last executing test programs: 2m42.717731561s ago: executing program 3 (id=485): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r7, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m42.656796841s ago: executing program 3 (id=487): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x13) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x3, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1, {[@generic={0x82, 0x8, "d40d7fae586d"}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000040)=""/84, 0x54, 0x2002, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) creat(&(0x7f00000004c0)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 2m42.255702784s ago: executing program 3 (id=491): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000"], 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) fcntl$lock(r1, 0x24, &(0x7f0000000300)={0x1, 0x2, 0x8000000000000001, 0x80}) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xff2e) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') 2m42.225509744s ago: executing program 3 (id=492): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="1b6cb4ea390da3b689700e865dfe8813fef60f027d3fcbdeef69db375f7e02db61d2496e23fb34804f1086778fbad799a44c19b311028bcbc20f4e4cc05f36326e2964df2e9d1450165293fe4b8c383071660354abe568fe6f7c62603d2ccb2b3ad8579f7941f8c73054dda06354b9d04ef30960ea0c0f898d6263c0346501a013451941608c12b7403a2f53ef37dd2ccf52721c7c3e8dbb95390a6be856ceccdcc28d9e3d936bb0c3464ee9e1afed49433582f8618a41be07de363d958c65ef05acfd97da5fe4a57a0d19c9650b93", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0)="1e779e99e71aca465aa486d10aee1144cbaedbc7ae96b787d99c5603e50978ef7daf321b64b994f98ee08ff73d6cf0c689cf6c2675396e1d69cfdbb2f6acfa53cd25ce16379da4d1643ded422384a37fa0", &(0x7f0000000280)=""/117}, 0x20) unshare(0x2a020400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r0, 0x0, 0xfffffffffffffff4}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r3, 0x0, 0x1012) 2m41.886913116s ago: executing program 3 (id=497): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601040000000000000000000000001400078005"], 0x60}, 0x1, 0x0, 0x0, 0x24004091}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x100) unshare(0x24060400) move_mount(r2, 0x0, r3, 0x0, 0x46) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) alarm(0x1) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m40.949676292s ago: executing program 3 (id=502): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x13) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x3, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1, {[@generic={0x82, 0x8, "d40d7fae586d"}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000040)=""/84, 0x54, 0x2002, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) creat(&(0x7f00000004c0)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 2m40.943810362s ago: executing program 32 (id=502): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x13) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r4 = socket$inet(0x10, 0x3, 0x0) inotify_init1(0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1, {[@generic={0x82, 0x8, "d40d7fae586d"}]}}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00000500", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000040)=""/84, 0x54, 0x2002, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) creat(&(0x7f00000004c0)='./file0\x00', 0x8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 2m14.958154335s ago: executing program 4 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "ff0100", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e23, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x75, 0x0, @val=0x80}}}}}}}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x181, 0xfffffffb}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x1}]}]}, {0x0, [0x30, 0x5f, 0x0, 0x5f, 0x61]}}, 0x0, 0x3f, 0x0, 0x0, 0x4}, 0x28) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 2m14.879207645s ago: executing program 4 (id=831): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2212410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r2], &(0x7f0000000240)=""/9, 0x68, 0x9, 0x2000, 0x2}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'bridge_slave_0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 2m14.01723458s ago: executing program 4 (id=845): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) lchown(&(0x7f0000000100)='./file1\x00', 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d800000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd65}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 2m13.880826831s ago: executing program 4 (id=849): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbb3, &(0x7f0000001180)="$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") r1 = open(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = pidfd_getfd(r6, r6, 0x0) setns(r7, 0x66020000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000400)=0x0, &(0x7f0000000480)) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1020002, &(0x7f00000006c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x2}}, {@common=@version_u}, {@timeout={'timeout', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0x52}}, {@sq={'sq', 0x3d, 0x8000}}, {@sq={'sq', 0x3d, 0x2}}], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@uid_eq}, {@subj_role}, {@euid_gt={'euid>', r9}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r8) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f0000000380)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @func, @alu={0x4, 0x1, 0x8, 0x5, 0xa, 0xffffffffffffffff, 0x10}], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) sendfile(r0, r0, 0x0, 0x15) 2m13.023948606s ago: executing program 4 (id=855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "ff0100", 0x10, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {0x4e23, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x75, 0x0, @val=0x80}}}}}}}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x181, 0xfffffffb}) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 2m12.505249619s ago: executing program 4 (id=863): io_setup(0x9, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)={0x0, 0x3938700}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) memfd_create(&(0x7f00000009c0)='\x00\xc76\xbe\x91\x8d\x182)#\x9a%\xd9\x19\x9e\xd7\xf8\xfa\xe3{\xab\xa4\x84\r\xe5Xk\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b\x98<\t$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\'}\x18\xe8O\xa8#$K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idme\x9a\xb8\a\xff\x91\xed\x9d|\xc2D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00s3\xf9\xa2\xb6&\xf2\xa9\xf9\xb5\xcf\x11\xd9\xadMh\xe4\x9b5\x9b\xdf\x8e\x87\xb8?h\xe1\xaf,+\xa5\x96\x0f\xa9\x01\xe7t\xa0(\xb1u)\xbd\xa1@\xddC\aGv{\xe4NpI\xd5\f\xff\xde\xe7\xb3\xc3I\xc3\x01\xf2?Fcn\xce\xb3\fq\x8e+\rO\xff\tny(\x87\xe4\x04|`J\xc7^\xcd\xcah)\x9c\"\xc9E\x00\x16\x84c\x8eI\x9e\xd2e,\x93\x96i\x81m\xa2\xcd\xe3\a\x88&\xd5\x8c\xa0F\xcc\xc8\xd1&\xf2W\xab\xf9\x0e\x83\xd1\xd6e0\n\xf1\xdf\x14aQ\xe5d\x91Fo\x01\xb31\xe8\xa97\xf5\x83buN\xabX\xaez\xfc\x11Y\xfbO$\x86\xa0P\xe8S\xe7IY\xbd0\xa6\x82S\xa3f\xef{Uqs\x89\xdcc\xcep\x1b\xd7;\xac%\xff\x19\x9fP\xaf\x98\x0f#\xdb\x9c#\xf4\x05\x87\xd2\xa2\x8b/\xafQ\x98\xe3\xd7\x87\xbby_O8;\xbf\xbazuZ\x80X\xf5\xbf\xb0\v\xbc>\xa9\x85\xf0\x853y\x9d\x8c\xe3\x8a\xde\xdc\xf4\xfe\x1b\xabb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\n\xa9\x16\x00\xc5\xb9f\xeas5\xbad?\xaa\xbe\"zV\xe3h\x06]\xf4R,\xfd\xaf\xc5\xb4\xd9\xe2\x94\x11\xaa\xfdjf\x85p|\xd4\x9a\xe4\xa0\xe37\x87E\xed\xf1\xf0\xcd\xac\xf6\x91)\xa7\x1d\x98\xc4\xd0\xbc\xf3\r\xf8\x80\xae\xf4\xdf\xfe\xb4\x15%\xfaH-\xca\x06\x8d\xd2y\x05!\xb3f\x97\xf5\n\xb3\x89t(\x94\xe5\x98\xc1\xec\x83\x15\xb8\x7f\x86\x99\xea\x9f\xd2D\x1e\xea3\xb7\xf8M\x9as\xc9\xcb\xa2)\xa6?BY_\xae\xa8\x03\xbb\x80\xc7\x1d\xcb\xd4g\x87\x9e\xf8\x14H<>\xadS\x85\x18\x86\xff\xaa}\xad\x0e\"\xe5|v-\x93\xe6\x19\xe6\x81*\xc5?\xf2\xc7uV\xb8\xa5^\x9fj\x12\xa1\x97\xd2\xdd\x1bE\xcd$\xa6#\xa7\b\xbc\xfc\xc97{\xf4-\xa6\x97\x1e\x94\xba\xac6\xab!\xde\xf17=xSy\x97\xac\xb2\x89\xd8\xe5\xb5:\x84\x18\xa63m\xfa@20\x81\"!(\x1dd\x8e\x88\x87\xddH*[\x7fF\x9c\xd4T\xff\x84\xdc\xbe\xf5i6\xa7r\xd2v\x8c\x83>{O\xd92[4\xd9\x8c\x9d-\x80\x14\xba\x83\xbb\xfd%#\xd5\x13\x91\xa4\xde\x87\x83\xea\xdf\xf0jvr\x80\x97\xc9\x16a\xa8\x14\x1aD\xd6\xf7e\x95\xc6\xb3\x90\xe2y\x8e\x99\x9f\x02e\xfe\x04\x8c\xdaL\x82\x93c\xb3\xeb\x84\x00\x00\x00\x00\x81`\x00\x00\x00\x00\x00\x00\x00\xa2\xd1', 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r3, &(0x7f0000000400)="53efe3293f451613c68133daef631508e5af4b25b33f8df0b1fd9af84b23ab7ffc2dd18d1303da4ed42ec0cf5d341199f2875ddc6d8cfa606c03ee551727b5e9d5c4f5a7aa43aaa3cfa1e9a44803b963b57bcc17db38627f381e38adc2500387acdce02797793eec65d2f9f10ee589a9119effb5b0c22c1c8859cbbe39ed13", 0x7f, 0x80, &(0x7f0000000480)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) io_destroy(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4048454}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x68}}, 0x0) 2m12.504745499s ago: executing program 33 (id=863): io_setup(0x9, &(0x7f0000000100)=0x0) io_getevents(r0, 0x2, 0x9, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)={0x0, 0x3938700}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) memfd_create(&(0x7f00000009c0)='\x00\xc76\xbe\x91\x8d\x182)#\x9a%\xd9\x19\x9e\xd7\xf8\xfa\xe3{\xab\xa4\x84\r\xe5Xk\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b\x98<\t$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\'}\x18\xe8O\xa8#$K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idme\x9a\xb8\a\xff\x91\xed\x9d|\xc2D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00s3\xf9\xa2\xb6&\xf2\xa9\xf9\xb5\xcf\x11\xd9\xadMh\xe4\x9b5\x9b\xdf\x8e\x87\xb8?h\xe1\xaf,+\xa5\x96\x0f\xa9\x01\xe7t\xa0(\xb1u)\xbd\xa1@\xddC\aGv{\xe4NpI\xd5\f\xff\xde\xe7\xb3\xc3I\xc3\x01\xf2?Fcn\xce\xb3\fq\x8e+\rO\xff\tny(\x87\xe4\x04|`J\xc7^\xcd\xcah)\x9c\"\xc9E\x00\x16\x84c\x8eI\x9e\xd2e,\x93\x96i\x81m\xa2\xcd\xe3\a\x88&\xd5\x8c\xa0F\xcc\xc8\xd1&\xf2W\xab\xf9\x0e\x83\xd1\xd6e0\n\xf1\xdf\x14aQ\xe5d\x91Fo\x01\xb31\xe8\xa97\xf5\x83buN\xabX\xaez\xfc\x11Y\xfbO$\x86\xa0P\xe8S\xe7IY\xbd0\xa6\x82S\xa3f\xef{Uqs\x89\xdcc\xcep\x1b\xd7;\xac%\xff\x19\x9fP\xaf\x98\x0f#\xdb\x9c#\xf4\x05\x87\xd2\xa2\x8b/\xafQ\x98\xe3\xd7\x87\xbby_O8;\xbf\xbazuZ\x80X\xf5\xbf\xb0\v\xbc>\xa9\x85\xf0\x853y\x9d\x8c\xe3\x8a\xde\xdc\xf4\xfe\x1b\xabb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbd\n\xa9\x16\x00\xc5\xb9f\xeas5\xbad?\xaa\xbe\"zV\xe3h\x06]\xf4R,\xfd\xaf\xc5\xb4\xd9\xe2\x94\x11\xaa\xfdjf\x85p|\xd4\x9a\xe4\xa0\xe37\x87E\xed\xf1\xf0\xcd\xac\xf6\x91)\xa7\x1d\x98\xc4\xd0\xbc\xf3\r\xf8\x80\xae\xf4\xdf\xfe\xb4\x15%\xfaH-\xca\x06\x8d\xd2y\x05!\xb3f\x97\xf5\n\xb3\x89t(\x94\xe5\x98\xc1\xec\x83\x15\xb8\x7f\x86\x99\xea\x9f\xd2D\x1e\xea3\xb7\xf8M\x9as\xc9\xcb\xa2)\xa6?BY_\xae\xa8\x03\xbb\x80\xc7\x1d\xcb\xd4g\x87\x9e\xf8\x14H<>\xadS\x85\x18\x86\xff\xaa}\xad\x0e\"\xe5|v-\x93\xe6\x19\xe6\x81*\xc5?\xf2\xc7uV\xb8\xa5^\x9fj\x12\xa1\x97\xd2\xdd\x1bE\xcd$\xa6#\xa7\b\xbc\xfc\xc97{\xf4-\xa6\x97\x1e\x94\xba\xac6\xab!\xde\xf17=xSy\x97\xac\xb2\x89\xd8\xe5\xb5:\x84\x18\xa63m\xfa@20\x81\"!(\x1dd\x8e\x88\x87\xddH*[\x7fF\x9c\xd4T\xff\x84\xdc\xbe\xf5i6\xa7r\xd2v\x8c\x83>{O\xd92[4\xd9\x8c\x9d-\x80\x14\xba\x83\xbb\xfd%#\xd5\x13\x91\xa4\xde\x87\x83\xea\xdf\xf0jvr\x80\x97\xc9\x16a\xa8\x14\x1aD\xd6\xf7e\x95\xc6\xb3\x90\xe2y\x8e\x99\x9f\x02e\xfe\x04\x8c\xdaL\x82\x93c\xb3\xeb\x84\x00\x00\x00\x00\x81`\x00\x00\x00\x00\x00\x00\x00\xa2\xd1', 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r3, &(0x7f0000000400)="53efe3293f451613c68133daef631508e5af4b25b33f8df0b1fd9af84b23ab7ffc2dd18d1303da4ed42ec0cf5d341199f2875ddc6d8cfa606c03ee551727b5e9d5c4f5a7aa43aaa3cfa1e9a44803b963b57bcc17db38627f381e38adc2500387acdce02797793eec65d2f9f10ee589a9119effb5b0c22c1c8859cbbe39ed13", 0x7f, 0x80, &(0x7f0000000480)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) io_destroy(r0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES8=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4048454}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0x68}}, 0x0) 5.276102329s ago: executing program 6 (id=3424): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00'}, 0x18) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000340)=@md0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='io_uring_file_get\x00', r9, 0x0, 0x5}, 0x18) unshare(0x5a030100) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) 4.345393764s ago: executing program 6 (id=3436): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2212410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r2], &(0x7f0000000240)=""/9, 0x68, 0x9, 0x2000, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r1}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000140)={'bridge_slave_0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 3.48481511s ago: executing program 6 (id=3445): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r5, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) close_range(r2, 0xffffffffffffffff, 0x0) 3.224539531s ago: executing program 6 (id=3450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x20004}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 3.068992423s ago: executing program 6 (id=3456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095", @ANYRESDEC=0x0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = memfd_secret(0x80000) getsockname$qrtr(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) open(&(0x7f00000000c0)='./bus\x00', 0x143fc2, 0x1d8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40042, 0x121) prlimit64(0x0, 0x6, &(0x7f0000000400)={0x0, 0x5}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x10) r2 = io_uring_setup(0x40000007, &(0x7f0000000040)={0x0, 0xc8a1, 0x1, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900010000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x80, 0x3, 0x3d3}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r7 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000140)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[@ANYBLOB="34000000aaaaaaaa9baaaa5a86dd60f900f5001406000000000000000000004e59a7723300ffff7f0000c6668f10000000000000000000000010d91bbf95b2acb1c446a1159f35439e3960ea97b84713b25dd3442c755128a1c5ec31490a9d7e695e568157811b16f0c6ef71ca5f6c801df02a779872e0641dbfa3f08fc7dd0a1104a3482c172d1c203b6a4ea1d1592431be2a81ccae50b10ae9e1fa96158b4222e370254df847d9e16b98a41eccd829590168fb9b2f962fa0d6571a36abe852ff20c0d27a5c118c2f9e1d7e7d1c335d0a6af81a9ef4a01e27c87be5b1ffb7cde5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020000907800"], 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x8, 0x2, 0x8, 0x48, 0x14}, {0x9, 0x5, 0xe, 0x2, 0x8, 0xcb, 0x3d, 0x9}, {0x9, 0x5, 0x4, 0x3, 0x400, 0xf5, 0x6, 0x60}}}}}}]}}, 0x0) 2.169611667s ago: executing program 2 (id=3475): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x960c3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00002, &(0x7f0000000680)={[{@data_err_ignore}, {@abort}, {@nombcache}, {@noload}, {@noblock_validity}, {@grpjquota}, {@oldalloc}, {@noblock_validity}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x53}}]}, 0xfd, 0x49e, &(0x7f0000000e00)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r8, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r8, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000001505350600000400000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000080e2ff00003baa00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xf8, &(0x7f0000000100)=""/248, 0x41000, 0x3a, '\x00', r8, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x6, 0xeb5, 0x3}, 0x10, r9, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r12], &(0x7f0000000680)=[{0x3, 0x2, 0x7, 0x8}], 0x10, 0x8c}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 1.129652264s ago: executing program 2 (id=3489): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pK \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.102504194s ago: executing program 0 (id=3491): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x85, "00000000000000000000ffff00"}) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000100)={0xa, 0x80, 0x1, 0x1, 0x8, "c098e7b0bd21430de428cf78b7adfdec60be6a", 0x1, 0x5}) syz_open_pts(r2, 0x100) syz_io_uring_setup(0x7bcf, &(0x7f0000000280)={0x0, 0xec25, 0x1, 0x2, 0x4002b1}, &(0x7f0000000480), &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r3, 0x9a4c7000) 959.056675ms ago: executing program 2 (id=3494): fgetxattr(0xffffffffffffffff, &(0x7f0000000480)=@known='trusted.overlay.metacopy\x00', &(0x7f00000004c0)=""/43, 0x2b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x10002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(0x0, 0x0, 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x80004506, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01e6d489d60d6d074a70d0d00602db4fe3d4bf42c9e3bfc7ec1b83f62d8844a64bd37bb2815e404f63734cd1d40e3bd6b168ab39d5c5f6fcf4142f61ded6b4bbbae751697d503fc40173b33919c01c4d62648470a17971b3d422efce8a55f18889a47dd994864e141a5e8a069dfaf831e75bc6bc1ce0a74f07f72152290f955440564c08810bc25c1ab5b4c1c19a043c5ce26a7c5b7f949f528fe0129eda46f770086f96073251fd87e6a38a9309bffcaf1531d87b689fadf265e6e880be"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sk_msg=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x8000000008}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, 