [ 365.846253][T25919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.911174][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.935462][T25929] FAULT_INJECTION: forcing a failure. [ 365.935462][T25929] name failslab, interval 1, probability 0, space 0, times 0 [ 365.948097][T25929] CPU: 1 UID: 0 PID: 25929 Comm: syz.1.8409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 365.948127][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.948141][T25929] Call Trace: [ 365.948187][T25929] [ 365.948195][T25929] __dump_stack+0x1d/0x30 [ 365.948215][T25929] dump_stack_lvl+0xe8/0x140 [ 365.948237][T25929] dump_stack+0x15/0x1b [ 365.948284][T25929] should_fail_ex+0x265/0x280 [ 365.948303][T25929] should_failslab+0x8c/0xb0 [ 365.948329][T25929] __kmalloc_cache_node_noprof+0x54/0x320 [ 365.948360][T25929] ? __get_vm_area_node+0x106/0x1d0 [ 365.948404][T25929] __get_vm_area_node+0x106/0x1d0 [ 365.948551][T25929] __vmalloc_node_range_noprof+0x273/0xe00 [ 365.948586][T25929] ? copy_process+0x399/0x2000 [ 365.948627][T25929] ? __rcu_read_unlock+0x4f/0x70 [ 365.948723][T25929] __vmalloc_node_noprof+0x89/0xc0 [ 365.948824][T25929] ? copy_process+0x399/0x2000 [ 365.948860][T25929] ? copy_process+0x399/0x2000 [ 365.948902][T25929] dup_task_struct+0x449/0x6a0 [ 365.948928][T25929] ? _parse_integer+0x27/0x40 [ 365.948953][T25929] copy_process+0x399/0x2000 [ 365.949035][T25929] ? kstrtouint+0x76/0xc0 [ 365.949135][T25929] ? kstrtouint_from_user+0x9f/0xf0 [ 365.949159][T25929] ? __rcu_read_unlock+0x4f/0x70 [ 365.949185][T25929] kernel_clone+0x16c/0x5c0 [ 365.949214][T25929] ? vfs_write+0x7e8/0x960 [ 365.949258][T25929] __x64_sys_clone+0xe6/0x120 [ 365.949288][T25929] x64_sys_call+0x119c/0x2ff0 [ 365.949309][T25929] do_syscall_64+0xd2/0x200 [ 365.949337][T25929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 365.949387][T25929] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 365.949416][T25929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.949440][T25929] RIP: 0033:0x7f45ea7febe9 [ 365.949456][T25929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.949475][T25929] RSP: 002b:00007f45e925efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 365.949495][T25929] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7febe9 [ 365.949507][T25929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 365.949518][T25929] RBP: 00007f45e925f090 R08: 0000000000000000 R09: 0000000000000000 [ 365.949529][T25929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 365.949564][T25929] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 365.949585][T25929] [ 365.949593][T25929] syz.1.8409: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 365.971609][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 365.971638][ T29] audit: type=1400 audit(377.357:29963): avc: denied { create } for pid=25931 comm="syz.3.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 365.972754][T25929] ,cpuset=/ [ 365.976590][ T29] audit: type=1400 audit(377.357:29964): avc: denied { write } for pid=25931 comm="syz.3.8410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 365.980237][T25929] ,mems_allowed=0 [ 365.996783][T25933] loop7: detected capacity change from 0 to 512 [ 365.998106][T25929] [ 366.008124][T25933] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.009064][T25929] CPU: 1 UID: 0 PID: 25929 Comm: syz.1.8409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 366.009092][T25929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 366.009106][T25929] Call Trace: [ 366.009112][T25929] [ 366.009120][T25929] __dump_stack+0x1d/0x30 [ 366.009181][T25929] dump_stack_lvl+0xe8/0x140 [ 366.009200][T25929] dump_stack+0x15/0x1b [ 366.009217][T25929] warn_alloc+0x12b/0x1a0 [ 366.009283][T25929] __vmalloc_node_range_noprof+0x297/0xe00 [ 366.009372][T25929] ? __rcu_read_unlock+0x4f/0x70 [ 366.009397][T25929] __vmalloc_node_noprof+0x89/0xc0 [ 366.009429][T25929] ? copy_process+0x399/0x2000 [ 366.009527][T25929] ? copy_process+0x399/0x2000 [ 366.009553][T25929] dup_task_struct+0x449/0x6a0 [ 366.009641][T25929] ? _parse_integer+0x27/0x40 [ 366.009669][T25929] copy_process+0x399/0x2000 [ 366.009693][T25929] ? kstrtouint+0x76/0xc0 [ 