last executing test programs: 28m40.868731126s ago: executing program 32 (id=1642): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = inotify_init() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, '\x00\x00\x00\x00@\x00', "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) close_range(r5, 0xffffffffffffffff, 0x0) 27m6.942590255s ago: executing program 33 (id=3296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) process_vm_writev(r1, &(0x7f00000000c0)=[{0x0, 0x21}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0, 0x61}, {0x0}, {0x0}, {0x0, 0x1b}, {0x0}], 0x9, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd70dbdf252500000005022b00000000800a0001007770616e30200000050029000100000000ba00"/52], 0x30}, 0x1, 0x0, 0x0, 0x4008020}, 0x4c040) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'matchall\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000}, 0x20000004) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x4, 0x6}}}}]}, 0x44}}, 0x850) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0xfffeffff, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000000)=0x8) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b00000005001000030000050000", @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES8, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 25m41.893395225s ago: executing program 34 (id=4652): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f00000027c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@discard}, {@lazytime}]}, 0x1, 0x445, &(0x7f0000000200)="$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") chdir(&(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c804) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r6, 0x30b, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) clock_settime(0x1, &(0x7f00000000c0)={0x0, 0x989680}) syz_usb_disconnect(r0) 16m38.032407419s ago: executing program 35 (id=13219): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'blkio'}, {0x2b, 'cpuacct'}, {0x2d, 'blkio'}, {0x2b, 'net'}]}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000002100010000000000ffffffff0000000000000000000000000000000064010101000000000000000000000000000000004e2200000000000008000000", @ANYRES32=0x0, @ANYBLOB="54a1cae87198e72ac390e017112b414da3f67e81c8b2ced287d4258bd89d9daedd", @ANYBLOB="ffffff000000000050001100fc020000000000000000000000000001000000000000000000000000000000006401010100000000000000000000000000000000000000000000ffffac1414aa6c01000006350000020002000c001c"], 0xac}}, 0x40) 12m39.040443667s ago: executing program 36 (id=16564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@remote, @in6=@private2}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000300)=0x9, 0x4) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [{}, {0x20, 'kfree\x00'}, {0x20, '-(^@%*C{%'}], 0xa, "f68f8b23fd"}, 0x22) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x7, 0x0, 0x0, 0xb, 0x82, 0x0, 0x90, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x8080, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) 9m33.230444043s ago: executing program 37 (id=19561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fadvise64(r0, 0xf, 0xa5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fdffffff030000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) r8 = syz_io_uring_setup(0x1215, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x0, 0x2b4}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20000001) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r8, 0x46bc, 0x3, 0x20, 0x0, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) 6m56.126163125s ago: executing program 1 (id=22030): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) unshare(0x2040400) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/140, 0x8c}], 0x6, &(0x7f0000000bc0)=""/157, 0x9d}, 0x12020) 6m56.066916231s ago: executing program 1 (id=22032): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f00000001c0)={0x19980330}, 0x0) 6m56.038901693s ago: executing program 1 (id=22035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x8}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000540)='#', 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r5 = io_uring_setup(0x7076, &(0x7f0000000200)={0x0, 0x9e34, 0x8, 0x3, 0x2a9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000940)={0x0, 0x0, 0x1}, 0x1) 6m55.930874683s ago: executing program 1 (id=22037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 6m55.908496125s ago: executing program 1 (id=22039): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x100, @mcast1, 0x8}, 0x1c) r2 = syz_io_uring_setup(0x88c, &(0x7f0000000300)={0x0, 0xaee0, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 6m55.75448222s ago: executing program 1 (id=22043): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) unshare(0x2040400) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/140, 0x8c}], 0x6, &(0x7f0000000bc0)=""/157, 0x9d}, 0x12020) 6m41.438165634s ago: executing program 38 (id=22043): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0xffffffffffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0x80000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000800) unshare(0x2040400) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000480)=""/98, 0x62}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000007c0)=""/207, 0xcf}, {&(0x7f00000008c0)=""/140, 0x8c}], 0x6, &(0x7f0000000bc0)=""/157, 0x9d}, 0x12020) 6m0.523149385s ago: executing program 5 (id=23035): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) r3 = dup2(r1, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 6m0.416827404s ago: executing program 5 (id=23039): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r1, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/145) 6m0.340088622s ago: executing program 5 (id=23041): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@nodiscard}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x556, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="b26d084169cb5ebb"}}) creat(&(0x7f0000000280)='./file2/file0/file0\x00', 0x84) readlink(&(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000140)=""/228, 0xe4) syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0x8040) pipe2$9p(&(0x7f00000002c0), 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402}, 0x94) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 5m59.779527985s ago: executing program 5 (id=23050): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000a80)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@nojournal_checksum}]}, 0x3, 0x44f, &(0x7f0000000ec0)="$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") r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d3000000f1000000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="051300210400000099000000b7"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x200}, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r5, &(0x7f0000000040)=""/191, 0xe4) getdents(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x4, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x7, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r7, 0x4, &(0x7f0000000380)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x2, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f00000003c0)="cdfb44da59cebf6964de4e66b7a7e5f8f168a828884464c2ae102103c06df84c1e72e7ce05d1bb97ba1d3aa95ad210cef3b2a4c5c7652e7f4a4272708a5a73afc6636849023fecca98876e32d4556887bfc87105aafbae90c0c5078c0f81df81cb9075c154d3ab300f27d55fe9babc63a2610fd674b0f4d640046d309095be33ebf7", 0x82, 0x6, 0x0, 0x3}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x400, r0, &(0x7f0000000800)="9b4053a4b9d9b02292382003d49312bbbf8876f9de33473062148e7a8a87d62da8c57afc9eba1046615636f284e9ad18d9fdae6e9290a2328a4dbd74c37483180ad47248e05ae6ce2ec27f6ca5b74d82dccda36a8fc04cf44dc25148bd1399e698c9ee7e41a4da6998ebe31f1300000000000000096e257482435d14b377cd253d39ab098702ebcff44bbc8a80f84628d9445ebd6fb3b5fc548bf82eae4a80891c581975fd55966d238c3c272a471193309850a0fb5d583800f17b979ee1fd0f5237aab0ec1cd9d616421e6c413cf10bad5f2a8de1f749f7cf14850cd242f2d06047860e9b9a099441e6985b9c4eb13c22966467c9a366", 0xf7, 0xe44}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0xf800, r3, &(0x7f0000000580)="e2f2162324ec6a2c207e5c136512c32014919913723234a67040044d068d4acb35a949e672661433205083338720b29a60473afec4b415f55aa3e18e", 0x3c, 0x2, 0x0, 0x2, r0}]) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100000420640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x5, &(0x7f0000000740)=[{0xfffc, 0x3, 0x80, 0x30cd}, {0x8, 0xb, 0x6f, 0xfffffff8}, {0x7fff, 0x7, 0x3, 0x6}, {0x200, 0x5, 0x91, 0x9}, {0x5, 0x19, 0x3, 0xc3f}]}) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000800000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000078000000060a010400000000000000000100000008000b400000000050000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000002c00018008000100636d70002000028008000140000000010c00038006000100efbb000008000240000000000900010073797a30"], 0xec}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000) 5m59.538820778s ago: executing program 5 (id=23052): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x401, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x5, 0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="05d936277c", 0x5, 0x40891, &(0x7f0000000180)={0x11, 0x11, 0x0, 0x1, 0x4, 0x6, @random="040067f8c765"}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010004b0400000000fbdbdf257a000000", @ANYRES32=0x0, @ANYBLOB="0100000000489e3fd20012800b00010062726964676500000c000280050016000f000000"], 0x3c}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x979, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x200318, 0x149}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000006a0000000079104800000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @sk_msg}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) 5m59.314398609s ago: executing program 5 (id=23054): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 5m59.254143385s ago: executing program 39 (id=23054): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) 4m10.441881635s ago: executing program 2 (id=24872): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 4m10.349926273s ago: executing program 2 (id=24874): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000d000000cc00020006"], 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, r2, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r0}, 0x38) r3 = msgget$private(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f00000001c0)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@numtail}, {@numtail}, {@numtail}, {@fat=@discard}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'utf8'}}]}, 0x1, 0x36c, &(0x7f0000000480)="$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") msgsnd(r3, &(0x7f0000000280)=ANY=[], 0x8, 0x0) msgrcv(r3, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x0, 0x4e20, 0x8000, 0x0, 0xb0, 0x0, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x120, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10000000002c8, 0x8, 0x4000000000000}, {0x80, 0x8, 0x0, 0x1}, {0xfffffffd, 0xe7}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}}, 0xf0}, 0x1, 0x0, 0x0, 0x4075}, 0x4880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f0000000640), &(0x7f0000001740), 0x2, r0}, 0x38) 4m10.097142677s ago: executing program 8 (id=24876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x6fb2, &(0x7f0000000300)={0x0, 0xf36e, 0x10100, 0x0, 0x34b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/45, 0x2d}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0x3, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r11, 0xc004743e, 0x110e22fff6) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r12, 0x4004743d, 0x110e22fff6) close(0x3) write$UHID_CREATE2(r10, &(0x7f0000000680)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xdf, 0x3, 0x2, 0xd, 0x7, 0x9, "cb092849b34b614c4dc4cc3b97f04ebf9732cee88e8d9fd4d3828d89e943320231a7d7415fa26cf92c6efb5c349870b5eff3546dde00fcceb602d1ef9b66181baec2a520069f3599aecf19f0710183788127125e94544d0b56b6d8c52636aaccddad145a71d7c949c312d16e2ace14b411af28811e7130875bbf292fe71be05ee6ce1a9b10c499ba70dfabc6738dfb5bfb9553cfaf018bb272a53f9da39c8154f66875cebfcef180ef0d8afdc4a0ece799a79fd0188b01c8d7ab50fa226ad3feb6912a1541a63901b56d81eb2b7bd7a02242a36e1d8cc5a0d021143f70d82f"}}, 0x1f7) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000640)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7472616e733d72646d612c080000003d3078303030303030303030303030303030302c74694cf7ff7027d508b93030342c72713d3078303030303030303030303030303000002c72713d3078303030303030303030303030303030332c00"/107]) 4m10.036545403s ago: executing program 8 (id=24878): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="008a000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095236dfd5651eb469de96679e648658e068334993395c369d275eecb807e75a1c440b8b12187f68d50e15119c7dec6666c36527b13bd838d1442d1fee1f4bc6f5f9293b8ee8c8c4411b933f6a9cb8413a61aca13163f3bdb940d2508f82b239acd441142c7d0b5ce068d1f38f456cb4105cba04549ae562b55136b2e4ab87bc871e9c81c10b7fc8b484f5e9ee5c00eb435b87fe9eb5de7ac849dac1136a521aee03f25"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xdd) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r9 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) (async) getsockopt$inet6_buf(r9, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x9, 0x0, 0x8, 0x7ffc0002}]}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000029252c7569649caeac8486b8d40bc70a5ed413ff07b7445156df21edde6a10007f1d9bf18d"]) (async) mount$nfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000029252c7569649caeac8486b8d40bc70a5ed413ff07b7445156df21edde6a10007f1d9bf18d"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0xffffffffffffffff}, 0x18) 4m9.798865435s ago: executing program 8 (id=24879): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, 0x40128, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x80a, 0x9, 0x400001, 0x0, 0x4, 0x0, 0xbd0d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) write$selinux_load(0xffffffffffffffff, 0x0, 0xfd44) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x0, 0x1000, 0xa04, &(0x7f0000ffd000/0x1000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xe000200f}) wait4(0x0, 0x0, 0x40000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r3, &(0x7f0000000040)=[{}], 0x1, 0x1) r4 = syz_io_uring_setup(0x5e2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000240)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x43, 0x0, 0x4100) 4m9.702661565s ago: executing program 2 (id=24884): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9, '\x00', r2, r1, 0x4, 0x5, 0x4}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) tgkill(0x0, 0x0, 0x21) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80020000, 0x2, 0x0, 0x40040000}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20016}, 0x400c009) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 4m9.407910392s ago: executing program 8 (id=24889): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x9, '\x00', r2, r1, 0x4, 0x5, 0x4}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80020000, 0x2, 0x0, 0x40040000}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20016}, 0x400c009) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") 4m9.250038287s ago: executing program 8 (id=24897): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 4m9.089910262s ago: executing program 8 (id=24898): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 4m9.089474502s ago: executing program 40 (id=24898): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@filter={'filter\x00', 0x4, 0x4, 0x3c0, 0xffffffff, 0x0, 0x118, 0x118, 0xfeffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0xd}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [0xffffffff, 0xff, 0xffffff00, 0xff000000], 0x4e24, 0x4e24, 0x4e21, 0x4e24, 0x1d, 0x8, 0x0, 0x1, 0x5}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) 4m8.857440294s ago: executing program 2 (id=24904): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) r2 = syz_io_uring_setup(0xa71, &(0x7f0000000380)={0x0, 0xb2e7, 0x200, 0x0, 0x1e8}, &(0x7f0000001500)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0xd3fd, 0xeffd, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r7, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xb0c4, 0x400, 0x2, 0x5a}, &(0x7f0000000000)=0x0, &(0x7f0000000500)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x2b93, 0xf9d0, 0x19, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300020b00000000000000feffffff010008000000000003ba0e5c273a32ea47000000ffffffff000000000000000002000100000004d5000008ff0000000003000500000000000200"/88], 0x58}, 0x1, 0x7}, 0x4000080) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x5e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25df5bfd, {}, [@NHA_OIF={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}]}, 0x28}}, 0x0) 4m8.731072467s ago: executing program 2 (id=24907): openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0x7, 0x0, 0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 4m8.623103246s ago: executing program 2 (id=24912): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x3}) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000300)={[0x51]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137"], 