0xffffffffffffffff, &(0x7f00000003c0)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000006000080000400009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'wg2\x00'}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 889.322765ms ago: executing program 2 (id=3495): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x35, 0x0, 0x1, 0x1}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000100)=""/43, 0x2b) 871.798795ms ago: executing program 1 (id=3496): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 837.319376ms ago: executing program 2 (id=3498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0xffff, 0x400000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x41015500, &(0x7f0000000440)=0xfffffffd) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) 836.754276ms ago: executing program 1 (id=3499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="000000000048b96e9af968f2ba7d65e7a40000000b416aeef6e246d31616fd46254ce3e431a7336e402bdc08411b3103f54d2231d80784eb127d93f3262b63a6575080c021648cec85b097ce6d9ab90b6a7e54aedee8da61d84d6eeaf7fe38fe1722cfebe7388b2ca144e307958eee2cfeef37aa4fff4bbb34d169ea590743df49e3e5cfca1661403dd428ac640ef29f9a3f2b54433bc03ba850f5bc77be5d56843478ebe9ac417045d340568e46c0430b27416431b4f5eefacae4eef8d702d2f712a50af50f8224826bbddffef4bbfaff921df5c1039458611eeb60013b646fc9131c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendto(r2, &(0x7f0000000000)="cd3e3965c0e67e191b553eeb07fe405df15eb5b33bb79e0e358427e620a47ad300c7501d593d14497584190daea3dc918617f086ee90af9ea971c25c1aaebd5b0c5e24765581d858af5a4015a1f26af3be2ef6a5d908fb5159c791c1e7d12fc3bb1cc1610dd3a199bd91d0a71da3f0f4875a6bb9da543daf494ccf3eb3ebc329074b43cbc02f411f85", 0x89, 0x20040041, &(0x7f00000000c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x40, 0x8000, 0x1, 0x0, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1c}, {[@cipso={0x86, 0x4a, 0x3, [{0x1, 0x12, "e6a2a4d5d897ce19798099346b640006"}, {0x7, 0x12, "8b76869839200113d85c85133e000822"}, {0x2, 0x10, "a5dfe97ca58bf6efd5a2ab2a8bcd"}, {0x2, 0x5, "6065b3"}, {0x2, 0x6, '`^vN'}, {0x2, 0x5, "5573a2"}]}, @rr={0x7, 0x3, 0xff}, @ssrr={0x89, 0x27, 0xa0, [@remote, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x42, [@remote]}, @end]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000300)={@private2, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000440)={@private2, 0x0}, &(0x7f0000000480)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="174800002d000200280012800a00010063616e00"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000006c0)={@broadcast, @multicast1, 0x0}, &(0x7f0000000700)=0xc) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'vlan1\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r14}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) r16 = socket(0x400000000010, 0x3, 0x0) r17 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r18, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002080)=@newqdisc={0x60, 0x24, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff3}, {0x4, 0xfff2}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x34, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x4, '\x00', 0x9, 0x2, 0x6, 0x44359926}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x1, 0xa, 0x8}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x29, 0xc, 0x0, 0x1, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x8000, 0x8, 0xfb, 0xea6}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0x0, @ANYBLOB="00042dbd700000000080190000003c000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d6163767461700000001400020076657468305f746f5f626174616476002c0001800800030000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000300030000000c00018008000100", @ANYRES32=r6, @ANYBLOB="640001800800030000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="1400020070696d7265670000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000110778a5802645df90e6d993b15a2e73cdf054cf21d84983e6c14e416d3f350a1cf4354f7ca96d616f1322c51b004b86778995d242cd1d01558adcefde165dddd83c89d06a463508d299469a20329dce7ce0ea4cde5de8ac1fa6f40edd45b199f55544385351b3ce350549d4a484cf28a01e57cf3d2aa037fc5e4d7b1df743f7778be2a4bd393b6f26a", @ANYRES32=r11, @ANYBLOB="1400020076657468305f6d616376746170000000080003000300000008000100", @ANYRES32=r14, @ANYBLOB="740001800800030003000000080003000000000008000300020000001400020064756d6d79300000000000000000000008000300020000001400020074756e6c3000000000000000000000001400020064766d7270310000000000000000000014000200776730000000000000000000000000004800018008000100", @ANYRES32=r15, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=r18, @ANYBLOB="080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="0800030002000000"], 0x1d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) flistxattr(r4, 0x0, 0x0) 836.202216ms ago: executing program 5 (id=3500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f0000000080), 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 749.693536ms ago: executing program 1 (id=3501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff020000000000000000000000000001242088a80000000300000800000086dd080088be86dd"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x20a8, 0x4005, 0x8000000b, 0x0, 0x3, 0x1, 0xb, 0x0, 0x0, 0x0, 0x40000000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x9}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x8) close(r8) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004054}, 0x4) write(r6, 0x0, 0x0) unshare(0x22020400) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r11, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu=_0!|!') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 739.081666ms ago: executing program 5 (id=3502): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549", 0x5b}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r5, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) close_range(r2, 0xffffffffffffffff, 0x0) 614.887547ms ago: executing program 5 (id=3503): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) 441.631628ms ago: executing program 1 (id=3504): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x8000f28, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0xe) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pK \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x2, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 375.403838ms ago: executing program 5 (id=3505): fgetxattr(0xffffffffffffffff, &(0x7f0000000480)=@known='trusted.overlay.metacopy\x00', &(0x7f00000004c0)=""/43, 0x2b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x10002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(0x0, 0x0, 0x100) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x80004506, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01e6d489d60d6d074a70d0d00602db4fe3d4bf42c9e3bfc7ec1b83f62d8844a64bd37bb2815e404f63734cd1d40e3bd6b168ab39d5c5f6fcf4142f61ded6b4bbbae751697d503fc40173b33919c01c4d62648470a17971b3d422efce8a55f18889a47dd994864e141a5e8a069dfaf831e75bc6bc1ce0a74f07f72152290f955440564c08810bc25c1ab5b4c1c19a043c5ce26a7c5b7f949f528fe0129eda46f770086f96073251fd87e6a38a9309bffcaf1531d87b689fadf265e6e880be"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @sk_msg=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0x8000000008}, 0x18) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x10) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000902, 0xffffffffffffffff, &(0x7f00000003c0)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000006000080000400009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000200), 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'wg2\x00'}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d000000140000001100"], 0xa8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 335.326548ms ago: executing program 1 (id=3506): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) close_range(r0, r1, 0x0) 320.360098ms ago: executing program 1 (id=3507): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan0\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@barrier}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x582, &(0x7f0000001f80)="$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") chdir(&(0x7f0000000000)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2212410, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0xa0142, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x1b94]}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYRESDEC=r1], &(0x7f0000000240)=""/9, 0x68, 0x9, 0x2000, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000400)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='cachefiles_trunc\x00', r0}, 0xffffffffffffffea) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000140)={'bridge_slave_0\x00', 0x5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 233.783019ms ago: executing program 5 (id=3508): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x35, 0x0, 0x1, 0x1}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000100)=""/43, 0x2b) 233.197329ms ago: executing program 0 (id=3509): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYBLOB="a1ab23bd7000fdffffff3200000008001701"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 215.603439ms ago: executing program 5 (id=3510): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000200)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x13, r4, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 215.359829ms ago: executing program 0 (id=3511): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_getres(0x3, 0x0) 199.948749ms ago: executing program 0 (id=3512): removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000000), 0x4) r3 = dup3(r1, r2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff840000002d00000095ef2ee1b06f45d556a953a1216555dccd1b9db6fe84122a47a30eac7ec97bc91c86295eb4c89b8884e64de2c09d9b2252911248859b39b2541a180ce46d793a42473b2604fd88230a29fc77d43bd6e40f1c0d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680100008800c00018006000180"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4000000) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x2}, 0x94) mount$9p_unix(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x840041, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) unshare(0x400) 62.57977ms ago: executing program 0 (id=3513): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10, 0x0}, 0x44000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000040)=""/93, 0x328000, 0x1800, 0x1}, 0x20) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) socketpair(0x9, 0x3, 0xc, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {0x4, 0x6}, [{0x8, 0x2}], {}, {0x20, 0x5}}, 0x2c, 0x2) 61.70539ms ago: executing program 2 (id=3514): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549", 0x5b}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r5, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x100}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000640)=ANY=[@ANYRES8, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES8=0x0, @ANYBLOB="9a91a5a3a592bafb94ffece9d27c1c575d6c718de75e6815e3362fad71091ef0b4d831be0f31d33cfd5786a337da031adcc6aabcf77d403c9704c4024b72ff31e30211aeab913360da7d845e34350b569a0487e4f670be55ed44400835754aeddfc79546890cab813647b69c8ce61d428fcdad9face3c716afb3ffb974efa9736f21d7195ec28d"], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r9, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) close_range(r2, 0xffffffffffffffff, 0x0) 28.42812ms ago: executing program 6 (id=3515): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0xffffffffffffffca) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2f2, &(0x7f0000001380)={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, '\nZE', 0x2bc, 0x11, 0x0, @mcast2, @private1, {[@routing={0x1a7e1e46c61c9c06, 0x4, 0x0, 0xa, 0x0, [@remote, @remote]}, @hopopts={0x0, 0x0, '\x00', [@pad1]}, @hopopts={0x84, 0x17, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @pad1, @hao={0xc9, 0x10, @loopback}, @generic={0xe, 0x90, "5765325fbf0252b45b7f6a0d97528332aea0bdfc738372256ed76ceb086f128107f655207258e5efc87dca93e9994b19deac1711289e62f94cf8793f71f320a3da793ebdb9af857af9acf32c73cac3ee7dadb5f15a069c84b63d239c7a61f4bcaead9f16c73637e45f5aaa4572315ca14c726e2e65d838e517b02355b63cd80652977c9f189404f27c0348fdafafa3b3"}, @jumbo={0xc2, 0x4, 0xb}, @jumbo={0xc2, 0x4, 0xc}]}, @srh={0x8, 0x6, 0x4, 0x3, 0x4, 0x0, 0x4, [@dev={0xfe, 0x80, '\x00', 0x37}, @dev={0xfe, 0x80, '\x00', 0x21}, @loopback]}, @fragment={0x2f, 0x0, 0x1, 0x1, 0x0, 0x1c, 0x64}, @dstopts={0x87, 0x4, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x7, 0x0, [0x4, 0x5]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x73, 0xa, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0xd3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @enc_lim, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x5, [0x0, 0x11b, 0x2, 0x80000001]}}, @pad1]}, @srh={0x3a, 0x6, 0x4, 0x3, 0x4, 0x0, 0xffff, [@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @loopback]}, @srh={0x33, 0x200000000000011a, 0x4, 0x6, 0xe8, 0x20, 0x9, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1b}]}], {0x4e20, 0x4e20, 0x4c, 0x0, @wg=@data={0x4, 0xfffffffb, 0x6, "0ac697a1f059e8dc8e7a418837ff12d5abf1fe1ad51c3b7f770b91b4ef8126763af59c9fb03667da16ec1da7c8156bed9bb9dd9c"}}}}}}}, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110130000004fb48405000000000000d2e30036118e1b32"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000ac0)=""/195, 0x0, 0x60, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffe85}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001200)={0x16c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x79, 0x2a, [@random_vendor={0xdd, 0x41, "6ca739d48e6383f82784f4929e22b5bac7830684252352805aaddb9884986ff0b26401045414ff6b51a08e5b5a7a0fc1cafbbd8d172c5b442059950d9ca6954330"}, @chsw_timing={0x68, 0x4, {0x6, 0x8}}, @mic={0x8c, 0x10, {0xdb2, "f11cd9e0eea5", @short="cc578e3f3b0befca"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x9, @val=0x3, @val=0x2d, @val="ecff0d8d9ecfba476fcae62f793ebba2"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cdc6301f646d"}, @NL80211_ATTR_IE={0xc7, 0x2a, [@ibss={0x6, 0x2, 0x4}, @chsw_timing={0x68, 0x4, {0x4d8, 0xffff}}, @challenge={0x10, 0x1, 0x40}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xe, 0xa1, 0xe}}, @tim={0x5, 0xa2, {0x3, 0x15, 0x5, "cf8326ad7b455ea75d2761b0506e4fc840b50c420682cef78ee1564a6423ca9306cb401ad71901cca960c002bc505882aee90d8f08328c8875cf2c28fee8918b97fcb350d92c6bce9ac09409102bc3381ea4da658dc4e34bb0e1af31383655a8af3a36984f0cd432648bb3c061ea8d4b5e055d31c079e4d666f57eb3c1008f0ea8707d9fd65248a5b8dd9ec9d5c023e088c4bde636d0ff5bb00bc239e6fdeb"}}, @chsw_timing={0x68, 0x4, {0x80, 0x3}}, @chsw_timing={0x68, 0x4, {0x7, 0x2}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40005) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 0s ago: executing program 0 (id=3516): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f00000000c0)={0xffffffffffff7fff, 0x48, [0x70, 0x3, 0x2ac42aa9, 0xd], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=r1], &(0x7f0000000f40)=""/4096, 0x3e, 0x1000, 0x9}, 0x28) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000014, 0x2010, r0, 0xa9620000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x200, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfff}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT=r8, @ANYRESDEC], 0x1, 0x2b8, &(0x7f00000008c0)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x100) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./bus/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYRES32=r7], 0x14}, 0x1, 0x0, 0x0, 0x4000094}, 0xf91846e9dbe16071) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r11}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r8, {0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0xbb9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x7fff}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x618c}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x7}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x52a0}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x5d0}]}}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): 07fe765746eb0 R15: 00002000000001c0 [ 187.145328][T15723] [ 187.578376][T15842] FAULT_INJECTION: forcing a failure. [ 187.578376][T15842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.591577][T15842] CPU: 1 UID: 0 PID: 15842 Comm: syz.2.2879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.591609][T15842] Tainted: [W]=WARN [ 187.591616][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 187.591627][T15842] Call Trace: [ 187.591634][T15842] [ 187.591642][T15842] __dump_stack+0x1d/0x30 [ 187.591664][T15842] dump_stack_lvl+0xe8/0x140 [ 187.591689][T15842] dump_stack+0x15/0x1b [ 187.591773][T15842] should_fail_ex+0x265/0x280 [ 187.591789][T15842] should_fail+0xb/0x20 [ 187.591803][T15842] should_fail_usercopy+0x1a/0x20 [ 187.591824][T15842] _copy_from_iter+0xd2/0xe80 [ 187.591845][T15842] ? __build_skb_around+0x1ab/0x200 [ 187.591938][T15842] ? __alloc_skb+0x223/0x320 [ 187.591965][T15842] netlink_sendmsg+0x471/0x6b0 [ 187.591986][T15842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.592053][T15842] __sock_sendmsg+0x145/0x180 [ 187.592073][T15842] ____sys_sendmsg+0x31e/0x4e0 [ 187.592132][T15842] ___sys_sendmsg+0x17b/0x1d0 [ 