last executing test programs: 9m29.326843082s ago: executing program 3 (id=807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a0001007175657565000000140002800600034000010000060001400017000014"], 0xd8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRES8=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r6, 0x0, 0xc081) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000001c0)='kfree\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d000000020000000400", @ANYRES32=r8, @ANYBLOB="000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/27], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=@deltaction={0x110, 0x31, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfd3}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40}, 0x400d0) r9 = socket$netlink(0x10, 0x3, 0xf) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x1, 0x0, 0x0, 0x0}) 9m29.219168596s ago: executing program 3 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000080)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1}}], 0x48}, 0x0) 9m29.208478147s ago: executing program 3 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x20000804) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000024c0)=""/132, 0x84}) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 9m29.099815312s ago: executing program 3 (id=815): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@noquota}]}, 0x1, 0x505, &(0x7f0000000200)="$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") r0 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000008c0)="980ab068e5bad3facdaa9d81b27b652e938236575605e369d3574e0513c5aa471e2456f4ddb70d5e9668ac2e4c75cf9085530f867f74bae8fabcb7303acb086d380f79fde8ca5778f000c0bcb3ca4f4185e60ce7752b5586003ba03b4d525ca1967922e4cb42c50bf252120cb1283ae62b6ce9ac01c350907a9f02140e6ec753f6c7862847a9227887829ae10bbdaa06b62afead70ebcfab5c557b0378bd990ae0cd71121eaf66ec4aab1412af5f4bf8c05f") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1d3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r3, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe93, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, {0xa, 0x4e23, 0x1007f, @mcast2, 0x9}, r3, 0x2}}, 0x48) close(0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x8}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x5400, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x145) writev(r1, &(0x7f0000000040)=[{&(0x7f0000001400)="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", 0x200}], 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) 9m29.001870356s ago: executing program 3 (id=818): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 9m28.624167682s ago: executing program 3 (id=828): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRESHEX, @ANYBLOB="84bd7a6549bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000004e000000000000e9860a000000000000fdffffff00000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8}, 0x23) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 9m28.623651442s ago: executing program 32 (id=828): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x3) io_uring_setup(0x4f41, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRESHEX, @ANYBLOB="84bd7a6549bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeb0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000000000004e000000000000e9860a000000000000fdffffff00000000000000009500000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8}, 0x23) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 8m42.722641886s ago: executing program 4 (id=1682): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$eJzs3c9vI1cdAPDveO3t/sjWKXCAHkqhRbsrWHvT0Dbi0BaB4FQJKPclJE4UxYmjxGk3UUUT8QdwQYDECS5ckPgPUCUuHCukIjiDKAIh2MKBA3TQ2ONsNuuJvcGJ0+TzkWbnvfn1fc/e+fFmXsYBnFtPR8QrEfFBmqY3I6KaTy/lQ+x0h2y59++9OZcNSaTpa39PIsmn9baV5OOr+WqXIuIbX434dvJw3I2t7eXZZrOxnufr7ZW1+sbW9q2lldnFxmJjdXp66oWZF2een7k9knpei4iXvvznH3zvZ1956Zefe+OPd/564ztZsb6Uz99fj0dUPmxmt+qVzmexf4X1iJePGO/UKXdqmLs83Dq7x1geAACKZdf4H4mIT0fEzajGhcMvZwEAAIAPofTlifhPEpH2d7HfxEtRuDwAAABwCpUiYiKSUi3vCzARpVKt1u3D+7G4kr4V0f7sQmtzdT6bFzEZldLCUrNxO+8rPBmVJMtPddL3889187vvRXTy0xHxRER8v3q5k6/NtZrz4775AQAAAOfE1QPt/39Vu+1/AAAA4IyZHHcBAAAAgGOn/Q8AAABnn/Y/AAAAnGlfe/XVbEh7v389//rW5nLr9VvzjY3l2srmXG2utb5WW2y1Fjvv7FsZtL1mq7X2+VjdvFtvNzba9Y2t7Tsrrc3V9p2lB34CGwAAADhBT3zy7d8nEbHzhcudIXOxYNkLJ1oy4LiV91JJPu6z9//h8e74vRMqFHAiBp3Tf1s9oYIAJ6487gIAY1N5lIX9nQCcScmA+YWdd97Jx58abXkAAIDRu/6J4uf/pUPX3Dl8NnDq2Ynh/Oo9/3/8QB44+zrP/4s6/B7kYgHOlIozPpx7A5//F3UAeGfYCGn6aCUCAABGbaIzJKVafntvIkqlWi3iWqe7fyVZWGo2bufPB35XrTyW5ac6ayYD2wwAAAAAAAAAAAAAAAAAAAAAAAAAQFeaJpEO47GhlgIAAABOoYjSX5Jfdd/lf7367MTB+wMXk39XI/+J0Dd+/NoP78622+tT2fR/7E1v/yif/tw47mAAAAAAB/Xa6b12PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0vv33pzrDb1pafX44/7tixEx2S9+OS51xpeiEhFX/plEed96SURcGEH8nd2I+Hi/+ElWrL2Q/eJfPv74MZl/Cv3iXx1BfDjP3s6OP69k+9/FiNi//5Xi6c64//5Xjnggf1Sd4192gOtz/O0d/y4U7P/XDmxrsiDGk+/+ol4YfzfiyXL/408vflIQ/5kh6/itb25vF81LfxJxve/5J3kgVr29slbf2Nq+tbQyu9hYbKxOT0+9MPPizPMzt+sLS81G/u9D268UBS7dr/+VgviTA+r/7JD1/++7d+99tKA4Wfwbz/SJ/+uf5ks8HL+Un/s+k6ez+dd76Z1uer+nfv6bp4rKlsWfL6j/oO//xpD1v/n17/4pIj7Y95UCAGO0sbW9PNtsNtYPTWSXLYOWOa2JrJV+CoohcbTEsP9Fj5R4a6QbTNM0jf9vT0li7B94LzHuIxMAADBq9y/6x10SAAAAAAAAAAAAAAAAAAAAOL9O4nViB2Pu7KWSUbxCGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJP4XAAD//6H70dw=") 8m42.682287478s ago: executing program 4 (id=1686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000002280)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x10, 0x2, {{0x4e, 0x4, 0x1, 0x8, 0x138, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, {[@end, @cipso={0x86, 0x34, 0x3, [{0x7, 0x10, "25d3567c4ba9e36fcecd727b6325"}, {0x7, 0x10, "b9519bc668553caf30cc62f428ee"}, {0x7, 0x3, "8f"}, {0x1, 0xb, "f3ef929c637e731418"}]}, @cipso={0x86, 0x60, 0x3, [{0x5, 0xb, "ad8ae3ae1822caba35"}, {0x2, 0x5, "dcd8d1"}, {0x7, 0x10, "636ad816db52701997fa59de985f"}, {0x7, 0x8, "c9e718a49d26"}, {0x7, 0x2}, {0x2, 0xe, "2e46a2af8ec2f766c16e952b"}, {0x6, 0xd, "2484a3195523aa801cd8ce"}, {0x1, 0x11, "6e65d035572909a5b12719c783bd56"}, {0x3, 0x4, 'n\r'}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xd4, 0x0, 0x0, [0x1, 0x0, 0x1, 0x4, 0x4, 0x40, 0x5]}, @cipso={0x86, 0x50, 0x1, [{0x2, 0xb, "8fc13a0eaed3c84319"}, {0x7, 0x10, "9e54722515fdbfbdc2e6261d74c5"}, {0x7, 0xf, "7b3573e70e9ed581fdba830960"}, {0x0, 0xf, "0280b0b32e2386bd1b1f541dcd"}, {0x7, 0xf, "67da3472ea254ccdf72ff7ff72"}, {0x1, 0x2}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x60, 0x3, 0x7, [{@remote, 0x2}, {@local, 0xd}]}, @end]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002400), 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x5, 0x18, &(0x7f00000021c0)=ANY=[@ANYBLOB="1800000002000000000000000000140018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000800850000008600000085000000160000008520000002000400180000000800000000000000090000008510000007000000bf91000000000000b7020000b80ee2808500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x6, '\x00', r4, @fallback=0x1f, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r3, 0x1, &(0x7f0000002440)=[r0, r0, r2, r2], &(0x7f0000002480)=[{0x4, 0x3, 0x9, 0xb}], 0x10, 0x7fffffff}, 0x94) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000000)=0x2, 0x4) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r11}, 0x10) fchmod(r10, 0x1) syz_read_part_table(0x1058, &(0x7f0000001080)="$eJzsz7GpAkEUBdA7O58vG9mCTViIghVYhKkGNmMXJlZgNyIrs+JiBWpwTvDgvnlcmPBVf8n5P8mqtlTu47KMs2bRvcVLTdeW5Rmzb2MY+sPUVafjsrv2x1abPrPX83Cr7WabZN7yetltTh/6JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8tEcAAAD//6rFDAs=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") 8m42.601606022s ago: executing program 4 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x20000804) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1f075, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000024c0)=""/132, 0x84}) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x3, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 8m42.522151545s ago: executing program 4 (id=1690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) syz_open_dev$sg(&(0x7f0000000080), 0xfffffffffffffff9, 0x2301c0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) link(&(0x7f0000000940)='./file1\x00', 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc02063a1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 8m42.491495696s ago: executing program 4 (id=1691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300000c, &(0x7f0000000280), 0x1, 0x53b, &(0x7f0000001380)="$eJzs3d9rZFcdAPDvvclss7upmarIWrQttrJbdGc2G9tGkbaC6FNBXd/XNJkNYSeZJTNZN6HYVP8AQUQF/wARBMFXQfoniFjUd1FRRLf6qL1y79xxN5uZSbqZZNrJ5wMnc86cued7ziVz5/443BvAqfVURLwcEVMR8WxEzJXvp2WK3W7KP/f23deW85REll37RxJJ+V6vrbw8HRHny8VmIuJrX454Ndkft729c3Op2WxsluV6Z/1Wvb29c3ltfWm1sdrYWFiYf37xhcXnFq9kpSONsxoRL37xLz/47k++9OKvPv3NP17/26Vv5d36/Ee6/Y6I5SMFGKDbdqVYFz35Oto8jmBjko+nMvUuFkiPsTMAAAyV74p9MCI+Uez/z8VUsTcHAAAATJLspdn4TxKRAQAAABMrjYjZSNJaORdgNtK0VuvO4f1wnEubrXbnUzdaWxsreV1ENSrpjbVm40o5V7galSQvz5dzbHvlqw+UFyLisYj4/tzZolxbbjVXxn3yAwAAAE6J80/uPf7/91xa5O/57dj6BgAAAIxQdWChcPsXP331JLsDAAAAHIP9h/wAAADApHH8DwAAABPtK6+8kqes9xzvldvbWzdbty+vNNo3a+tby7Xl1uat2mqrtVrcs2/9oPaardatz8TG1p16p9Hu1NvbO9fXW1sbnetrex6BDQAAAJygx5588w9JROx+7myRorwPIMAefx53B4BRmuplnJ2HU2d63B0AxqYypO53xV9bCJh0yQH1ew4Psix7vZf/9bF1CQAAGLGLH91//f9MWTfs3ADw/meuDwCcPq7uwelVuTcD8N25MOqeAOPyge7LI4PqB04PPsT1/+45hix7qI4BAAAjM1ukJK2V++mzkaa1WsSjxWMBKsmNtWbjSnl88Pu5yiN5eb5YMjlwzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JVlSWQAAADARItI/5oUd/OPuDj3zOzeswMPPPXrx9d+eGep09mcjziT/HMuf+tMRHR+dC2J/P2rmUcCAAAAwHtAcfx+tXydH3dvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJg0b999bbmXTjLu378QEdV+8adjpnidiUpEnPtXEtP3LZdExNQI4u++EREX+sVP4p0sy6plL/rFP3vM8avFqukfP42I8yOID6fZm/n25+V+3780nipe+3//pst0VIO3f+n/t39TA7Y/jz5QHuTxt35eHxj/jYjHp/tvf3rxk278PSHywtOHHOM3vr6z07fivib7xb8/Vr2zfqve3t65vLa+tNpYbWwsLMw/v/jC4nOLV+o31pqN8m/fMN/7+C/fGTb+cwPiV/eOf9/6f+ZQo8/iv2/dufuhbqHSL/6lp/v//l4YED8tf/s+Webz+ou9/G43f78nfvabJ4aNf2XA+GcOGP+lQ40/PvvsV7/zp741+9YGAHAS2ts7N5eazcbmkMzMIT5zwpmX3hvdGGEmTiDWx74dMeKWKyNqJ3u9+/94tHaOuPi+THaUxadjBN04s+97OhUP22ASsZu3dch/SAAAYMLc2+kfdgUJAAAAAAAAAAAAAAAAAAAAOE4PeVuymYg49IcfjLk7nqECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz1vwAAAP//TuvWNA==") open(&(0x7f0000000180)='./bus\x00', 0x145e7e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000280), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstatfs(r0, &(0x7f00000007c0)=""/7) 8m42.425026329s ago: executing program 4 (id=1693): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) syz_emit_ethernet(0x4e, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) (async) r6 = eventfd(0x0) read$eventfd(r6, &(0x7f0000000240), 0x8) (async, rerun: 64) writev(r6, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP3Hc5/8tl/xwxunEcH71PP9PZ0eVCHDq2s//Bx3I42IBxkp5oBGAwDj7f5//Hy1NHyshAABg6GbaU1Kq5B/vzUSpVKlEXGl/LWA5ubVWr92IiKci4nez5QtZfb69Z3LkPQMAAAAAAAAAAAAAAAAAAAAAAAAA0JGmSaQAAADAWIso/Tn5Vedd/ldnX5zp/XxgKvl3+yuBpyLinR+99YO7S83m5ny2/O+Pljd/mC9/eRSfYAAAAAC9uvfp7fm/Rp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPm/YfvLnenATa/OKy4f/1iRMwVxZ+M6fZ8OsoRcekfSUzu2y+JiIkhxG/di4iPF8VPsrQehSyKP4wfQute0krbCuPHXP5TKIp/eQjx4Ty7n51/3ijq/6V4vj0v7n+TEf9TP67+5794dP6b6NP/rwwY45kHP6/2jX8v4pnJ4vNfN37SJ/4LA0Uvxze+vrvbb23644ir3b8/7TPe/gh7pWpz/U51a2f3+tr60mpttbaxsDD/6uJri68s3qjeWqvX8n8LY3z32V98eFj7LxX+/UvybPq3/8WC400U5P+fB3cffrRbaR2Mf+2Fgvi//km+xcH4pTzOp/Nytv5qt9zqlPd77me/fe6w9q/stb/8OP//1/odtNeBjvLsYL86AMCJ2NrZvb1Ur9c2x7aQ3aU/AWkcpzAVT0Qa41v4dlZ4MKwDpmmaZn2qYNX9iBjkOEkMuaWl4nz2Cn3PAKM+MwEAAMO2d9E/6kwAAAAAAAAAAAAAAAAAAADg/DqNt6z1xtx7BXIyjFdoAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMxX8DAAD//xfc3AU=") (rerun: 