0x0}, 0x94) 3m54.075096571s ago: executing program 41 (id=24912): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c000000fbbfffff01"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x3}) (async) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)=@usbdevfs_connect={0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) (async) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) (async) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r5, 0x100}], 0x1, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000300)={[0x51]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 2m41.31880707s ago: executing program 4 (id=25942): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000e600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r3, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r2, 0x7) 2m40.378274389s ago: executing program 4 (id=25951): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000f5ffffff8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x2a}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x50) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0xc, 0x0, "081be3af50e11f0e27dffa2ad94716cda765753d21d8c4372741f816021b661b6995bcd6e428952dfbf4b7042586bc697330174378eb7becec86e45204974a0913f9ee5cf7e6c47dc7e822780034b324"}, 0xd8) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, 0x0, 0x0) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000003c0)=0xf) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x30000, 0x0) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) 2m39.350417296s ago: executing program 4 (id=25955): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x24040084) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xfe, 0x2, &(0x7f0000000480)="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", &(0x7f00000001c0)=""/2, 0x5eb, 0x0, 0xe3, 0xb8, &(0x7f00000007c0)="8cfadea8c69a322cbfcd5058fe34f61de070a49121523e63590f0ef93caab351cb8fce3ebe47f555525d59c3ef51ae0d78506be7f3a02484771465567501e92d46dc9fcd2d035fea501408c6974a439f35d31289c6f57ca88d01380d23d6e0be72d3bbf32daa91125ea4a7a821f5bd077c8788123f4271af16722b55be36364c0d6664019bced83aff5a94611915c183a1b017ecfe497b390d4ad5b88669fcd358b7d1d7a359832a62e1267925621b282b7ef51ab269111f07f33e3b72911bcb6f6ba2b9d754b3fa15d1ebca134a4061b5f410d574f763871166896f040be97ccb7b79", &(0x7f0000000240)="ca74ea845c098fb780ae27eb017f3a5071e184b061fb7917cfe9674ef2a6318acaa0aed2801af776ad65a949548a19d6256aedbe5aafbb3e53f8f8870bbb257c6a127413e37d94c3d9b44a7cc8d3db1c21ff0731d0b380b64da853188331bc3ed2693418f2f3d890da2a0adc2c9ddfb2e0f8b13e7fcfd169ee2c643243b884a82a6a651883c705c00775415adb62bb43bd7a475853e8f281552f43b4ea13b13a11330e4a3b752e64a7792b42148a361cdf44884a86bbbc5c", 0x4, 0x0, 0x1}, 0x50) ioprio_get$uid(0x3, 0x0) 2m39.159206994s ago: executing program 4 (id=25959): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = eventfd2(0x9, 0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000440)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) io_destroy(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) setgroups(0x0, 0x0) io_pgetevents(r2, 0x4, 0xc, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={[0xce44]}, 0x8}) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204bc2f, 0x0, 0x1, 0x0, &(0x7f0000000240)) r7 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000000000008500000023000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000004440), 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x6, 0x50, &(0x7f0000000b40)="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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) io_uring_enter(r7, 0x339b, 0x8556, 0x2, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) unlink(&(0x7f00000000c0)='./file0\x00') 2m38.66628885s ago: executing program 4 (id=25967): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r2) 2m38.415959105s ago: executing program 4 (id=25968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000e600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r2, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r1, 0x7) 2m38.341987921s ago: executing program 42 (id=25968): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000e600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r2, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r1, 0x7) 3.293228769s ago: executing program 7 (id=28116): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 2.977052379s ago: executing program 7 (id=28118): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_to_bond\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x401]}}]}}]}, 0x8c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x10, 0x819e, 0xfffffffb, {{0xf, 0x4, 0x1, 0x7, 0x3c, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @end, @noop, @generic={0x83, 0x11, "17a20eac0e365c613163863c4b4371"}, @timestamp={0x44, 0x10, 0xe7, 0x0, 0x9, [0x924f, 0x9, 0x5]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@dev, @broadcast}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x4, 0x3, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8000, 0x0, 0xe000000}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000005c0)={@initdev, @multicast2, 0x0}, &(0x7f0000000600)=0xc) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40091}, 0x1) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000004c0)={r12, 0x3, 0x6}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r12, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x700, 0xf800, 0x43, 0xe, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x68, 0x0, 0x40, 0x29, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x2c, 0x31, 0x1, 0x1, [{@loopback, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6}, {@loopback, 0x9}]}, @ssrr={0x89, 0x2b, 0x37, [@private=0xa010100, @empty, @dev={0xac, 0x14, 0x14, 0x23}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @multicast1, @private=0xa010100]}, @noop, @lsrr={0x83, 0x1f, 0xd7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x3b}]}, @generic={0x44, 0xb, "0f60de8039c8b679f4"}, @rr={0x7, 0x17, 0xa0, [@local, @multicast1, @private=0xa010102, @loopback, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000980)={&(0x7f0000000ec0)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x48001}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r14 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r14, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x7, 0x9, 0x6d05, 0x6}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), 0xffffffffffffffff) 2.64471297s ago: executing program 7 (id=28125): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000fc0)=ANY=[], 0xe) 2.43274829s ago: executing program 7 (id=28129): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r2, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r1, 0x7) 2.151159887s ago: executing program 7 (id=28132): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='io_uring_submit_sqe\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1.667786392s ago: executing program 3 (id=28140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2006000, &(0x7f00000001c0), 0x0, 0x53d, &(0x7f0000000b80)="$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") setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.519572236s ago: executing program 0 (id=28141): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.519101486s ago: executing program 3 (id=28142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000e60085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) read(r3, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r2, 0x7) 1.518871806s ago: executing program 9 (id=28143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setrlimit(0x40000000000008, &(0x7f0000000100)={0x3, 0x9}) 1.511834267s ago: executing program 9 (id=28144): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) 1.504976538s ago: executing program 7 (id=28145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x5, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x5, 0x58b, 0x85a, 0x3ff, 0x9, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0xb, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0xa, 0x8, 0x100, 0xc0000000, 0x8006, 0x6, 0x6, 0x12a, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x1, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x2007, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0xec2, 0x6, 0x8, 0x1, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x30, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x40006, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0x13, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0x1, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x200101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x5, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x80000002, 0x0, 0x4e8, 0x1, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xffffffec, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x6, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dca, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x1, 0x5, 0x1, 0xdbec, {0x8, 0x1, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x8, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r6, 0x400454ce, 0xee01) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r11, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r12, 0x0, 0x1}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f00000000c0)) eventfd2(0x9, 0x0) io_pgetevents(r13, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) 1.428631915s ago: executing program 0 (id=28146): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000fc0)=ANY=[], 0xe) 1.290262908s ago: executing program 9 (id=28148): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x65, {0x65, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7fff, 0x0) 1.289409608s ago: executing program 0 (id=28149): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180)={[{@auto_da_alloc_val}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @void, @mpls={[], @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x9, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x1}]}}, @info_request={0xf, 0x0, 0x0, 0x8b5, 0x2}}}}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xf}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098c1}, 0x40040c0) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f00000010c0)="c7a848", 0x3, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)=@known='user.incfs.metadata\x00', 0x0, 0x2) 1.015209294s ago: executing program 6 (id=28151): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x0, 0x0, 0x0) 995.945476ms ago: executing program 3 (id=28152): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 987.655677ms ago: executing program 6 (id=28153): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0xffffffffffffffff}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 978.380257ms ago: executing program 3 (id=28154): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 918.644023ms ago: executing program 3 (id=28155): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='io_uring_submit_sqe\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 841.99918ms ago: executing program 6 (id=28156): socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250002f500072020207b3bd1ff00ffe9021e04a1000000bfa10000000000000701174487f92cf9095bddb4bd067442470000b70300"/86], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) 818.479623ms ago: executing program 6 (id=28157): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x1, &(0x7f0000000940)={{0x77359400}}, &(0x7f0000000980)) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xb8, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0xb8}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) syz_mount_image$ext4(&(0x7f0000000880)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200044a, &(0x7f00000003c0), 0xfc, 0x526, &(0x7f0000001580)="$eJzs3U9vI2cZAPBnJvEm2U1JChxKpZaKFmUrWDtpaBtxaBcJcasEKvdtlDhRFCeOYqdsoh5S8QGQEIJeOXFB4gMgoX4EVKkSvSNAIARbOHAABo09pqk7zh9tbO8mv5809sw7M+/zvLv2+J0/mQng2nouIu5GxEREvBgRc0V5Wgxx3B3y5T5+8M5aPuRz3vxbEklRFhHzvfrysludVWZOjds6PNpebTTq+8V0rb2zV2sdHt3Z2lndrG/Wd5eXl15ZeXXl5ZXFS2ln3q7Xvv2nn/7oF9957Tdf/8Hv7/3l9uTJ+UU7ziO9SNyPOq+VmD5Rlgfev0glj7CJoj2VcScCAMC55J3Zz0fEVzr9/7mYiP93i/u7dNOjzw4AAAC4DNnrs/HvJCIDAAAArqzXI2I2krRaXAswG2larXav4f1i3EwbzVb7axvNg931fF7EfFTSja1GfbG4pnY+Kkk+vVRcBNybfqlvejkinoyIn8zNdKara83G+rgPfgAAAMA1catv//+fc939fwAAAOCKmR93AgAAAMDQDdr/T0acBwAAADA8g/b/p0acBwAAADAU333jjXzIpqP7/Ov1tw8Ptptv31mvt7arOwdr1bXm/l51s9nc7Nyzb+es+hrN5t43Yvfgfq1dv5vUWodH93aaB7vte1ueHwgAAADj8uSX3/8oiYjjb850htyN9bciJgas4F4BcGWkF1n4j8PLAxi9QT/zwNU3Oe4EgPE5HncCwLh96lYfJZ2CkxfvpN2F7ToAAMBjZuFLJef/i12AyriTA4bqQuf/gSvFQTy4vi54/v+DYeUBjF7lkx6AS4HgmjrrUR8Db97x25KyG2ULZtmZdQEAAEM123lN0mpxLnA20rRajXii86f+lWRjq1FfjIjPRcTv5ipT+fRSdx2PBwQAAAAAAAAAAAAAAAAAAAAAAACAc8qyJDIAAADgSotI/5wUz/9amHthtv/4wI3kX3PRfaRX7/mA7f2lvPzvvfJov/fmz+6vttv7L4366AUAAABQpref3nlfGnc2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFw1Hz94Z60Ybowy7l+/FRHzn4q/1p0zGdOd9+moRMTNfyQxeWK9JCImLiH+8bsR8VRZ/CRPK+aLLPrjpxExM5r4z2RZVhr/1iXEh+vs/Xz7c7fs+5fGc5338u//ZDE8rN72b6okfm/7NzFg+/fEZ6tLymI8/eGvagPjvxvx9GT59qcXPxkQ//myCkv+Ud76/tHRZwq7lUf284iFKI9/MlatvbNXax0e3dnaWd2sb9Z3l5eXXll5deXllcXaxlajXryWtvHHz/z6v31F/8m6Ou2PAfHnz2j/C/lI5URh1h+mCPbh/Qdf6I5W+qroxL/9fPnn76lT4uefia8WvwP5/IXe+HF3/KRnf/nBs6WJFfHXB7T/rP//24Mq7fPi9374h3MuCgCMQOvwaHu10ajvD33kvSzLHqaem6NL9VqO9Hp3pywz9VAhph+Vlj6OI1MRMbqgl3FkCwAAeNR80ukfdyYAAAAAAAAAAAAAAAAAAABwfbUOIx327cT6Yx6Pp6kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKf6XwAAAP//2O/TLw==") r4 = socket(0x1e, 0x4, 0x0) getsockname$tipc(r4, &(0x7f0000000080)=@id, &(0x7f0000000740)=0x10) unshare(0x2a020400) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r6}, 0x18) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x34020000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 742.791739ms ago: executing program 9 (id=28158): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008084) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0x43, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000fcffffff000000000000000018010000756c6c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x60, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000f60004f90c0100050080000000000000000f0000000000000000008ebc33bc4c50d4ee1e3a4884e825f4ce0b4d2a467d5456ca3ca2963e03db81b0f0b14e0ce4a758a897b8edd29ffca23da1f0a6f099655f9f1b50"], 0x58) 733.620331ms ago: executing program 0 (id=28159): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) 726.754301ms ago: executing program 9 (id=28160): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lstat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x321004e, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_io_uring_setup(0x4b9, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000005c0)}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) syz_io_uring_setup(0x760a, &(0x7f00000007c0)={0x0, 0x1f36, 0x400, 0x3, 0x220, 0x0, r3}, &(0x7f0000010080), &(0x7f0000000180)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) 726.067461ms ago: executing program 6 (id=28161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x25b5, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xd5b5, 0x5, 0x1, {0x22, 0xefb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0x9, 0xee}}}}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 640.53817ms ago: executing program 3 (id=28162): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) (fail_nth: 2) 533.15014ms ago: executing program 0 (id=28163): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x0, 0x0, 0x0) 495.576763ms ago: executing program 9 (id=28164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000800000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setrlimit(0x40000000000008, &(0x7f0000000100)={0x3, 0x9}) 418.178691ms ago: executing program 0 (id=28165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000e600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000040)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @broadcast}}) r9 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200003000000000000001400110076657468305f6d616376746170000000080002"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) read(r3, &(0x7f0000000100)=""/140, 0xde) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000005c0)={0x197, @time={0x1, 0x2}, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000240)={0x151a, 0x0, 0x5, 0x3, 0x4, 0xb}) tkill(r2, 0x7) 0s ago: executing program 6 (id=28166): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x401}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000080)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xedcc, 0x200, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0xfffffffffffffffd) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) msync(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa06b085fa506047d20800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14e0a8cc6b678d4ca3960b75a78b55587fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf26"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@quota}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x81) kernel console output (not intermixed with test programs): s busy [ 