187.592212][T15842] __x64_sys_sendmsg+0xd4/0x160 [ 187.592254][T15842] x64_sys_call+0x191e/0x3000 [ 187.592275][T15842] do_syscall_64+0xd2/0x200 [ 187.592290][T15842] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.592354][T15842] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.592449][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.592466][T15842] RIP: 0033:0x7fe766cdefc9 [ 187.592482][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.592499][T15842] RSP: 002b:00007fe765747038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.592516][T15842] RAX: ffffffffffffffda RBX: 00007fe766f35fa0 RCX: 00007fe766cdefc9 [ 187.592529][T15842] RDX: 0000000000002014 RSI: 0000200000000000 RDI: 0000000000000003 [ 187.592562][T15842] RBP: 00007fe765747090 R08: 0000000000000000 R09: 0000000000000000 [ 187.592573][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.592583][T15842] R13: 00007fe766f36038 R14: 00007fe766f35fa0 R15: 00007ffdfdb2b258 [ 187.592599][T15842] [ 187.847984][ T6854] EXT4-fs unmount: 17 callbacks suppressed [ 187.847997][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.282594][ T4390] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.329920][T15875] netlink: 'syz.1.2892': attribute type 39 has an invalid length. [ 188.333100][T15877] loop2: detected capacity change from 0 to 1024 [ 188.345449][T15877] EXT4-fs: Ignoring removed orlov option [ 188.370063][T15877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.412571][T15883] __nla_validate_parse: 2 callbacks suppressed [ 188.412633][T15883] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2892'. [ 188.445987][T15883] loop1: detected capacity change from 0 to 512 [ 188.485633][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2898'. [ 188.497701][T15883] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2892: corrupted xattr block 95: invalid header [ 188.554043][T15883] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2892: bg 0: block 7: invalid block bitmap [ 188.593720][T15883] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 188.647097][T15883] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #11: comm syz.1.2892: corrupted xattr block 95: invalid header [ 188.665771][T15883] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 188.676339][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.709302][T15883] EXT4-fs (loop1): 1 orphan inode deleted [ 188.746366][T15883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.836221][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.845579][T16006] FAULT_INJECTION: forcing a failure. [ 188.845579][T16006] name failslab, interval 1, probability 0, space 0, times 0 [ 188.858284][T16006] CPU: 1 UID: 0 PID: 16006 Comm: syz.6.2904 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.858312][T16006] Tainted: [W]=WARN [ 188.858318][T16006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 188.858328][T16006] Call Trace: [ 188.858335][T16006] [ 188.858343][T16006] __dump_stack+0x1d/0x30 [ 188.858444][T16006] dump_stack_lvl+0xe8/0x140 [ 188.858464][T16006] dump_stack+0x15/0x1b [ 188.858479][T16006] should_fail_ex+0x265/0x280 [ 188.858496][T16006] should_failslab+0x8c/0xb0 [ 188.858521][T16006] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 188.858557][T16006] ? __alloc_skb+0x101/0x320 [ 188.858580][T16006] __alloc_skb+0x101/0x320 [ 188.858643][T16006] ? audit_log_start+0x342/0x720 [ 188.858734][T16006] audit_log_start+0x3a0/0x720 [ 188.858751][T16006] ? __rcu_read_unlock+0x4f/0x70 [ 188.858784][T16006] audit_log+0x5e/0xd0 [ 188.858813][T16006] sel_write_enforce+0x260/0x2d0 [ 188.858832][T16006] vfs_writev+0x406/0x8b0 [ 188.858860][T16006] ? __pfx_sel_write_enforce+0x10/0x10 [ 188.858954][T16006] ? mutex_lock+0xd/0x30 [ 188.858995][T16006] do_writev+0xe7/0x210 [ 188.859020][T16006] __x64_sys_writev+0x45/0x50 [ 188.859183][T16006] x64_sys_call+0x1e9a/0x3000 [ 188.859208][T16006] do_syscall_64+0xd2/0x200 [ 188.859223][T16006] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.859245][T16006] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 188.859317][T16006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.859337][T16006] RIP: 0033:0x7efd044aefc9 [ 188.859350][T16006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.859366][T16006] RSP: 002b:00007efd02f17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 188.859436][T16006] RAX: ffffffffffffffda RBX: 00007efd04705fa0 RCX: 00007efd044aefc9 [ 188.859446][T16006] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003 [ 188.859456][T16006] RBP: 00007efd02f17090 R08: 0000000000000000 R09: 0000000000000000 [ 188.859466][T16006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.859478][T16006] R13: 00007efd04706038 R14: 00007efd04705fa0 R15: 00007ffefcb9c528 [ 188.859497][T16006] [ 189.146052][T16018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2903'. [ 189.183609][T16111] FAULT_INJECTION: forcing a failure. [ 189.183609][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 189.196324][T16111] CPU: 0 UID: 0 PID: 16111 Comm: syz.6.2905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.196424][T16111] Tainted: [W]=WARN [ 189.196431][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 189.196443][T16111] Call Trace: [ 189.196502][T16111] [ 189.196509][T16111] __dump_stack+0x1d/0x30 [ 189.196598][T16111] dump_stack_lvl+0xe8/0x140 [ 189.196667][T16111] dump_stack+0x15/0x1b [ 189.196684][T16111] should_fail_ex+0x265/0x280 [ 189.196705][T16111] should_failslab+0x8c/0xb0 [ 189.196730][T16111] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 189.196760][T16111] ? sidtab_sid2str_get+0xa0/0x130 [ 189.196818][T16111] kmemdup_noprof+0x2b/0x70 [ 189.196843][T16111] sidtab_sid2str_get+0xa0/0x130 [ 189.196870][T16111] security_sid_to_context_core+0x1eb/0x2e0 [ 189.196975][T16111] security_sid_to_context+0x27/0x40 [ 189.197001][T16111] selinux_lsmprop_to_secctx+0x67/0xf0 [ 189.197104][T16111] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 189.197127][T16111] audit_log_subj_ctx+0xa4/0x3e0 [ 189.197147][T16111] ? skb_put+0xa9/0xf0 [ 189.197182][T16111] audit_log_task_context+0x48/0x70 [ 189.197205][T16111] audit_log_task+0xf4/0x250 [ 189.197241][T16111] ? kstrtouint+0x76/0xc0 [ 189.197289][T16111] audit_seccomp+0x61/0x100 [ 189.197317][T16111] ? __seccomp_filter+0x82d/0x1250 [ 189.197456][T16111] __seccomp_filter+0x83e/0x1250 [ 189.197482][T16111] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.197511][T16111] ? vfs_write+0x7e8/0x960 [ 189.197618][T16111] __secure_computing+0x82/0x150 [ 189.197643][T16111] syscall_trace_enter+0xcf/0x1e0 [ 189.197730][T16111] do_syscall_64+0xac/0x200 [ 189.197749][T16111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.197799][T16111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 189.197826][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.197846][T16111] RIP: 0033:0x7efd044aefc9 [ 189.197862][T16111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.197909][T16111] RSP: 002b:00007efd02f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 189.197929][T16111] RAX: ffffffffffffffda RBX: 00007efd04705fa0 RCX: 00007efd044aefc9 [ 189.197942][T16111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000074c [ 189.197954][T16111] RBP: 00007efd02f17090 R08: 0000000000000000 R09: 0000000000000000 [ 189.197967][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.197979][T16111] R13: 00007efd04706038 R14: 00007efd04705fa0 R15: 00007ffefcb9c528 [ 189.198053][T16111] [ 189.547510][T16190] loop6: detected capacity change from 0 to 1024 [ 189.578538][T16190] EXT4-fs: Ignoring removed orlov option [ 189.597801][T16190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.622463][T16225] netlink: 'syz.5.2907': attribute type 10 has an invalid length. [ 189.663678][T16225] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 189.981090][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 189.981174][ T29] audit: type=1326 audit(189.968:29815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.1.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe33f39efc9 code=0x7ffc0000 [ 190.045026][ T29] audit: type=1326 audit(190.008:29816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.1.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f39efc9 code=0x7ffc0000 [ 190.068207][ T29] audit: type=1326 audit(190.008:29817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.1.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33f39efc9 code=0x7ffc0000 [ 190.150481][ T29] audit: type=1400 audit(190.088:29818): avc: denied { write } for pid=16242 comm="syz.5.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.250621][ T29] audit: type=1400 audit(190.228:29819): avc: denied { unmount } for pid=6854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 190.373059][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.385918][ T29] audit: type=1400 audit(190.368:29820): avc: denied { create } for pid=16251 comm="syz.0.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 190.408886][ T29] audit: type=1400 audit(190.388:29821): avc: denied { create } for pid=16251 comm="syz.0.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.427951][ T29] audit: type=1400 audit(190.388:29822): avc: denied { ioctl } for pid=16251 comm="syz.0.2920" path="socket:[34868]" dev="sockfs" ino=34868 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.452190][ T29] audit: type=1400 audit(190.388:29823): avc: denied { bind } for pid=16251 comm="syz.0.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 190.483383][ T29] audit: type=1400 audit(190.458:29824): avc: denied { tracepoint } for pid=16251 comm="syz.0.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 190.574731][T16263] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 190.583019][T16263] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 190.622631][T16266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=16266 comm=syz.5.2925 [ 190.700198][T16255] netlink: 'syz.6.2918': attribute type 12 has an invalid length. [ 190.781732][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2928'. [ 190.859808][T16281] netlink: 'syz.5.2932': attribute type 1 has an invalid length. [ 190.899225][ T4656] IPVS: starting estimator thread 0... [ 190.906052][T16290] FAULT_INJECTION: forcing a failure. [ 190.906052][T16290] name failslab, interval 1, probability 0, space 0, times 0 [ 190.909906][T16281] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20001 [ 190.918801][T16290] CPU: 0 UID: 0 PID: 16290 Comm: syz.1.2935 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 190.918889][T16290] Tainted: [W]=WARN [ 190.918895][T16290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.918906][T16290] Call Trace: [ 190.918910][T16290] [ 190.918917][T16290] __dump_stack+0x1d/0x30 [ 190.918956][T16290] dump_stack_lvl+0xe8/0x140 [ 190.918976][T16290] dump_stack+0x15/0x1b [ 190.918994][T16290] should_fail_ex+0x265/0x280 [ 190.919083][T16290] should_failslab+0x8c/0xb0 [ 190.919108][T16290] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 190.919137][T16290] ? sidtab_sid2str_get+0xa0/0x130 [ 190.919211][T16290] kmemdup_noprof+0x2b/0x70 [ 190.919302][T16290] sidtab_sid2str_get+0xa0/0x130 [ 190.919329][T16290] security_sid_to_context_core+0x1eb/0x2e0 [ 190.919357][T16290] security_sid_to_context+0x27/0x40 [ 190.919407][T16290] selinux_lsmprop_to_secctx+0x67/0xf0 [ 190.919434][T16290] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 190.919457][T16290] audit_log_subj_ctx+0xa4/0x3e0 [ 190.919477][T16290] ? skb_put+0xa9/0xf0 [ 190.919518][T16290] audit_log_task_context+0x48/0x70 [ 190.919540][T16290] audit_log_task+0xf4/0x250 [ 190.919762][T16290] ? kstrtouint+0x76/0xc0 [ 190.919861][T16290] audit_seccomp+0x61/0x100 [ 190.919900][T16290] ? __seccomp_filter+0x82d/0x1250 [ 190.919923][T16290] __seccomp_filter+0x83e/0x1250 [ 190.920016][T16290] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.920043][T16290] ? vfs_write+0x7e8/0x960 [ 190.920070][T16290] __secure_computing+0x82/0x150 [ 190.920094][T16290] syscall_trace_enter+0xcf/0x1e0 [ 190.920165][T16290] do_syscall_64+0xac/0x200 [ 190.920184][T16290] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 190.920288][T16290] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 190.920335][T16290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.920399][T16290] RIP: 0033:0x7fe33f39efc9 [ 190.920415][T16290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.920433][T16290] RSP: 002b:00007fe33ddff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.920452][T16290] RAX: ffffffffffffffda RBX: 00007fe33f5f5fa0 RCX: 00007fe33f39efc9 [ 190.920535][T16290] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000006 [ 190.920547][T16290] RBP: 00007fe33ddff090 R08: 0000000000000008 R09: 0000000000000000 [ 190.920558][T16290] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 190.920570][T16290] R13: 00007fe33f5f6038 R14: 00007fe33f5f5fa0 R15: 00007ffc41edf278 [ 190.920588][T16290] [ 191.184679][T16289] IPVS: using max 2544 ests per chain, 127200 per kthread [ 191.197855][T16397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2938'. [ 191.214515][T16401] loop2: detected capacity change from 0 to 512 [ 191.271922][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 191.286555][T16401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.314148][T16401] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2940: corrupted inode contents [ 191.331170][T16401] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2940: mark_inode_dirty error [ 191.343560][T16418] loop1: detected capacity change from 0 to 128 [ 191.355428][T16418] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 191.367566][T16401] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2940: corrupted inode contents [ 191.387059][T16401] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2940: mark_inode_dirty error [ 191.394202][T16418] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 191.427414][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.470930][T16430] FAULT_INJECTION: forcing a failure. [ 191.470930][T16430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.484088][T16430] CPU: 0 UID: 0 PID: 16430 Comm: syz.2.2950 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.484130][T16430] Tainted: [W]=WARN [ 191.484135][T16430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.484145][T16430] Call Trace: [ 191.484149][T16430] [ 191.484156][T16430] __dump_stack+0x1d/0x30 [ 191.484179][T16430] dump_stack_lvl+0xe8/0x140 [ 191.484199][T16430] dump_stack+0x15/0x1b [ 191.484242][T16430] should_fail_ex+0x265/0x280 [ 191.484262][T16430] should_fail+0xb/0x20 [ 191.484276][T16430] should_fail_usercopy+0x1a/0x20 [ 191.484294][T16430] _copy_from_user+0x1c/0xb0 [ 191.484313][T16430] copy_from_sockptr_offset+0x66/0xa0 [ 191.484413][T16430] do_ipt_set_ctl+0x5c8/0x820 [ 191.484431][T16430] ? _raw_spin_unlock_bh+0x36/0x40 [ 191.484450][T16430] ? tcp_release_cb+0xf1/0x370 [ 191.484515][T16430] nf_setsockopt+0x199/0x1b0 [ 191.484595][T16430] ip_setsockopt+0x102/0x110 [ 191.484618][T16430] tcp_setsockopt+0x98/0xb0 [ 191.484636][T16430] sock_common_setsockopt+0x69/0x80 [ 191.484706][T16430] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 191.484726][T16430] __sys_setsockopt+0x184/0x200 [ 191.484754][T16430] __x64_sys_setsockopt+0x64/0x80 [ 191.484834][T16430] x64_sys_call+0x20ec/0x3000 [ 191.484852][T16430] do_syscall_64+0xd2/0x200 [ 191.484866][T16430] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.484891][T16430] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.484950][T16430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.484971][T16430] RIP: 0033:0x7fe766cdefc9 [ 191.485026][T16430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.485043][T16430] RSP: 002b:00007fe765747038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.485060][T16430] RAX: ffffffffffffffda RBX: 00007fe766f35fa0 RCX: 00007fe766cdefc9 [ 191.485070][T16430] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 191.485080][T16430] RBP: 00007fe765747090 R08: 0000000000000500 R09: 0000000000000000 [ 191.485090][T16430] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 191.485101][T16430] R13: 00007fe766f36038 R14: 00007fe766f35fa0 R15: 00007ffdfdb2b258 [ 191.485118][T16430] [ 191.768762][T16432] syzkaller1: entered promiscuous mode [ 191.774902][T16432] syzkaller1: entered allmulticast mode [ 191.838284][T16439] FAULT_INJECTION: forcing a failure. [ 191.838284][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 191.850951][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.6.2952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.851034][T16439] Tainted: [W]=WARN [ 191.851039][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.851050][T16439] Call Trace: [ 191.851056][T16439] [ 191.851065][T16439] __dump_stack+0x1d/0x30 [ 191.851087][T16439] dump_stack_lvl+0xe8/0x140 [ 191.851186][T16439] dump_stack+0x15/0x1b [ 191.851204][T16439] should_fail_ex+0x265/0x280 [ 191.851224][T16439] should_failslab+0x8c/0xb0 [ 191.851249][T16439] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 191.851355][T16439] ? sidtab_sid2str_get+0xa0/0x130 [ 191.851382][T16439] kmemdup_noprof+0x2b/0x70 [ 191.851403][T16439] sidtab_sid2str_get+0xa0/0x130 [ 191.851503][T16439] security_sid_to_context_core+0x1eb/0x2e0 [ 191.851556][T16439] security_sid_to_context+0x27/0x40 [ 