32) 8m27.391250026s ago: executing program 33 (id=1693): timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) syz_emit_ethernet(0x4e, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) (async) r6 = eventfd(0x0) read$eventfd(r6, &(0x7f0000000240), 0x8) (async, rerun: 64) writev(r6, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") (rerun: 32) 5m27.992249087s ago: executing program 6 (id=6265): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r1, 0x0, 0x4}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR-', 0x4}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) 5m27.990856427s ago: executing program 6 (id=6267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f0000000400)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x30) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x581, 0x400, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private1}]}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10) sysinfo(&(0x7f0000000f80)=""/154) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000000015"]) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x5, r7, 0x1, 0x9}, 0x14) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xfff1}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32, @ANYBLOB="9b0600000000ff001c00128009000100626f6e64000000008100028005000100060000009a0556487704f780ad9c96109f963678d02f8e000e7692479b1d137390b62ea1ad2ecefd81ebd17cbd2fb0c9611b572a93754d9dc054b0b6baa70d47195576fc29e3c886e9dead1b00b11f34138f1a194e46d48171a24566fe87fff12741da1d73d65090fedd81f35e6da47031698f5979531a7e3ccbde97"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0xffffff4d, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 5m27.921908791s ago: executing program 6 (id=6270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 5m27.902824651s ago: executing program 6 (id=6271): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x410000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40801}, 0x4000080) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007"], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, 0x0, 0x2, 0x0) sendfile(r4, r4, &(0x7f0000000040)=0xe, 0xbe3c) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2014c00, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x4ec, &(0x7f0000001a00)="$eJzs3VFrHFsdAPD/TLK3aZvr5qLIteC9FxtJL9rd5MZ7G0RqBdGnglrfY0w2IWSTDdlNbULRFD+AIKKCTz75IvgBBOlHEKGg76JFEW31wQftyM5ObNPuJkuTZnXz+8HpnDNndv7nTLNnd3YOMwGcWe9ExI2IGImIdyOiXKxPizRfpPZ2jx/dXWynJLLs1l+TSIp1+/tql0cj4mJE7EXEWER87csR30xejNvc2V1bqNdrW0W52lrfrDZ3dq+uri+s1FZqG7OzMx/MXZt7f246Kxyrn5ci4voXH/7wez/70vVfffpbv5//85Vvt5v1uY922h0Ri8cK0ENn36X8WOxrH6OtVxFsAEaK/pQG3RAAAPoyGRGXI+IT+ff/cozk3+YAAACAYZJ9fjz+lURkAAAAwNBKI2I8krRSzPcdjzStVDpzeD8SF9J6o9n61HJje2OpXRcxEaV0ebVemy7mCk9EKWmXZ/L80/J7z5VnI+KNiPhB+Xxeriw26kuD/vEDAAAAzoiLbx88//9HOc3zAAAAwJCZ6FkAAAAAhoVTfgAAABh+zv8BAABgqH3l5s12yvaf4710e2d7rXH76lKtuVZZ316sLDa2NisrjcZKfs++9aP2V280Nj8TG9t3qq1as1Vt7uzOrze2N1rzqwcegQ0AAACcojfevv+7JCL2Pns+T1HcBxDggD8OugHASRoZdAOAgRkddAOAgSkduYURAoZdckR9z8k7vz75tgAAAK/G1MdevP7/WlF39G8DwP8zc30A4OxxdQ/OrpIZgHDmTXYW53rVj0WPSQB9X//PspdqGAAAcGLG85SkleJa4HikaaUS8Xr+WIBSsrxar01HxIci4rfl0rl2eSZ/ZXLknGEAAAAAAAAAAAAAAAAAAAAAAAAAoCPLksgAAACAoRaR/inJ7+YfMVWeHH/+94HXkn+W42FR+MmtH91ZaLW2Ztrr/1bO6yOi9eNi/XuZRwIAAADA/4DOeXqxnBl0awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNo8f3V3cT6cZ9y9fiIiJbvFHYyxfjkUpIi78PYnRZ16XRMTICcTfuxcRb3aLn8STLMsmilZ0i3/+FcefyA9N9/hpRFw8gfhwlt1vjz83ur3/0ngnX3Z//40W6bh6j3/pf8e/kR7jz+t9xrj04BfVnvHvRVwa7T7+7MdPesS/3Gf8b3x9d7dXXfbTiKmunz/JgVjV1vpmtbmze3V1fWGltlLbmJ2d+WDu2tz7c9PV5dV6rfi3a4zvf/yXTw7r/4Ue8SeO6P9kn/3/94M7jz7cyZa6xb9yufvn75s94qfFZ98ni3y7fmo/v9fJP+utn//mrcP6v9Sj/0f9/1/ps//vfvW7f+hzUwDgFDR3dtcW6vXa1iGZsT62kZE5Tib7Tufv8Xj76fny9OV2mA36sLx8JuKY++kxYJw7zdEJAAA4SU+/9A+6JQAAAAAAAAAAAAAAAAAAAHB2ncbdyJ6PuTeYrgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOo/AQAA//+KZt0m") removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r8, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={0xffffffffffffffff, r7, 0x25, 0x2, @val=@tcx}, 0x1c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m27.666923211s ago: executing program 6 (id=6276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x8000}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x38}}, './file0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x3032, 0xffffffffffffffff, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 5m27.361106184s ago: executing program 6 (id=6291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000430001002bbd7000fbdbdf251c0000000c000800077f0000000000000c0001"], 0xa4}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) unshare(0x2c060000) unshare(0x2c020400) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r9) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0xffffffffffffffe5) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m27.360497244s ago: executing program 34 (id=6291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000430001002bbd7000fbdbdf251c0000000c000800077f0000000000000c0001"], 0xa4}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000840)='net/packet\x00') r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) unshare(0x2c060000) unshare(0x2c020400) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r9) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r13}, 0xffffffffffffffe5) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r14, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m18.74759534s ago: executing program 2 (id=6591): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x2000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x2, r6, 0xf, r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgctl$IPC_RMID(0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 5m18.661527724s ago: executing program 2 (id=6596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) ustat(0xd, 0x0) 5m18.611937216s ago: executing program 2 (id=6597): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 5m18.596177167s ago: executing program 2 (id=6600): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$eJzs3MtvVFUYAPDv3j4AebQiPkDUKjFpfLS0oLJwo9HEBUYTXeCytgNpGKih1QghMhiDGxNDomvj0sS/wJ0xMerKxK1uXBkSomxAVzX3zr0wM8wAlWmnMr9fMp1z5p7bc777PPecaQPoW2PZjyRiS0T8GhEj9WxzgbH625VLp2f/vnR6Nonl5Tf+TPJyly+dni2LluttLjLjaUT6UVJU0mzx5KmjM9Vq5USRn1w69s7k4slTT793bOZI5Ujl+PSBA/v3TT337PQzXYkzi+vyrg8Wdu985a3zr84eOv/2j19n7d1SLG+Mo1vGssD/Ws61Lnu825X12NaGdDLYw4awIgMRke2uofz8H4mBuLbzRuLlD3vaOGBVZfemDZ0X15aBO1gSvW4B0BvljT57/i1fa9T1WBcuvlB/AMrivlK86ksGIy3KDLU833bTWEQcqv3zRfaKVRqHAABo9Mns5wfjqXb9vzTuy99/z39uK+ZQRiPi7ojYHhH3RMSOiLg3Ii97f0Q8sML6W6eGru//pBf+c3C3IOv/PV/MbTX3/8reX4wOFLmtefxDyeH5amVvsU3GY2hDlp+6QR3fvvTLp52WNfb/sldWf9kXLNpxYbBlgG5uZmkm75R2wcWzEbsG28WfXJ0JSCJiZ0TsWtmv3lYm5p/4anenQjeP/wa6MM+0/GUWXi2LvxYt8ZeSxvnJ+evmJyc3RrWyd7I8Kq7308/nXu9U/23F3wUXK/X3hv3fWmQ0aZyvXVx5Hed++7jjM821+Dd1Pv6T5nXmZpbS4eTNfJ55uPjs/ZmlpRNTEcPJwTzf9Pn0tXXLfFk+O/7H97Q//7cX62TVPxgR2UH8UEQ8HBGPFG1/NCIei4g9N4j/hxc7Lyvjj7RH+/9sxFzb69/Vjd6y/1eeGDj6/Ted6r+169/+PDVefJJf/26iXXOyy0VrA29n2wEAAMD/RZp/Bz5JJ66m03Riov4d/h1xV1pdWFx68vDCu8fn6t+VH42htBzpGinGQ6vz1cpUUit+Y318dLoYKy7HS/cV48afDWzK8xOzC9W5HscO/W5zh/M/88dAr1sHrLJNbT+dHl7zhgA90DqPnjZnz7wWLgZwp/L32tC/bnL+p2vVDmDtuf9D/2p3/p9pyZsLgDuT+z/0L+c/9Kn0u163AOgh93/oS7fzd/2rmNi4PprR9J8Camu1xdbrTskTEWUiXRftkVilRK+vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//KVfoRQ==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0xff) 5m18.388015906s ago: executing program 2 (id=6609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01dfffffff9a26000000210000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 5m18.03907715s ago: executing program 2 (id=6628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) 5m18.036006531s ago: executing program 35 (id=6628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) 2m4.91311714s ago: executing program 8 (id=11470): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 2m4.871785902s ago: executing program 8 (id=11472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1f00", "62266bd8", "1e00040000000100"}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_setup(0x7, &(0x7f0000000100)=0x0) io_pgetevents(r6, 0x6, 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f0000000200), 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0x541b, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000000)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) semget$private(0x0, 0x5, 0x0) 2m4.816394444s ago: executing program 8 (id=11473): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x40, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$netlink(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000000000000000000000008500000008000000660000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xad, &(0x7f0000000000)=""/173}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r4, 0x1, 0x4070bd65, 0x1}, 0x8}}, 0x18) 2m4.545396835s ago: executing program 8 (id=11476): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010000)={&(0x7f0000010080)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f0000000400), &(0x7f0000000500)=r4}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x66) syz_clone3(&(0x7f0000000680)={0x42040000, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) kcmp(r7, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000300000006000000020000060400000001000000000000001000000001000000000000000000000b010000000c0000000700000604000000faffffffff0f000002000000080000000d0000000400000005000000030000000c0000000400000006000000020000000d000000136f0000000000000000000300000000020000000300000001000000002e00"], &(0x7f0000000400)=""/189, 0x9f, 0xbd, 0x1, 0x2}, 0x28) 2m4.163309542s ago: executing program 8 (id=11483): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040c91) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6b9b0000", @ANYRESDEC, @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4044011}, 0x20000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x5c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8105}, 0x4000850) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) shutdown(r7, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2m3.73589672s ago: executing program 8 (id=11487): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x1f, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000f80)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@obj_user={'obj_user', 0x3d, 'dioread_lock'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'contention_end\x00'}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '^(K%e.{)\\3,@'}}, {@dont_hash}, {@uid_eq}]}, 0x1, 0x560, &(0x7f0000000a00)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x80000001) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x2, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x1fc}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x12, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d01ef589789260114d33eaca2c000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250300000008000b000000000008003b00040000000500300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0x8000f28, 0x0) splice(r12, 0x0, r11, 0x0, 0x7f, 0xe) write(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r14, 0x2004, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) 2m3.73520957s ago: executing program 36 (id=11487): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x1f, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file2\x00', 0x300c056, &(0x7f0000000f80)={[{@noload}, {@data_err_abort}, {@data_err_abort}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@obj_user={'obj_user', 0x3d, 'dioread_lock'}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'contention_end\x00'}}, {@uid_gt}, {@smackfshat={'smackfshat', 0x3d, '/dev/net/tun\x00'}}, {@appraise_type}, {@smackfstransmute={'smackfstransmute', 0x3d, '^(K%e.