366.009719][T25929] ? kstrtouint_from_user+0x9f/0xf0 [ 366.009742][T25929] ? __rcu_read_unlock+0x4f/0x70 [ 366.009777][T25929] kernel_clone+0x16c/0x5c0 [ 366.009804][T25929] ? vfs_write+0x7e8/0x960 [ 366.009828][T25929] __x64_sys_clone+0xe6/0x120 [ 366.009862][T25929] x64_sys_call+0x119c/0x2ff0 [ 366.009901][T25929] do_syscall_64+0xd2/0x200 [ 366.009930][T25929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 366.009956][T25929] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 366.010022][T25929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.010043][T25929] RIP: 0033:0x7f45ea7febe9 [ 366.010059][T25929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.010077][T25929] RSP: 002b:00007f45e925efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 366.010158][T25929] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7febe9 [ 366.010170][T25929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 366.010183][T25929] RBP: 00007f45e925f090 R08: 0000000000000000 R09: 0000000000000000 [ 366.010196][T25929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 366.010208][T25929] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 366.010227][T25929] [ 366.010234][T25929] Mem-Info: [ 366.014059][ T29] audit: type=1400 audit(377.388:29965): avc: denied { mounton } for pid=25928 comm="syz.7.8408" path="/247/file0" dev="tmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 366.019858][T25929] active_anon:43422 inactive_anon:10 isolated_anon:0 [ 366.019858][T25929] active_file:25660 inactive_file:5259 isolated_file:0 [ 366.019858][T25929] unevictable:0 dirty:521 writeback:0 [ 366.019858][T25929] slab_reclaimable:3801 slab_unreclaimable:15669 [ 366.019858][T25929] mapped:30220 shmem:39373 pagetables:1759 [ 366.019858][T25929] sec_pagetables:0 bounce:0 [ 366.019858][T25929] kernel_misc_reclaimable:0 [ 366.019858][T25929] free:1799341 free_pcp:34967 free_cma:0 [ 366.052284][ T29] audit: type=1400 audit(377.430:29966): avc: denied { open } for pid=25927 comm="syz.1.8409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.053849][T25929] Node 0 active_anon:173456kB inactive_anon:40kB active_file:102640kB inactive_file:21036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120880kB dirty:2084kB writeback:0kB shmem:157376kB kernel_stack:4000kB pagetables:7152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 366.058484][ T29] audit: type=1400 audit(377.430:29967): avc: denied { kernel } for pid=25927 comm="syz.1.8409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 366.062839][T25929] Node 0 [ 366.073982][ T29] audit: type=1400 audit(377.462:29968): avc: denied { prog_run } for pid=25937 comm="syz.7.8412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 366.077441][T25929] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 366.107658][ T29] audit: type=1326 audit(377.493:29969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c18a8ebe9 code=0x7ffc0000 [ 366.113416][T25929] lowmem_reserve[]: 0 [ 366.137496][ T29] audit: type=1326 audit(377.504:29970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9c18a8ebe9 code=0x7ffc0000 [ 366.137526][ T29] audit: type=1326 audit(377.504:29971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c18a8ebe9 code=0x7ffc0000 [ 366.145998][T25929] 2883 7862 7862 [ 366.146021][T25929] Node 0 [ 366.153993][ T29] audit: type=1326 audit(377.504:29972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.7.8412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c18a8ebe9 code=0x7ffc0000 [ 366.187926][T25941] loop7: detected capacity change from 0 to 512 [ 366.189255][T25929] DMA32 free:2949192kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952824kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 366.203119][T25941] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.208071][T25929] lowmem_reserve[]: 0 0 4978 4978 [ 366.208099][T25929] Node 0 Normal free:4232812kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:173680kB inactive_anon:40kB active_file:102640kB inactive_file:21036kB unevictable:0kB writepending:2060kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:135752kB local_pcp:85668kB free_cma:0kB [ 366.248646][T25943] loop7: detected capacity