191.851617][T16439] selinux_lsmprop_to_secctx+0x67/0xf0 [ 191.851641][T16439] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 191.851732][T16439] audit_log_subj_ctx+0xa4/0x3e0 [ 191.851750][T16439] ? skb_put+0xa9/0xf0 [ 191.851842][T16439] audit_log_task_context+0x48/0x70 [ 191.851865][T16439] audit_log_task+0xf4/0x250 [ 191.851896][T16439] ? kstrtouint+0x76/0xc0 [ 191.851955][T16439] audit_seccomp+0x61/0x100 [ 191.851979][T16439] ? __seccomp_filter+0x82d/0x1250 [ 191.852000][T16439] __seccomp_filter+0x83e/0x1250 [ 191.852030][T16439] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.852201][T16439] ? vfs_write+0x7e8/0x960 [ 191.852224][T16439] ? __rcu_read_unlock+0x4f/0x70 [ 191.852301][T16439] ? __fget_files+0x184/0x1c0 [ 191.852326][T16439] __secure_computing+0x82/0x150 [ 191.852404][T16439] syscall_trace_enter+0xcf/0x1e0 [ 191.852431][T16439] do_syscall_64+0xac/0x200 [ 191.852450][T16439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.852492][T16439] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.852520][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.852547][T16439] RIP: 0033:0x7efd044aefc9 [ 191.852562][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.852593][T16439] RSP: 002b:00007efd02f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 191.852613][T16439] RAX: ffffffffffffffda RBX: 00007efd04705fa0 RCX: 00007efd044aefc9 [ 191.852625][T16439] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000001025 [ 191.852716][T16439] RBP: 00007efd02f17090 R08: 0000000000000000 R09: 0000000000000000 [ 191.852727][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.852738][T16439] R13: 00007efd04706038 R14: 00007efd04705fa0 R15: 00007ffefcb9c528 [ 191.852757][T16439] [ 192.145388][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2953'. [ 192.248915][T16455] pimreg: entered allmulticast mode [ 192.412638][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2966'. [ 192.430617][T16475] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 192.508370][T16481] SELinux: failed to load policy [ 192.542451][T16479] ipip0: entered promiscuous mode [ 192.655369][T16487] loop2: detected capacity change from 0 to 1024 [ 192.696595][T16487] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 192.715643][T16489] SELinux: policydb version 0 does not match my version range 15-35 [ 192.725829][T16487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2972: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.750242][T16489] SELinux: failed to load policy [ 192.760975][T16487] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2972: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.777954][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2973'. [ 192.940919][T16487] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2972: Failed to acquire dquot type 0 [ 192.983378][T16487] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 193.013696][T16487] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2972: mark_inode_dirty error [ 193.058352][T16491] lo speed is unknown, defaulting to 1000 [ 193.067334][T16487] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 193.097413][T16508] xt_connbytes: Forcing CT accounting to be enabled [ 193.117973][T16487] EXT4-fs (loop2): 1 orphan inode deleted [ 193.135116][T16487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.147505][ T146] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.180814][ T146] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 193.206616][T16491] chnl_net:caif_netlink_parms(): no params data found [ 193.214371][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.234409][ T3322] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 193.282246][T16517] tipc: Started in network mode [ 193.287179][T16517] tipc: Node identity , cluster identity 4711 [ 193.293857][T16517] tipc: Failed to obtain node identity [ 193.299312][T16517] tipc: Enabling of bearer rejected, failed to enable media [ 193.312604][ T3322] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 193.340020][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.340790][ T3322] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 193.347355][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.392675][T16491] bridge_slave_0: entered allmulticast mode [ 193.405714][T16491] bridge_slave_0: entered promiscuous mode [ 193.425143][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.432300][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.451928][T16491] bridge_slave_1: entered allmulticast mode [ 193.458425][T16491] bridge_slave_1: entered promiscuous mode [ 193.500255][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.516696][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.548608][T16528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2982'. [ 193.563734][T16491] team0: Port device team_slave_0 added [ 193.569654][T16528] loop2: detected capacity change from 0 to 736 [ 193.570038][ T8615] bridge_slave_1: left allmulticast mode [ 193.581700][ T8615] bridge_slave_1: left promiscuous mode [ 193.587484][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.625058][ T8615] bridge_slave_0: left allmulticast mode [ 193.630784][ T8615] bridge_slave_0: left promiscuous mode [ 193.632105][T16539] netlink: 'syz.5.2986': attribute type 1 has an invalid length. [ 193.636438][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.700488][T16543] loop6: detected capacity change from 0 to 1024 [ 193.707605][T16543] EXT4-fs: Ignoring removed orlov option [ 193.732301][T16543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.747231][T16543] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2988: bg 0: block 232: padding at end of block bitmap is not set [ 193.761932][T16543] EXT4-fs (loop6): Remounting filesystem read-only [ 193.768513][T16543] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 193.833904][ T8615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.843436][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.852874][ T8615] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 193.869101][ T8615] bond0 (unregistering): Released all slaves [ 193.877904][ T8615] bond1 (unregistering): Released all slaves [ 193.886873][T16491] team0: Port device team_slave_1 added [ 193.905201][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.912208][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.938694][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.951682][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.958634][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.985167][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.996077][ T8615] tipc: Left network mode [ 194.066541][T16491] hsr_slave_0: entered promiscuous mode [ 194.072990][T16491] hsr_slave_1: entered promiscuous mode [ 194.079083][T16491] debugfs: 'hsr0' already exists in 'hsr' [ 194.084971][T16491] Cannot create hsr debugfs directory [ 194.103101][ T8615] hsr_slave_0: left promiscuous mode [ 194.110906][ T8615] hsr_slave_1: left promiscuous mode [ 194.124517][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.141081][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.149147][T16559] FAULT_INJECTION: forcing a failure. [ 194.149147][T16559] name failslab, interval 1, probability 0, space 0, times 0 [ 194.162392][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.2.2992 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.162472][T16559] Tainted: [W]=WARN [ 194.162478][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.162488][T16559] Call Trace: [ 194.162494][T16559] [ 194.162502][T16559] __dump_stack+0x1d/0x30 [ 194.162524][T16559] dump_stack_lvl+0xe8/0x140 [ 194.162540][T16559] dump_stack+0x15/0x1b [ 194.162554][T16559] should_fail_ex+0x265/0x280 [ 194.162640][T16559] should_failslab+0x8c/0xb0 [ 194.162742][T16559] kmem_cache_alloc_noprof+0x50/0x480 [ 194.162766][T16559] ? security_file_alloc+0x32/0x100 [ 194.162806][T16559] security_file_alloc+0x32/0x100 [ 194.162870][T16559] init_file+0x5c/0x1d0 [ 194.162888][T16559] alloc_empty_file+0x8b/0x200 [ 194.162913][T16559] path_openat+0x68/0x2170 [ 194.162930][T16559] ? _parse_integer_limit+0x170/0x190 [ 194.163003][T16559] ? kstrtoull+0x111/0x140 [ 194.163090][T16559] ? kstrtouint+0x76/0xc0 [ 194.163156][T16559] do_filp_open+0x109/0x230 [ 194.163180][T16559] do_sys_openat2+0xa6/0x110 [ 194.163196][T16559] __x64_sys_openat+0xf2/0x120 [ 194.163213][T16559] x64_sys_call+0x2eab/0x3000 [ 194.163276][T16559] do_syscall_64+0xd2/0x200 [ 194.163293][T16559] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.163353][T16559] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.163388][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.163423][T16559] RIP: 0033:0x7fe766cdefc9 [ 194.163437][T16559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.163490][T16559] RSP: 002b:00007fe765726038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 194.163507][T16559] RAX: ffffffffffffffda RBX: 00007fe766f36090 RCX: 00007fe766cdefc9 [ 194.163518][T16559] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 194.163570][T16559] RBP: 00007fe765726090 R08: 0000000000000000 R09: 0000000000000000 [ 194.163618][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.163631][T16559] R13: 00007fe766f36128 R14: 00007fe766f36090 R15: 00007ffdfdb2b258 [ 194.163649][T16559] [ 194.166853][ T8615] pimreg (unregistering): left allmulticast mode [ 194.252390][T16561] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2993'. [ 194.322352][T16564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'. [ 194.409458][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 194.452352][T16564] bridge_slave_1: left allmulticast mode [ 194.458024][T16564] bridge_slave_1: left promiscuous mode [ 194.463421][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 194.463787][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.472922][T16569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 194.504867][T16564] bridge_slave_0: left allmulticast mode [ 194.510557][T16564] bridge_slave_0: left promiscuous mode [ 194.516343][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.539571][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.720905][T16588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16588 comm=syz.2.3004 [ 194.766281][T16590] loop2: detected capacity change from 0 to 2048 [ 194.792379][T16590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.919419][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3006'. [ 194.928385][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3006'. [ 194.952570][T16600] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3005: bg 0: block 345: padding at end of block bitmap is not set [ 194.972263][T16491] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.985151][T16600] EXT4-fs (loop2): Remounting filesystem read-only [ 195.000731][ T8615] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 195.015034][ T29] kauditd_printk_skb: 781 callbacks suppressed [ 195.015047][ T29] audit: type=1326 audit(194.998:30601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.2.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 195.083256][ T29] audit: type=1326 audit(195.028:30602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16589 comm="syz.2.3005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 195.231466][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.233031][T16491] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.275142][T16491] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.313937][T16491] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.456334][T16616] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 195.463379][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.464923][ T29] audit: type=1326 audit(195.438:30603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16617 comm="syz.2.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 195.491565][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.494737][ T29] audit: type=1326 audit(195.438:30604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16617 comm="syz.2.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 195.503965][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.524413][ T29] audit: type=1326 audit(195.438:30605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16617 comm="syz.2.3012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 195.531492][ T8615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.544613][T16491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.572689][T16491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.586898][ T29] audit: type=1400 audit(195.568:30606): avc: denied { listen } for pid=16619 comm="syz.2.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 195.587701][T16624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16624 comm=syz.5.3014 [ 195.607983][ T8615] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.626419][ T8615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.644086][ T29] audit: type=1326 audit(195.628:30607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16629 comm="syz.5.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 195.667137][ T29] audit: type=1326 audit(195.628:30608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16629 comm="syz.5.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 195.746819][ T29] audit: type=1326 audit(195.668:30609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16629 comm="syz.5.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 195.769988][ T29] audit: type=1326 audit(195.668:30610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16629 comm="syz.5.3015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 195.822888][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.976666][T16655] netlink: 'syz.5.3020': attribute type 1 has an invalid length. [ 196.004461][T16491] veth0_vlan: entered promiscuous mode [ 196.015433][T16491] veth1_vlan: entered promiscuous mode [ 196.042920][T16491] veth0_macvtap: entered promiscuous mode [ 196.052442][T16491] veth1_macvtap: entered promiscuous mode [ 196.065847][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.077828][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.085796][T16665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16665 comm=syz.6.3024 [ 196.101191][ T271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.110620][ T271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.123131][ T271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.158042][ T271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.255727][T16673] lo speed is unknown, defaulting to 1000 [ 196.462312][T16681] SELinux: failed to load policy [ 196.532771][T16678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.541457][T16678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.709115][T16691] loop6: detected capacity change from 0 to 1024 [ 196.721195][T16691] EXT4-fs: Ignoring removed orlov option [ 196.744454][T16691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.769917][T16691] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3031: bg 0: block 232: padding at end of block bitmap is not set [ 196.785845][T16691] EXT4-fs (loop6): Remounting filesystem read-only [ 196.792776][T16691] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 196.820930][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.831064][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.847957][T16694] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 196.875070][ T3983] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.884289][ T3983] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.897651][ T3983] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.906365][ T3983] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.923294][T16807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16807 comm=syz.2.3035 [ 197.107173][T16816] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3037'. [ 197.120927][T16816] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3037'. [ 197.179562][T16823] SELinux: failed to load policy [ 197.232715][T16823] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 197.235394][T16833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16833 comm=syz.5.3046 [ 197.398236][T16844] pimreg: entered allmulticast mode [ 197.404400][T16843] pimreg: left allmulticast mode [ 197.564003][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.599824][T16857] loop6: detected capacity change from 0 to 256 [ 197.619171][T16860] loop2: detected capacity change from 0 to 512 [ 197.647822][T16893] SELinux: failed to load policy [ 197.703435][T16972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16972 comm=syz.0.3060 [ 197.728870][T16974] SELinux: failed to load policy [ 198.044977][ T8615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.133125][ T8615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.199614][ T8615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.240092][T17001] SELinux: failed to load policy [ 198.253185][T17004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17004 comm=syz.5.3071 [ 198.269364][T17001] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 198.303377][T17008] loop1: detected capacity change from 0 to 256 [ 198.318020][T16993] serio: Serial port ptm1 [ 198.335114][ T8615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.464867][ T8615] batman_adv: batadv0: Interface deactivated: macvtap1 [ 198.473681][ T8615] bridge0 (unregistering): left allmulticast mode [ 198.483027][ T8615] batman_adv: batadv0: Removing interface: macvtap1 [ 198.704780][ T8615] bond0 (unregistering): Released all slaves [ 198.713913][ T8615] bond1 (unregistering): Released all slaves [ 198.722433][ T8615] bond2 (unregistering): Released all slaves [ 198.749666][T17033] __nla_validate_parse: 2 callbacks suppressed [ 198.749678][T17033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3079'. [ 198.798777][ T8615] hsr_slave_0: left promiscuous mode [ 198.806443][ T8615] hsr_slave_1: left promiscuous mode [ 198.815406][ T8615] veth1_macvtap: left promiscuous mode [ 198.823076][ T8615] veth0_macvtap: left promiscuous mode [ 198.828582][ T8615] veth1_vlan: left promiscuous mode [ 198.837805][ T8615] veth0_vlan: left promiscuous mode [ 198.989614][T17043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17043 comm=syz.6.3082 [ 199.029851][T17037] bridge0: port 3(gretap0) entered blocking state [ 199.036420][T17037] bridge0: port 3(gretap0) entered disabled state [ 199.045095][T17037] gretap0: entered allmulticast mode [ 199.051092][T17037] gretap0: entered promiscuous mode [ 199.056634][T17037] bridge0: port 3(gretap0) entered blocking state [ 199.063229][T17037] bridge0: port 3(gretap0) entered forwarding state [ 199.089524][T17045] loop6: detected capacity change from 0 to 2048 [ 199.097140][ T8114] lo speed is unknown, defaulting to 1000 [ 199.103151][ T8114] infiniband syz2: ib_query_port failed (-19) [ 199.109749][T17039] gretap0: left allmulticast mode [ 199.114874][T17039] gretap0: left promiscuous mode [ 199.119990][T17039] bridge0: port 3(gretap0) entered disabled state [ 199.155906][T17045] loop6: p2 p3 p7 [ 199.194334][T17048] SELinux: failed to load policy [ 199.288364][T17055] loop6: detected capacity change from 0 to 256 [ 199.327874][T17053] loop1: detected capacity change from 0 to 1024 [ 199.342179][T17053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.382645][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.441655][T17066] loop6: detected capacity change from 0 to 2048 [ 199.466066][T17066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.510308][T17173] loop2: detected capacity change from 0 to 1024 [ 199.524117][T17173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.577525][T17173] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3092: bg 0: block 260: invalid block bitmap [ 199.623163][T17173] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.3092: bit already cleared for inode 15 [ 199.635016][T17179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17179 comm=syz.1.3093 [ 199.680127][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.711257][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 199.724908][T17188] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3097'. [ 199.736897][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3097'. [ 199.746735][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3097'. [ 199.751579][T17190] SELinux: failed to load policy [ 200.080083][ T29] kauditd_printk_skb: 1204 callbacks suppressed [ 200.080098][ T29] audit: type=1400 audit(200.058:31815): avc: denied { write } for pid=17212 comm="syz.5.3104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 200.117132][T17214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3103'. [ 200.145072][ T29] audit: type=1400 audit(200.128:31816): avc: denied { write } for pid=17217 comm="syz.2.3107" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.151434][T17220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17220 comm=syz.0.3105 [ 200.180020][ T29] audit: type=1400 audit(200.148:31817): avc: denied { ioctl } for pid=17217 comm="syz.2.3107" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 200.208181][ T29] audit: type=1326 audit(200.188:31818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17221 comm="syz.5.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 200.241983][ T29] audit: type=1326 audit(200.188:31819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 200.265007][ T29] audit: type=1326 audit(200.188:31820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 200.288111][ T29] audit: type=1326 audit(200.188:31821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 200.288136][ T29] audit: type=1326 audit(200.188:31822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 200.288194][ T29] audit: type=1326 audit(200.188:31823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17217 comm="syz.2.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe766cdefc9 code=0x7ffc0000 [ 200.288233][ T29] audit: type=1326 audit(200.218:31824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17221 comm="syz.5.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b7e5eefc9 code=0x7ffc0000 [ 200.404192][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.427733][T17239] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 200.437401][T17240] loop2: detected capacity change from 0 to 1024 [ 200.459862][T17240] EXT4-fs: Ignoring removed orlov option [ 200.494284][T17240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.508673][T17240] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3114: bg 0: block 232: padding at end of block bitmap is not set [ 200.511404][T17254] loop6: detected capacity change from 0 to 512 [ 200.524199][T17240] EXT4-fs (loop2): Remounting filesystem read-only [ 200.536531][T17240] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 200.542350][T17254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.564304][T17254] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3119: corrupted inode contents [ 200.576851][T17254] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3119: mark_inode_dirty error [ 200.589010][T17254] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3119: corrupted inode contents [ 200.601610][T17254] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3119: mark_inode_dirty error [ 200.643379][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.667212][T17261] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3122'. [ 200.670561][T17263] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17263 comm=syz.0.3123 [ 200.699335][T17265] SELinux: failed to load policy [ 200.796143][T17287] loop6: detected capacity change from 0 to 764 [ 200.803242][T17287] iso9660: Unknown parameter 'uid¦îÚ¶&«@àIb' [ 200.928482][T17303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3137'. [ 200.942383][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3137'. [ 200.951767][T17303] hsr_slave_0: left promiscuous mode [ 200.960870][T17303] hsr_slave_1: left promiscuous mode [ 200.960965][T17306] loop6: detected capacity change from 0 to 512 [ 200.973678][T17306] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.003101][T17306] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 201.023026][T17306] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3138: bg 0: block 248: padding at end of block bitmap is not set [ 201.037647][T17306] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3138: Failed to acquire dquot type 1 [ 201.049802][T17306] EXT4-fs (loop6): 1 truncate cleaned up [ 201.055803][T17306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 201.069998][T17306] EXT4-fs (loop6): shut down requested (1) [ 201.076294][T17306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 201.085402][T17306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 201.094270][T17306] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=15 [ 201.117794][T17312] netlink: 'syz.0.3139': attribute type 8 has an invalid length. [ 201.181870][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 201.266898][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.390870][T17336] loop6: detected capacity change from 0 to 512 [ 201.409614][T17338] SELinux: failed to load policy [ 201.434758][T17336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.520930][T17368] loop1: detected capacity change from 0 to 764 [ 201.528487][T17368] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 201.599531][T17454] loop2: detected capacity change from 0 to 1024 [ 201.615719][T17454] EXT4-fs: Ignoring removed orlov option [ 201.654849][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.698294][T17454] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.719126][T17454] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3155: bg 0: block 232: padding at end of block bitmap is not set [ 201.766011][T17454] EXT4-fs (loop2): Remounting filesystem read-only [ 201.772899][T17454] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 201.921718][T17487] SELinux: failed to load policy [ 201.934997][T17477] netlink: 'syz.6.3162': attribute type 1 has an invalid length. [ 202.146725][T17507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3171'. [ 202.177453][T17513] netlink: 'syz.6.3173': attribute type 27 has an invalid length. [ 202.426159][T17546] loop6: detected capacity change from 0 to 512 [ 202.444214][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.457434][T17546] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.497241][T17545] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.531998][T17526] chnl_net:caif_netlink_parms(): no params data found [ 202.548915][T17545] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3182: mark_inode_dirty error [ 202.567756][T17545] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.591525][T17546] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.616075][T17546] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3182: mark_inode_dirty error [ 202.630761][T17546] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.644459][T17546] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3182: mark_inode_dirty error [ 202.657067][T17546] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.673803][T17546] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3182: mark_inode_dirty error [ 202.712831][T17563] loop2: detected capacity change from 0 to 128 [ 202.729805][T17563] EXT4-fs: Ignoring removed nobh option [ 202.736330][T17546] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3182: corrupted inode contents [ 202.752701][T17563] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.778819][ T146] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.790242][T17526] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.797472][T17526] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.806745][T17526] bridge_slave_0: entered allmulticast mode [ 202.822343][T17526] bridge_slave_0: entered promiscuous mode [ 202.840284][ T146] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.861052][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.876491][T17526] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.883641][T17526] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.914893][T17526] bridge_slave_1: entered allmulticast mode [ 202.925576][T17526] bridge_slave_1: entered promiscuous mode [ 202.950948][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.963663][ T146] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.986241][T17577] loop1: detected capacity change from 0 to 1024 [ 202.993173][T17577] EXT4-fs: Ignoring removed orlov option [ 203.000434][T17526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.012009][ T146] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.020255][T17577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.035760][T17526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.049782][T17577] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3192: bg 0: block 232: padding at end of block bitmap is not set [ 203.064811][T17577] EXT4-fs (loop1): Remounting filesystem read-only [ 203.078011][T17526] team0: Port device team_slave_0 added [ 203.083650][T17577] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 203.098885][T17526] team0: Port device team_slave_1 added [ 203.117304][T17526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.124392][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.150452][T17526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.163864][T17526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.170863][T17526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.196909][T17526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.210348][T17691] loop2: detected capacity change from 0 to 512 [ 203.228894][T17691] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.245302][ T146] bridge_slave_1: left allmulticast mode [ 203.251045][ T146] bridge_slave_1: left promiscuous mode [ 203.256674][ T146] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.264676][T17691] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.279559][ T146] bridge_slave_0: left allmulticast mode [ 203.285472][ T146] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.328826][ T3322] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 203.427242][T17798] loop2: detected capacity change from 0 to 256 [ 203.512763][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.522601][ T146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.532384][ T146] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 203.541552][ T146] bond0 (unregistering): Released all slaves [ 203.550458][ T146] bond1 (unregistering): Released all slaves [ 203.562005][T17526] hsr_slave_0: entered promiscuous mode [ 203.568380][T17526] hsr_slave_1: entered promiscuous mode [ 203.574491][T17526] debugfs: 'hsr0' already exists in 'hsr' [ 203.580241][T17526] Cannot create hsr debugfs directory [ 203.594038][ T146] tipc: Disabling bearer [ 203.599115][ T146] tipc: Left network mode [ 203.621978][ T146] hsr_slave_1: left promiscuous mode [ 203.628073][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.644188][ T146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.659242][ T146] pimreg (unregistering): left allmulticast mode [ 203.767288][ T146] team0 (unregistering): Port device team_slave_1 removed [ 203.777663][ T146] team0 (unregistering): Port device team_slave_0 removed [ 203.805110][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.245418][ T146] IPVS: stop unused estimator thread 0... [ 204.269582][T17526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 204.279335][T17526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 204.289128][T17526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.299328][T17526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.396299][T17526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.421271][T17526] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.430595][ T3978] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.437678][ T3978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.485031][ T3978] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.492127][ T3978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.604271][T17526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.671814][T18357] veth1_macvtap: left promiscuous mode [ 204.695194][T18357] macsec0: entered promiscuous mode [ 204.700420][T18357] macsec0: entered allmulticast mode [ 204.755409][T18361] loop2: detected capacity change from 0 to 764 [ 204.765610][T18361] rock: directory entry would overflow storage [ 204.771825][T18361] rock: sig=0x5245, size=8, remaining=5 [ 204.795209][T18357] veth1_macvtap: entered promiscuous mode [ 204.800994][T18357] veth1_macvtap: entered allmulticast mode [ 204.826165][T18357] macsec0: left promiscuous mode [ 204.831240][T18357] macsec0: left allmulticast mode [ 204.836290][T18357] veth1_macvtap: left allmulticast mode [ 204.882232][T18357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.887900][T17526] veth0_vlan: entered promiscuous mode [ 204.891035][T18357] __nla_validate_parse: 2 callbacks suppressed [ 204.891093][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3217'. [ 204.932704][T17526] veth1_vlan: entered promiscuous mode [ 204.970990][T17526] veth0_macvtap: entered promiscuous mode [ 204.988817][T17526] veth1_macvtap: entered promiscuous mode [ 204.999441][T17526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.011251][T17526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.024620][ T3978] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.039644][ T3978] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.058702][ T271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.074467][T18415] loop6: detected capacity change from 0 to 256 [ 205.098014][ T271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.133189][T18420] SELinux: failed to load policy [ 205.137645][ T29] kauditd_printk_skb: 635 callbacks suppressed [ 205.137659][ T29] audit: type=1400 audit(205.118:32457): avc: denied { connect } for pid=18388 comm="syz.1.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.164511][ T29] audit: type=1326 audit(205.128:32458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.165987][T18420] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 205.187558][ T29] audit: type=1326 audit(205.128:32459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187609][ T29] audit: type=1326 audit(205.128:32460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187630][ T29] audit: type=1326 audit(205.128:32461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187651][ T29] audit: type=1326 audit(205.128:32462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187681][ T29] audit: type=1326 audit(205.128:32463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187704][ T29] audit: type=1326 audit(205.128:32464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.187726][ T29] audit: type=1326 audit(205.128:32465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.354774][ T29] audit: type=1326 audit(205.128:32466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18419 comm="syz.5.