1808.826961][T20521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1808.837976][T20531] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1808.864248][T20521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.27492'. [ 1808.888344][T20531] EXT4-fs (loop7): mount failed [ 1808.898316][T20521] tipc: Enabling of bearer rejected, failed to enable media [ 1808.952997][T20531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1809.004304][T26720] hid-generic 0000:0000:0000.00D0: unknown main item tag 0x0 [ 1809.012289][T26720] hid-generic 0000:0000:0000.00D0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1809.021982][T20538] SELinux: ebitmap start bit (16777215) is not a multiple of the map unit size (64) [ 1809.052220][T20538] SELinux: failed to load policy [ 1809.058618][T12880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.336599][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 1809.336616][ T29] audit: type=1400 audit(2066.935:176232): avc: denied { getopt } for pid=20560 comm="syz.6.27500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1809.472151][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1809.522541][ T29] audit: type=1326 audit(2067.134:176233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.624505][ T29] audit: type=1326 audit(2067.166:176234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.648638][ T29] audit: type=1326 audit(2067.166:176235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.672763][ T29] audit: type=1326 audit(2067.166:176236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.696050][ T29] audit: type=1326 audit(2067.166:176237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.720083][ T29] audit: type=1326 audit(2067.166:176238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.743397][ T29] audit: type=1326 audit(2067.166:176239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.766816][ T29] audit: type=1326 audit(2067.166:176240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc7099f749 code=0x7ffc0000 [ 1809.790882][ T29] audit: type=1326 audit(2067.166:176241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20570 comm="syz.3.27502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc7099df90 code=0x7ffc0000 [ 1810.186280][T20568] netlink: 'syz.6.27503': attribute type 7 has an invalid length. [ 1810.326308][ T1039] hid-generic 0000:0000:0000.00D1: unknown main item tag 0x0 [ 1810.335702][ T1039] hid-generic 0000:0000:0000.00D1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1810.516857][ T1039] hid-generic 0000:3000000:0000.00D2: unknown main item tag 0x4 [ 1810.524753][ T1039] hid-generic 0000:3000000:0000.00D2: unknown main item tag 0x2 [ 1810.548732][T20598] tipc: Enabling of bearer rejected, failed to enable media [ 1810.562422][ T1039] hid-generic 0000:3000000:0000.00D2: unknown main item tag 0x3 [ 1810.586893][T20600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=20600 comm=syz.0.27511 [ 1810.605538][ T1039] hid-generic 0000:3000000:0000.00D2: hidraw0: HID v0.00 Device [sy] on syz0 [ 1810.834274][T20617] __nla_validate_parse: 10 callbacks suppressed [ 1810.834288][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27516'. [ 1810.895088][T20627] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27520'. [ 1810.965539][T26720] hid-generic 0000:0000:0000.00D3: unknown main item tag 0x0 [ 1810.975340][T26720] hid-generic 0000:0000:0000.00D3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1811.031763][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27522'. [ 1811.193554][T20650] xt_hashlimit: max too large, truncated to 1048576 [ 1811.206794][T20650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1811.441216][T20668] netlink: 'syz.3.27528': attribute type 10 has an invalid length. [ 1811.468493][T20668] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1811.730634][T20681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27537'. [ 1811.742189][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27536'. [ 1811.875725][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27538'. [ 1812.071336][T20696] set_capacity_and_notify: 8 callbacks suppressed [ 1812.071351][T20696] loop3: detected capacity change from 0 to 512 [ 1812.111860][T20694] lo speed is unknown, defaulting to 1000 [ 1812.129539][T20696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1812.139078][T20694] wg1 speed is unknown, defaulting to 1000 [ 1812.165722][T20696] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.27542: bad orphan inode 131083 [ 1812.186854][T20696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1812.207629][T20696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.236136][T20696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.267889][T20697] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27541'. [ 1812.272415][T20696] netlink: 14 bytes leftover after parsing attributes in process `syz.3.27542'. [ 1812.293193][T20694] lo speed is unknown, defaulting to 1000 [ 1812.343687][T20696] netlink: 43 bytes leftover after parsing attributes in process `syz.3.27542'. [ 1812.358026][T20702] netlink: 48 bytes leftover after parsing attributes in process `syz.9.27543'. [ 1812.376057][T20696] tipc: Enabling of bearer rejected, failed to enable media [ 1813.190120][T20739] loop7: detected capacity change from 0 to 512 [ 1813.234248][T20739] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1813.248798][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.258694][T20739] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1813.279730][T20739] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.27555: corrupted inode contents [ 1813.292492][T20739] EXT4-fs (loop7): Remounting filesystem read-only [ 1813.300122][T20739] EXT4-fs (loop7): 1 truncate cleaned up [ 1813.477475][ T2861] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1813.488144][ T2861] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1813.498947][ T2861] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 1813.519598][T20739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1813.631899][T20755] loop3: detected capacity change from 0 to 512 [ 1813.652480][T20755] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1813.660563][T20755] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1813.668714][T20755] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.27561: corrupted inode contents [ 1813.673018][T20760] netlink: 'syz.0.27562': attribute type 39 has an invalid length. [ 1813.688859][T20755] EXT4-fs (loop3): Remounting filesystem read-only [ 1813.695685][T20755] EXT4-fs (loop3): 1 truncate cleaned up [ 1813.701576][T26775] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1813.712160][T26775] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1813.722815][T26775] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 1813.735939][T20755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1813.769665][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1813.796419][T20766] netem: change failed [ 1813.921684][T12880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1814.015860][T20778] loop7: detected capacity change from 0 to 512 [ 1814.034422][T20778] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1814.050282][T20778] EXT4-fs (loop7): mount failed [ 1814.165580][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 1814.165636][ T29] audit: type=1400 audit(2072.006:176643): avc: denied { create } for pid=20774 comm="syz.7.27565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1814.194831][ T29] audit: type=1400 audit(2072.037:176644): avc: denied { connect } for pid=20774 comm="syz.7.27565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1814.814132][ T29] audit: type=1326 audit(2072.699:176645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.857650][ T29] audit: type=1326 audit(2072.720:176646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.881054][ T29] audit: type=1326 audit(2072.720:176647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.904531][ T29] audit: type=1326 audit(2072.720:176648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.927781][ T29] audit: type=1326 audit(2072.720:176649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.951067][ T29] audit: type=1326 audit(2072.720:176650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.974373][ T29] audit: type=1326 audit(2072.720:176651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1814.997648][ T29] audit: type=1326 audit(2072.720:176652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20791 comm="syz.0.27573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1815.064666][T20803] netem: change failed [ 1815.099787][T20796] lo speed is unknown, defaulting to 1000 [ 1815.113772][T20796] wg1 speed is unknown, defaulting to 1000 [ 1815.114046][T20809] xt_hashlimit: max too large, truncated to 1048576 [ 1815.130250][T20809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1815.222061][T20796] lo speed is unknown, defaulting to 1000 [ 1815.302091][T20819] netlink: 'syz.3.27580': attribute type 10 has an invalid length. [ 1815.482020][T20826] loop3: detected capacity change from 0 to 1024 [ 1815.488825][T20826] EXT4-fs: Ignoring removed oldalloc option [ 1815.494901][T20826] EXT4-fs: test_dummy_encryption option not supported [ 1815.714405][T20836] __nla_validate_parse: 9 callbacks suppressed [ 1815.714419][T20836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27587'. [ 1815.730931][T20836] netem: change failed [ 1815.865340][T20839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27588'. [ 1816.264303][T20850] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27591'. [ 1816.274219][T20850] netem: change failed [ 1816.296422][T20850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27591'. [ 1816.367554][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27592'. [ 1816.420997][T20856] loop3: detected capacity change from 0 to 512 [ 1816.474840][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27595'. [ 1816.509519][T20856] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1816.517596][T20856] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1816.567557][T20856] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.27593: corrupted inode contents [ 1816.612667][T20856] EXT4-fs (loop3): Remounting filesystem read-only [ 1816.633468][T20856] EXT4-fs (loop3): 1 truncate cleaned up [ 1816.639899][T26187] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1816.651218][T26187] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1816.662131][T26187] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 1816.662147][T20862] lo speed is unknown, defaulting to 1000 [ 1816.663668][T20862] wg1 speed is unknown, defaulting to 1000 [ 1816.684639][T20856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1816.726291][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1816.754351][T20887] loop7: detected capacity change from 0 to 128 [ 1816.760090][T20862] lo speed is unknown, defaulting to 1000 [ 1816.866459][T20887] bio_check_eod: 52 callbacks suppressed [ 1816.866478][T20887] syz.7.27598: attempt to access beyond end of device [ 1816.866478][T20887] loop7: rw=2049, sector=185, nr_sectors = 384 limit=128 [ 1816.919941][T20887] syz.7.27598: attempt to access beyond end of device [ 1816.919941][T20887] loop7: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 1816.925631][T20862] chnl_net:caif_netlink_parms(): no params data found [ 1816.956155][T20887] syz.7.27598: attempt to access beyond end of device [ 1816.956155][T20887] loop7: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 1816.970668][T20887] syz.7.27598: attempt to access beyond end of device [ 1816.970668][T20887] loop7: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 1816.987410][T20887] syz.7.27598: attempt to access beyond end of device [ 1816.987410][T20887] loop7: rw=2049, sector=625, nr_sectors = 8 limit=128 [ 1817.004013][T20887] syz.7.27598: attempt to access beyond end of device [ 1817.004013][T20887] loop7: rw=2049, sector=641, nr_sectors = 8 limit=128 [ 1817.026504][T20887] syz.7.27598: attempt to access beyond end of device [ 1817.026504][T20887] loop7: rw=2049, sector=657, nr_sectors = 8 limit=128 [ 1817.047115][T20887] syz.7.27598: attempt to access beyond end of device [ 1817.047115][T20887] loop7: rw=2049, sector=673, nr_sectors = 8 limit=128 [ 1817.060223][T20893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27599'. [ 1817.061478][T20887] syz.7.27598: attempt to access beyond end of device [ 1817.061478][T20887] loop7: rw=2049, sector=689, nr_sectors = 8 limit=128 [ 1817.081251][T20893] netlink: 'syz.3.27599': attribute type 1 has an invalid length. [ 1817.083775][T20887] syz.7.27598: attempt to access beyond end of device [ 1817.083775][T20887] loop7: rw=2049, sector=705, nr_sectors = 8 limit=128 [ 1817.091233][T20893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27599'. [ 1817.111072][T20862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.121621][T20862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.129283][T20862] bridge_slave_0: entered allmulticast mode [ 1817.136069][T20862] bridge_slave_0: entered promiscuous mode [ 1817.143345][T20862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.150461][T20862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.157735][T20862] bridge_slave_1: entered allmulticast mode [ 1817.164350][T20862] bridge_slave_1: entered promiscuous mode [ 1817.186265][T20862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.197246][T20862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.221927][T20862] team0: Port device team_slave_0 added [ 1817.234252][T20862] team0: Port device team_slave_1 added [ 1817.275661][T20862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1817.282698][T20862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.308749][T20862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1817.347498][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27597'. [ 1817.366716][T20862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1817.373703][T20862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1817.399739][T20862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1817.484325][T20904] lo speed is unknown, defaulting to 1000 [ 1817.511409][T20862] hsr_slave_0: entered promiscuous mode [ 1817.517719][T20862] hsr_slave_1: entered promiscuous mode [ 1817.527650][T20862] debugfs: 'hsr0' already exists in 'hsr' [ 1817.533562][T20862] Cannot create hsr debugfs directory [ 1817.539263][T20904] wg1 speed is unknown, defaulting to 1000 [ 1817.615748][T20904] lo speed is unknown, defaulting to 1000 [ 1817.673126][T20907] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27601'. [ 1817.759313][T20862] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.809477][T20862] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.887835][T20862] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1817.901935][T20939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1817.912537][T20939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.011967][T20939] tipc: Enabling of bearer rejected, failed to enable media [ 1818.046356][T20862] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.172145][T20862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1818.382261][T20862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1818.414796][T20862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1818.449849][T20862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1818.559697][T20862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.569800][T20954] lo speed is unknown, defaulting to 1000 [ 1818.594220][T20954] wg1 speed is unknown, defaulting to 1000 [ 1818.599273][T20862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.613701][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.620847][ T5729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.662412][T26187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.669522][T26187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.702687][T20954] lo speed is unknown, defaulting to 1000 [ 1818.876788][T20862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.102914][T20862] veth0_vlan: entered promiscuous mode [ 1819.122077][T20862] veth1_vlan: entered promiscuous mode [ 1819.194025][T20862] veth0_macvtap: entered promiscuous mode [ 1819.242155][T20862] veth1_macvtap: entered promiscuous mode [ 1819.296999][T20862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.342799][T20862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.357479][T26187] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.372764][T20997] hub 2-0:1.0: USB hub found [ 1819.378603][T20997] hub 2-0:1.0: 8 ports detected [ 1819.389299][ T5720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.408707][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 1819.408723][ T29] audit: type=1400 audit(2077.518:176789): avc: denied { mounton } for pid=20862 comm="syz-executor" path="/root/syzkaller.o5cRvx/syz-tmp" dev="sda1" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1819.434896][ T5720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.439291][ T29] audit: type=1400 audit(2077.518:176790): avc: denied { mount } for pid=20862 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1819.469714][ T29] audit: type=1400 audit(2077.518:176791): avc: denied { mount } for pid=20862 