change from 0 to 512 [ 366.251446][T25929] lowmem_reserve[]: [ 366.255433][T25943] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 366.261529][T25929] 0 0 0 0 [ 366.874398][T25929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 366.887140][T25929] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949192kB [ 366.903148][T25929] Node 0 Normal: 1*4kB (M) 1149*8kB (UE) 594*16kB (UE) 57*32kB (UME) 190*64kB (UME) 230*128kB (UME) 113*256kB (UE) 63*512kB (UE) 77*1024kB (UE) 38*2048kB (U) 965*4096kB (UM) = 4232620kB [ 366.921848][T25929] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 366.931136][T25929] 73089 total pagecache pages [ 366.935797][T25929] 15 pages in swap cache [ 366.940058][T25929] Free swap = 124936kB [ 366.944200][T25929] Total swap = 124996kB [ 366.948431][T25929] 2097051 pages RAM [ 366.952229][T25929] 0 pages HighMem/MovableOnly [ 366.956882][T25929] 80445 pages reserved [ 367.060813][T25958] loop3: detected capacity change from 0 to 512 [ 367.067867][T25958] EXT4-fs: Ignoring removed nobh option [ 367.160068][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8420: corrupted inode contents [ 367.173044][T25958] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8420: mark_inode_dirty error [ 367.194763][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8420: corrupted inode contents [ 367.257231][T25969] FAULT_INJECTION: forcing a failure. [ 367.257231][T25969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.270328][T25969] CPU: 1 UID: 0 PID: 25969 Comm: syz.1.8422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 367.270425][T25969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.270438][T25969] Call Trace: [ 367.270452][T25969] [ 367.270480][T25969] __dump_stack+0x1d/0x30 [ 367.270504][T25969] dump_stack_lvl+0xe8/0x140 [ 367.270525][T25969] dump_stack+0x15/0x1b [ 367.270591][T25969] should_fail_ex+0x265/0x280 [ 367.270611][T25969] should_fail+0xb/0x20 [ 367.270755][T25969] should_fail_usercopy+0x1a/0x20 [ 367.270776][T25969] strncpy_from_user+0x25/0x230 [ 367.270806][T25969] ? kmem_cache_alloc_noprof+0x186/0x310 [ 367.270836][T25969] ? getname_flags+0x80/0x3b0 [ 367.270941][T25969] getname_flags+0xae/0x3b0 [ 367.271028][T25969] __x64_sys_mkdirat+0x40/0x60 [ 367.271050][T25969] x64_sys_call+0x2b7/0x2ff0 [ 367.271073][T25969] do_syscall_64+0xd2/0x200 [ 367.271175][T25969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 367.271199][T25969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 367.271231][T25969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.271251][T25969] RIP: 0033:0x7f45ea7febe9 [ 367.271319][T25969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.271339][T25969] RSP: 002b:00007f45e921d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 367.271440][T25969] RAX: ffffffffffffffda RBX: 00007f45eaa36180 RCX: 00007f45ea7febe9 [ 367.271454][T25969] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 367.271496][T25969] RBP: 00007f45e921d090 R08: 0000000000000000 R09: 0000000000000000 [ 367.271507][T25969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.271518][T25969] R13: 00007f45eaa36218 R14: 00007f45eaa36180 R15: 00007ffd8a2c75e8 [ 367.271611][T25969] [ 367.512070][T25958] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8420: mark_inode_dirty error [ 367.561006][T25972] tc_dump_action: action bad kind [ 367.574404][T25958] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8420: Failed to acquire dquot type 0 [ 367.635018][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8420: corrupted inode contents [ 367.705709][T25958] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8420: mark_inode_dirty error [ 367.719902][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8420: corrupted inode contents [ 367.757019][T25958] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8420: mark_inode_dirty error [ 367.769512][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8420: corrupted inode contents [ 367.781659][T25975] loop7: detected capacity change from 0 to 512 [ 367.788296][T25975] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 367.801088][T25958] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 