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 205.611789][T18563] loop6: detected capacity change from 0 to 128 [ 205.855003][T18780] loop1: detected capacity change from 0 to 764 [ 205.861646][T18780] iso9660: Unknown parameter 'uid¦îÚ¶&«@àIb' [ 205.891571][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3236'. [ 205.958490][T18786] SELinux: failed to load policy [ 206.185706][T18806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3245'. [ 206.194934][T18806] IPVS: Error connecting to the multicast addr [ 206.261357][T18910] netlink: 'syz.1.3246': attribute type 21 has an invalid length. [ 206.269206][T18910] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 206.277039][T18910] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3246'. [ 206.376550][T18920] SELinux: failed to load policy [ 206.460265][T19025] xt_TCPMSS: Only works on TCP SYN packets [ 206.947199][T19169] FAULT_INJECTION: forcing a failure. [ 206.947199][T19169] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 206.960488][T19169] CPU: 1 UID: 0 PID: 19169 Comm: syz.0.3261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.960518][T19169] Tainted: [W]=WARN [ 206.960591][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.960603][T19169] Call Trace: [ 206.960610][T19169] [ 206.960618][T19169] __dump_stack+0x1d/0x30 [ 206.960637][T19169] dump_stack_lvl+0xe8/0x140 [ 206.960661][T19169] dump_stack+0x15/0x1b [ 206.960675][T19169] should_fail_ex+0x265/0x280 [ 206.960848][T19169] should_fail_alloc_page+0xf2/0x100 [ 206.960939][T19169] __alloc_frozen_pages_noprof+0xff/0x360 [ 206.960969][T19169] __alloc_pages_noprof+0x9/0x20 [ 206.961049][T19169] pcpu_populate_chunk+0x206/0xa70 [ 206.961066][T19169] ? queue_work_on+0xf2/0x160 [ 206.961085][T19169] pcpu_alloc_noprof+0xac2/0x1250 [ 206.961104][T19169] xt_percpu_counter_alloc+0x78/0x110 [ 206.961185][T19169] translate_table+0x93d/0xf90 [ 206.961203][T19169] ? should_fail_ex+0xdb/0x280 [ 206.961218][T19169] ? _copy_from_user+0x89/0xb0 [ 206.961240][T19169] do_ipt_set_ctl+0x66f/0x820 [ 206.961307][T19169] ? lock_sock_nested+0x112/0x140 [ 206.961330][T19169] nf_setsockopt+0x199/0x1b0 [ 206.961349][T19169] ip_setsockopt+0x102/0x110 [ 206.961398][T19169] udp_setsockopt+0x99/0xb0 [ 206.961454][T19169] sock_common_setsockopt+0x69/0x80 [ 206.961472][T19169] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 206.961492][T19169] __sys_setsockopt+0x184/0x200 [ 206.961538][T19169] __x64_sys_setsockopt+0x64/0x80 [ 206.961561][T19169] x64_sys_call+0x20ec/0x3000 [ 206.961577][T19169] do_syscall_64+0xd2/0x200 [ 206.961592][T19169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.961627][T19169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.961655][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.961675][T19169] RIP: 0033:0x7f56fadbefc9 [ 206.961729][T19169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.961743][T19169] RSP: 002b:00007f56f9806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.961822][T19169] RAX: ffffffffffffffda RBX: 00007f56fb016090 RCX: 00007f56fadbefc9 [ 206.961832][T19169] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 206.961842][T19169] RBP: 00007f56f9806090 R08: 0000000000000310 R09: 0000000000000000 [ 206.961853][T19169] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 206.961863][T19169] R13: 00007f56fb016128 R14: 00007f56fb016090 R15: 00007fffc5b42d58 [ 206.961899][T19169] [ 207.207548][T19169] percpu: allocation failed, size=4096 align=4096 atomic=0, failed to populate [ 207.216574][T19169] CPU: 1 UID: 0 PID: 19169 Comm: syz.0.3261 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.216612][T19169] Tainted: [W]=WARN [ 207.216617][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.216628][T19169] Call Trace: [ 207.216677][T19169] [ 207.216684][T19169] __dump_stack+0x1d/0x30 [ 207.216707][T19169] dump_stack_lvl+0xe8/0x140 [ 207.216724][T19169] dump_stack+0x15/0x1b [ 207.216738][T19169] pcpu_alloc_noprof+0xead/0x1250 [ 207.216759][T19169] xt_percpu_counter_alloc+0x78/0x110 [ 207.216868][T19169] translate_table+0x93d/0xf90 [ 207.216888][T19169] ? should_fail_ex+0xdb/0x280 [ 207.216934][T19169] ? _copy_from_user+0x89/0xb0 [ 207.216960][T19169] do_ipt_set_ctl+0x66f/0x820 [ 207.216979][T19169] ? lock_sock_nested+0x112/0x140 [ 207.217016][T19169] nf_setsockopt+0x199/0x1b0 [ 207.217073][T19169] ip_setsockopt+0x102/0x110 [ 207.217101][T19169] udp_setsockopt+0x99/0xb0 [ 207.217129][T19169] sock_common_setsockopt+0x69/0x80 [ 207.217226][T19169] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 207.217247][T19169] __sys_setsockopt+0x184/0x200 [ 207.217339][T19169] __x64_sys_setsockopt+0x64/0x80 [ 207.217418][T19169] x64_sys_call+0x20ec/0x3000 [ 207.217435][T19169] do_syscall_64+0xd2/0x200 [ 207.217494][T19169] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.217535][T19169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.217564][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.217633][T19169] RIP: 0033:0x7f56fadbefc9 [ 207.217647][T19169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.217661][T19169] RSP: 002b:00007f56f9806038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 207.217677][T19169] RAX: ffffffffffffffda RBX: 00007f56fb016090 RCX: 00007f56fadbefc9 [ 207.217688][T19169] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 207.217699][T19169] RBP: 00007f56f9806090 R08: 0000000000000310 R09: 0000000000000000 [ 207.217709][T19169] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 207.217768][T19169] R13: 00007f56fb016128 R14: 00007f56fb016090 R15: 00007fffc5b42d58 [ 207.217784][T19169] [ 207.564120][T19174] loop1: detected capacity change from 0 to 128 [ 207.733481][T19224] loop6: detected capacity change from 0 to 512 [ 207.791372][T19224] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3264: couldn't read orphan inode 26 (err -116) [ 207.826018][T19235] SELinux: failed to load policy [ 207.834399][T19224] EXT4-fs (loop6): Remounting filesystem read-only [ 207.851127][T19224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.904230][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3266'. [ 207.959256][T19245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.969952][T19171] chnl_net:caif_netlink_parms(): no params data found [ 207.990182][T19245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.051427][T19171] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.058540][T19171] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.065807][T19171] bridge_slave_0: entered allmulticast mode [ 208.074510][T19171] bridge_slave_0: entered promiscuous mode [ 208.093846][T19171] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.101000][T19171] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.108123][T19171] bridge_slave_1: entered allmulticast mode [ 208.114961][T19171] bridge_slave_1: entered promiscuous mode [ 208.167740][T19171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.178033][T19171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.201608][T19171] team0: Port device team_slave_0 added [ 208.209901][T19171] team0: Port device team_slave_1 added [ 208.227902][T19171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.234929][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.260862][T19171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.272925][T19171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.279952][T19171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.306293][T19171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.330541][T19171] hsr_slave_0: entered promiscuous mode [ 208.336554][T19171] hsr_slave_1: entered promiscuous mode [ 208.524302][T19214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.542499][T19214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.557717][T19214] bond0 (unregistering): Released all slaves [ 208.669901][T19273] loop5: detected capacity change from 0 to 1024 [ 208.697489][T19273] EXT4-fs: Ignoring removed orlov option [ 208.715975][T19214] tipc: Left network mode [ 208.726488][T19214] hsr_slave_0: left promiscuous mode [ 208.742845][T19273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.756068][T19214] hsr_slave_1: left promiscuous mode [ 208.764500][T19214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.776005][T19273] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3275: bg 0: block 232: padding at end of block bitmap is not set [ 208.790940][T19214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.798222][T19214] batman_adv: batadv0: Removing interface: veth1_vlan [ 208.805788][T19214] pimreg (unregistering): left allmulticast mode [ 208.821632][T19273] EXT4-fs (loop5): Remounting filesystem read-only [ 208.828319][T19273] EXT4-fs (loop5): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 208.867311][T19214] team0 (unregistering): Port device team_slave_1 removed [ 208.876960][T19214] team0 (unregistering): Port device team_slave_0 removed [ 209.123475][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.219275][T19338] SELinux: failed to load policy [ 209.287762][T19171] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.298935][T19171] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.313601][T19171] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.329230][T19171] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.408792][T19171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.423955][T19352] loop6: detected capacity change from 0 to 1024 [ 209.434242][T19171] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.444927][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.452081][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.462097][ T271] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.469364][ T271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.478421][T19352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.506462][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.519761][T19171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.530179][T19171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.591033][T19383] loop1: detected capacity change from 0 to 2048 [ 209.637589][T19383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.662975][T19171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.673725][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.729407][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3285'. [ 209.819154][T19171] veth0_vlan: entered promiscuous mode [ 209.829938][T19171] veth1_vlan: entered promiscuous mode [ 209.846765][T19171] veth0_macvtap: entered promiscuous mode [ 209.855144][T19171] veth1_macvtap: entered promiscuous mode [ 209.867053][T19171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.878286][T19171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.912156][T19207] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.921808][T19207] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.931895][ T3986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.001861][T19430] loop5: detected capacity change from 0 to 512 [ 210.110098][T19430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.154933][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 210.154947][ T29] audit: type=1400 audit(210.138:32867): avc: denied { write } for pid=19171 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 210.188011][ T29] audit: type=1400 audit(210.138:32868): avc: denied { open } for pid=19171 comm="syz-executor" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 210.271837][T19440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 210.337353][ T3986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.346144][ T29] audit: type=1326 audit(210.298:32869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.369266][ T29] audit: type=1326 audit(210.298:32870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.392386][ T29] audit: type=1326 audit(210.308:32871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.415380][ T29] audit: type=1326 audit(210.318:32872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.438390][ T29] audit: type=1326 audit(210.318:32873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.438418][ T29] audit: type=1326 audit(210.318:32874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.438440][ T29] audit: type=1326 audit(210.318:32875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.438504][ T29] audit: type=1326 audit(210.318:32876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19443 comm="syz.6.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 210.538196][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.573538][T19454] loop1: detected capacity change from 0 to 1024 [ 210.588686][T19454] EXT4-fs: Ignoring removed orlov option [ 210.612458][T19454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.626216][T19454] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3293: bg 0: block 232: padding at end of block bitmap is not set [ 210.688065][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.697115][T19454] EXT4-fs (loop1): Remounting filesystem read-only [ 210.704535][T19454] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 210.723623][T19461] raw_sendmsg: syz.5.3295 forgot to set AF_INET. Fix it! [ 210.794575][T19466] loop2: detected capacity change from 0 to 256 [ 210.863901][T19468] SELinux: failed to load policy [ 210.880110][T19468] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 210.940904][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 210.949841][T19472] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3296'. [ 210.959004][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 210.967888][T19472] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3296'. [ 210.993752][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3296'. [ 211.165152][T19478] loop6: detected capacity change from 0 to 256 [ 211.366649][T19483] loop6: detected capacity change from 0 to 2048 [ 211.400519][T19483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.414172][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.669301][T19493] loop1: detected capacity change from 0 to 512 [ 211.722278][T19493] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 211.738332][T19493] EXT4-fs (loop1): orphan cleanup on readonly fs [ 211.800928][T19496] loop5: detected capacity change from 0 to 512 [ 211.872338][T19496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.895349][T19493] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3306: Failed to acquire dquot type 1 [ 211.921137][T19496] program syz.5.3307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.938549][T19493] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3306: bg 0: block 40: padding at end of block bitmap is not set [ 211.950660][T19496] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 211.976447][T19493] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 212.001008][T19493] EXT4-fs (loop1): 1 truncate cleaned up [ 212.007290][T19493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.007560][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.062403][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.099450][T19509] SELinux: failed to load policy [ 212.132264][T19514] loop2: detected capacity change from 0 to 1024 [ 212.139380][T19514] EXT4-fs: inline encryption not supported [ 212.145350][T19514] EXT4-fs: Ignoring removed nobh option [ 212.150977][T19514] EXT4-fs: Ignoring removed bh option [ 212.171819][T19514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.204693][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.256851][ T3519] Bluetooth: hci0: sending frame failed (-49) [ 212.263073][ T4390] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 212.322914][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.352334][T19532] FAULT_INJECTION: forcing a failure. [ 212.352334][T19532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.365602][T19532] CPU: 0 UID: 0 PID: 19532 Comm: syz.2.3317 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.365632][T19532] Tainted: [W]=WARN [ 212.365638][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.365647][T19532] Call Trace: [ 212.365724][T19532] [ 212.365731][T19532] __dump_stack+0x1d/0x30 [ 212.365753][T19532] dump_stack_lvl+0xe8/0x140 [ 212.365773][T19532] dump_stack+0x15/0x1b [ 212.365787][T19532] should_fail_ex+0x265/0x280 [ 212.365803][T19532] should_fail+0xb/0x20 [ 212.365817][T19532] should_fail_usercopy+0x1a/0x20 [ 212.365871][T19532] _copy_to_user+0x20/0xa0 [ 212.365925][T19532] simple_read_from_buffer+0xb5/0x130 [ 212.365945][T19532] proc_fail_nth_read+0x10e/0x150 [ 212.365973][T19532] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.366044][T19532] vfs_read+0x1a8/0x770 [ 212.366062][T19532] ? __rcu_read_unlock+0x4f/0x70 [ 212.366149][T19532] ? __fget_files+0x184/0x1c0 [ 212.366171][T19532] ksys_read+0xda/0x1a0 [ 212.366194][T19532] __x64_sys_read+0x40/0x50 [ 212.366218][T19532] x64_sys_call+0x27c0/0x3000 [ 212.366239][T19532] do_syscall_64+0xd2/0x200 [ 212.366331][T19532] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.366354][T19532] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.366432][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.366517][T19532] RIP: 0033:0x7febb089d9dc [ 212.366546][T19532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.366563][T19532] RSP: 002b:00007febaf2ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.366583][T19532] RAX: ffffffffffffffda RBX: 00007febb0af5fa0 RCX: 00007febb089d9dc [ 212.366596][T19532] RDX: 000000000000000f RSI: 00007febaf2ff0a0 RDI: 0000000000000004 [ 212.366694][T19532] RBP: 00007febaf2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 212.366707][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.366791][T19532] R13: 00007febb0af6038 R14: 00007febb0af5fa0 R15: 00007ffeb47aa678 [ 212.366849][T19532] [ 212.629719][T19537] loop2: detected capacity change from 0 to 128 [ 212.636445][T19543] FAULT_INJECTION: forcing a failure. [ 212.636445][T19543] name failslab, interval 1, probability 0, space 0, times 0 [ 212.649122][T19543] CPU: 0 UID: 0 PID: 19543 Comm: syz.6.3322 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.649176][T19543] Tainted: [W]=WARN [ 212.649182][T19543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.649195][T19543] Call Trace: [ 212.649201][T19543] [ 212.649210][T19543] __dump_stack+0x1d/0x30 [ 212.649233][T19543] dump_stack_lvl+0xe8/0x140 [ 212.649253][T19543] dump_stack+0x15/0x1b [ 212.649329][T19543] should_fail_ex+0x265/0x280 [ 212.649345][T19543] should_failslab+0x8c/0xb0 [ 212.649369][T19543] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 212.649396][T19543] ? __d_alloc+0x3d/0x340 [ 212.649442][T19543] __d_alloc+0x3d/0x340 [ 212.649466][T19543] d_alloc_parallel+0x58/0xc70 [ 212.649486][T19543] ? lockref_get_not_dead+0x120/0x1c0 [ 212.649512][T19543] ? __rcu_read_unlock+0x4f/0x70 [ 212.649591][T19543] __lookup_slow+0x8c/0x250 [ 212.649612][T19543] lookup_slow+0x3c/0x60 [ 212.649630][T19543] walk_component+0x1ec/0x220 [ 212.649692][T19543] path_lookupat+0xfe/0x2a0 [ 212.649740][T19543] filename_lookup+0x147/0x340 [ 212.649848][T19543] user_path_at+0x3e/0x130 [ 212.649865][T19543] __se_sys_pivot_root+0x149/0x700 [ 212.649892][T19543] ? fput+0x8f/0xc0 [ 212.649911][T19543] __x64_sys_pivot_root+0x31/0x40 [ 212.649931][T19543] x64_sys_call+0x144/0x3000 [ 212.650023][T19543] do_syscall_64+0xd2/0x200 [ 212.650041][T19543] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.650109][T19543] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.650132][T19543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.650149][T19543] RIP: 0033:0x7efd044aefc9 [ 212.650162][T19543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.650244][T19543] RSP: 002b:00007efd02f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 212.650260][T19543] RAX: ffffffffffffffda RBX: 00007efd04705fa0 RCX: 00007efd044aefc9 [ 212.650273][T19543] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000200000000000 [ 212.650286][T19543] RBP: 00007efd02f17090 R08: 0000000000000000 R09: 0000000000000000 [ 212.650372][T19543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.650382][T19543] R13: 00007efd04706038 R14: 00007efd04705fa0 R15: 00007ffefcb9c528 [ 212.650397][T19543] [ 212.887345][T19537] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 212.895268][T19537] FAT-fs (loop2): Filesystem has been set read-only [ 212.902367][T19537] bio_check_eod: 15344 callbacks suppressed [ 212.902382][T19537] syz.2.3319: attempt to access beyond end of device [ 212.902382][T19537] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 212.926771][T19547] loop1: detected capacity change from 0 to 256 [ 213.046376][T19553] loop2: detected capacity change from 0 to 2048 [ 213.062471][T19553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.072863][T19557] SELinux: failed to load policy [ 213.133443][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3328'. [ 213.145583][T19563] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 213.153686][T19563] team0: Device ipvlan2 is already an upper device of the team interface [ 213.566928][T19589] loop5: detected capacity change from 0 to 1024 [ 213.581934][T19589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.604827][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.624344][T19594] SELinux: failed to load policy [ 213.934861][T19617] loop6: detected capacity change from 0 to 1024 [ 213.947761][T19617] EXT4-fs: Ignoring removed orlov option [ 213.980219][T19617] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3345: bg 0: block 232: padding at end of block bitmap is not set [ 214.005126][T19617] EXT4-fs (loop6): Remounting filesystem read-only [ 214.011772][T19617] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 214.070395][T19632] SELinux: failed to load policy [ 214.096886][T19635] loop2: detected capacity change from 0 to 512 [ 214.130333][T19643] loop1: detected capacity change from 0 to 512 [ 214.137489][T19643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.148948][T19643] EXT4-fs (loop1): 1 truncate cleaned up [ 214.159207][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 214.168128][T19648] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3352'. [ 214.177253][T19648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3352'. [ 214.277989][T19657] loop1: detected capacity change from 0 to 2048 [ 214.290405][T19659] loop2: detected capacity change from 0 to 512 [ 214.297057][T19659] EXT4-fs: Ignoring removed orlov option [ 214.302752][T19659] EXT4-fs: Ignoring removed nobh option [ 214.321854][T19659] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.3356: corrupted in-inode xattr: e_value size too large [ 214.336466][T19659] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3356: couldn't read orphan inode 15 (err -117) [ 214.574620][T19680] SELinux: failed to load policy [ 214.689411][T19691] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 214.697723][T19691] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 214.708388][T19691] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.715928][T19691] vhci_hcd: invalid port number 96 [ 214.721119][T19691] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 214.825979][T19698] loop2: detected capacity change from 0 to 512 [ 214.832964][T19698] journal_path: Lookup failure for './file0/../file0' [ 214.839774][T19698] EXT4-fs: error: could not find journal device path [ 215.019245][T19710] loop2: detected capacity change from 0 to 512 [ 215.046505][T19710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.053339][T19710] EXT4-fs: Ignoring removed oldalloc option [ 215.102240][T19710] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.3370: Parent and EA inode have the same ino 15 [ 215.125809][T19710] EXT4-fs (loop2): Remounting filesystem read-only [ 215.132639][T19710] EXT4-fs (loop2): 1 orphan inode deleted [ 215.155831][T19714] SELinux: failed to load policy [ 215.160949][ T29] kauditd_printk_skb: 2688 callbacks suppressed [ 215.160960][ T29] audit: type=1326 audit(215.148:35563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19687 comm="syz.0.3363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56fad5b099 code=0x7ffc0000 [ 215.190494][ T29] audit: type=1326 audit(215.148:35564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb0895e67 code=0x7ffc0000 [ 215.213600][ T29] audit: type=1326 audit(215.148:35565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febb083b099 code=0x7ffc0000 [ 215.236531][ T29] audit: type=1326 audit(215.148:35566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb0895e67 code=0x7ffc0000 [ 215.259422][ T29] audit: type=1326 audit(215.148:35567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febb083b099 code=0x7ffc0000 [ 215.282363][ T29] audit: type=1326 audit(215.148:35568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb0895e67 code=0x7ffc0000 [ 215.305385][ T29] audit: type=1326 audit(215.148:35569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febb083b099 code=0x7ffc0000 [ 215.328340][ T29] audit: type=1326 audit(215.148:35570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb0895e67 code=0x7ffc0000 [ 215.351270][ T29] audit: type=1326 audit(215.148:35571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7febb083b099 code=0x7ffc0000 [ 215.374122][ T29] audit: type=1326 audit(215.148:35572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.3370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7febb0895e67 code=0x7ffc0000 [ 215.404060][T19720] loop6: detected capacity change from 0 to 1024 [ 215.539142][T19726] loop6: detected capacity change from 0 to 1024 [ 215.625275][T19733] loop6: detected capacity change from 0 to 1024 [ 215.651266][T19733] EXT4-fs: Ignoring removed orlov option [ 215.661686][T19733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3377: bg 0: block 232: padding at end of block bitmap is not set [ 215.706706][T19733] EXT4-fs (loop6): Remounting filesystem read-only [ 215.713459][T19733] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 215.876783][T19748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=19748 comm=syz.0.3382 [ 216.169332][T19759] loop1: detected capacity change from 0 to 1024 [ 216.446338][T19775] FAULT_INJECTION: forcing a failure. [ 216.446338][T19775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.459497][T19775] CPU: 1 UID: 0 PID: 19775 Comm: syz.1.3391 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.459526][T19775] Tainted: [W]=WARN [ 216.459532][T19775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.459543][T19775] Call Trace: [ 216.459549][T19775] [ 216.459556][T19775] __dump_stack+0x1d/0x30 [ 216.459715][T19775] dump_stack_lvl+0xe8/0x140 [ 216.459727][T19775] dump_stack+0x15/0x1b [ 216.459737][T19775] should_fail_ex+0x265/0x280 [ 216.459748][T19775] should_fail+0xb/0x20 [ 216.459757][T19775] should_fail_usercopy+0x1a/0x20 [ 216.459819][T19775] _copy_from_iter+0xd2/0xe80 [ 216.459831][T19775] ? __build_skb_around+0x1ab/0x200 [ 216.459847][T19775] ? __alloc_skb+0x223/0x320 [ 216.459862][T19775] netlink_sendmsg+0x471/0x6b0 [ 216.459921][T19775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.459931][T19775] __sock_sendmsg+0x145/0x180 [ 216.460021][T19775] ____sys_sendmsg+0x31e/0x4e0 [ 216.460039][T19775] ___sys_sendmsg+0x17b/0x1d0 [ 216.460137][T19775] __x64_sys_sendmsg+0xd4/0x160 [ 216.460161][T19775] x64_sys_call+0x191e/0x3000 [ 216.460173][T19775] do_syscall_64+0xd2/0x200 [ 216.460256][T19775] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.460309][T19775] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 216.460345][T19775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.460357][T19775] RIP: 0033:0x7fe57483efc9 [ 216.460367][T19775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.460377][T19775] RSP: 002b:00007fe57329f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.460439][T19775] RAX: ffffffffffffffda RBX: 00007fe574a95fa0 RCX: 00007fe57483efc9 [ 216.460446][T19775] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 216.460454][T19775] RBP: 00007fe57329f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.460460][T19775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.460467][T19775] R13: 00007fe574a96038 R14: 00007fe574a95fa0 R15: 00007fff944af5e8 [ 216.460477][T19775] [ 216.782307][T19785] SELinux: failed to load policy [ 216.946437][T19796] $Hÿ: renamed from bond0 (while UP) [ 216.998337][T19796] $Hÿ: entered promiscuous mode [ 217.003578][T19796] bond_slave_0: entered promiscuous mode [ 217.009334][T19796] bond_slave_1: entered promiscuous mode [ 217.102460][T19800] netlink: 'syz.2.3397': attribute type 3 has an invalid length. [ 217.316524][T19800] loop2: detected capacity change from 0 to 512 [ 217.329613][T19800] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.2.3397: corrupted xattr block 95: invalid header [ 217.352910][T19812] loop1: detected capacity change from 0 to 1024 [ 217.360706][T19817] FAULT_INJECTION: forcing a failure. [ 217.360706][T19817] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.366908][T19800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3397: bg 0: block 7: invalid block bitmap [ 217.374168][T19817] CPU: 1 UID: 0 PID: 19817 Comm: syz.0.3400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.374262][T19817] Tainted: [W]=WARN [ 217.374268][T19817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.374280][T19817] Call Trace: [ 217.374287][T19817] [ 217.374295][T19817] __dump_stack+0x1d/0x30 [ 217.374317][T19817] dump_stack_lvl+0xe8/0x140 [ 217.374336][T19817] dump_stack+0x15/0x1b [ 217.374365][T19817] should_fail_ex+0x265/0x280 [ 217.374384][T19817] should_fail_alloc_page+0xf2/0x100 [ 217.374412][T19817] __alloc_frozen_pages_noprof+0xff/0x360 [ 217.374504][T19817] alloc_pages_mpol+0xb3/0x260 [ 217.374525][T19817] alloc_pages_noprof+0x90/0x130 [ 217.374545][T19817] pgd_alloc+0x40/0x290 [ 217.374569][T19817] mm_init+0x385/0x7f0 [ 217.374590][T19817] ? kmem_cache_alloc_noprof+0x2b8/0x480 [ 217.374626][T19817] mm_alloc+0x81/0xa0 [ 217.374648][T19817] alloc_bprm+0x20e/0x350 [ 217.374670][T19817] do_execveat_common+0x12e/0x750 [ 217.374693][T19817] ? getname_flags+0x154/0x3b0 [ 217.374726][T19817] __x64_sys_execveat+0x73/0x90 [ 217.374749][T19817] x64_sys_call+0x1fec/0x3000 [ 217.374770][T19817] do_syscall_64+0xd2/0x200 [ 217.374787][T19817] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.374819][T19817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.374838][T19817] RIP: 0033:0x7f56fadbefc9 [ 217.374853][T19817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.374869][T19817] RSP: 002b:00007f56f9827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 217.374922][T19817] RAX: ffffffffffffffda RBX: 00007f56fb015fa0 RCX: 00007f56fadbefc9 [ 217.374934][T19817] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 217.374947][T19817] RBP: 00007f56f9827090 R08: 0000000000001000 R09: 0000000000000000 [ 217.374959][T19817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.374970][T19817] R13: 00007f56fb016038 R14: 00007f56fb015fa0 R15: 00007fffc5b42d58 [ 217.374989][T19817] [ 217.636572][T19800] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 217.652488][T19800] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #11: comm syz.2.3397: corrupted xattr block 95: invalid header [ 217.663229][T19850] loop6: detected capacity change from 0 to 1024 [ 217.673719][T19800] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 217.683178][T19850] EXT4-fs: Ignoring removed orlov option [ 217.683352][T19800] EXT4-fs (loop2): 1 orphan inode deleted [ 217.709771][T19850] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3403: bg 0: block 232: padding at end of block bitmap is not set [ 217.736151][T19860] FAULT_INJECTION: forcing a failure. [ 217.736151][T19860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.749259][T19860] CPU: 1 UID: 0 PID: 19860 Comm: syz.0.3401 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.749290][T19860] Tainted: [W]=WARN [ 217.749296][T19860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.749307][T19860] Call Trace: [ 217.749313][T19860] [ 217.749362][T19860] __dump_stack+0x1d/0x30 [ 217.749386][T19860] dump_stack_lvl+0xe8/0x140 [ 217.749464][T19860] dump_stack+0x15/0x1b [ 217.749479][T19860] should_fail_ex+0x265/0x280 [ 217.749495][T19860] should_fail+0xb/0x20 [ 217.749508][T19860] should_fail_usercopy+0x1a/0x20 [ 217.749528][T19860] _copy_to_user+0x20/0xa0 [ 217.749636][T19860] simple_read_from_buffer+0xb5/0x130 [ 217.749660][T19860] proc_fail_nth_read+0x10e/0x150 [ 217.749687][T19860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.749771][T19860] vfs_read+0x1a8/0x770 [ 217.749808][T19860] ? pipe_fasync+0xf6/0x150 [ 217.749832][T19860] ? __rcu_read_unlock+0x4f/0x70 [ 217.749927][T19860] ? __fget_files+0x184/0x1c0 [ 217.749951][T19860] ? _raw_spin_unlock+0x26/0x50 [ 217.749975][T19860] ksys_read+0xda/0x1a0 [ 217.749996][T19860] __x64_sys_read+0x40/0x50 [ 217.750100][T19860] x64_sys_call+0x27c0/0x3000 [ 217.750120][T19860] do_syscall_64+0xd2/0x200 [ 217.750139][T19860] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.750165][T19860] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.750302][T19860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.750324][T19860] RIP: 0033:0x7f56fadbd9dc [ 217.750340][T19860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.750387][T19860] RSP: 002b:00007f56f9806030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.750407][T19860] RAX: ffffffffffffffda RBX: 00007f56fb016090 RCX: 00007f56fadbd9dc [ 217.750421][T19860] RDX: 000000000000000f RSI: 00007f56f98060a0 RDI: 0000000000000008 [ 217.750433][T19860] RBP: 00007f56f9806090 R08: 0000000000000000 R09: 0000000000000000 [ 217.750447][T19860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.750460][T19860] R13: 00007f56fb016128 R14: 00007f56fb016090 R15: 00007fffc5b42d58 [ 217.750479][T19860] [ 217.812049][T19853] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 217.877770][T19850] EXT4-fs (loop6): Remounting filesystem read-only [ 217.877852][T19850] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 217.917454][T19853] netlink: 'syz.1.3402': attribute type 21 has