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1819.502428][ T5720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.539752][T20997] vhci_hcd vhci_hcd.0: default hub control req: 0011 v0002 i0004 l4096 [ 1819.597141][T20994] lo speed is unknown, defaulting to 1000 [ 1819.620144][ T29] audit: type=1400 audit(2077.612:176792): avc: denied { mounton } for pid=20862 comm="syz-executor" path="/root/syzkaller.o5cRvx/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1819.637373][T20994] wg1 speed is unknown, defaulting to 1000 [ 1819.646822][ T29] audit: type=1400 audit(2077.623:176793): avc: denied { mounton } for pid=20862 comm="syz-executor" path="/root/syzkaller.o5cRvx/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=329456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1819.646865][ T29] audit: type=1400 audit(2077.623:176794): avc: denied { mounton } for pid=20862 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1819.646967][ T29] audit: type=1400 audit(2077.623:176795): avc: denied { mount } for pid=20862 comm="syz-executor" name="/" dev="gadgetfs" ino=3841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1819.647061][ T29] audit: type=1400 audit(2077.654:176796): avc: denied { mount } for pid=20996 comm="syz.7.27622" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1819.647093][ T29] audit: type=1400 audit(2077.686:176797): avc: denied { write } for pid=20862 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1819.647142][ T29] audit: type=1400 audit(2077.686:176798): avc: denied { open } for pid=20862 comm="syz-executor" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1819.846372][T21010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.856804][T21010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.864787][T21016] loop6: detected capacity change from 0 to 128 [ 1819.881173][T21010] tipc: Enabling of bearer rejected, failed to enable media [ 1819.934491][T21023] loop7: detected capacity change from 0 to 512 [ 1819.952644][T20994] lo speed is unknown, defaulting to 1000 [ 1819.964251][T21023] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1819.993488][T21023] EXT4-fs (loop7): mount failed [ 1820.036871][T21023] loop7: detected capacity change from 0 to 1024 [ 1820.064624][T21023] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1820.167549][T12880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1820.658053][T21072] __nla_validate_parse: 12 callbacks suppressed [ 1820.658153][T21072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27641'. [ 1820.806203][T21075] lo speed is unknown, defaulting to 1000 [ 1820.813448][T21075] wg1 speed is unknown, defaulting to 1000 [ 1820.877688][T21075] lo speed is unknown, defaulting to 1000 [ 1820.946501][T21080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.27643'. [ 1820.962782][T21080] netlink: 48 bytes leftover after parsing attributes in process `syz.6.27643'. [ 1821.195467][T21075] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27642'. [ 1821.359152][T21098] loop6: detected capacity change from 0 to 512 [ 1821.655290][T21103] lo speed is unknown, defaulting to 1000 [ 1821.661867][T21103] wg1 speed is unknown, defaulting to 1000 [ 1821.713030][T21130] loop7: detected capacity change from 0 to 512 [ 1821.791227][T21103] lo speed is unknown, defaulting to 1000 [ 1821.839800][T21136] FAULT_INJECTION: forcing a failure. [ 1821.839800][T21136] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.852562][T21136] CPU: 0 UID: 0 PID: 21136 Comm: syz.7.27666 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1821.852612][T21136] Tainted: [W]=WARN [ 1821.852638][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1821.852655][T21136] Call Trace: [ 1821.852663][T21136] [ 1821.852670][T21136] __dump_stack+0x1d/0x30 [ 1821.852694][T21136] dump_stack_lvl+0x95/0xd0 [ 1821.852716][T21136] dump_stack+0x15/0x1b [ 1821.852742][T21136] should_fail_ex+0x265/0x280 [ 1821.852787][T21136] should_failslab+0x8c/0xb0 [ 1821.852815][T21136] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 1821.852879][T21136] ? __get_vm_area_node+0x106/0x1d0 [ 1821.852913][T21136] __get_vm_area_node+0x106/0x1d0 [ 1821.852939][T21136] __vmalloc_node_range_noprof+0x28e/0x1310 [ 1821.852991][T21136] ? xt_copy_counters+0x1dc/0x2d0 [ 1821.853049][T21136] ? cred_has_capability+0x210/0x280 [ 1821.853090][T21136] ? xt_copy_counters+0x1dc/0x2d0 [ 1821.853214][T21136] vmalloc_noprof+0x82/0xc0 [ 1821.853240][T21136] ? xt_copy_counters+0x1dc/0x2d0 [ 1821.853273][T21136] xt_copy_counters+0x1dc/0x2d0 [ 1821.853312][T21136] ? security_capable+0x83/0x90 [ 1821.853534][T21136] do_ipt_set_ctl+0xb3/0x820 [ 1821.853555][T21136] ? _raw_spin_unlock_bh+0x36/0x40 [ 1821.853661][T21136] ? tcp_release_cb+0xf1/0x370 [ 1821.853698][T21136] ? sockopt_release_sock+0x42/0x50 [ 1821.853732][T21136] nf_setsockopt+0x199/0x1b0 [ 1821.853756][T21136] ip_setsockopt+0x102/0x110 [ 1821.853847][T21136] tcp_setsockopt+0x98/0xb0 [ 1821.853887][T21136] sock_common_setsockopt+0x69/0x80 [ 1821.853914][T21136] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1821.853938][T21136] __sys_setsockopt+0x184/0x200 [ 1821.853968][T21136] __x64_sys_setsockopt+0x64/0x80 [ 1821.854038][T21136] x64_sys_call+0x21d5/0x3000 [ 1821.854071][T21136] do_syscall_64+0xca/0x2b0 [ 1821.854172][T21136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.854197][T21136] RIP: 0033:0x7f20b26ff749 [ 1821.854211][T21136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1821.854229][T21136] RSP: 002b:00007f20b1167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1821.854285][T21136] RAX: ffffffffffffffda RBX: 00007f20b2955fa0 RCX: 00007f20b26ff749 [ 1821.854302][T21136] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1821.854318][T21136] RBP: 00007f20b1167090 R08: 0000000000000048 R09: 0000000000000000 [ 1821.854333][T21136] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 1821.854345][T21136] R13: 00007f20b2956038 R14: 00007f20b2955fa0 R15: 00007fff476bd2d8 [ 1821.854368][T21136] [ 1821.854376][T21136] syz.7.27666: vmalloc error: size 32, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 1822.124631][T21136] CPU: 0 UID: 0 PID: 21136 Comm: syz.7.27666 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1822.124669][T21136] Tainted: [W]=WARN [ 1822.124676][T21136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1822.124689][T21136] Call Trace: [ 1822.124696][T21136] [ 1822.124704][T21136] __dump_stack+0x1d/0x30 [ 1822.124794][T21136] dump_stack_lvl+0x95/0xd0 [ 1822.124821][T21136] dump_stack+0x15/0x1b [ 1822.124854][T21136] warn_alloc+0x12b/0x1a0 [ 1822.124896][T21136] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 1822.124931][T21136] ? cred_has_capability+0x210/0x280 [ 1822.124968][T21136] ? xt_copy_counters+0x1dc/0x2d0 [ 1822.125010][T21136] vmalloc_noprof+0x82/0xc0 [ 1822.125045][T21136] ? xt_copy_counters+0x1dc/0x2d0 [ 1822.125132][T21136] xt_copy_counters+0x1dc/0x2d0 [ 1822.125188][T21136] ? security_capable+0x83/0x90 [ 1822.125231][T21136] do_ipt_set_ctl+0xb3/0x820 [ 1822.125252][T21136] ? _raw_spin_unlock_bh+0x36/0x40 [ 1822.125305][T21136] ? tcp_release_cb+0xf1/0x370 [ 1822.125344][T21136] ? sockopt_release_sock+0x42/0x50 [ 1822.125392][T21136] nf_setsockopt+0x199/0x1b0 [ 1822.125471][T21136] ip_setsockopt+0x102/0x110 [ 1822.125513][T21136] tcp_setsockopt+0x98/0xb0 [ 1822.125549][T21136] sock_common_setsockopt+0x69/0x80 [ 1822.125569][T21136] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1822.125660][T21136] __sys_setsockopt+0x184/0x200 [ 1822.125693][T21136] __x64_sys_setsockopt+0x64/0x80 [ 1822.125729][T21136] x64_sys_call+0x21d5/0x3000 [ 1822.125762][T21136] do_syscall_64+0xca/0x2b0 [ 1822.125813][T21136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1822.125837][T21136] RIP: 0033:0x7f20b26ff749 [ 1822.125853][T21136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.125949][T21136] RSP: 002b:00007f20b1167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1822.125968][T21136] RAX: ffffffffffffffda RBX: 00007f20b2955fa0 RCX: 00007f20b26ff749 [ 1822.125980][T21136] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1822.125992][T21136] RBP: 00007f20b1167090 R08: 0000000000000048 R09: 0000000000000000 [ 1822.126004][T21136] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 1822.126019][T21136] R13: 00007f20b2956038 R14: 00007f20b2955fa0 R15: 00007fff476bd2d8 [ 1822.126069][T21136] [ 1822.126078][T21136] Mem-Info: [ 1822.359266][T21136] active_anon:15336 inactive_anon:1 isolated_anon:0 [ 1822.359266][T21136] active_file:19182 inactive_file:10116 isolated_file:0 [ 1822.359266][T21136] unevictable:16394 dirty:346 writeback:29 [ 1822.359266][T21136] slab_reclaimable:4972 slab_unreclaimable:144301 [ 1822.359266][T21136] mapped:35824 shmem:11152 pagetables:1431 [ 1822.359266][T21136] sec_pagetables:0 bounce:0 [ 1822.359266][T21136] kernel_misc_reclaimable:0 [ 1822.359266][T21136] free:1669228 free_pcp:22116 free_cma:0 [ 1822.405199][T21136] Node 0 active_anon:61344kB inactive_anon:4kB active_file:76728kB inactive_file:40464kB unevictable:65576kB isolated(anon):0kB isolated(file):0kB mapped:143296kB dirty:1384kB writeback:116kB shmem:44608kB kernel_stack:6448kB pagetables:5724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1822.433185][T21136] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1822.462845][T21136] lowmem_reserve[]: 0 2880 7859 7859 [ 1822.468182][T21136] Node 0 DMA32 free:2731724kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:4804kB local_pcp:1416kB free_cma:0kB [ 1822.499858][T21136] lowmem_reserve[]: 0 0 4978 4978 [ 1822.504933][T21136] Node 0 Normal free:3929828kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61344kB inactive_anon:4kB active_file:76728kB inactive_file:40464kB unevictable:65576kB writepending:1500kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:83660kB local_pcp:70960kB free_cma:0kB [ 1822.538494][T21136] lowmem_reserve[]: 0 0 0 0 [ 1822.543058][T21136] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1822.555842][T21136] Node 0 DMA32: 5*4kB (UM) 3*8kB (UM) 4*16kB (UM) 7*32kB (UM) 4*64kB (UM) 5*128kB (UM) 6*256kB (UM) 4*512kB (UM) 5*1024kB (UM) 5*2048kB (UM) 662*4096kB (UM) = 2731724kB [ 1822.572936][T21136] Node 0 Normal: 29*4kB (UME) 5071*8kB (UME) 2172*16kB (UME) 2580*32kB (UME) 2866*64kB (UME) 1954*128kB (UME) 1490*256kB (UM) 1151*512kB (UM) 962*1024kB (UME) 663*2048kB (UM) 6*4096kB (U) = 3929772kB [ 1822.592934][T21136] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1822.602271][T21136] 56809 total pagecache pages [ 1822.606973][T21136] 24 pages in swap cache [ 1822.611269][T21136] Free swap = 59512kB [ 1822.615408][T21136] Total swap = 124996kB [ 1822.619575][T21136] 2097051 pages RAM [ 1822.623452][T21136] 0 pages HighMem/MovableOnly [ 1822.628152][T21136] 81271 pages reserved [ 1822.733179][T21103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27653'. [ 1822.832566][T21154] netlink: 'syz.9.27672': attribute type 39 has an invalid length. [ 1822.856772][T21151] loop6: detected capacity change from 0 to 128 [ 1822.953798][T21151] bio_check_eod: 110 callbacks suppressed [ 1822.953818][T21151] syz.6.27671: attempt to access beyond end of device [ 1822.953818][T21151] loop6: rw=2049, sector=185, nr_sectors = 384 limit=128 [ 1823.030269][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.030269][T21151] loop6: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 1823.060682][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.060682][T21151] loop6: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 1823.080151][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.080151][T21151] loop6: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 1823.099289][T21171] loop9: detected capacity change from 0 to 512 [ 1823.113121][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.113121][T21151] loop6: rw=2049, sector=625, nr_sectors = 8 limit=128 [ 1823.133050][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.133050][T21151] loop6: rw=2049, sector=641, nr_sectors = 8 limit=128 [ 1823.147415][T21175] loop3: detected capacity change from 0 to 512 [ 1823.155562][T21171] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1823.174775][T21171] EXT4-fs (loop9): mount failed [ 1823.179887][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.179887][T21151] loop6: rw=2049, sector=657, nr_sectors = 8 limit=128 [ 1823.211025][T21177] FAULT_INJECTION: forcing a failure. [ 1823.211025][T21177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.224146][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.224146][T21151] loop6: rw=2049, sector=673, nr_sectors = 8 limit=128 [ 1823.224210][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.224210][T21151] loop6: rw=2049, sector=689, nr_sectors = 8 limit=128 [ 1823.224284][T21151] syz.6.27671: attempt to access beyond end of device [ 1823.224284][T21151] loop6: rw=2049, sector=705, nr_sectors = 8 limit=128 [ 1823.266742][T21177] CPU: 1 UID: 0 PID: 21177 Comm: syz.0.27681 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1823.266791][T21177] Tainted: [W]=WARN [ 1823.266798][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1823.266811][T21177] Call Trace: [ 1823.266817][T21177] [ 1823.266825][T21177] __dump_stack+0x1d/0x30 [ 1823.266854][T21177] dump_stack_lvl+0x95/0xd0 [ 1823.267001][T21177] dump_stack+0x15/0x1b [ 1823.267022][T21177] should_fail_ex+0x265/0x280 [ 1823.267115][T21177] should_fail+0xb/0x20 [ 1823.267140][T21177] should_fail_usercopy+0x1a/0x20 [ 1823.267168][T21177] _copy_from_user+0x1c/0xb0 [ 1823.267237][T21177] ___bpf_copy_key+0xaa/0x120 [ 1823.267265][T21177] map_update_elem+0x169/0x440 [ 1823.267288][T21177] __sys_bpf+0x57b/0x7c0 [ 1823.267317][T21177] __x64_sys_bpf+0x41/0x50 [ 1823.267398][T21177] x64_sys_call+0x28e1/0x3000 [ 1823.267526][T21177] do_syscall_64+0xca/0x2b0 [ 1823.267658][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1823.267686][T21177] RIP: 0033:0x7effdb86f749 [ 1823.267706][T21177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1823.267729][T21177] RSP: 002b:00007effda2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1823.267818][T21177] RAX: ffffffffffffffda RBX: 00007effdbac5fa0 RCX: 00007effdb86f749 [ 1823.267833][T21177] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 1823.267850][T21177] RBP: 00007effda2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.267865][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.267880][T21177] R13: 00007effdbac6038 R14: 00007effdbac5fa0 R15: 00007fff906b25e8 [ 1823.267907][T21177] [ 1823.464901][T21151] netlink: 64 bytes leftover after parsing attributes in process `syz.6.27671'. [ 1823.474194][T21151] netlink: 36 bytes leftover after parsing attributes in process `syz.6.27671'. [ 1823.593579][T21193] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1823.783425][T21207] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27690'. [ 1824.122990][T21203] lo speed is unknown, defaulting to 1000 [ 1824.224844][T21203] wg1 speed is unknown, defaulting to 1000 [ 1824.512554][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 1824.512571][ T29] audit: type=1326 audit(2082.872:177363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.540051][T21203] lo speed is unknown, defaulting to 1000 [ 1824.544651][ T29] audit: type=1326 audit(2082.872:177364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.623200][ T29] audit: type=1326 audit(2082.935:177365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.647326][ T29] audit: type=1326 audit(2082.935:177366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.670640][ T29] audit: type=1326 audit(2082.935:177367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.694981][ T29] audit: type=1326 audit(2082.935:177368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.718623][ T29] audit: type=1326 audit(2082.935:177369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.742704][ T29] audit: type=1326 audit(2082.946:177370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.765997][ T29] audit: type=1326 audit(2082.946:177371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.790234][ T29] audit: type=1326 audit(2082.946:177372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21221 comm="syz.9.27694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1824.811029][T21226] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27689'. [ 1824.887818][T21228] loop7: detected capacity change from 0 to 512 [ 1824.921289][T21228] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1824.938977][T21228] EXT4-fs (loop7): mount failed [ 1824.987128][T21228] loop7: detected capacity change from 0 to 1024 [ 1825.019795][T21228] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1825.044411][T26720] hid-generic 0000:0000:0000.00D4: unknown main item tag 0x0 [ 1825.053001][T26720] hid-generic 0000:0000:0000.00D4: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1825.097184][T12880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.202212][T21239] lo speed is unknown, defaulting to 1000 [ 1825.219033][T21239] wg1 speed is unknown, defaulting to 1000 [ 1825.323649][T21239] lo speed is unknown, defaulting to 1000 [ 1825.472421][T21251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.27703'. [ 1826.089630][T21239] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27698'. [ 1826.178415][T21269] netlink: 