367.810535][T25958] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8420: corrupted inode contents [ 367.825613][T25958] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8420: mark_inode_dirty error [ 367.836923][T25958] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 367.846140][T25958] EXT4-fs (loop3): 1 truncate cleaned up [ 367.852367][T25958] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.903125][T24051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.963774][T25982] syzkaller0: refused to change device tx_queue_len [ 367.980363][T25984] loop3: detected capacity change from 0 to 1024 [ 367.991156][T25984] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 368.006347][T25984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8427: bg 0: block 10: padding at end of block bitmap is not set [ 368.020863][T25984] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8427: Failed to acquire dquot type 0 [ 368.032421][T25984] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8427: Failed to acquire dquot type 0 [ 368.044490][T25984] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.8427: Freeing blocks not in datazone - block = 0, count = 4096 [ 368.060110][T25984] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8427: Failed to acquire dquot type 0 [ 368.071877][T25984] EXT4-fs (loop3): 1 orphan inode deleted [ 368.078197][T25984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.091797][T25984] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.152908][T26003] netlink: 'syz.4.8432': attribute type 10 has an invalid length. [ 368.162066][T26003] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 368.325595][T26025] syzkaller0: refused to change device tx_queue_len [ 368.488099][T26038] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 368.623130][T26040] serio: Serial port ptm0 [ 368.719012][T26044] FAULT_INJECTION: forcing a failure. [ 368.719012][T26044] name failslab, interval 1, probability 0, space 0, times 0 [ 368.731706][T26044] CPU: 1 UID: 0 PID: 26044 Comm: syz.7.8451 Not tainted syzkaller #0 PREEMPT(voluntary) [ 368.731735][T26044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.731771][T26044] Call Trace: [ 368.731777][T26044] [ 368.731783][T26044] __dump_stack+0x1d/0x30 [ 368.731801][T26044] dump_stack_lvl+0xe8/0x140 [ 368.731821][T26044] dump_stack+0x15/0x1b [ 368.731839][T26044] should_fail_ex+0x265/0x280 [ 368.731868][T26044] ? __tcf_chain_get+0x91/0x280 [ 368.731896][T26044] should_failslab+0x8c/0xb0 [ 368.731918][T26044] __kmalloc_cache_noprof+0x4c/0x320 [ 368.732019][T26044] __tcf_chain_get+0x91/0x280 [ 368.732054][T26044] tc_new_tfilter+0x5ac/0x10a0 [ 368.732079][T26044] ? __rcu_read_unlock+0x4f/0x70 [ 368.732151][T26044] ? avc_has_perm_noaudit+0x1b1/0x200 [ 368.732188][T26044] ? ns_capable+0x7d/0xb0 [ 368.732210][T26044] ? __pfx_tc_new_tfilter+0x10/0x10 [ 368.732234][T26044] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 368.732343][T26044] netlink_rcv_skb+0x120/0x220 [ 368.732362][T26044] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.732392][T26044] rtnetlink_rcv+0x1c/0x30 [ 368.732418][T26044] netlink_unicast+0x5c0/0x690 [ 368.732438][T26044] netlink_sendmsg+0x58b/0x6b0 [ 368.732522][T26044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.732543][T26044] __sock_sendmsg+0x142/0x180 [ 368.732648][T26044] ____sys_sendmsg+0x31e/0x4e0 [ 368.732702][T26044] ___sys_sendmsg+0x17b/0x1d0 [ 368.732732][T26044] __x64_sys_sendmsg+0xd4/0x160 [ 368.732755][T26044] x64_sys_call+0x191e/0x2ff0 [ 368.732778][T26044] do_syscall_64+0xd2/0x200 [ 368.732860][T26044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 368.732881][T26044] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 368.732905][T26044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.732926][T26044] RIP: 0033:0x7f9c18a8ebe9 [ 368.732961][T26044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.732976][T26044] RSP: 002b:00007f9c174f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.732994][T26044] RAX: ffffffffffffffda RBX: 00007f9c18cc5fa0 RCX: 00007f9c18a8ebe9 [ 368.733008][T26044] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 368.733022][T26044] RBP: 00007f9c174f7090 