{)\\3,@'}}, {@dont_hash}, {@uid_eq}]}, 0x1, 0x560, &(0x7f0000000a00)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000180)=0x80000001) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x2, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4007, 0x0, 0x0, 0x1fc}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r6}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) r9 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x12, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d01ef589789260114d33eaca2c000000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250300000008000b000000000008003b00040000000500300000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0x8000f28, 0x0) splice(r12, 0x0, r11, 0x0, 0x7f, 0xe) write(r10, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r14 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r14, 0x2004, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[], 0x0) 4.45969273s ago: executing program 7 (id=13305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x7}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) (fail_nth: 7) 3.803597778s ago: executing program 7 (id=13311): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x92}, [@ldst={0x3, 0x0, 0x4, 0x0, 0x0, 0x50, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000d190000f10000000000000630000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000003c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x10, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r3, 0x33, 0x0, @val=@tcx={@void, @value=r2, @void, @void, r4}}, 0x1c) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 3.713625922s ago: executing program 7 (id=13313): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000001940)=[{&(0x7f0000001700)}], 0x1, 0x5, 0x5, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0xfffffffffffffee2}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xf8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) 3.464266612s ago: executing program 9 (id=13320): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180), &(0x7f0000000280)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) tkill(r4, 0x2f) tkill(r4, 0x22) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRES16=r4, @ANYRES32, @ANYRESHEX, @ANYRES64=r0, @ANYRESHEX=0x0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x32, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRESDEC, @ANYRES8=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x800000000006}, 0x18) socket$packet(0x11, 0xa, 0x300) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) 2.913732956s ago: executing program 7 (id=13329): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0xd3b, 0x4, 0x5, 0x3ff, 0x6, "af3f3b6275c73cb3"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) syz_open_pts(0xffffffffffffffff, 0x8c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000006, 0x4000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xc, 0x63a7}, 0x126, 0x1ff, 0xffff8001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10b8}, 0x60000106) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000d80000954c3531d7d9a5abbd7b1f259bdfc205d2e405577a566c13457a387cc7aa74e468c4b2a93ac3a05d924e70680ee2e067dcb3ef6f5da17d7fc307f5b94377c0e4511fb5ce904696bdf162e3716062f65488f11be28f790296df1889f5df5403823479171a44c31d8cee2a9c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x18) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="13000000", @ANYRES16=r2, @ANYBLOB="00082dbd7000fcdbdf2501000014001700000007000000026574683a77673000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44044004) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000c1402002abd70def359c62508003d00000000000808010000000000080003000100000008000100000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.81166861s ago: executing program 7 (id=13332): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1f00", "62266bd8", "1e00040000000100"}, 0x28) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000600)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 2.735559483s ago: executing program 1 (id=13334): r0 = socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x40, 0x1c0}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(r1, r2, &(0x7f0000000300)={[&(0x7f0000000200)='qgroup_meta_reserve\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='qgroup_meta_reserve\x00']}, &(0x7f0000000400)={[&(0x7f0000000340)='\x00', &(0x7f0000000380)='qgroup_meta_reserve\x00', &(0x7f00000003c0)='\x00']}, 0x1000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qgroup_meta_reserve\x00'}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="3d33f06bc03ecf45"}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000480)={0x0, 0x89, "3ac0c45b91c9a4512635742b35b7d5dfdc6264a1e545831d4c7bd208883c9c4b18dd966153566bbbf6c46cca7673e6fe9ca54239765c085ccd9229a07c1bc4beae27d12178dc5c8604c5dab1edd824f1ad722ce8f7fa153ed9b930fd1291e7974c71c18f922f20578287ce94b3c2452828182319baa0a9da5b93a7670d78c2c30ec309c4dd98ea1c82"}, &(0x7f0000000540)=0x91) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000580)={r4, 0x0, 0x2, 0xffffff2e, 0xfffffffe, 0x9}, &(0x7f00000005c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000440)={'wg0\x00', @ifru_map={0x4, 0x7fffffffffffffff, 0x1, 0x9, 0x3, 0x2}}) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x10000973, 0x100, 0x0, 0x177}) 2.678615076s ago: executing program 1 (id=13335): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 2.678130916s ago: executing program 7 (id=13336): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000001940)=[{&(0x7f0000001700)}], 0x1, 0x5, 0x5, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0xfffffffffffffee2}, {0xc}, {0xc, 0x8, {0x73251c587dd540e9}}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xf8}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) 2.665579257s ago: executing program 1 (id=13337): clock_gettime(0x0, 0x0) clock_nanosleep(0x3, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0xe27, 0x0, 0x12, 0x0, &(0x7f0000000800)="006a22cbaa8f00c2d2548980f63d4909df5d", 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) write(0xffffffffffffffff, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37ba", 0x47) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000440)={0x8, 0x9, 0x4, 0x9, 0x7, "efc64a26a83c8ffa332b3a5419e8ab2543c4ec"}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8201, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '`\x00', 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x20000}}}}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000600)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f0000000340)=""/249, 0xf9}], 0x5}, 0x5d}], 0x1, 0x10022, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x161000, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) nanosleep(&(0x7f0000000580), 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) 2.089717081s ago: executing program 9 (id=13339): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x6, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x18081, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x1d, r2, 0x2, {0x0, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f00000003c0)={&(0x7f0000000380)="e4c09fbf435145b83f08d7ee0e5177ddb35c0705b2be00830c1f44f46dcd96971ceb6def7e057175698a7059d90d55ef1df8c21a92", 0x35}, 0x1, 0x0, 0x0, 0x4a054}, 0x40080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = eventfd(0x2) write$eventfd(r5, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 1.380207821s ago: executing program 1 (id=13347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x80, 0x7, 0x2, @local, @private2, 0x8000, 0x40, 0x101, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x40, 0x1, 0x100, 0xffffff7f, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x68, 0x0, 0x7, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x21}, {[@timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x8, [{@local}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x9}, {@empty, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000bc0)=""/4096, 0x1000, 0x2003, &(0x7f0000000880)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r10, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r10, 0x40083}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @sit={{0x8}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xb}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x2, 0x5, 0x80, 0x0, 0x3e, @mcast2, @private2, 0x20, 0x10, 0x6, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="a8010000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000ffdbdf251300000064000180140002006261746164765f736c6176655f300000080003000600000014000200767863616e310000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020067656e657665300000000000000000001400020073797a5f74756e000000000000000000200001801400020070696d3672656731000000000000000008000100", @ANYRES32=r4, @ANYBLOB="38000180080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0800030000000000140002006d61637674617030000000000000000008000100", @ANYRES32=r6, @ANYBLOB="2c0001800800030001000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000100", @ANYRES32=r10, @ANYBLOB="2000018008000100", @ANYRES32=r11, @ANYBLOB="1400028aec9900000000000000000000000000000000003400018008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d300000000000000000000000140002006261746164765f736c6176655f31000058000180140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r12, @ANYBLOB="08000300020000001400020069705f767469300000000000000000001400020076657468315f746f5f627269646765000800030001000000"], 0x1a8}, 0x1, 0x0, 0x0, 0x4008001}, 0x8841) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r14}, 0x10) ptrace$getregset(0x4204, r13, 0x2, &(0x7f0000000740)={0x0}) 1.286482435s ago: executing program 1 (id=13349): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x83) write$cgroup_pressure(r0, &(0x7f0000000500)={'some', 0x20, 0xc, 0x20, 0x1}, 0x2f) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x19041e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3010046, &(0x7f0000000480)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}, {@dont_measure}, {@fowner_eq}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@smackfsfloor}, {@appraise}]}, 0x1, 0x553, &(0x7f0000001080)="$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") ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x4, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000a40)={0x1, 0x5, 0x1}) openat2$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)={0x2003, 0x180, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r7 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xe801}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 965.087329ms ago: executing program 9 (id=13352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 915.222291ms ago: executing program 9 (id=13353): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xd3b, 0x4, 0x5, 0x3ff, 