'syz.3.27707': attribute type 30 has an invalid length. [ 1826.198852][T21270] netlink: 'syz.0.27708': attribute type 32 has an invalid length. [ 1826.219067][T21269] netlink: 'syz.3.27707': attribute type 30 has an invalid length. [ 1826.277916][T21275] netlink: 'syz.7.27710': attribute type 4 has an invalid length. [ 1826.285972][T21275] netlink: 152 bytes leftover after parsing attributes in process `syz.7.27710'. [ 1826.313902][T21275] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1826.383361][T21286] netlink: 184 bytes leftover after parsing attributes in process `syz.0.27711'. [ 1826.389648][T21284] xt_hashlimit: max too large, truncated to 1048576 [ 1826.422514][T21284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1826.474527][T21284] netlink: 'syz.6.27713': attribute type 10 has an invalid length. [ 1826.517049][T21284] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1826.572950][T21291] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27716'. [ 1826.692888][T21296] tipc: Enabling of bearer rejected, failed to enable media [ 1826.786979][T21306] xt_hashlimit: max too large, truncated to 1048576 [ 1826.804656][T21306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1826.822502][T21306] netlink: 'syz.9.27719': attribute type 10 has an invalid length. [ 1826.835699][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27720'. [ 1826.857664][T21306] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1826.913057][T21314] loop9: detected capacity change from 0 to 512 [ 1826.920706][T21314] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1826.952114][T21314] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.27721: bad orphan inode 131083 [ 1826.977137][T21314] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1827.008828][T21314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.018579][T21314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1827.030144][T21314] netlink: 14 bytes leftover after parsing attributes in process `syz.9.27721'. [ 1827.129884][T21314] netlink: 43 bytes leftover after parsing attributes in process `syz.9.27721'. [ 1827.148457][T21314] tipc: Enabling of bearer rejected, failed to enable media [ 1827.690291][T21329] loop3: detected capacity change from 0 to 2048 [ 1827.743001][T15855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1827.816598][T21329] loop3: p2 < > p4 [ 1827.826412][T21331] loop6: detected capacity change from 0 to 8192 [ 1827.849850][T21329] loop3: p4 size 262144 extends beyond EOD, truncated [ 1827.950853][T21333] lo speed is unknown, defaulting to 1000 [ 1827.967596][T21333] wg1 speed is unknown, defaulting to 1000 [ 1828.088239][T21333] lo speed is unknown, defaulting to 1000 [ 1828.152222][T21335] lo speed is unknown, defaulting to 1000 [ 1828.186054][T21335] wg1 speed is unknown, defaulting to 1000 [ 1828.388644][T21335] lo speed is unknown, defaulting to 1000 [ 1828.440078][T21337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27727'. [ 1828.480322][T21333] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27726'. [ 1828.516185][T21347] loop3: detected capacity change from 0 to 512 [ 1828.534862][T21347] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1828.567331][T21347] EXT4-fs (loop3): mount failed [ 1828.627545][T21347] loop3: detected capacity change from 0 to 1024 [ 1828.679680][T21347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1828.739487][ T36] hid-generic 0000:0000:0000.00D5: unknown main item tag 0x0 [ 1828.748517][ T36] hid-generic 0000:0000:0000.00D5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1828.798903][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.929682][T21359] lo speed is unknown, defaulting to 1000 [ 1828.948890][T21359] wg1 speed is unknown, defaulting to 1000 [ 1829.115616][T21359] lo speed is unknown, defaulting to 1000 [ 1829.609932][T21391] loop3: detected capacity change from 0 to 128 [ 1829.740839][T21391] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1829.775344][T21395] loop9: detected capacity change from 0 to 128 [ 1829.915282][T13529] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1829.941979][T21395] bio_check_eod: 50 callbacks suppressed [ 1829.941994][T21395] syz.9.27743: attempt to access beyond end of device [ 1829.941994][T21395] loop9: rw=2049, sector=185, nr_sectors = 384 limit=128 [ 1829.970419][T21395] syz.9.27743: attempt to access beyond end of device [ 1829.970419][T21395] loop9: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 1829.984045][T21395] syz.9.27743: attempt to access beyond end of device [ 1829.984045][T21395] loop9: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 1830.057400][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.057400][T21395] loop9: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 1830.071562][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.071562][T21395] loop9: rw=2049, sector=625, nr_sectors = 8 limit=128 [ 1830.085854][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.085854][T21395] loop9: rw=2049, sector=641, nr_sectors = 8 limit=128 [ 1830.099896][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.099896][T21395] loop9: rw=2049, sector=657, nr_sectors = 8 limit=128 [ 1830.117410][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.117410][T21395] loop9: rw=2049, sector=673, nr_sectors = 8 limit=128 [ 1830.133334][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.133334][T21395] loop9: rw=2049, sector=689, nr_sectors = 8 limit=128 [ 1830.147114][T21395] syz.9.27743: attempt to access beyond end of device [ 1830.147114][T21395] loop9: rw=2049, sector=705, nr_sectors = 8 limit=128 [ 1830.290162][T21418] __nla_validate_parse: 6 callbacks suppressed [ 1830.290181][T21418] netlink: 16 bytes leftover after parsing attributes in process `syz.9.27749'. [ 1830.361695][T21409] lo speed is unknown, defaulting to 1000 [ 1830.385543][T21409] wg1 speed is unknown, defaulting to 1000 [ 1830.484062][T21422] loop3: detected capacity change from 0 to 8192 [ 1830.507725][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27753'. [ 1830.536445][T21409] lo speed is unknown, defaulting to 1000 [ 1830.930648][T21440] netlink: 'syz.0.27757': attribute type 10 has an invalid length. [ 1830.939871][T21440] dummy0: left promiscuous mode [ 1830.957301][T21440] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1831.255351][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27759'. [ 1831.296482][T21444] ip6gre1: entered allmulticast mode [ 1831.345092][T21448] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27756'. [ 1831.965165][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.27761'. [ 1832.260007][T21462] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27764'. [ 1832.300783][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 1832.300798][ T29] audit: type=1400 audit(2090.999:177604): avc: denied { read } for pid=21461 comm="syz.7.27764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1832.326188][ T29] audit: type=1400 audit(2091.009:177605): avc: denied { getopt } for pid=21461 comm="syz.7.27764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1832.388719][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.27767'. [ 1832.427294][T21470] syzkaller0: entered promiscuous mode [ 1832.432804][T21470] syzkaller0: entered allmulticast mode [ 1832.444152][T21473] loop6: detected capacity change from 0 to 2048 [ 1832.465320][T21470] 0: reclassify loop, rule prio 0, protocol 800 [ 1832.475444][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.9.27766'. [ 1832.495027][T21473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1832.520379][T21482] netlink: 20 bytes leftover after parsing attributes in process `syz.7.27767'. [ 1832.529498][T21482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1832.536750][T21482] IPv6: NLM_F_CREATE should be set when creating new route [ 1832.634991][ T29] audit: type=1326 audit(2091.408:177606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.7.27771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1832.661624][T21486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27769'. [ 1832.701089][ T29] audit: type=1326 audit(2091.408:177607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.7.27771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1832.725155][ T29] audit: type=1326 audit(2091.408:177608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.7.27771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1832.749166][ T29] audit: type=1326 audit(2091.408:177609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.7.27771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1832.772529][ T29] audit: type=1326 audit(2091.408:177610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1832.795667][ T29] audit: type=1326 audit(2091.408:177611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b26fdf90 code=0x7ffc0000 [ 1832.818948][ T29] audit: type=1326 audit(2091.408:177612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20b26fdf90 code=0x7ffc0000 [ 1832.841430][ T29] audit: type=1326 audit(2091.408:177613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm=FF exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1833.074272][T21504] netlink: 'syz.7.27778': attribute type 1 has an invalid length. [ 1833.097216][T21506] FAULT_INJECTION: forcing a failure. [ 1833.097216][T21506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.110431][T21506] CPU: 0 UID: 0 PID: 21506 Comm: syz.9.27777 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1833.110464][T21506] Tainted: [W]=WARN [ 1833.110473][T21506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1833.110490][T21506] Call Trace: [ 1833.110535][T21506] [ 1833.110545][T21506] __dump_stack+0x1d/0x30 [ 1833.110577][T21506] dump_stack_lvl+0x95/0xd0 [ 1833.110607][T21506] dump_stack+0x15/0x1b [ 1833.110632][T21506] should_fail_ex+0x265/0x280 [ 1833.110661][T21506] should_fail+0xb/0x20 [ 1833.110738][T21506] should_fail_usercopy+0x1a/0x20 [ 1833.110836][T21506] _copy_from_user+0x1c/0xb0 [ 1833.110873][T21506] ___sys_sendmsg+0xc1/0x1d0 [ 1833.110940][T21506] __x64_sys_sendmsg+0xd4/0x160 [ 1833.111008][T21506] x64_sys_call+0x17ba/0x3000 [ 1833.111033][T21506] do_syscall_64+0xca/0x2b0 [ 1833.111123][T21506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.111148][T21506] RIP: 0033:0x7f5147aaf749 [ 1833.111167][T21506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1833.111192][T21506] RSP: 002b:00007f514650f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1833.111227][T21506] RAX: ffffffffffffffda RBX: 00007f5147d05fa0 RCX: 00007f5147aaf749 [ 1833.111245][T21506] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1833.111260][T21506] RBP: 00007f514650f090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.111272][T21506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1833.111310][T21506] R13: 00007f5147d06038 R14: 00007f5147d05fa0 R15: 00007ffd50a069e8 [ 1833.111338][T21506] [ 1833.339796][T21515] loop3: detected capacity change from 0 to 512 [ 1833.347097][T21515] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1833.407497][T21515] EXT4-fs (loop3): invalid journal inode [ 1833.422153][T21515] EXT4-fs (loop3): can't get journal size [ 1833.440538][T21515] EXT4-fs (loop3): 1 truncate cleaned up [ 1833.453896][T21515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1833.473032][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.496547][T21515] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1833.652246][T21525] loop6: detected capacity change from 0 to 8192 [ 1833.721879][T21525] loop6: p1 < > p3 p4 < > [ 1833.727310][T21525] loop6: p3 size 33554432 extends beyond EOD, truncated [ 1833.908532][T21527] loop3: detected capacity change from 0 to 512 [ 1833.927576][T21527] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 1834.046669][ T3488] hid-generic 0000:0000:0000.00D6: unknown main item tag 0x0 [ 1834.073222][ T3488] hid-generic 0000:0000:0000.00D6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1834.391855][T21556] lo speed is unknown, defaulting to 1000 [ 1834.398707][T21563] loop7: detected capacity change from 0 to 8192 [ 1834.409152][T21556] wg1 speed is unknown, defaulting to 1000 [ 1834.437159][T21563] loop7: p1 < > p3 p4 < > [ 1834.442397][T21563] loop7: p3 size 33554432 extends beyond EOD, truncated [ 1834.450354][T21565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.469043][T21565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.503999][T21565] tipc: Enabling of bearer rejected, failed to enable media [ 1834.512582][T21556] lo speed is unknown, defaulting to 1000 [ 1835.549452][T21588] loop7: detected capacity change from 0 to 512 [ 1835.596610][T21588] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1835.627362][T21588] EXT4-fs (loop7): mount failed [ 1835.721118][T21603] xt_hashlimit: max too large, truncated to 1048576 [ 1835.743842][T21603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1835.768132][T21603] netlink: 'syz.6.27810': attribute type 10 has an invalid length. [ 1835.808919][T21610] __nla_validate_parse: 8 callbacks suppressed [ 1835.808939][T21610] netlink: 172 bytes leftover after parsing attributes in process `syz.9.27811'. [ 1835.926526][T21618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27815'. [ 1836.104558][T21633] IPVS: set_ctl: invalid protocol: 38 224.0.0.2:20000 [ 1836.227061][T21641] loop3: detected capacity change from 0 to 128 [ 1836.235401][T21641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1836.322504][T21646] loop6: detected capacity change from 0 to 512 [ 1836.332723][T13529] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1836.342800][T21646] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1836.377928][T21646] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.27824: bad orphan inode 131083 [ 1836.426883][T21646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1836.526660][T21664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27831'. [ 1836.542086][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.570109][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.598615][T21646] netlink: 14 bytes leftover after parsing attributes in process `syz.6.27824'. [ 1836.610412][T21646] netlink: 43 bytes leftover after parsing attributes in process `syz.6.27824'. [ 1836.619542][T21646] tipc: Started in network mode [ 1836.624440][T21646] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1836.631724][T21646] tipc: Enabled bearer , priority 10 [ 1836.640569][T21646] ªªªªªª: renamed from vlan0 (while UP) [ 1836.648115][T21646] tipc: Disabling bearer [ 1836.685744][T21670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.694671][T21670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.707436][T21670] netlink: 14 bytes leftover after parsing attributes in process `syz.0.27833'. [ 1836.719137][T21670] netlink: 43 bytes leftover after parsing attributes in process `syz.0.27833'. [ 1836.728379][T21670] tipc: Enabling of bearer rejected, failed to enable media [ 1836.761652][T21674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.770498][T21674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.782050][T21674] loop3: detected capacity change from 0 to 256 [ 1836.788775][T21674] msdos: Unknown parameter 'dont_hash' [ 1836.956727][T21678] loop7: detected capacity change from 0 to 128 [ 1836.966263][T21678] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1836.990783][T12880] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1837.023918][T21687] FAULT_INJECTION: forcing a failure. [ 1837.023918][T21687] name failslab, interval 1, probability 0, space 0, times 0 [ 1837.036790][T21687] CPU: 1 UID: 0 PID: 21687 Comm: syz.7.27837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1837.036819][T21687] Tainted: [W]=WARN [ 1837.036825][T21687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1837.036837][T21687] Call Trace: [ 1837.036879][T21687] [ 1837.036886][T21687] __dump_stack+0x1d/0x30 [ 1837.036911][T21687] dump_stack_lvl+0x95/0xd0 [ 1837.036930][T21687] dump_stack+0x15/0x1b [ 1837.036948][T21687] should_fail_ex+0x265/0x280 [ 1837.036969][T21687] should_failslab+0x8c/0xb0 [ 1837.037132][T21687] __kmalloc_cache_noprof+0x65/0x4c0 [ 1837.037154][T21687] ? netdevice_event+0x2ae/0x610 [ 1837.037173][T21687] ? __pfx_netdevice_event+0x10/0x10 [ 1837.037191][T21687] netdevice_event+0x2ae/0x610 [ 1837.037285][T21687] ? __pfx_del_netdev_ips+0x10/0x10 [ 1837.037302][T21687] ? __pfx_pass_all_filter+0x10/0x10 [ 1837.037318][T21687] ? nh_netdev_event+0x104/0x3b0 [ 1837.037342][T21687] ? __pfx_netdevice_event+0x10/0x10 [ 1837.037387][T21687] raw_notifier_call_chain+0x6f/0x1b0 [ 1837.037525][T21687] ? unregister_netdevice_many_notify+0xe8c/0x16d0 [ 1837.037555][T21687] unregister_netdevice_many_notify+0xea0/0x16d0 [ 1837.037589][T21687] unregister_netdevice_queue+0x1b8/0x1e0 [ 1837.037673][T21687] __tun_detach+0x82c/0xb30 [ 1837.037775][T21687] ? __pfx_tun_chr_close+0x10/0x10 [ 1837.037795][T21687] tun_chr_close+0x5a/0x100 [ 1837.037814][T21687] __fput+0x29b/0x650 [ 1837.037841][T21687] fput_close_sync+0xad/0x190 [ 1837.037931][T21687] __x64_sys_close+0x56/0xf0 [ 1837.037958][T21687] x64_sys_call+0x2c25/0x3000 [ 1837.037980][T21687] do_syscall_64+0xca/0x2b0 [ 1837.038059][T21687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1837.038078][T21687] RIP: 