R08: 0000000000000000 R09: 0000000000000000 [ 368.733036][T26044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.733050][T26044] R13: 00007f9c18cc6038 R14: 00007f9c18cc5fa0 R15: 00007fff9caff158 [ 368.733135][T26044] [ 369.066999][T26048] loop7: detected capacity change from 0 to 1024 [ 369.073777][T26048] EXT4-fs: inline encryption not supported [ 369.079694][T26048] EXT4-fs: Ignoring removed i_version option [ 369.094497][T26048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.116112][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.162794][T26054] loop7: detected capacity change from 0 to 1024 [ 369.190682][T26054] loop7: detected capacity change from 0 to 512 [ 369.199385][T26054] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.206330][T26054] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8455: bg 0: block 248: padding at end of block bitmap is not set [ 369.220950][T26054] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8455: Failed to acquire dquot type 1 [ 369.232701][T26054] EXT4-fs (loop7): 1 truncate cleaned up [ 369.239038][T26054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.262270][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.455549][T26061] loop7: detected capacity change from 0 to 1024 [ 369.462648][T26061] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 369.473513][T26061] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 369.484112][T26061] JBD2: no valid journal superblock found [ 369.489852][T26061] EXT4-fs (loop7): Could not load journal inode [ 370.470378][T26074] loop7: detected capacity change from 0 to 512 [ 370.477215][T26074] EXT4-fs: Ignoring removed nobh option [ 370.495265][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8462: corrupted inode contents [ 370.508584][T26074] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8462: mark_inode_dirty error [ 370.510143][T26076] __nla_validate_parse: 11 callbacks suppressed [ 370.510157][T26076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8463'. [ 370.521263][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8462: corrupted inode contents [ 370.547168][T26074] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8462: mark_inode_dirty error [ 370.558488][T26080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8464'. [ 370.583934][T26085] FAULT_INJECTION: forcing a failure. [ 370.583934][T26085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.587262][T26074] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8462: Failed to acquire dquot type 0 [ 370.597078][T26085] CPU: 0 UID: 0 PID: 26085 Comm: syz.1.8466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 370.597107][T26085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.597120][T26085] Call Trace: [ 370.597127][T26085] [ 370.597135][T26085] __dump_stack+0x1d/0x30 [ 370.597156][T26085] dump_stack_lvl+0xe8/0x140 [ 370.597175][T26085] dump_stack+0x15/0x1b [ 370.597238][T26085] should_fail_ex+0x265/0x280 [ 370.597260][T26085] should_fail+0xb/0x20 [ 370.597286][T26085] should_fail_usercopy+0x1a/0x20 [ 370.597310][T26085] _copy_to_user+0x20/0xa0 [ 370.597338][T26085] simple_read_from_buffer+0xb5/0x130 [ 370.597433][T26085] proc_fail_nth_read+0x10e/0x150 [ 370.597518][T26085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.597615][T26085] vfs_read+0x1a5/0x770 [ 370.597635][T26085] ? __rcu_read_unlock+0x4f/0x70 [ 370.597657][T26085] ? __fget_files+0x184/0x1c0 [ 370.597736][T26085] ksys_read+0xda/0x1a0 [ 370.597758][T26085] __x64_sys_read+0x40/0x50 [ 370.597780][T26085] x64_sys_call+0x27bc/0x2ff0 [ 370.597802][T26085] do_syscall_64+0xd2/0x200 [ 370.597833][T26085] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 370.597922][T26085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 370.597948][T26085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.597970][T26085] RIP: 0033:0x7f45ea7fd5fc [ 370.597985][T26085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.598003][T26085] RSP: 002b:00007f45e925f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.598068][T26085] RAX: ffffffffffffffda RBX: 00007f45eaa35fa0 RCX: 00007f45ea7fd5fc [ 370.598080][T26085] RDX: 000000000000000f RSI: 00007f45e925f0a0 