0x6, "af3f3b6275c73cb3"}) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x8c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000006, 0x4000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xc, 0x63a7}, 0x126, 0x1ff, 0xffff8001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10b8}, 0x60000106) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000d80000954c3531d7d9a5abbd7b1f259bdfc205d2e405577a566c13457a387cc7aa74e468c4b2a93ac3a05d924e70680ee2e067dcb3ef6f5da17d7fc307f5b94377c0e4511fb5ce904696bdf162e3716062f65488f11be28f790296df1889f5df5403823479171a44c31d8cee2a9c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="13000000", @ANYRES16=r3, @ANYBLOB="00082dbd7000fcdbdf2501000014001700000007000000026574683a77673000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44044004) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000c1402002abd70def359c62508003d00000000000808010000000000080003000100000008000100000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 903.498551ms ago: executing program 5 (id=13354): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) 808.218175ms ago: executing program 1 (id=13355): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) recvmmsg(r4, &(0x7f0000007940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4084, 0x7f8}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/111, 0x40}, {&(0x7f0000000480)=""/151}], 0x3}, 0xc}], 0x40000000000004f, 0x2002, 0x0) 634.700502ms ago: executing program 5 (id=13356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) 580.675265ms ago: executing program 5 (id=13357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 547.573556ms ago: executing program 9 (id=13358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xf2ff, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0xfff3, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x2008c004) 492.208079ms ago: executing program 5 (id=13359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 424.208072ms ago: executing program 5 (id=13361): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) 409.394612ms ago: executing program 9 (id=13362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r4, r3, 0x0, 0x3ffff) write(r2, &(0x7f0000004200)='t', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x6c) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bind$rds(r1, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newsa={0x188, 0x10, 0x1, 0x0, 0xfffffdfd, {{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x16}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d2, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x100000000000, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x3, 0x0, 0xa3}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x100}}, @algo_auth_trunc={0x4c, 0x14, {{'cbcmac(blowfish-asm)\x00'}, 0x0, 0xc0}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') creat(&(0x7f0000000000)='./bus\x00', 0x0) 372.996334ms ago: executing program 0 (id=13363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 372.560524ms ago: executing program 5 (id=13364): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x99, 0x6, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x18081, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x1d, r2, 0x2, {0x0, 0xff, 0x3}, 0xfe}, 0x18, &(0x7f00000003c0)={&(0x7f0000000380)="e4c09fbf435145b83f08d7ee0e5177ddb35c0705b2be00830c1f44f46dcd96971ceb6def7e057175698a7059d90d55ef1df8c21a92", 0x35}, 0x1, 0x0, 0x0, 0x4a054}, 0x40080) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = eventfd(0x2) write$eventfd(r5, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 326.275956ms ago: executing program 0 (id=13365): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1f00", "62266bd8", "1e00040000000100"}, 0x28) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000600)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 279.966208ms ago: executing program 0 (id=13366): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) capget(&(0x7f00000004c0)={0x19980330, r0}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) capget(&(0x7f0000000580)={0x20080522, r1}, &(0x7f00000005c0)={0x5, 0x3, 0x3303, 0xb95, 0x6}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_open_dev$vcsa(&(0x7f0000000500), 0x5, 0x28a641) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 207.054981ms ago: executing program 0 (id=13367): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r2, 0x14) 167.569842ms ago: executing program 0 (id=13368): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xd3b, 0x4, 0x5, 0x3ff, 0x6, "af3f3b6275c73cb3"}) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x8c2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigpending(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000006, 0x4000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xc, 0x63a7}, 0x126, 0x1ff, 0xffff8001, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10b8}, 0x60000106) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b700000000d80000954c3531d7d9a5abbd7b1f259bdfc205d2e405577a566c13457a387cc7aa74e468c4b2a93ac3a05d924e70680ee2e067dcb3ef6f5da17d7fc307f5b94377c0e4511fb5ce904696bdf162e3716062f65488f11be28f790296df1889f5df5403823479171a44c31d8cee2a9c"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/50) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="13000000", @ANYRES16=r3, @ANYBLOB="00082dbd7000fcdbdf2501000014001700000007000000026574683a77673000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44044004) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000c1402002abd70def359c62508003d00000000000808010000000000080003000100000008000100000000000800030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 0s ago: executing program 0 (id=13369): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) gettid() r1 = gettid() tkill(r1, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffec, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x73, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x13, 0x2, {0x1, 0x400, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x0, 0x1, {0x0, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x8, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x3, 0x0, 0x6}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x8000}, 0x18) open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) kernel console output (not intermixed with test programs): nge from 0 to 7 [ 583.509946][ T6230] Buffer I/O error on dev loop5, logical block 0, async page read [ 583.518252][ T6230] Buffer I/O error on dev loop5, logical block 0, async page read [ 583.526353][ T6230] loop5: unable to read partition table [ 583.533828][ T6230] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 583.533828][ T6230] ) failed (rc=-5) [ 583.559825][ T6230] xt_recent: Unsupported userspace flags (000000b1) [ 583.649339][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12571'. [ 583.676353][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12571'. [ 585.679682][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 585.679700][ T29] audit: type=1400 audit(585.658:62291): avc: denied { bind } for pid=6315 comm="syz.9.12600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 585.933953][ T6321] loop9: detected capacity change from 0 to 512 [ 585.952130][ T6318] netlink: 'syz.9.12600': attribute type 2 has an invalid length. [ 585.961005][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12600'. [ 586.156595][ T6337] loop7: detected capacity change from 0 to 8192 [ 586.158641][ T6340] tipc: Enabled bearer , priority 0 [ 586.174935][ T6340] syzkaller0: entered promiscuous mode [ 586.181374][ T6340] syzkaller0: entered allmulticast mode [ 586.221091][ T6340] tipc: Resetting bearer [ 586.229426][ T6338] tipc: Resetting bearer [ 586.236425][ T6338] tipc: Disabling bearer [ 586.249695][ T6337] loop7: p1 p2 p3 p4 [ 586.253732][ T6337] loop7: p1 size 196608 extends beyond EOD, truncated [ 586.263835][ T6337] loop7: p2 start 164919041 is beyond EOD, truncated [ 586.273357][ T6337] loop7: p3 size 66846464 extends beyond EOD, truncated [ 586.286508][ T6337] loop7: p4 size 37048832 extends beyond EOD, truncated [ 586.321524][ T29] audit: type=1326 audit(586.288:62292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.345621][ T29] audit: type=1326 audit(586.288:62293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.369644][ T29] audit: type=1326 audit(586.288:62294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.393889][ T29] audit: type=1326 audit(586.288:62295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.416919][ T29] audit: type=1326 audit(586.288:62296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.440812][ T29] audit: type=1326 audit(586.288:62297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.465099][ T29] audit: type=1326 audit(586.288:62298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.489168][ T29] audit: type=1326 audit(586.288:62299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.512193][ T29] audit: type=1326 audit(586.288:62300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6331 comm="syz.1.12609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 586.893812][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12629'. [ 586.921762][ T6380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12629'. [ 587.218035][ T6380] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.315723][ T6374] loop5: detected capacity change from 0 to 8192 [ 587.337920][ T6389] loop1: detected capacity change from 0 to 1024 [ 587.359054][ T6380] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.387447][ T6389] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12630: Failed to acquire dquot type 0 [ 587.429316][ T6374] loop5: p1 p2 p3 p4 [ 587.433989][ T6374] loop5: p1 size 196608 extends beyond EOD, truncated [ 587.442221][ T6389] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 587.472684][ T6380] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.508886][ T6389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12630: corrupted inode contents [ 587.639465][ T6374] loop5: p2 start 164919041 is beyond EOD, truncated [ 587.646237][ T6374] loop5: p3 size 66846464 extends beyond EOD, truncated [ 587.665139][ T6389] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.12630: mark_inode_dirty error [ 587.689770][ T6389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12630: corrupted inode contents [ 587.703112][ T6374] loop5: p4 size 37048832 extends beyond EOD, truncated [ 587.721818][ T6389] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.12630: mark_inode_dirty error [ 587.722485][ T6380] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.768942][ T6389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12630: corrupted inode contents [ 587.799909][ T6389] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 587.829555][ T6389] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12630: corrupted inode contents [ 587.854962][ T6389] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.12630: mark_inode_dirty error [ 587.873377][ T6403] FAULT_INJECTION: forcing a failure. [ 587.873377][ T6403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.887483][ T6403] CPU: 1 UID: 0 PID: 6403 Comm: syz.7.12636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 587.887524][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 587.887538][ T6403] Call Trace: [ 587.887545][ T6403] [ 587.887578][ T6403] __dump_stack+0x1d/0x30 [ 587.887602][ T6403] dump_stack_lvl+0xe8/0x140 [ 587.887625][ T6403] dump_stack+0x15/0x1b [ 587.887644][ T6403] should_fail_ex+0x265/0x280 [ 587.887716][ T6403] should_fail+0xb/0x20 [ 587.887734][ T6403] should_fail_usercopy+0x1a/0x20 [ 587.887757][ T6403] _copy_to_user+0x20/0xa0 [ 587.887785][ T6403] simple_read_from_buffer+0xb5/0x130 [ 587.887865][ T6403] proc_fail_nth_read+0x10e/0x150 [ 587.887898][ T6403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.887934][ T6403] vfs_read+0x1a8/0x770 [ 587.887960][ T6403] ? __rcu_read_unlock+0x4f/0x70 [ 587.888020][ T6403] ? __fget_files+0x184/0x1c0 [ 587.888053][ T6403] ksys_read+0xda/0x1a0 [ 587.888132][ T6403] __x64_sys_read+0x40/0x50 [ 587.888188][ T6403] x64_sys_call+0x27c0/0x3000 [ 587.888213][ T6403] do_syscall_64+0xd2/0x200 [ 587.888311][ T6403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 587.888338][ T6403] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 587.888373][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.888395][ T6403] RIP: 0033:0x7fdc8bb9e15c [ 587.888436][ T6403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.888458][ T6403] RSP: 002b:00007fdc8a5ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.888481][ T6403] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9e15c [ 587.888550][ T6403] RDX: 000000000000000f RSI: 00007fdc8a5ff0a0 RDI: 0000000000000007 [ 587.888564][ T6403] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 587.888578][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.888592][ T6403] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 587.888612][ T6403] [ 587.889234][ T6389] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 588.003101][ T6407] loop7: detected capacity change from 0 to 512 [ 588.071490][T31532] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.100271][ T6407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 588.160142][ T6389] EXT4-fs (loop1): 1 truncate cleaned up [ 588.184187][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.205179][T31532] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.216832][T31532] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.237719][T31532] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.254891][ T6407] ext4: Unknown parameter ' ' [ 588.303378][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 588.335763][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.443734][ T6427] loop7: detected capacity change from 0 to 1024 [ 588.453018][ T6427] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 588.469232][ T6427] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #3: block 1: comm syz.7.12644: lblock 1 mapped to illegal pblock 1 (length 1) [ 588.485860][ T6427] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.12644: Failed to acquire dquot type 0 [ 588.503797][ T6427] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.12644: Freeing blocks not in datazone - block = 0, count = 4096 [ 588.526514][ T6426] loop9: detected capacity change from 0 to 8192 [ 588.529367][ T6427] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.12644: Invalid inode bitmap blk 0 in block_group 0 [ 588.550993][T31552] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 588.569647][ T6427] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 588.581466][ T6426] loop9: p1 p2 p3 p4 [ 588.585884][T31552] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:34: Failed to release dquot type 0 [ 588.595842][ T6426] loop9: p1 size 196608 extends beyond EOD, truncated [ 588.604922][ T6426] loop9: p2 start 164919041 is beyond EOD, truncated [ 588.610376][ T6427] EXT4-fs (loop7): 1 orphan inode deleted [ 588.612508][ T6426] loop9: p3 size 66846464 extends beyond EOD, truncated [ 588.620791][ T6427] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.626266][ T6426] loop9: p4 size 37048832 extends beyond EOD, truncated [ 588.667456][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.721225][ T6440] FAULT_INJECTION: forcing a failure. [ 588.721225][ T6440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.734879][ T6440] CPU: 1 UID: 0 PID: 6440 Comm: syz.7.12649 Not tainted syzkaller #0 PREEMPT(voluntary) [ 588.734911][ T6440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.734921][ T6440] Call Trace: [ 588.734926][ T6440] [ 588.734932][ T6440] __dump_stack+0x1d/0x30 [ 588.734958][ T6440] dump_stack_lvl+0xe8/0x140 [ 588.735026][ T6440] dump_stack+0x15/0x1b [ 588.735038][ T6440] should_fail_ex+0x265/0x280 [ 588.735061][ T6440] should_fail+0xb/0x20 [ 588.735079][ T6440] should_fail_usercopy+0x1a/0x20 [ 588.735101][ T6440] copy_fpstate_to_sigframe+0x628/0x7d0 [ 588.735227][ T6440] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 588.735268][ T6440] ? x86_task_fpu+0x36/0x60 [ 588.735298][ T6440] get_sigframe+0x34d/0x490 [ 588.735313][ T6440] ? get_signal+0xdc7/0xf70 [ 588.735329][ T6440] x64_setup_rt_frame+0xa8/0x580 [ 588.735403][ T6440] arch_do_signal_or_restart+0x23e/0x440 [ 588.735485][ T6440] exit_to_user_mode_loop+0x77/0x110 [ 588.735574][ T6440] do_syscall_64+0x1d6/0x200 [ 588.735589][ T6440] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 588.735606][ T6440] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 588.735703][ T6440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.735717][ T6440] RIP: 0033:0x7fdc8bb9f749 [ 588.735729][ T6440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.735742][ T6440] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.735761][ T6440] RAX: 0000000000000012 RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 588.735777][ T6440] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000006 [ 588.735785][ T6440] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 588.735794][ T6440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.735803][ T6440] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 588.735820][ T6440] [ 589.204247][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12661'. [ 589.216241][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12661'. [ 589.241751][ T6466] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.301072][ T6466] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.365480][ T6466] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.426226][ T6473] netlink: 'syz.7.12662': attribute type 3 has an invalid length. [ 589.435811][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12662'. [ 589.474173][ T6480] x_tables: duplicate underflow at hook 2 [ 589.600212][ T6492] netem: change failed [ 589.604416][ T6492] FAULT_INJECTION: forcing a failure. [ 589.604416][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.618513][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.9.12672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.618589][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.618603][ T6492] Call Trace: [ 589.618611][ T6492] [ 589.618619][ T6492] __dump_stack+0x1d/0x30 [ 589.618644][ T6492] dump_stack_lvl+0xe8/0x140 [ 589.618666][ T6492] dump_stack+0x15/0x1b [ 589.618686][ T6492] should_fail_ex+0x265/0x280 [ 589.618795][ T6492] should_fail+0xb/0x20 [ 589.618813][ T6492] should_fail_usercopy+0x1a/0x20 [ 589.618836][ T6492] _copy_from_user+0x1c/0xb0 [ 589.618859][ T6492] kstrtouint_from_user+0x69/0xf0 [ 589.618905][ T6492] ? 0xffffffff81000000 [ 589.618920][ T6492] ? selinux_file_permission+0x1e4/0x320 [ 589.618956][ T6492] proc_fail_nth_write+0x50/0x160 [ 589.619030][ T6492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 589.619064][ T6492] vfs_write+0x269/0x960 [ 589.619099][ T6492] ? vfs_read+0x4e6/0x770 [ 589.619140][ T6492] ? __rcu_read_unlock+0x4f/0x70 [ 589.619166][ T6492] ? __fget_files+0x184/0x1c0 [ 589.619227][ T6492] ksys_write+0xda/0x1a0 [ 589.619301][ T6492] __x64_sys_write+0x40/0x50 [ 589.619327][ T6492] x64_sys_call+0x2802/0x3000 [ 589.619352][ T6492] do_syscall_64+0xd2/0x200 [ 589.619373][ T6492] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 589.619402][ T6492] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 589.619451][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.619543][ T6492] RIP: 0033:0x7fcd0d71e1ff [ 589.619561][ T6492] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 589.619582][ T6492] RSP: 002b:00007fcd0c17f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 589.619605][ T6492] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcd0d71e1ff [ 589.619620][ T6492] RDX: 0000000000000001 RSI: 00007fcd0c17f0a0 RDI: 000000000000000a [ 589.619644][ T6492] RBP: 00007fcd0c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 589.619664][ T6492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 589.619676][ T6492] R13: 00007fcd0d976038 R14: 00007fcd0d975fa0 R15: 00007ffc4be2eae8 [ 589.619693][ T6492] [ 589.855478][ T6466] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.016771][T31552] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.048623][T31552] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.058493][T31552] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.071481][ T6513] loop1: detected capacity change from 0 to 1024 [ 590.083357][ T6513] EXT4-fs: Ignoring removed nobh option [ 590.091598][ T6513] EXT4-fs: Ignoring removed bh option [ 590.115831][T31552] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.154371][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.983202][ T6510] delete_channel: no stack [ 591.059233][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.373384][ T6583] loop7: detected capacity change from 0 to 128 [ 591.416240][ T6583] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.533327][ T6583] FAULT_INJECTION: forcing a failure. [ 591.533327][ T6583] name failslab, interval 1, probability 0, space 0, times 0 [ 591.548776][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.7.12706 Not tainted syzkaller #0 PREEMPT(voluntary) [ 591.548891][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.548905][ T6583] Call Trace: [ 591.548914][ T6583] [ 591.549004][ T6583] __dump_stack+0x1d/0x30 [ 591.549028][ T6583] dump_stack_lvl+0xe8/0x140 [ 591.549048][ T6583] dump_stack+0x15/0x1b [ 591.549069][ T6583] should_fail_ex+0x265/0x280 [ 591.549105][ T6583] should_failslab+0x8c/0xb0 [ 591.549188][ T6583] kmem_cache_alloc_noprof+0x50/0x480 [ 591.549247][ T6583] ? security_inode_alloc+0x37/0x100 [ 591.549272][ T6583] security_inode_alloc+0x37/0x100 [ 591.549295][ T6583] inode_init_always_gfp+0x4b7/0x500 [ 591.549341][ T6583] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 591.549366][ T6583] alloc_inode+0x58/0x170 [ 591.549387][ T6583] new_inode+0x1d/0xe0 [ 591.549420][ T6583] __ext4_new_inode+0x15e/0x2330 [ 591.549444][ T6583] ? __dquot_initialize+0x146/0x7c0 [ 591.549476][ T6583] ? _raw_spin_unlock+0x26/0x50 [ 591.549508][ T6583] ext4_create+0x16e/0x2f0 [ 591.549708][ T6583] ? __pfx_ext4_create+0x10/0x10 [ 591.549737][ T6583] path_openat+0x1105/0x2170 [ 591.549765][ T6583] do_filp_open+0x109/0x230 [ 591.549825][ T6583] do_sys_openat2+0xa6/0x110 [ 591.549846][ T6583] __x64_sys_open+0xe6/0x110 [ 591.549871][ T6583] x64_sys_call+0x1457/0x3000 [ 591.549891][ T6583] do_syscall_64+0xd2/0x200 [ 591.549913][ T6583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 591.549987][ T6583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 591.550040][ T6583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.550064][ T6583] RIP: 0033:0x7fdc8bb9f749 [ 591.550081][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.550098][ T6583] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 