0033:0x7f20b26ff749 [ 1837.038091][T21687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1837.038135][T21687] RSP: 002b:00007f20b1167038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1837.038153][T21687] RAX: ffffffffffffffda RBX: 00007f20b2955fa0 RCX: 00007f20b26ff749 [ 1837.038164][T21687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1837.038240][T21687] RBP: 00007f20b1167090 R08: 0000000000000000 R09: 0000000000000000 [ 1837.038257][T21687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1837.038268][T21687] R13: 00007f20b2956038 R14: 00007f20b2955fa0 R15: 00007fff476bd2d8 [ 1837.038286][T21687] [ 1837.307220][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.357989][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 1837.358060][ T29] audit: type=1326 audit(2096.353:177925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.393963][ T29] audit: type=1326 audit(2096.395:177926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.417419][ T29] audit: type=1326 audit(2096.395:177927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.440713][ T29] audit: type=1326 audit(2096.395:177928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.464155][ T29] audit: type=1326 audit(2096.395:177929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.487506][ T29] audit: type=1326 audit(2096.395:177930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.510857][ T29] audit: type=1326 audit(2096.395:177931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.517558][T21699] loop6: detected capacity change from 0 to 512 [ 1837.534458][ T29] audit: type=1326 audit(2096.395:177932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.563935][ T29] audit: type=1326 audit(2096.395:177933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.587251][ T29] audit: type=1326 audit(2096.395:177934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.7.27842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f20b26ff749 code=0x7ffc0000 [ 1837.668456][T21701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27841'. [ 1837.679080][T21699] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1837.694352][T21699] EXT4-fs (loop6): mount failed [ 1837.752622][T21699] loop6: detected capacity change from 0 to 1024 [ 1837.770793][T21699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1837.798731][T17926] hid-generic 0000:0000:0000.00D7: unknown main item tag 0x0 [ 1837.806715][T17926] hid-generic 0000:0000:0000.00D7: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1837.934738][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1838.296157][T21731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27850'. [ 1838.305636][T21731] netem: change failed [ 1838.311609][T21731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27850'. [ 1838.393148][T21733] xt_hashlimit: max too large, truncated to 1048576 [ 1838.401483][T21733] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1838.418735][T21733] netlink: 'syz.0.27851': attribute type 10 has an invalid length. [ 1838.561884][T21741] loop7: detected capacity change from 0 to 512 [ 1838.580038][T21741] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1838.595367][T21741] EXT4-fs (loop7): mount failed [ 1838.602569][T17926] hid-generic 0000:0000:0000.00D8: unknown main item tag 0x0 [ 1838.610775][T17926] hid-generic 0000:0000:0000.00D8: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1838.623837][T21741] loop7: detected capacity change from 0 to 1024 [ 1838.640889][T21741] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1838.661820][T17926] hid-generic 0000:0000:0000.00D9: unknown main item tag 0x0 [ 1838.669998][T17926] hid-generic 0000:0000:0000.00D9: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1838.693383][T12880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1839.207273][T21778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.216197][T21778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.243775][T21778] tipc: Enabling of bearer rejected, failed to enable media [ 1840.429122][T21817] loop6: detected capacity change from 0 to 2048 [ 1840.476497][T21817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1840.624770][T21817] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1840.723440][T21817] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 150 with error 28 [ 1840.736019][T21817] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1840.736019][T21817] [ 1840.745866][T21817] EXT4-fs (loop6): Total free blocks count 0 [ 1840.751921][T21817] EXT4-fs (loop6): Free/Dirty block details [ 1840.757843][T21817] EXT4-fs (loop6): free_blocks=2415919104 [ 1840.763652][T21817] EXT4-fs (loop6): dirty_blocks=160 [ 1840.768925][T21817] EXT4-fs (loop6): Block reservation details [ 1840.774959][T21817] EXT4-fs (loop6): i_reserved_data_blocks=10 [ 1840.812938][T21833] xt_hashlimit: max too large, truncated to 1048576 [ 1840.829780][T21833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1840.842135][T21833] netlink: 'syz.3.27884': attribute type 10 has an invalid length. [ 1840.951958][T21839] __nla_validate_parse: 9 callbacks suppressed [ 1840.951973][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27886'. [ 1840.984814][T26762] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 150 with error 28 [ 1841.125325][T21859] loop6: detected capacity change from 0 to 512 [ 1841.164574][T21861] loop6: detected capacity change from 0 to 512 [ 1841.187380][T21849] lo speed is unknown, defaulting to 1000 [ 1841.195086][T21861] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1841.205121][T21849] wg1 speed is unknown, defaulting to 1000 [ 1841.231493][T21861] EXT4-fs (loop6): mount failed [ 1841.271350][T21849] lo speed is unknown, defaulting to 1000 [ 1841.280835][T21861] loop6: detected capacity change from 0 to 1024 [ 1841.303869][T21861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1841.354684][T17926] hid-generic 0000:0000:0000.00DA: unknown main item tag 0x0 [ 1841.362831][T17926] hid-generic 0000:0000:0000.00DA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1841.385011][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1841.436537][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.27890'. [ 1841.647491][T21877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.664586][T21877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.678265][T21877] loop9: detected capacity change from 0 to 128 [ 1841.691337][T21877] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1841.709218][T21877] netlink: 14 bytes leftover after parsing attributes in process `syz.9.27900'. [ 1841.744532][T21877] netlink: 43 bytes leftover after parsing attributes in process `syz.9.27900'. [ 1841.768168][T21877] tipc: Enabling of bearer rejected, failed to enable media [ 1841.822809][T21881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.27901'. [ 1841.884652][T21890] loop7: detected capacity change from 0 to 1024 [ 1841.901894][T21890] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1841.955058][T21895] loop6: detected capacity change from 0 to 1024 [ 1841.964269][T21895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1841.997399][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.021232][T21899] loop6: detected capacity change from 0 to 512 [ 1842.036553][T21899] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1842.051831][T21899] EXT4-fs (loop6): mount failed [ 1842.072905][T21899] loop6: detected capacity change from 0 to 1024 [ 1842.084406][T21899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1842.108819][T17926] hid-generic 0000:0000:0000.00DB: unknown main item tag 0x0 [ 1842.116736][T17926] hid-generic 0000:0000:0000.00DB: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1842.139241][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1842.215391][T21911] loop7: detected capacity change from 0 to 512 [ 1842.257934][T21907] lo speed is unknown, defaulting to 1000 [ 1842.264977][T21907] wg1 speed is unknown, defaulting to 1000 [ 1842.307247][T21907] lo speed is unknown, defaulting to 1000 [ 1842.326809][T15855] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1842.422550][T21921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27914'. [ 1842.486169][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 1842.486258][ T29] audit: type=1326 audit(2101.739:178336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.521716][T21937] netlink: 172 bytes leftover after parsing attributes in process `syz.7.27917'. [ 1842.543522][T21940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27919'. [ 1842.553216][ T29] audit: type=1326 audit(2101.781:178337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.576464][ T29] audit: type=1326 audit(2101.781:178338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.599820][ T29] audit: type=1326 audit(2101.781:178339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.623082][ T29] audit: type=1326 audit(2101.781:178340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.646356][ T29] audit: type=1326 audit(2101.781:178341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.669684][ T29] audit: type=1326 audit(2101.781:178342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.692939][ T29] audit: type=1326 audit(2101.781:178343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe06c1ef749 code=0x7ffc0000 [ 1842.716282][ T29] audit: type=1326 audit(2101.781:178344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe06c1ef783 code=0x7ffc0000 [ 1842.739376][ T29] audit: type=1326 audit(2101.781:178345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21934 comm="syz.6.27918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe06c1ee1ff code=0x7ffc0000 [ 1842.778260][T21935] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1842.824343][T21935] EXT4-fs (loop6): mount failed [ 1842.951590][T21935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1843.006803][T21956] loop3: p1 < > p3 p4 < > [ 1843.011901][T21956] loop3: p3 size 33554432 extends beyond EOD, truncated [ 1843.023330][T17926] hid-generic 0000:0000:0000.00DC: unknown main item tag 0x0 [ 1843.041539][T17926] hid-generic 0000:0000:0000.00DC: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1843.093789][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1843.266466][T21987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27930'. [ 1843.360019][T21983] bio_check_eod: 41 callbacks suppressed [ 1843.360040][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.360040][T21983] loop3: rw=2049, sector=185, nr_sectors = 384 limit=128 [ 1843.388102][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.388102][T21983] loop3: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 1843.401814][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.401814][T21983] loop3: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 1843.415500][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.415500][T21983] loop3: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 1843.429234][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.429234][T21983] loop3: rw=2049, sector=625, nr_sectors = 8 limit=128 [ 1843.442913][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.442913][T21983] loop3: rw=2049, sector=641, nr_sectors = 8 limit=128 [ 1843.457218][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.457218][T21983] loop3: rw=2049, sector=657, nr_sectors = 8 limit=128 [ 1843.471008][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.471008][T21983] loop3: rw=2049, sector=673, nr_sectors = 8 limit=128 [ 1843.484910][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.484910][T21983] loop3: rw=2049, sector=689, nr_sectors = 8 limit=128 [ 1843.499555][T21988] netlink: 64 bytes leftover after parsing attributes in process `syz.3.27933'. [ 1843.509143][T21983] syz.3.27933: attempt to access beyond end of device [ 1843.509143][T21983] loop3: rw=2049, sector=705, nr_sectors = 8 limit=128 [ 1843.704822][T21995] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1843.720470][T21995] EXT4-fs (loop3): mount failed [ 1843.796523][T26720] hid-generic 0000:0000:0000.00DD: unknown main item tag 0x0 [ 1843.805246][T26720] hid-generic 0000:0000:0000.00DD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1843.913945][T22009] loop7: p1 < > p3 p4 < > [ 1843.975157][T22009] loop7: p3 size 33554432 extends beyond EOD, truncated [ 1844.311221][T22028] 9p: Bad value for 'wfdno' [ 1844.333952][T22030] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1844.377225][T22030] EXT4-fs (loop7): mount failed [ 1844.408440][T22028] tmpfs: Unknown parameter 'epoh' [ 1844.484881][T22040] netem: change failed [ 1844.925585][T22066] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1844.943918][T22066] EXT4-fs (loop6): mount failed [ 1844.955127][T22070] xt_hashlimit: max too large, truncated to 1048576 [ 1844.967014][T22070] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1844.997582][T22070] netlink: 'syz.7.27959': attribute type 10 has an invalid length. [ 1845.030533][ T5731] Bluetooth: hci0: Frame reassembly failed (-84) [ 1845.271564][T22089] set_capacity_and_notify: 10 callbacks suppressed [ 1845.271584][T22089] loop3: detected capacity change from 0 to 128 [ 1845.452327][T22104] loop7: detected capacity change from 0 to 512 [ 1845.598899][T22118] syz_tun: entered promiscuous mode [ 1845.680061][T22124] netem: change failed [ 1845.727783][T22129] __nla_validate_parse: 19 callbacks suppressed [ 1845.727798][T22129] netlink: 28 bytes leftover after parsing attributes in process `syz.3.27979'. [ 1845.799567][T26720] hid-generic 0000:0000:0000.00DE: unknown main item tag 0x0 [ 1845.808321][T26720] hid-generic 0000:0000:0000.00DE: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1845.886507][T22145] loop7: detected capacity change from 0 to 512 [ 1845.902743][T22148] netlink: 'syz.0.27986': attribute type 39 has an invalid length. [ 1845.913560][T22145] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1845.962245][T22145] EXT4-fs (loop7): mount failed [ 1845.971988][T22156] vlan0: entered allmulticast mode [ 1845.977374][T22156] bridge_slave_0: entered allmulticast mode [ 1845.983629][T22156] bridge0: port 1(vlan0) entered blocking state [ 1845.989971][T22156] bridge0: port 1(vlan0) entered disabled state [ 1846.006322][T22156] vlan0: entered promiscuous mode [ 1846.011435][T22156] bridge_slave_0: entered promiscuous mode [ 1846.019042][T22155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.27989'. [ 1846.033915][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27990'. [ 1846.061926][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.27989'. [ 1846.225897][T22180] netlink: 7 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.246049][T22180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.255463][T22180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.296102][T22180] netlink: 7 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.326759][T22188] SELinux: policydb table sizes (0,41663) do not match mine (8,7) [ 1846.346203][T22188] SELinux: failed to load policy [ 1846.366366][T22180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.375521][T22180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.27996'. [ 1846.397677][T22188] FAULT_INJECTION: forcing a failure. [ 1846.397677][T22188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.411161][T22188] CPU: 0 UID: 0 PID: 22188 Comm: syz.3.27996 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1846.411196][T22188] Tainted: [W]=WARN [ 1846.411205][T22188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1846.411222][T22188] Call Trace: [ 1846.411229][T22188] [ 1846.411240][T22188] __dump_stack+0x1d/0x30 [ 1846.411334][T22188] dump_stack_lvl+0x95/0xd0 [ 1846.411363][T22188] dump_stack+0x15/0x1b [ 1846.411427][T22188] should_fail_ex+0x265/0x280 [ 1846.411452][T22188] should_fail+0xb/0x20 [ 1846.411478][T22188] should_fail_usercopy+0x1a/0x20 [ 1846.411524][T22188] _copy_from_user+0x1c/0xb0 [ 1846.411625][T22188] xsk_setsockopt+0x277/0x640 [ 1846.411663][T22188] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1846.411803][T22188] __sys_setsockopt+0x184/0x200 [ 1846.411832][T22188] __x64_sys_setsockopt+0x64/0x80 [ 1846.411859][T22188] x64_sys_call+0x21d5/0x3000 [ 1846.411890][T22188] do_syscall_64+0xca/0x2b0 [ 1846.411925][T22188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.411950][T22188] RIP: 0033:0x7efc7099f749 [ 1846.412029][T22188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.412116][T22188] RSP: 002b:00007efc6f3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1846.412143][T22188] RAX: ffffffffffffffda RBX: 00007efc70bf6090 RCX: 00007efc7099f749 [ 1846.412155][T22188] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d [ 1846.412168][T22188] RBP: 00007efc6f3e6090 R08: 0000000000000004 R09: 0000000000000000 [ 1846.412238][T22188] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1846.412255][T22188] R13: 00007efc70bf6128 R14: 00007efc70bf6090 R15: 00007ffcdfa8bff8 [ 1846.412278][T22188] [ 1846.434492][T22172] lo speed is unknown, defaulting to 1000 [ 1846.607215][T22172] wg1 speed is unknown, defaulting to 1000 [ 1846.658997][T22172] lo speed is unknown, defaulting to 1000 [ 1846.792143][T22172] chnl_net:caif_netlink_parms(): no params data found [ 1846.854482][T22211] SELinux: policydb table sizes (0,41663) do not match mine (8,7) [ 1846.869409][T22212] netlink: 'syz.3.28002': attribute type 1 has an invalid length. [ 1846.896188][T22212] bond1: entered promiscuous mode [ 1846.901341][T22212] bond1: entered allmulticast mode [ 1846.913440][T22211] SELinux: failed to load policy [ 1846.920850][T22212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1846.940240][T22989] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1846.997592][T22221] loop3: detected capacity change from 0 to 512 [ 1847.008503][T22172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.015825][T22172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.044007][T22172] bridge_slave_0: entered allmulticast mode [ 1847.051635][T22172] bridge_slave_0: entered promiscuous mode [ 1847.065650][T22172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.072767][T22172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.095967][T22172] bridge_slave_1: entered allmulticast mode [ 1847.112477][T22172] bridge_slave_1: entered promiscuous mode [ 1847.150942][T22172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1847.181979][T22172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1847.236808][T22172] team0: Port device team_slave_0 added [ 1847.241062][T22228] loop3: detected capacity change from 0 to 8192 [ 1847.253789][T22172] team0: Port device team_slave_1 added [ 1847.283467][T22228] loop3: p1 < > p3 p4 < > [ 1847.288665][T22228] loop3: p3 size 33554432 extends beyond EOD, truncated [ 1847.314991][T22172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.322070][T22172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.348784][T22172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.377612][T22172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.384651][T22172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.410639][T22172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.449428][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 1847.449451][ T29] audit: type=1400 audit(2106.958:178804): avc: denied { ioctl } for pid=22234 comm="syz.9.28009" path="socket:[332758]" dev="sockfs" ino=332758 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1847.461651][T22172] hsr_slave_0: entered promiscuous mode [ 1847.509284][T22172] hsr_slave_1: entered promiscuous mode [ 1847.531362][T22172] debugfs: 'hsr0' already exists in 'hsr' [ 1847.537140][T22172] Cannot create hsr debugfs directory [ 1847.542668][T22235] 8021q: VLANs not supported on gre0 [ 1847.780794][T22172] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.837443][T22172] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.904256][T22172] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.981678][T22172] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.051593][T22256] loop3: detected capacity change from 0 to 512 [ 1848.127367][T22172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1848.171315][T22172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1848.222683][T22172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1848.241360][T22172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1848.263668][T22259] netem: change failed [ 1848.395453][ T29] audit: type=1400 audit(2107.944:178805): avc: denied { read } for pid=22263 comm="syz.0.28017" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1848.467692][T22266] loop9: detected capacity change from 0 to 8192 [ 1848.614200][T22264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.639910][T22264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.662743][ T29] audit: type=1400 audit(2108.228:178806): avc: denied { connect } for pid=22263 comm="syz.0.28017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1848.771536][ T5720] .` (unregistering): (slave dummy0): Releasing backup interface [ 1848.788375][ T5720] .` (unregistering): Released all slaves [ 1848.899314][T22172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1848.911577][ T29] audit: type=1326 audit(2108.480:178807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1848.935115][ T29] audit: type=1326 audit(2108.480:178808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1848.958532][ T29] audit: type=1326 audit(2108.480:178809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1848.963194][T22172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1848.999608][T26771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.006728][T26771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1849.036066][ T5720] tipc: Left network mode [ 1849.069381][T26771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1849.076502][T26771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1849.159608][ T29] audit: type=1326 audit(2108.480:178810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1849.183003][ T29] audit: type=1326 audit(2108.490:178811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1849.206357][ T29] audit: type=1326 audit(2108.490:178812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22287 comm="syz.0.28022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effdb86f749 code=0x7ffc0000 [ 1849.229748][ T29] audit: type=1400 audit(2108.742:178813): avc: denied { connect } for pid=22294 comm="syz.3.28025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1849.331928][ T5720] veth1_vlan: left promiscuous mode [ 1849.337338][ T5720] veth0_vlan: left promiscuous mode [ 1849.364476][T22301] loop3: detected capacity change from 0 to 512 [ 1849.488260][T22301] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1849.512521][T26767] smc: removing ib device syû [ 1849.856947][T22301] EXT4-fs (loop3): mount failed [ 1850.067814][T26771] smc: removing ib device syz1 [ 1850.080533][T26720] lo speed is unknown, defaulting to 1000 [ 1850.086421][T26720] syz1: Port: 1 Link DOWN [ 1850.113431][T22301] loop3: detected capacity change from 0 to 1024 [ 1850.166587][T22301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1850.264122][T22172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1850.285940][T26720] hid-generic 0000:0000:0000.00DF: unknown main item tag 0x0 [ 1850.392548][T26720] hid-generic 0000:0000:0000.00DF: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1850.470224][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.557753][T22342] netlink: 'syz.0.28037': attribute type 32 has an invalid length. [ 1850.565814][T22342] __nla_validate_parse: 18 callbacks suppressed [ 1850.565833][T22342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28037'. [ 1850.640259][T22342] bond1: option coupled_control: invalid value (149) [ 1850.657835][T22342] bond1 (unregistering): Released all slaves [ 1850.765000][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28039'. [ 1850.832775][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28040'. [ 1850.864484][T22359] netem: change failed [ 1850.897645][T22172] veth0_vlan: entered promiscuous mode [ 1850.938817][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28040'. [ 1850.948993][T22172] veth1_vlan: entered promiscuous mode [ 1850.957615][T22364] loop3: detected capacity change from 0 to 512 [ 1851.014729][T22172] veth0_macvtap: entered promiscuous mode [ 1851.033771][T22364] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1851.053602][T22172] veth1_macvtap: entered promiscuous mode [ 1851.097890][T22364] EXT4-fs (loop3): mount failed [ 1851.110631][T22172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1851.141688][T22172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1851.181710][T26775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.201809][T26775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.211993][T22370] 9p: Bad value for 'rfdno' [ 1851.250374][T26775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.277933][T26775] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1851.405823][T22382] loop3: detected capacity change from 0 to 512 [ 1851.477459][T22383] netlink: 12 bytes leftover after parsing attributes in process `syz.7.27991'. [ 1851.509118][T22382] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1851.621404][T22382] EXT4-fs (loop3): mount failed [ 1851.732299][T22382] loop3: detected capacity change from 0 to 1024 [ 1851.795332][T22382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1851.932292][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28048'. [ 1851.945003][ T3488] hid-generic 0000:0000:0000.00E0: unknown main item tag 0x0 [ 1851.962632][ T3488] hid-generic 0000:0000:0000.00E0: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1852.029332][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.040167][T22396] loop9: detected capacity change from 0 to 8192 [ 1852.103586][T22402] loop3: detected capacity change from 0 to 512 [ 1852.135371][T22402] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1852.159884][T22402] EXT4-fs (loop3): mount failed [ 1852.192386][T22398] lo speed is unknown, defaulting to 1000 [ 1852.216511][ T29] kauditd_printk_skb: 5474 callbacks suppressed [ 1852.216602][ T29] audit: type=1326 audit(2111.955:184286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.237251][T22398] wg1 speed is unknown, defaulting to 1000 [ 1852.246210][ T29] audit: type=1326 audit(2111.955:184285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246319][ T29] audit: type=1326 audit(2111.955:184288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246350][ T29] audit: type=1326 audit(2111.955:184289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246396][ T29] audit: type=1326 audit(2111.955:184290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246429][ T29] audit: type=1326 audit(2111.955:184291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246514][ T29] audit: type=1326 audit(2111.955:184292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246626][ T29] audit: type=1326 audit(2111.955:184293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246720][ T29] audit: type=1326 audit(2111.955:184294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.246747][ T29] audit: type=1326 audit(2111.955:184295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22316 comm="syz.6.28030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe06c18b829 code=0x7ffc0000 [ 1852.495439][T22413] loop7: detected capacity change from 0 to 512 [ 1852.508140][T22413] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1852.530947][T22413] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.28055: bad orphan inode 131083 [ 1852.542963][T22413] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1852.557932][T22413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1852.566658][T22413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1852.578206][T22413] netlink: 14 bytes leftover after parsing attributes in process `syz.7.28055'. [ 1852.589269][T22413] netlink: 43 bytes leftover after parsing attributes in process `syz.7.28055'. [ 1852.608966][T22416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1852.644092][T22413] tipc: Started in network mode [ 1852.649166][T22413] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1852.656412][T22413] tipc: Enabled bearer , priority 10 [ 1852.684257][T22418] ªªªªªª: renamed from vlan0 (while UP) [ 1852.691764][T22418] tipc: Disabling bearer [ 1852.705921][T22414] loop3: detected capacity change from 0 to 8192 [ 1852.744154][T22398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28051'. [ 1853.205122][T22172] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1853.248107][T22429] netlink: 'syz.7.28058': attribute type 10 has an invalid length. [ 1853.261135][T22429] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1853.314578][T22431] netlink: 64 bytes leftover after parsing attributes in process `syz.0.28057'. [ 1853.334251][T22432] loop7: detected capacity change from 0 to 164 [ 1853.348130][T22432] iso9660: Unknown parameter '/dev/vga_arbiter' [ 1853.579186][T22434] lo speed is unknown, defaulting to 1000 [ 1853.597174][T22434] wg1 speed is unknown, defaulting to 1000 [ 1853.857074][T22448] loop9: detected capacity change from 0 to 512 [ 1853.935077][T22448] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1854.094052][T22448] EXT4-fs (loop9): mount failed [ 1854.203716][T22455] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1854.269291][T22455] EXT4-fs (loop7): mount failed [ 1854.330771][T22466] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1854.346627][T22466] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.28069: bad orphan inode 131083 [ 1854.357848][T22466] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1854.421388][T22466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.434944][T22466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.454144][T22466] tipc: Enabling of bearer rejected, failed to enable media [ 1854.543721][T22484] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.601471][T22484] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.612599][T22470] loop7: p1 < > p3 p4 < > [ 1854.623855][T22470] loop7: p3 size 33554432 extends beyond EOD, truncated [ 1854.669394][T22484] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.682516][T22490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.692246][T22490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.706132][T22490] vlan0: MTU too low for tipc bearer [ 1854.711501][T22490] tipc: Enabling of bearer rejected, failed to enable media [ 1854.725999][T22484] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1854.752938][T22494] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1854.768214][T22494] EXT4-fs (loop7): mount failed [ 1854.775492][T26760] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.784212][T26760] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.795412][T26760] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.808685][T29268] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1854.878869][T22498] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1855.013147][T15855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.029940][T22504] lo speed is unknown, defaulting to 1000 [ 1855.041876][T22515] set_capacity_and_notify: 6 callbacks suppressed [ 1855.041893][T22515] loop7: detected capacity change from 0 to 512 [ 1855.045734][T22504] wg1 speed is unknown, defaulting to 1000 [ 1855.065225][T22515] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1855.079296][T22515] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.28089: bad orphan inode 131083 [ 1855.112414][T22515] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1855.125399][T22521] loop9: detected capacity change from 0 to 512 [ 1855.138538][T22515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.147337][T22515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.156500][T22521] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1855.175619][T22521] EXT4-fs (loop9): mount failed [ 1855.186607][T22515] tipc: Enabling of bearer rejected, failed to enable media [ 1855.336636][T22545] loop3: detected capacity change from 0 to 512 [ 1855.343392][T22545] EXT4-fs: Ignoring removed i_version option [ 1855.349425][T22545] EXT4-fs: Ignoring removed bh option [ 1855.362199][T22545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1855.387405][T22545] __nla_validate_parse: 10 callbacks suppressed [ 1855.387419][T22545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.28099'. [ 1855.429556][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.498254][T22555] loop6: detected capacity change from 0 to 512 [ 1855.508657][T22557] loop3: detected capacity change from 0 to 512 [ 1855.515781][T22557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1855.527102][T22557] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.28103: bad orphan inode 131083 [ 1855.544743][T22557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1855.545633][T22555] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1855.581970][T22557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1855.582392][T22555] EXT4-fs (loop6): mount failed [ 1855.595807][T22557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1855.608772][T22557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.28103'. [ 1855.620771][T22557] netlink: 43 bytes leftover after parsing attributes in process `syz.3.28103'. [ 1855.630089][T22557] tipc: Enabling of bearer rejected, failed to enable media [ 1855.709844][T22568] loop6: detected capacity change from 0 to 512 [ 1855.724893][T22568] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1855.741080][T22568] EXT4-fs (loop6): mount failed [ 1855.747635][T22172] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.768094][T22568] loop6: detected capacity change from 0 to 1024 [ 1855.782753][T22568] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1855.808408][ T1039] hid-generic 0000:0000:0000.00E1: unknown main item tag 0x0 [ 1855.817664][ T1039] hid-generic 0000:0000:0000.00E1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1855.842475][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1855.873750][T22580] netlink: 'ÿ': attribute type 13 has an invalid length. [ 1856.064957][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28112'. [ 1856.178718][T13529] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.206243][T22594] FAULT_INJECTION: forcing a failure. [ 