an invalid length. [ 217.999363][T19853] __nla_validate_parse: 12 callbacks suppressed [ 217.999378][T19853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 218.028033][T19171] EXT4-fs unmount: 25 callbacks suppressed [ 218.028047][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.492529][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.681277][T19952] loop6: detected capacity change from 0 to 256 [ 218.728820][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.736348][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.743907][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.751378][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.770822][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.778249][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.785679][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.793090][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.800464][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.807872][ T4656] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 218.829713][ T4656] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 218.865723][T19977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=19977 comm=syz.6.3413 [ 218.889035][T19977] loop6: detected capacity change from 0 to 512 [ 218.895713][T19977] EXT4-fs: Ignoring removed oldalloc option [ 218.919988][T19977] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3413: Parent and EA inode have the same ino 15 [ 218.935415][T19977] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.3413: Parent and EA inode have the same ino 15 [ 218.951230][T19977] EXT4-fs (loop6): 1 orphan inode deleted [ 218.963987][T19977] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.023165][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.035742][T20000] loop1: detected capacity change from 0 to 512 [ 219.058343][T20003] netlink: 200 bytes leftover after parsing attributes in process `syz.6.3420'. [ 219.078715][T20000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.096365][T20000] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.3419: corrupted inode contents [ 219.108825][T20000] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.3419: mark_inode_dirty error [ 219.109108][T20008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3421'. [ 219.120506][T20000] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.3419: corrupted inode contents [ 219.141193][T20000] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.3419: mark_inode_dirty error [ 219.152930][T20008] loop6: detected capacity change from 0 to 736 [ 219.194892][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.853422][T20045] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 220.152319][T20058] FAULT_INJECTION: forcing a failure. [ 220.152319][T20058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.165424][T20058] CPU: 0 UID: 0 PID: 20058 Comm: syz.0.3435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.165528][T20058] Tainted: [W]=WARN [ 220.165535][T20058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.165548][T20058] Call Trace: [ 220.165555][T20058] [ 220.165563][T20058] __dump_stack+0x1d/0x30 [ 220.165583][T20058] dump_stack_lvl+0xe8/0x140 [ 220.165679][T20058] dump_stack+0x15/0x1b [ 220.165694][T20058] should_fail_ex+0x265/0x280 [ 220.165712][T20058] should_fail+0xb/0x20 [ 220.165729][T20058] should_fail_usercopy+0x1a/0x20 [ 220.165799][T20058] _copy_from_iter+0xd2/0xe80 [ 220.165891][T20058] ? __build_skb_around+0x1ab/0x200 [ 220.165919][T20058] ? __alloc_skb+0x223/0x320 [ 220.166026][T20058] netlink_sendmsg+0x471/0x6b0 [ 220.166048][T20058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.166070][T20058] __sock_sendmsg+0x145/0x180 [ 220.166089][T20058] ____sys_sendmsg+0x31e/0x4e0 [ 220.166116][T20058] ___sys_sendmsg+0x17b/0x1d0 [ 220.166157][T20058] __x64_sys_sendmsg+0xd4/0x160 [ 220.166217][T20058] x64_sys_call+0x191e/0x3000 [ 220.166234][T20058] do_syscall_64+0xd2/0x200 [ 220.166251][T20058] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.166338][T20058] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.166364][T20058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.166386][T20058] RIP: 0033:0x7f56fadbefc9 [ 220.166401][T20058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.166423][T20058] RSP: 002b:00007f56f9806038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.166440][T20058] RAX: ffffffffffffffda RBX: 00007f56fb016090 RCX: 00007f56fadbefc9 [ 220.166450][T20058] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 220.166461][T20058] RBP: 00007f56f9806090 R08: 0000000000000000 R09: 0000000000000000 [ 220.166471][T20058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.166483][T20058] R13: 00007f56fb016128 R14: 00007f56fb016090 R15: 00007fffc5b42d58 [ 220.166500][T20058] [ 220.175522][T20056] infiniband syz0: set active [ 220.220851][T20060] loop6: detected capacity change from 0 to 1024 [ 220.224928][T20056] infiniband syz0: added bond_slave_0 [ 220.233101][T20060] EXT4-fs: Ignoring removed orlov option [ 220.393458][ T29] kauditd_printk_skb: 9655 callbacks suppressed [ 220.393471][ T29] audit: type=1326 audit(220.378:45228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.5.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 220.422724][ T29] audit: type=1326 audit(220.378:45229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20047 comm="syz.5.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40cb7defc9 code=0x7ffc0000 [ 220.458489][T20056] RDS/IB: syz0: added [ 220.462557][T20056] smc: adding ib device syz0 with port count 1 [ 220.465872][T20070] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.469184][T20056] smc: ib device syz0 port 1 has no pnetid [ 220.494840][T20060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.509463][T20060] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3436: bg 0: block 232: padding at end of block bitmap is not set [ 220.524084][T20060] EXT4-fs (loop6): Remounting filesystem read-only [ 220.531477][T20060] EXT4-fs (loop6): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 220.549171][ T29] audit: type=1326 audit(220.528:45230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.572239][ T29] audit: type=1326 audit(220.528:45231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.595189][ T29] audit: type=1326 audit(220.528:45232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.618276][ T29] audit: type=1326 audit(220.528:45233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.641293][ T29] audit: type=1326 audit(220.528:45234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.664287][ T29] audit: type=1326 audit(220.528:45235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.687301][ T29] audit: type=1326 audit(220.528:45236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.710326][ T29] audit: type=1326 audit(220.528:45237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.6.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd044aefc9 code=0x7ffc0000 [ 220.770143][T20079] SELinux: failed to load policy [ 220.770787][T20077] loop1: detected capacity change from 0 to 1024 [ 220.782539][T20077] EXT4-fs: Ignoring removed orlov option [ 220.788531][T20077] EXT4-fs: Ignoring removed orlov option [ 220.796249][T20077] EXT4-fs (loop1): unsupported inode size: 2048 [ 220.802559][T20077] EXT4-fs (loop1): blocksize: 1024 [ 220.835033][T20085] loop5: detected capacity change from 0 to 1024 [ 220.841860][T20085] EXT4-fs: Ignoring removed orlov option [ 220.852583][T20085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.854534][T20088] loop1: detected capacity change from 0 to 1024 [ 220.871695][T20088] EXT4-fs: Ignoring removed orlov option [ 220.884474][T20088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.070107][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.102819][T20099] loop2: detected capacity change from 0 to 512 [ 221.117123][T20101] loop6: detected capacity change from 0 to 256 [ 221.171432][T20099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.204408][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.271298][T20109] vhci_hcd: invalid port number 23 [ 221.279341][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.289826][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.495352][T20127] loop5: detected capacity change from 0 to 2048 [ 221.512448][T20127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.739655][T20146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=20146 comm=syz.2.3459 [ 221.830481][T20150] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.3461'. [ 221.839810][T20150] netlink: 4268 bytes leftover after parsing attributes in process `syz.0.3461'. [ 221.853165][T20150] netlink: 'syz.0.3461': attribute type 3 has an invalid length. [ 221.877767][T20155] loop2: detected capacity change from 0 to 1024 [ 221.895632][T20155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.970744][T20155] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3462'. [ 221.979797][T20155] netlink: 'syz.2.3462': attribute type 9 has an invalid length. [ 221.987595][T20155] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3462'. [ 221.996707][T20155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3462'. [ 222.020933][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.187492][T20171] loop2: detected capacity change from 0 to 1024 [ 222.203871][T20171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.229084][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.233145][T20183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.246649][T20183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.257455][T20185] SELinux: failed to load policy [ 222.320564][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.334398][T20193] loop2: detected capacity change from 0 to 512 [ 222.341283][T20193] EXT4-fs: Ignoring removed oldalloc option [ 222.348554][T20193] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.3475: corrupted in-inode xattr: e_value size too large [ 222.363909][T20193] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3475: couldn't read orphan inode 15 (err -117) [ 222.376377][T20193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.390051][T20193] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.3475: deleted inode referenced: 12 [ 222.401935][T20193] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.3475: deleted inode referenced: 12 [ 222.415437][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 222.429002][T20193] hsr_slave_1 (unregistering): left promiscuous mode [ 222.477611][T20197] loop5: detected capacity change from 0 to 512 [ 222.826773][T20208] loop1: detected capacity change from 0 to 1024 [ 222.833914][T20208] EXT4-fs: Ignoring removed orlov option [ 222.862446][T20208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.876167][T20208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3479: bg 0: block 232: padding at end of block bitmap is not set [ 222.890995][T20208] EXT4-fs (loop1): Remounting filesystem read-only [ 222.897768][T20208] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 222.975422][T20220] SELinux: failed to load policy [ 223.052668][T20230] FAULT_INJECTION: forcing a failure. [ 223.052668][T20230] name failslab, interval 1, probability 0, space 0, times 0 [ 223.065370][T20230] CPU: 0 UID: 0 PID: 20230 Comm: syz.0.3486 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.065409][T20230] Tainted: [W]=WARN [ 223.065416][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.065428][T20230] Call Trace: [ 223.065435][T20230] [ 223.065443][T20230] __dump_stack+0x1d/0x30 [ 223.065463][T20230] dump_stack_lvl+0xe8/0x140 [ 223.065483][T20230] dump_stack+0x15/0x1b [ 223.065577][T20230] should_fail_ex+0x265/0x280 [ 223.065595][T20230] ? audit_log_d_path+0x8d/0x150 [ 223.065635][T20230] should_failslab+0x8c/0xb0 [ 223.065669][T20230] __kmalloc_cache_noprof+0x4c/0x4a0 [ 223.065708][T20230] audit_log_d_path+0x8d/0x150 [ 223.065740][T20230] audit_log_d_path_exe+0x42/0x70 [ 223.065752][T20230] audit_log_task+0x1e9/0x250 [ 223.065769][T20230] ? kstrtouint+0x76/0xc0 [ 223.065823][T20230] audit_seccomp+0x61/0x100 [ 223.065838][T20230] ? __seccomp_filter+0x82d/0x1250 [ 223.065930][T20230] __seccomp_filter+0x83e/0x1250 [ 223.065945][T20230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 223.065996][T20230] ? vfs_write+0x7e8/0x960 [ 223.066008][T20230] ? __rcu_read_unlock+0x4f/0x70 [ 223.066022][T20230] ? __fget_files+0x184/0x1c0 [ 223.066077][T20230] __secure_computing+0x82/0x150 [ 223.066091][T20230] syscall_trace_enter+0xcf/0x1e0 [ 223.066106][T20230] do_syscall_64+0xac/0x200 [ 223.066117][T20230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.066192][T20230] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.066259][T20230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.066271][T20230] RIP: 0033:0x7f56fadbefc9 [ 223.066280][T20230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.066290][T20230] RSP: 002b:00007f56f9827038 EFLAGS: 00000246 ORIG_RAX: 0000000000000061 [ 223.066302][T20230] RAX: ffffffffffffffda RBX: 00007f56fb015fa0 RCX: 00007f56fadbefc9 [ 223.066314][T20230] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 223.066399][T20230] RBP: 00007f56f9827090 R08: 0000000000000000 R09: 0000000000000000 [ 223.066424][T20230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.066436][T20230] R13: 00007f56fb016038 R14: 00007f56fb015fa0 R15: 00007fffc5b42d58 [ 223.066453][T20230] [ 223.366871][T19171] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.584698][T20252] SELinux: failed to load policy [ 223.665405][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.705357][T20267] tipc: Enabling of bearer rejected, failed to enable media [ 223.714920][T20267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3499'. [ 223.751545][T20273] net_ratelimit: 8 callbacks suppressed [ 223.751559][T20273] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 223.804985][T20275] loop5: detected capacity change from 0 to 256 [ 223.895998][T20265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.904790][T20265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.208762][T20289] SELinux: failed to load policy [ 224.229929][T20291] loop1: detected capacity change from 0 to 1024 [ 224.237110][T20291] EXT4-fs: Ignoring removed orlov option [ 224.251818][T20291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.267765][T20291] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3507: bg 0: block 232: padding at end of block bitmap is not set [ 224.283878][T20291] EXT4-fs (loop1): Remounting filesystem read-only [ 224.290550][T20291] EXT4-fs (loop1): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 224.329784][T20304] loop5: detected capacity change from 0 to 2048 [ 224.343582][T20304] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.523205][T20318] loop2: detected capacity change from 0 to 256 [ 224.536855][T20320] loop6: detected capacity change from 0 to 1024 [ 224.544384][T20320] EXT4-fs: Ignoring removed orlov option [ 224.562738][T20320] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.642952][T20320] ================================================================== [ 224.651054][T20320] BUG: KCSAN: data-race in filemap_read / filemap_read [ 224.657926][T20320] [ 224.660243][T20320] write to 0xffff888116c77ca8 of 8 bytes by task 20326 on cpu 1: [ 224.667957][T20320] filemap_read+0x974/0xa00 [ 224.672474][T20320] generic_file_read_iter+0x79/0x330 [ 224.677772][T20320] ext4_file_read_iter+0x1cc/0x290 [ 224.682885][T20320] copy_splice_read+0x442/0x660 [ 224.687730][T20320] splice_direct_to_actor+0x290/0x680 [ 224.693106][T20320] do_splice_direct+0xda/0x150 [ 224.697866][T20320] do_sendfile+0x380/0x650 [ 224.702289][T20320] __x64_sys_sendfile64+0x105/0x150 [ 224.707499][T20320] x64_sys_call+0x2bb4/0x3000 [ 224.712181][T20320] do_syscall_64+0xd2/0x200 [ 224.716682][T20320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.722662][T20320] [ 224.724974][T20320] read to 0xffff888116c77ca8 of 8 bytes by task 20320 on cpu 0: [ 224.732595][T20320] filemap_read+0x6f/0xa00 [ 224.737000][T20320] generic_file_read_iter+0x79/0x330 [ 224.742269][T20320] ext4_file_read_iter+0x1cc/0x290 [ 224.747357][T20320] copy_splice_read+0x442/0x660 [ 224.752189][T20320] splice_direct_to_actor+0x290/0x680 [ 224.757557][T20320] do_splice_direct+0xda/0x150 [ 224.762299][T20320] do_sendfile+0x380/0x650 [ 224.766697][T20320] __x64_sys_sendfile64+0x105/0x150 [ 224.771876][T20320] x64_sys_call+0x2bb4/0x3000 [ 224.776530][T20320] do_syscall_64+0xd2/0x200 [ 224.781008][T20320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.786877][T20320] [ 224.789176][T20320] value changed: 0x000000000000014f -> 0x0000000000000150 [ 224.796255][T20320] [ 224.798554][T20320] Reported by Kernel Concurrency Sanitizer on: [ 224.804694][T20320] CPU: 0 UID: 0 PID: 20320 Comm: syz.6.3515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 224.816038][T20320] Tainted: [W]=WARN [ 224.819818][T20320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 224.829853][T20320] ================================================================== [ 224.850649][ T6854] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.063521][T16491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.163968][T17526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.