RDI: 0000000000000008 [ 370.598093][T26085] RBP: 00007f45e925f090 R08: 0000000000000000 R09: 0000000000000000 [ 370.598105][T26085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.598162][T26085] R13: 00007f45eaa36038 R14: 00007f45eaa35fa0 R15: 00007ffd8a2c75e8 [ 370.598180][T26085] [ 370.629045][T26087] syzkaller0: refused to change device tx_queue_len [ 370.640498][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8462: corrupted inode contents [ 370.825318][T26074] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8462: mark_inode_dirty error [ 370.837496][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8462: corrupted inode contents [ 370.850169][T26074] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8462: mark_inode_dirty error [ 370.861798][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8462: corrupted inode contents [ 370.873764][T26074] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 370.882417][T26074] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8462: corrupted inode contents [ 370.894485][T26074] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8462: mark_inode_dirty error [ 370.905660][T26074] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 370.917561][T26074] EXT4-fs (loop7): 1 truncate cleaned up [ 370.923748][T26074] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.947045][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 370.947059][ T29] audit: type=1400 audit(382.575:30297): avc: denied { create } for pid=26096 comm="syz.4.8471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 370.975533][ T29] audit: type=1400 audit(382.606:30298): avc: denied { sys_module } for pid=26073 comm="syz.7.8462" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 370.996228][ T29] audit: type=1404 audit(382.606:30299): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 371.027938][ T29] audit: type=1400 audit(382.616:30300): avc: denied { read write } for pid=24051 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.051785][ T29] audit: type=1400 audit(382.627:30301): avc: denied { map_create } for pid=26100 comm="syz.3.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.070671][ T29] audit: type=1400 audit(382.627:30302): avc: denied { prog_load } for pid=26100 comm="syz.3.8472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.089373][ T29] audit: type=1400 audit(382.637:30303): avc: denied { read write } for pid=26100 comm="syz.3.8472" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 371.113035][ T29] audit: type=1400 audit(382.648:30304): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.4 dest=40134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 371.137410][ T29] audit: type=1400 audit(382.648:30305): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.4 dest=40134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 371.161703][ T29] audit: type=1400 audit(382.648:30306): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30036 daddr=10.128.0.4 dest=40134 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 371.207009][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.245644][T26103] loop3: detected capacity change from 0 to 8192 [ 371.247864][T26107] tipc: Enabling of bearer rejected, failed to enable media [ 371.266188][T26107] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8475'. [ 371.305614][T26113] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8477'. [ 371.354419][T26120] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 371.369819][T26123] loop7: detected capacity change from 0 to 512 [ 371.377150][T26117] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 371.387450][T26123] EXT4-fs: Ignoring removed nobh option [ 371.419056][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8480: corrupted inode contents [ 371.434105][T26123] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.8480: mark_inode_dirty error [ 371.447094][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.8480: corrupted inode contents [ 371.463056][T26123] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8480: mark_inode_dirty error [ 371.475556][T26123] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.8480: Failed