1856.206243][T22594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1856.220203][T22594] CPU: 1 UID: 0 PID: 22594 Comm: syz.0.28117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1856.220246][T22594] Tainted: [W]=WARN [ 1856.220255][T22594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1856.220311][T22594] Call Trace: [ 1856.220318][T22594] [ 1856.220327][T22594] __dump_stack+0x1d/0x30 [ 1856.220356][T22594] dump_stack_lvl+0x95/0xd0 [ 1856.220384][T22594] dump_stack+0x15/0x1b [ 1856.220455][T22594] should_fail_ex+0x265/0x280 [ 1856.220484][T22594] should_fail+0xb/0x20 [ 1856.220511][T22594] should_fail_usercopy+0x1a/0x20 [ 1856.220541][T22594] _copy_from_iter+0xcf/0xe70 [ 1856.220644][T22594] ? __alloc_skb+0x396/0x4b0 [ 1856.220716][T22594] ? __alloc_skb+0x228/0x4b0 [ 1856.220763][T22594] netlink_sendmsg+0x471/0x6b0 [ 1856.220800][T22594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1856.220833][T22594] __sock_sendmsg+0x145/0x180 [ 1856.220883][T22594] sock_write_iter+0x1a7/0x1f0 [ 1856.220990][T22594] do_iter_readv_writev+0x4a1/0x540 [ 1856.221018][T22594] vfs_writev+0x2df/0x8b0 [ 1856.221075][T22594] do_writev+0xe7/0x210 [ 1856.221144][T22594] __x64_sys_writev+0x45/0x50 [ 1856.221166][T22594] x64_sys_call+0x1ba5/0x3000 [ 1856.221191][T22594] do_syscall_64+0xca/0x2b0 [ 1856.221307][T22594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.221410][T22594] RIP: 0033:0x7effdb86f749 [ 1856.221426][T22594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.221445][T22594] RSP: 002b:00007effda2cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1856.221466][T22594] RAX: ffffffffffffffda RBX: 00007effdbac5fa0 RCX: 00007effdb86f749 [ 1856.221479][T22594] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 1856.221492][T22594] RBP: 00007effda2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.221504][T22594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.221517][T22594] R13: 00007effdbac6038 R14: 00007effdbac5fa0 R15: 00007fff906b25e8 [ 1856.221561][T22594] [ 1856.512678][T22597] netlink: 'syz.3.28115': attribute type 10 has an invalid length. [ 1856.557380][T22599] netlink: 28 bytes leftover after parsing attributes in process `syz.7.28118'. [ 1856.590637][T22599] netem: change failed [ 1856.635500][T22602] veth0: entered promiscuous mode [ 1856.674530][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28118'. [ 1856.983362][T22619] loop6: detected capacity change from 0 to 512 [ 1856.994210][T22619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1857.038219][T22619] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.28126: bad orphan inode 131083 [ 1857.057812][T22623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.28129'. [ 1857.070817][T22604] lo speed is unknown, defaulting to 1000 [ 1857.094604][T22604] wg1 speed is unknown, defaulting to 1000 [ 1857.104887][T22619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1857.120319][T22619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1857.130447][T22619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1857.141774][T22619] netlink: 14 bytes leftover after parsing attributes in process `syz.6.28126'. [ 1857.153910][T22619] netlink: 43 bytes leftover after parsing attributes in process `syz.6.28126'. [ 1857.166533][T22619] tipc: Enabling of bearer rejected, failed to enable media [ 1857.180023][T22607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28120'. [ 1857.242981][ T29] kauditd_printk_skb: 6672 callbacks suppressed [ 1857.243046][ T29] audit: type=1326 audit(2117.236:190960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1857.250802][T22635] loop9: detected capacity change from 0 to 512 [ 1857.283141][T22635] EXT4-fs warning (device loop9): ext4_xattr_inode_get:546: inode #11: comm syz.9.28131: ea_inode file size=4 entry size=6 [ 1857.296916][T22635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.28131: corrupted inode contents [ 1857.309207][ T29] audit: type=1326 audit(2117.236:190961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1857.309220][T22635] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #15: comm syz.9.28131: mark_inode_dirty error [ 1857.309532][T22635] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #15: comm syz.9.28131: corrupted inode contents [ 1857.332861][ T29] audit: type=1326 audit(2117.236:190962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5147aaf749 code=0x7ffc0000 [ 1857.380903][ T29] audit: type=1326 audit(2117.236:190963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5147aaf783 code=0x7ffc0000 [ 1857.388917][T22635] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #15: comm syz.9.28131: mark_inode_dirty error [ 1857.404049][ T29] audit: type=1326 audit(2117.236:190964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5147aae1ff code=0x7ffc0000 [ 1857.404082][ T29] audit: type=1326 audit(2117.247:190965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5147aaf7d7 code=0x7ffc0000 [ 1857.463234][ T29] audit: type=1326 audit(2117.247:190966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5147aadf90 code=0x7ffc0000 [ 1857.487183][ T29] audit: type=1326 audit(2117.247:190967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5147aaf34b code=0x7ffc0000 [ 1857.506560][T22635] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #15: comm syz.9.28131: mark inode dirty (error -117) [ 1857.510485][ T29] audit: type=1326 audit(2117.278:190968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5147aae3aa code=0x7ffc0000 [ 1857.546962][ T29] audit: type=1326 audit(2117.278:190969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22634 comm="syz.9.28131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5147aae3aa code=0x7ffc0000 [ 1857.554389][T22635] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 1857.639806][T22635] EXT4-fs (loop9): 1 orphan inode deleted [ 1857.646390][T22635] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1857.692150][T15855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.784277][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1857.825962][T22668] loop3: detected capacity change from 0 to 512 [ 1857.857469][T22667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1858.026784][T22674] lo speed is unknown, defaulting to 1000 [ 1858.037182][T22674] wg1 speed is unknown, defaulting to 1000 [ 1858.118715][T20862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1858.205883][T22693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.214607][T22693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.227361][T22693] vlan0: MTU too low for tipc bearer [ 1858.232808][T22693] tipc: Enabling of bearer rejected, failed to enable media [ 1858.431903][T22699] netlink: 'syz.6.28150': attribute type 3 has an invalid length. [ 1858.699708][T22717] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 1858.792070][T22723] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1858.795102][T22725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.816199][T22725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.819067][T22723] EXT4-fs (loop9): mount failed [ 1858.868821][T22723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1858.905644][T22732] FAULT_INJECTION: forcing a failure. [ 1858.905644][T22732] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.919123][T22732] CPU: 1 UID: 0 PID: 22732 Comm: syz.3.28162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1858.919160][T22732] Tainted: [W]=WARN [ 1858.919169][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1858.919187][T22732] Call Trace: [ 1858.919194][T22732] [ 1858.919204][T22732] __dump_stack+0x1d/0x30 [ 1858.919314][T22732] dump_stack_lvl+0x95/0xd0 [ 1858.919409][T22732] dump_stack+0x15/0x1b [ 1858.919462][T22732] should_fail_ex+0x265/0x280 [ 1858.919491][T22732] should_failslab+0x8c/0xb0 [ 1858.919567][T22732] __kmalloc_cache_node_noprof+0x6a/0x4d0 [ 1858.919598][T22732] ? __get_vm_area_node+0x106/0x1d0 [ 1858.919628][T22732] __get_vm_area_node+0x106/0x1d0 [ 1858.919775][T22732] __vmalloc_node_range_noprof+0x28e/0x1310 [ 1858.919807][T22732] ? xt_copy_counters+0x1dc/0x2d0 [ 1858.919860][T22732] ? cred_has_capability+0x210/0x280 [ 1858.919962][T22732] ? xt_copy_counters+0x1dc/0x2d0 [ 1858.920005][T22732] vmalloc_noprof+0x82/0xc0 [ 1858.920038][T22732] ? xt_copy_counters+0x1dc/0x2d0 [ 1858.920154][T22732] xt_copy_counters+0x1dc/0x2d0 [ 1858.920202][T22732] ? security_capable+0x83/0x90 [ 1858.920245][T22732] do_ipt_set_ctl+0xb3/0x820 [ 1858.920270][T22732] ? _raw_spin_unlock_bh+0x36/0x40 [ 1858.920346][T22732] ? tcp_release_cb+0xf1/0x370 [ 1858.920386][T22732] ? sockopt_release_sock+0x42/0x50 [ 1858.920440][T22732] nf_setsockopt+0x199/0x1b0 [ 1858.920465][T22732] ip_setsockopt+0x102/0x110 [ 1858.920572][T22732] tcp_setsockopt+0x98/0xb0 [ 1858.920615][T22732] sock_common_setsockopt+0x69/0x80 [ 1858.920640][T22732] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1858.920746][T22732] __sys_setsockopt+0x184/0x200 [ 1858.920777][T22732] __x64_sys_setsockopt+0x64/0x80 [ 1858.920811][T22732] x64_sys_call+0x21d5/0x3000 [ 1858.920843][T22732] do_syscall_64+0xca/0x2b0 [ 1858.920935][T22732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.920957][T22732] RIP: 0033:0x7efc7099f749 [ 1858.921089][T22732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1858.921107][T22732] RSP: 002b:00007efc6f407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1858.921126][T22732] RAX: ffffffffffffffda RBX: 00007efc70bf5fa0 RCX: 00007efc7099f749 [ 1858.921167][T22732] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1858.921184][T22732] RBP: 00007efc6f407090 R08: 0000000000000048 R09: 0000000000000000 [ 1858.921200][T22732] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 1858.921213][T22732] R13: 00007efc70bf6038 R14: 00007efc70bf5fa0 R15: 00007ffcdfa8bff8 [ 1858.921232][T22732] [ 1858.921240][T22732] syz.3.28162: vmalloc error: size 32, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 1858.921432][T26720] hid-generic 0000:0000:0000.00E2: unknown main item tag 0x0 [ 1858.932804][T22732] ,cpuset=/,mems_allowed=0 [ 1858.932840][T22732] CPU: 1 UID: 0 PID: 22732 Comm: syz.3.28162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1858.932989][T22732] Tainted: [W]=WARN [ 1858.933012][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1858.933060][T22732] Call Trace: [ 1858.933080][T22732] [ 1858.933102][T22732] __dump_stack+0x1d/0x30 [ 1858.933184][T22732] dump_stack_lvl+0x95/0xd0 [ 1858.933326][T22732] dump_stack+0x15/0x1b [ 1858.933389][T22732] warn_alloc+0x12b/0x1a0 [ 1858.933501][T22732] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 1858.933623][T22732] ? cred_has_capability+0x210/0x280 [ 1858.933748][T22732] ? xt_copy_counters+0x1dc/0x2d0 [ 1858.933851][T22732] vmalloc_noprof+0x82/0xc0 [ 1858.933925][T22732] ? xt_copy_counters+0x1dc/0x2d0 [ 1858.934106][T22732] xt_copy_counters+0x1dc/0x2d0 [ 1858.934219][T22732] ? security_capable+0x83/0x90 [ 1858.934335][T22732] do_ipt_set_ctl+0xb3/0x820 [ 1858.934469][T22732] ? _raw_spin_unlock_bh+0x36/0x40 [ 1858.934542][T22732] ? tcp_release_cb+0xf1/0x370 [ 1858.934696][T22732] ? sockopt_release_sock+0x42/0x50 [ 1858.934811][T22732] nf_setsockopt+0x199/0x1b0 [ 1858.934890][T22732] ip_setsockopt+0x102/0x110 [ 1858.934992][T22732] tcp_setsockopt+0x98/0xb0 [ 1858.935106][T22732] sock_common_setsockopt+0x69/0x80 [ 1858.935170][T22732] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1858.935242][T22732] __sys_setsockopt+0x184/0x200 [ 1858.935379][T22732] __x64_sys_setsockopt+0x64/0x80 [ 1858.935478][T22732] x64_sys_call+0x21d5/0x3000 [ 1858.935589][T22732] do_syscall_64+0xca/0x2b0 [ 1858.935779][T22732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.935857][T22732] RIP: 0033:0x7efc7099f749 [ 1858.935907][T22732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1858.935968][T22732] RSP: 002b:00007efc6f407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1858.936028][T22732] RAX: ffffffffffffffda RBX: 00007efc70bf5fa0 RCX: 00007efc7099f749 [ 1858.936078][T22732] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 1858.936119][T22732] RBP: 00007efc6f407090 R08: 0000000000000048 R09: 0000000000000000 [ 1858.936159][T22732] R10: 0000200000000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 1858.936200][T22732] R13: 00007efc70bf6038 R14: 00007efc70bf5fa0 R15: 00007ffcdfa8bff8 [ 1858.936338][T22732] [ 1858.936358][T22732] Mem-Info: [ 1858.952234][T26720] hid-generic 0000:0000:0000.00E2: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1858.954369][T22732] active_anon:10372 inactive_anon:1 isolated_anon:0 [ 1858.954369][T22732] active_file:19182 inactive_file:10273 isolated_file:0 [ 1858.954369][T22732] unevictable:16394 dirty:28 writeback:0 [ 1858.954369][T22732] slab_reclaimable:4950 slab_unreclaimable:138132 [ 1858.954369][T22732] mapped:31108 shmem:5615 pagetables:1434 [ 1858.954369][T22732] sec_pagetables:0 bounce:0 [ 1858.954369][T22732] kernel_misc_reclaimable:0 [ 1858.954369][T22732] free:1690605 free_pcp:10861 free_cma:0 [ 1859.192558][T22736] lo speed is unknown, defaulting to 1000 [ 1859.197989][T22732] Node 0 active_anon:43808kB inactive_anon:4kB active_file:76728kB inactive_file:41092kB unevictable:65576kB isolated(anon):0kB isolated(file):0kB mapped:123580kB dirty:112kB writeback:0kB shmem:25012kB kernel_stack:6272kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1859.205142][T15855] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.208157][T22732] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1859.243686][T22736] wg1 speed is unknown, defaulting to 1000 [ 1859.244951][T22732] lowmem_reserve[]: 0 2880 7859 7859 [ 1859.245050][T22732] Node 0 DMA32 free:2750744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:2168kB local_pcp:752kB free_cma:0kB [ 1859.621502][T22732] lowmem_reserve[]: 0 0 4978 4978 [ 1859.626588][T22732] Node 0 Normal free:3999756kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52916kB inactive_anon:4kB active_file:76728kB inactive_file:41112kB unevictable:65576kB writepending:136kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:29588kB local_pcp:27116kB free_cma:0kB [ 1859.660684][T22732] lowmem_reserve[]: 0 0 0 0 [ 1859.665256][T22732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1859.678001][T22732] Node 0 DMA32: 4*4kB (UM) 3*8kB (UM) 3*16kB (M) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 5*256kB (M) 4*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 667*4096kB (UM) = 2750744kB [ 1859.695655][T22732] Node 0 Normal: 1366*4kB (UE) 6111*8kB (UME) 3239*16kB (UME) 3398*32kB (UME) 3124*64kB (UME) 1989*128kB (UME) 1495*256kB (UM) 1151*512kB (UM) 961*1024kB (UME) 667*2048kB (UM) 2*4096kB (U) = 3999744kB [ 1859.715479][T22732] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1859.725468][T22732] 54312 total pagecache pages [ 1859.730144][T22732] 25 pages in swap cache [ 1859.734413][T22732] Free swap = 59520kB [ 1859.738491][T22732] Total swap = 124996kB [ 1859.742702][T22732] 2097051 pages RAM [ 1859.746525][T22732] 0 pages HighMem/MovableOnly [ 1859.751959][T22732] 81271 pages reserved [ 1859.756477][ T36] ================================================================== [ 1859.764597][ T36] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1859.772789][ T36] [ 1859.775128][ T36] read-write to 0xffff888100483db8 of 8 bytes by task 15855 on cpu 0: [ 1859.783290][ T36] __filemap_remove_folio+0x1bc/0x2a0 [ 1859.788695][ T36] __remove_mapping+0x390/0x4c0 [ 1859.793575][ T36] remove_mapping+0x22/0x90 [ 1859.798109][ T36] mapping_try_invalidate+0x26a/0x3f0 [ 1859.803507][ T36] invalidate_mapping_pages+0x27/0x40 [ 1859.808912][ T36] invalidate_bdev+0x58/0x70 [ 1859.813524][ T36] ext4_put_super+0x624/0x7d0 [ 1859.818226][ T36] generic_shutdown_super+0xe6/0x210 [ 1859.823584][ T36] kill_block_super+0x2a/0x70 [ 1859.828291][ T36] ext4_kill_sb+0x42/0x80 [ 1859.832653][ T36] deactivate_locked_super+0x75/0x1c0 [ 1859.838055][ T36] deactivate_super+0x97/0xa0 [ 1859.842758][ T36] cleanup_mnt+0x2a9/0x320 [ 1859.847199][ T36] __cleanup_mnt+0x19/0x20 [ 1859.851637][ T36] task_work_run+0x131/0x1a0 [ 1859.856250][ T36] exit_to_user_mode_loop+0x1fe/0x740 [ 1859.861640][ T36] do_syscall_64+0x1e1/0x2b0 [ 1859.866262][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.872175][ T36] [ 1859.874516][ T36] read to 0xffff888100483db8 of 8 bytes by task 36 on cpu 1: [ 1859.881900][ T36] nr_blockdev_pages+0x7e/0xd0 [ 1859.886695][ T36] si_meminfo+0x87/0xd0 [ 1859.890871][ T36] update_defense_level+0x47/0x5c0 [ 1859.896010][ T36] defense_work_handler+0x1f/0x80 [ 1859.901063][ T36] process_scheduled_works+0x4ce/0x9d0 [ 1859.906550][ T36] worker_thread+0x582/0x770 [ 1859.911163][ T36] kthread+0x489/0x510 [ 1859.915261][ T36] ret_from_fork+0x149/0x290 [ 1859.919879][ T36] ret_from_fork_asm+0x1a/0x30 [ 1859.924668][ T36] [ 1859.927014][ T36] value changed: 0x0000000000000005 -> 0x0000000000000002 [ 1859.934129][ T36] [ 1859.936464][ T36] Reported by Kernel Concurrency Sanitizer on: [ 1859.942631][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/1:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1859.953849][ T36] Tainted: [W]=WARN [ 1859.957663][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1859.967733][ T36] Workqueue: events_long defense_work_handler [ 1859.973828][ T36] ==================================================================