to acquire dquot type 0 [ 371.488089][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8480: corrupted inode contents [ 371.501741][T26123] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.8480: mark_inode_dirty error [ 371.513361][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8480: corrupted inode contents [ 371.530574][T26123] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8480: mark_inode_dirty error [ 371.543386][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8480: corrupted inode contents [ 371.556310][T26123] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 371.566002][T26123] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.8480: corrupted inode contents [ 371.578136][T26123] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.8480: mark_inode_dirty error [ 371.590700][T26123] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 371.601709][T26123] EXT4-fs (loop7): 1 truncate cleaned up [ 371.615763][T26121] ================================================================== [ 371.623850][T26121] BUG: KCSAN: data-race in mark_buffer_dirty_inode / mark_buffer_dirty_inode [ 371.632608][T26121] [ 371.634927][T26121] write to 0xffff88810049cbb8 of 8 bytes by task 26114 on cpu 0: [ 371.642634][T26121] mark_buffer_dirty_inode+0x18c/0x1c0 [ 371.648089][T26121] fat_mirror_bhs+0x234/0x320 [ 371.652777][T26121] fat_alloc_clusters+0x98b/0xa80 [ 371.657810][T26121] fat_get_block+0x258/0x5e0 [ 371.662398][T26121] __block_write_begin_int+0x3fd/0xf90 [ 371.667866][T26121] cont_write_begin+0x5fc/0x970 [ 371.672714][T26121] fat_write_begin+0x4f/0xe0 [ 371.677299][T26121] generic_perform_write+0x181/0x490 [ 371.682672][T26121] __generic_file_write_iter+0x9e/0x120 [ 371.688223][T26121] generic_file_write_iter+0x8d/0x2f0 [ 371.693602][T26121] iter_file_splice_write+0x666/0xa60 [ 371.698970][T26121] direct_splice_actor+0x156/0x2a0 [ 371.704083][T26121] splice_direct_to_actor+0x312/0x680 [ 371.709457][T26121] do_splice_direct+0xda/0x150 [ 371.714214][T26121] do_sendfile+0x380/0x650 [ 371.718635][T26121] __x64_sys_sendfile64+0x105/0x150 [ 371.723834][T26121] x64_sys_call+0x2bb0/0x2ff0 [ 371.728507][T26121] do_syscall_64+0xd2/0x200 [ 371.733022][T26121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.738917][T26121] [ 371.741231][T26121] read to 0xffff88810049cbb8 of 8 bytes by task 26121 on cpu 1: [ 371.748862][T26121] mark_buffer_dirty_inode+0x95/0x1c0 [ 371.754265][T26121] fat_mirror_bhs+0x234/0x320 [ 371.758951][T26121] fat_alloc_clusters+0x98b/0xa80 [ 371.763979][T26121] fat_get_block+0x258/0x5e0 [ 371.768564][T26121] __block_write_begin_int+0x3fd/0xf90 [ 371.774028][T26121] cont_write_begin+0x5fc/0x970 [ 371.778885][T26121] fat_write_begin+0x4f/0xe0 [ 371.783481][T26121] generic_perform_write+0x181/0x490 [ 371.788761][T26121] __generic_file_write_iter+0xec/0x120 [ 371.794300][T26121] generic_file_write_iter+0x8d/0x2f0 [ 371.799665][T26121] vfs_write+0x527/0x960 [ 371.803902][T26121] ksys_write+0xda/0x1a0 [ 371.808138][T26121] __x64_sys_write+0x40/0x50 [ 371.812728][T26121] x64_sys_call+0x27fe/0x2ff0 [ 371.817410][T26121] do_syscall_64+0xd2/0x200 [ 371.821915][T26121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.827803][T26121] [ 371.830114][T26121] value changed: 0x0000000000000000 -> 0xffff888119915d08 [ 371.837209][T26121] [ 371.839526][T26121] Reported by Kernel Concurrency Sanitizer on: [ 371.845672][T26121] CPU: 1 UID: 0 PID: 26121 Comm: syz.3.8473 Not tainted syzkaller #0 PREEMPT(voluntary) [ 371.855477][T26121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.865531][T26121] ================================================================== [ 371.878943][T26123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.989514][T21843] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.465618][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 380.465633][ T29] audit: type=1400 audit(392.579:30394): avc: denied { egress } for pid=41 comm="kworker/u8:2" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 380.494962][ T29] audit: type=1400 audit(392.579:30395): avc: denied { sendto } for pid=41 comm="kworker/u8:2" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1