591.550117][ T6583] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 591.550131][ T6583] RDX: 0000000000000090 RSI: 0000000000066842 RDI: 0000200000000080 [ 591.550168][ T6583] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 591.550182][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.550196][ T6583] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 591.550215][ T6583] [ 591.873275][ T5171] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.188529][ T6608] loop5: detected capacity change from 0 to 8192 [ 592.238169][ T6608] loop5: p1 p2 p3 p4 [ 592.242436][ T6608] loop5: p1 size 196608 extends beyond EOD, truncated [ 592.263950][ T6608] loop5: p2 start 164919041 is beyond EOD, truncated [ 592.271765][ T6608] loop5: p3 size 66846464 extends beyond EOD, truncated [ 592.283724][ T6608] loop5: p4 size 37048832 extends beyond EOD, truncated [ 592.310785][ T6621] loop9: detected capacity change from 0 to 1024 [ 592.369629][ T6621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.382163][ T6630] loop7: detected capacity change from 0 to 4096 [ 592.410070][ T6630] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.486582][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.973186][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.136240][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12739'. [ 593.152442][ T6667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12739'. [ 593.183334][ T6667] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.241483][ T6667] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.325269][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12745'. [ 593.353702][ T6678] netlink: 28 bytes leftover after parsing attributes in process `syz.7.12745'. [ 593.410377][ T6667] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.442062][ T6678] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.459412][ T6667] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.503440][ T6678] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.542841][T31549] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.569551][T31549] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.583492][ T6678] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.595084][ T5938] IPVS: starting estimator thread 0... [ 593.611450][T31549] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.626202][T31549] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.655667][ T6678] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.708021][ T6687] IPVS: using max 2832 ests per chain, 141600 per kthread [ 593.741134][T31549] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.770221][T31549] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.834009][T31549] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.874001][ T6706] loop7: detected capacity change from 0 to 1024 [ 593.905287][T31523] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.952273][ T6706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 594.082633][ T6706] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 594.084188][ T6716] netem: change failed [ 594.115228][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12760'. [ 594.158234][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12760'. [ 594.200601][ T6719] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.317924][ T29] kauditd_printk_skb: 1614 callbacks suppressed [ 594.317940][ T29] audit: type=1326 audit(594.288:63910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc8bb965e7 code=0x7ffc0000 [ 594.348676][ T29] audit: type=1326 audit(594.288:63911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc8bb3b829 code=0x7ffc0000 [ 594.372779][ T29] audit: type=1326 audit(594.288:63912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc8bb965e7 code=0x7ffc0000 [ 594.398067][ T29] audit: type=1326 audit(594.288:63913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc8bb3b829 code=0x7ffc0000 [ 594.422287][ T29] audit: type=1326 audit(594.288:63914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.446232][ T29] audit: type=1326 audit(594.288:63915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.470190][ T29] audit: type=1326 audit(594.288:63916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.494209][ T29] audit: type=1326 audit(594.288:63917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.518221][ T29] audit: type=1326 audit(594.288:63918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.542215][ T29] audit: type=1326 audit(594.288:63919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6705 comm="syz.7.12756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc8bb9f749 code=0x7ffc0000 [ 594.551959][ T6721] loop5: detected capacity change from 0 to 8192 [ 594.613619][ T6719] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.694989][ T6721] loop5: p1 p2 p3 p4 [ 594.702423][ T6719] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.717205][ T6721] loop5: p1 size 196608 extends beyond EOD, truncated [ 594.732278][ T6721] loop5: p2 start 164919041 is beyond EOD, truncated [ 594.739993][ T6721] loop5: p3 size 66846464 extends beyond EOD, truncated [ 594.754925][ T6721] loop5: p4 size 37048832 extends beyond EOD, truncated [ 594.789355][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.801353][ T6719] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.921013][ T6737] 9pnet_fd: Insufficient options for proto=fd [ 595.026938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.039667][ T6741] loop7: detected capacity change from 0 to 8192 [ 595.065622][ T6747] loop5: detected capacity change from 0 to 7 [ 595.074717][ T6741] loop7: p1 p2 p3 p4 [ 595.074870][ T6747] Buffer I/O error on dev loop5, logical block 0, async page read [ 595.079959][ T6741] loop7: p1 size 196608 extends beyond EOD, truncated [ 595.101813][ T6747] Buffer I/O error on dev loop5, logical block 0, async page read [ 595.101862][ T6741] loop7: p2 start 164919041 is beyond EOD, truncated [ 595.112403][ T6747] loop5: unable to read partition table [ 595.117627][ T6741] loop7: p3 size 66846464 extends beyond EOD, truncated [ 595.138679][ T6750] xt_recent: Unsupported userspace flags (000000b1) [ 595.145457][ T6747] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 595.145457][ T6747] ) failed (rc=-5) [ 595.159922][ T6741] loop7: p4 size 37048832 extends beyond EOD, truncated [ 595.901095][ T6804] loop7: detected capacity change from 0 to 1024 [ 595.920937][ T6804] EXT4-fs: Ignoring removed nobh option [ 595.926564][ T6804] EXT4-fs: Ignoring removed bh option [ 595.971093][ T6804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.636130][ T6835] netlink: 112 bytes leftover after parsing attributes in process `syz.9.12807'. [ 596.702117][ T6841] loop1: detected capacity change from 0 to 1024 [ 596.730921][ T6841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.748745][ T6803] delete_channel: no stack [ 596.784727][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.784742][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.844901][ T6851] bond0: (slave dummy0): Releasing backup interface [ 596.864225][ T6851] bridge_slave_0: left allmulticast mode [ 596.872742][ T6851] bridge_slave_0: left promiscuous mode [ 596.881322][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.901713][ T6851] bridge_slave_1: left allmulticast mode [ 596.910015][ T6851] bridge_slave_1: left promiscuous mode [ 596.915758][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.940993][ T6851] bond0: (slave bond_slave_0): Releasing backup interface [ 596.971538][ T6851] bond0: (slave bond_slave_1): Releasing backup interface [ 597.011654][ T6851] team0: Port device team_slave_0 removed [ 597.032270][ T6851] team0: Port device team_slave_1 removed [ 597.042571][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.052805][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.066029][ T6871] loop1: detected capacity change from 0 to 512 [ 597.081234][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.091326][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.104502][ T6851] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 597.125022][ T6871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.146561][ T6852] team0: Mode changed to "loadbalance" [ 597.356584][ T6879] netlink: 112 bytes leftover after parsing attributes in process `syz.9.12821'. [ 597.439098][ T6876] can: request_module (can-proto-0) failed. [ 597.445981][ T6876] EXT4-fs (loop1): shut down requested (0) [ 597.471896][ T6884] loop9: detected capacity change from 0 to 512 [ 597.482171][ T6884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.665012][ T6886] can: request_module (can-proto-0) failed. [ 597.695649][T31523] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.722257][T31523] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.733322][ T6890] EXT4-fs (loop9): shut down requested (0) [ 597.746612][T31523] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.770473][ T6892] loop5: detected capacity change from 0 to 1024 [ 597.780241][T31523] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.809018][ T6892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.839322][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.890803][ T6907] loop5: detected capacity change from 0 to 1024 [ 597.898605][ T6907] EXT4-fs: Ignoring removed nobh option [ 597.904218][ T6907] EXT4-fs: Ignoring removed bh option [ 597.913742][ T6906] xt_recent: Unsupported userspace flags (000000b1) [ 597.942243][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.963719][ T6907] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.981587][ T6905] delete_channel: no stack [ 597.982964][ T6913] rdma_op ffff888154e66580 conn xmit_rdma 0000000000000000 [ 598.040348][ T6911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12831'. [ 598.055036][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.082146][ T6911] FAULT_INJECTION: forcing a failure. [ 598.082146][ T6911] name failslab, interval 1, probability 0, space 0, times 0 [ 598.098815][ T6911] CPU: 0 UID: 0 PID: 6911 Comm: syz.1.12831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 598.098845][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.098872][ T6911] Call Trace: [ 598.098880][ T6911] [ 598.098890][ T6911] __dump_stack+0x1d/0x30 [ 598.098918][ T6911] dump_stack_lvl+0xe8/0x140 [ 598.098942][ T6911] dump_stack+0x15/0x1b [ 598.098963][ T6911] should_fail_ex+0x265/0x280 [ 598.099004][ T6911] should_failslab+0x8c/0xb0 [ 598.099030][ T6911] kmem_cache_alloc_noprof+0x50/0x480 [ 598.099087][ T6911] ? skb_clone+0x151/0x1f0 [ 598.099112][ T6911] skb_clone+0x151/0x1f0 [ 598.099134][ T6911] __netlink_deliver_tap+0x2c9/0x500 [ 598.099163][ T6911] netlink_unicast+0x66b/0x690 [ 598.099264][ T6911] netlink_sendmsg+0x58b/0x6b0 [ 598.099284][ T6911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.099302][ T6911] __sock_sendmsg+0x145/0x180 [ 598.099329][ T6911] ____sys_sendmsg+0x31e/0x4e0 [ 598.099375][ T6911] ___sys_sendmsg+0x17b/0x1d0 [ 598.099411][ T6911] __x64_sys_sendmsg+0xd4/0x160 [ 598.099434][ T6911] x64_sys_call+0x191e/0x3000 [ 598.099456][ T6911] do_syscall_64+0xd2/0x200 [ 598.099481][ T6911] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 598.099537][ T6911] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 598.099653][ T6911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.099679][ T6911] RIP: 0033:0x7fc03c3df749 [ 598.099699][ T6911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.099721][ T6911] RSP: 002b:00007fc03ae47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.099744][ T6911] RAX: ffffffffffffffda RBX: 00007fc03c635fa0 RCX: 00007fc03c3df749 [ 598.099757][ T6911] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 598.099833][ T6911] RBP: 00007fc03ae47090 R08: 0000000000000000 R09: 0000000000000000 [ 598.099844][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.099856][ T6911] R13: 00007fc03c636038 R14: 00007fc03c635fa0 R15: 00007ffe36812408 [ 598.099873][ T6911] [ 598.375258][ T6924] loop5: detected capacity change from 0 to 1024 [ 598.402508][ T6924] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.12835: Failed to acquire dquot type 0 [ 598.422457][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.482392][ T6924] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 598.540082][ T6924] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12835: corrupted inode contents [ 598.589824][ T6924] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.12835: mark_inode_dirty error [ 598.614913][ T6924] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12835: corrupted inode contents [ 598.634540][ T6924] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12835: mark_inode_dirty error [ 598.664692][ T6924] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12835: corrupted inode contents [ 598.680874][ T6924] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 598.692451][ T6924] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12835: corrupted inode contents [ 598.705695][ T6924] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.12835: mark_inode_dirty error [ 598.728735][ T6924] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 598.739851][ T6924] EXT4-fs (loop5): 1 truncate cleaned up [ 598.745931][ T6924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.982164][ T6955] loop9: detected capacity change from 0 to 1024 [ 599.000237][ T6955] EXT4-fs: Ignoring removed orlov option [ 599.032583][ T6955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.161803][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.288301][ T6976] delete_channel: no stack [ 599.362147][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12858'. [ 599.373786][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12858'. [ 599.389806][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 599.389823][ T29] audit: type=1400 audit(599.368:64265): avc: denied { bind } for pid=6984 comm="syz.5.12858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.422466][ T29] audit: type=1400 audit(599.398:64266): avc: denied { setopt } for pid=6984 comm="syz.5.12858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 599.445102][ T6985] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.500308][ T6985] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.551753][ T6985] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.611757][ T6985] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.641651][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.700461][T31570] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.717039][ T29] audit: type=1326 audit(599.688:64267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.741113][ T29] audit: type=1326 audit(599.688:64268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.751489][T31570] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.765291][ T29] audit: type=1326 audit(599.688:64269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.765330][ T29] audit: type=1326 audit(599.688:64270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.765367][ T29] audit: type=1326 audit(599.688:64271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.765398][ T29] audit: type=1326 audit(599.688:64272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.832502][ T29] audit: type=1326 audit(599.718:64273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.902285][ T29] audit: type=1326 audit(599.718:64274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7003 comm="syz.1.12866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc03c3df749 code=0x7ffc0000 [ 599.971349][ T7007] delete_channel: no stack [ 600.013641][T31570] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.023606][T31570] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.068589][ T7020] netlink: 'syz.1.12874': attribute type 1 has an invalid length. [ 600.105229][ T7026] loop7: detected capacity change from 0 to 1024 [ 600.121289][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12877'. [ 600.152451][ T7026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.159747][ T7029] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.174943][ T7036] FAULT_INJECTION: forcing a failure. [ 600.174943][ T7036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 600.188007][ T7036] CPU: 1 UID: 0 PID: 7036 Comm: syz.9.12877 Not tainted syzkaller #0 PREEMPT(voluntary) [ 600.188037][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 600.188051][ T7036] Call Trace: [ 600.188059][ T7036] [ 600.188069][ T7036] __dump_stack+0x1d/0x30 [ 600.188111][ T7036] dump_stack_lvl+0xe8/0x140 [ 600.188135][ T7036] dump_stack+0x15/0x1b [ 600.188155][ T7036] should_fail_ex+0x265/0x280 [ 600.188191][ T7036] should_fail+0xb/0x20 [ 600.188210][ T7036] should_fail_usercopy+0x1a/0x20 [ 600.188304][ T7036] copy_to_user_nofault+0x7f/0x120 [ 600.188326][ T7036] bpf_probe_write_user+0x83/0xc0 [ 600.188348][ T7036] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 600.188365][ T7036] bpf_trace_run4+0x117/0x1d0 [ 600.188455][ T7036] __traceiter_sched_switch+0x3f/0x60 [ 600.188480][ T7036] __schedule+0xa17/0xb30 [ 600.188557][ T7036] schedule+0x5f/0xd0 [ 600.188578][ T7036] schedule_preempt_disabled+0x10/0x20 [ 600.188675][ T7036] __mutex_lock+0x467/0xcc0 [ 600.188774][ T7036] __mutex_lock_slowpath+0xa/0x10 [ 600.188811][ T7036] mutex_lock+0x27/0x30 [ 600.188853][ T7036] rtnl_newlink+0x4f1/0x12d0 [ 600.188881][ T7036] ? xas_load+0x413/0x430 [ 600.188898][ T7036] ? __rcu_read_unlock+0x4f/0x70 [ 600.188922][ T7036] ? __rcu_read_unlock+0x4f/0x70 [ 600.188943][ T7036] ? avc_has_perm_noaudit+0x1b1/0x200 [ 600.189047][ T7036] ? cred_has_capability+0x210/0x280 [ 600.189075][ T7036] ? selinux_capable+0x31/0x40 [ 600.189095][ T7036] ? security_capable+0x83/0x90 [ 600.189126][ T7036] ? ns_capable+0x7d/0xb0 [ 600.189146][ T7036] ? __pfx_rtnl_newlink+0x10/0x10 [ 600.189166][ T7036] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 600.189199][ T7036] netlink_rcv_skb+0x123/0x220 [ 600.189273][ T7036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.189335][ T7036] rtnetlink_rcv+0x1c/0x30 [ 600.189396][ T7036] netlink_unicast+0x5c0/0x690 [ 600.189424][ T7036] netlink_sendmsg+0x58b/0x6b0 [ 600.189442][ T7036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.189459][ T7036] __sock_sendmsg+0x145/0x180 [ 600.189482][ T7036] ____sys_sendmsg+0x31e/0x4e0 [ 600.189502][ T7036] ___sys_sendmsg+0x17b/0x1d0 [ 600.189529][ T7036] __x64_sys_sendmsg+0xd4/0x160 [ 600.189549][ T7036] x64_sys_call+0x191e/0x3000 [ 600.189569][ T7036] do_syscall_64+0xd2/0x200 [ 600.189610][ T7036] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 600.189634][ T7036] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 600.189661][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.189694][ T7036] RIP: 0033:0x7fcd0d71f749 [ 600.189709][ T7036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.189776][ T7036] RSP: 002b:00007fcd0c15e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.189795][ T7036] RAX: ffffffffffffffda RBX: 00007fcd0d976090 RCX: 00007fcd0d71f749 [ 600.189806][ T7036] RDX: 0000000020048040 RSI: 0000200000000280 RDI: 0000000000000003 [ 600.189827][ T7036] RBP: 00007fcd0c15e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.189845][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.189856][ T7036] R13: 00007fcd0d976128 R14: 00007fcd0d976090 R15: 00007ffc4be2eae8 [ 600.189873][ T7036] [ 600.501186][ T7036] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 600.512052][ T7032] loop5: detected capacity change from 0 to 4096 [ 600.528792][ T7032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.613365][ T7048] FAULT_INJECTION: forcing a failure. [ 600.613365][ T7048] name failslab, interval 1, probability 0, space 0, times 0 [ 600.628867][ T7048] CPU: 0 UID: 0 PID: 7048 Comm: syz.5.12878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 600.628900][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 600.628914][ T7048] Call Trace: [ 600.628922][ T7048] [ 600.628930][ T7048] __dump_stack+0x1d/0x30 [ 600.628965][ T7048] dump_stack_lvl+0xe8/0x140 [ 600.628988][ T7048] dump_stack+0x15/0x1b [ 600.629009][ T7048] should_fail_ex+0x265/0x280 [ 600.629068][ T7048] ? alloc_pipe_info+0xae/0x350 [ 600.629134][ T7048] should_failslab+0x8c/0xb0 [ 600.629168][ T7048] __kmalloc_cache_noprof+0x4c/0x4a0 [ 600.629345][ T7048] alloc_pipe_info+0xae/0x350 [ 600.629371][ T7048] splice_direct_to_actor+0x592/0x680 [ 600.629394][ T7048] ? kstrtouint_from_user+0x9f/0xf0 [ 600.629473][ T7048] ? __pfx_direct_splice_actor+0x10/0x10 [ 600.629501][ T7048] ? __rcu_read_unlock+0x4f/0x70 [ 600.629606][ T7048] ? get_pid_task+0x96/0xd0 [ 600.629633][ T7048] ? avc_policy_seqno+0x15/0x30 [ 600.629765][ T7048] ? selinux_file_permission+0x1e4/0x320 [ 600.629866][ T7048] do_splice_direct+0xda/0x150 [ 600.629943][ T7048] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 600.629975][ T7048] do_sendfile+0x380/0x650 [ 600.630032][ T7048] __x64_sys_sendfile64+0x105/0x150 [ 600.630063][ T7048] x64_sys_call+0x2bb4/0x3000 [ 600.630087][ T7048] do_syscall_64+0xd2/0x200 [ 600.630179][ T7048] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 600.630212][ T7048] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 600.630251][ T7048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.630275][ T7048] RIP: 0033:0x7f6677c4f749 [ 600.630365][ T7048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.630384][ T7048] RSP: 002b:00007f667668e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 600.630406][ T7048] RAX: ffffffffffffffda RBX: 00007f6677ea6090 RCX: 00007f6677c4f749 [ 600.630421][ T7048] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 600.630436][ T7048] RBP: 00007f667668e090 R08: 0000000000000000 R09: 0000000000000000 [ 600.630452][ T7048] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 600.630467][ T7048] R13: 00007f6677ea6128 R14: 00007f6677ea6090 R15: 00007ffd6b7665a8 [ 600.630549][ T7048] [ 600.863494][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.925053][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.969145][ T7065] loop1: detected capacity change from 0 to 1024 [ 601.001788][ T7065] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.12886: Failed to acquire dquot type 0 [ 601.019220][ T7065] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 601.037132][ T7065] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12886: corrupted inode contents [ 601.056307][ T7065] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.12886: mark_inode_dirty error [ 601.071689][ T7065] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12886: corrupted inode contents [ 601.125881][ T7065] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.12886: mark_inode_dirty error [ 601.166019][ T7065] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12886: corrupted inode contents [ 601.192534][ T7065] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 601.213251][ T7085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12895'. [ 601.229563][ T7065] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.12886: corrupted inode contents [ 601.245026][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12895'. [ 601.255614][ T7065] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.12886: mark_inode_dirty error [ 601.268165][ T7065] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 601.280138][ T7065] EXT4-fs (loop1): 1 truncate cleaned up [ 601.288076][ T7065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.291756][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12895'. [ 601.304901][ T7090] loop7: detected capacity change from 0 to 128 [ 601.315408][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12895'. [ 601.328154][ T7090] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 601.345840][ T7090] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 601.383873][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.384195][ T7090] FAULT_INJECTION: forcing a failure. [ 601.384195][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.405941][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.7.12899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 601.406048][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 601.406111][ T7090] Call Trace: [ 601.406119][ T7090] [ 601.406128][ T7090] __dump_stack+0x1d/0x30 [ 601.406150][ T7090] dump_stack_lvl+0xe8/0x140 [ 601.406174][ T7090] dump_stack+0x15/0x1b [ 601.406195][ T7090] should_fail_ex+0x265/0x280 [ 601.406274][ T7090] should_fail+0xb/0x20 [ 601.406294][ T7090] should_fail_usercopy+0x1a/0x20 [ 601.406316][ T7090] copy_to_user_nofault+0x7f/0x120 [ 601.406341][ T7090] bpf_probe_write_user+0x83/0xc0 [ 601.406389][ T7090] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 601.406407][ T7090] bpf_trace_run4+0x117/0x1d0 [ 601.406511][ T7090] ? update_load_avg+0x1da/0x820 [ 601.406541][ T7090] __traceiter_sched_switch+0x3f/0x60 [ 601.406589][ T7090] __schedule+0xa17/0xb30 [ 601.406624][ T7090] __cond_resched+0x4e/0x90 [ 601.406653][ T7090] mutex_lock+0xd/0x30 [ 601.406681][ T7090] vfat_mkdir+0x6b/0x1f0 [ 601.406803][ T7090] vfs_mkdir+0x213/0x340 [ 601.406831][ T7090] do_mkdirat+0x132/0x3f0 [ 601.406858][ T7090] __x64_sys_mkdirat+0x4c/0x60 [ 601.406895][ T7090] x64_sys_call+0x2b7/0x3000 [ 601.406920][ T7090] do_syscall_64+0xd2/0x200 [ 601.406942][ T7090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 601.406973][ T7090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 601.407063][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.407087][ T7090] RIP: 0033:0x7fdc8bb9f749 [ 601.407106][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.407202][ T7090] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 601.407226][ T7090] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 601.407240][ T7090] RDX: 00000000000001c0 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 601.407255][ T7090] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 601.407269][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.407283][ T7090] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 601.407303][ T7090] [ 601.649996][T31608] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 601.706552][ T7101] loop5: detected capacity change from 0 to 7 [ 601.723373][ T7101] Buffer I/O error on dev loop5, logical block 0, async page read [ 601.759405][ T7106] xt_recent: Unsupported userspace flags (000000b1) [ 601.761045][ T7101] Buffer I/O error on dev loop5, logical block 0, async page read [ 601.774923][ T7101] loop5: unable to read partition table [ 601.789789][ T7104] loop1: detected capacity change from 0 to 4096 [ 601.797842][ T7104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.807516][ T7101] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 601.807516][ T7101] ) failed (rc=-5) [ 601.963433][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.652435][ T7120] loop7: detected capacity change from 0 to 8192 [ 602.663850][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.753362][ T7135] loop9: detected capacity change from 0 to 1024 [ 602.782827][ T7135] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.12913: Failed to acquire dquot type 0 [ 602.823742][ T7135] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 602.842436][ T7120] loop7: p1 p2 p3 p4 [ 602.846524][ T7120] loop7: p1 size 196608 extends beyond EOD, truncated [ 602.872383][ T7120] loop7: p2 start 164919041 is beyond EOD, truncated [ 602.881951][ T7120] loop7: p3 size 66846464 extends beyond EOD, truncated [ 602.906473][ T7135] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.12913: corrupted inode contents [ 602.954833][ T7120] loop7: p4 size 37048832 extends beyond EOD, truncated [ 602.964018][ T7135] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.12913: mark_inode_dirty error [ 603.048636][ T7135] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.12913: corrupted inode contents [ 603.105654][ T7135] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.12913: mark_inode_dirty error [ 603.143265][ T7151] xt_recent: Unsupported userspace flags (000000b1) [ 603.179536][ T7135] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.12913: corrupted inode contents [ 603.219799][ T7135] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 603.268792][ T7135] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.12913: corrupted inode contents [ 603.327798][ T7135] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.12913: mark_inode_dirty error [ 603.356136][ T7135] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 603.369739][ T7177] loop5: detected capacity change from 0 to 7 [ 603.379042][ T5893] Buffer I/O error on dev loop5, logical block 0, async page read [ 603.388587][ T7135] EXT4-fs (loop9): 1 truncate cleaned up [ 603.395236][ T7135] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.412427][ T5893] Buffer I/O error on dev loop5, logical block 0, async page read [ 603.421184][ T5893] loop5: unable to read partition table [ 603.442528][ T7177] Buffer I/O error on dev loop5, logical block 0, async page read [ 603.454390][ T7177] Buffer I/O error on dev loop5, logical block 0, async page read [ 603.464939][ T7177] loop5: unable to read partition table [ 603.473322][ T7177] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 603.473322][ T7177] ) failed (rc=-5) [ 603.613874][ T7204] netlink: 'syz.5.12939': attribute type 1 has an invalid length. [ 603.683079][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.703481][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12944'. [ 603.742728][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12944'. [ 603.770372][ T7221] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.792231][ T7208] syzkaller1: entered promiscuous mode [ 603.798979][ T7208] syzkaller1: entered allmulticast mode [ 603.813516][ T7228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12949'. [ 603.844168][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12949'. [ 603.856084][ T7221] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.866067][ T7233] loop9: detected capacity change from 0 to 1024 [ 603.874759][ T7233] EXT4-fs: Ignoring removed nomblk_io_submit option [ 603.875018][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12949'. [ 603.884073][ T7233] ext4: Unknown parameter 'smackfsfloor' [ 603.892523][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12949'. [ 603.926338][ T7233] loop9: detected capacity change from 0 to 164 [ 603.936437][ T7221] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.012488][ T7239] loop7: detected capacity change from 0 to 1024 [ 604.024503][ T7221] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.050146][ T7239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.083451][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.106422][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.125018][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.141591][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.151554][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.202445][ T7255] loop9: detected capacity change from 0 to 512 [ 604.221908][ T7255] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.234755][ T7255] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.12959: Parent and EA inode have the same ino 15 [ 604.251178][ T7255] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.12959: Parent and EA inode have the same ino 15 [ 604.268762][ T7255] EXT4-fs (loop9): 1 orphan inode deleted [ 604.280512][ T7255] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.315776][ T7272] netlink: 'syz.5.12966': attribute type 4 has an invalid length. [ 604.375226][ T7255] EXT4-fs error (device loop9): ext4_lookup:1787: inode #15: comm syz.9.12959: unexpected EA_INODE flag [ 604.430667][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.453996][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 604.454106][ T29] audit: type=1326 audit(604.428:64815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.492762][ T7295] loop9: detected capacity change from 0 to 512 [ 604.493544][ T29] audit: type=1326 audit(604.428:64816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493572][ T29] audit: type=1326 audit(604.428:64817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493600][ T29] audit: type=1326 audit(604.428:64818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493650][ T29] audit: type=1326 audit(604.428:64819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493673][ T29] audit: type=1326 audit(604.428:64820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493702][ T29] audit: type=1326 audit(604.428:64821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493746][ T29] audit: type=1326 audit(604.428:64822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493837][ T29] audit: type=1326 audit(604.428:64823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 604.493858][ T29] audit: type=1326 audit(604.428:64824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.5.12974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6677c4df90 code=0x7ffc0000 [ 604.534477][ T7295] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.690602][ T7312] tipc: Enabled bearer , priority 0 [ 604.752320][ T7310] syzkaller0: entered promiscuous mode [ 604.760562][ T7310] syzkaller0: entered allmulticast mode [ 604.782174][ T7295] hub 2-0:1.0: USB hub found [ 604.790069][ T7295] hub 2-0:1.0: 8 ports detected [ 604.819584][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.832047][ T7318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12982'. [ 604.832659][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12982'. [ 604.836154][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12982'. [ 604.836491][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12982'. [ 604.841151][ T7310] tipc: Resetting bearer [ 604.885169][ T7311] tipc: Resetting bearer [ 604.919707][ T7311] tipc: Disabling bearer [ 605.063804][ T7353] loop9: detected capacity change from 0 to 1024 [ 605.081892][ T7353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.111990][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.160641][ T7364] loop5: detected capacity change from 0 to 512 [ 605.168466][ T7364] journal_path: Non-blockdev passed as './bus' [ 605.174927][ T7364] EXT4-fs: error: could not find journal device path [ 605.352717][ T7391] loop9: detected capacity change from 0 to 512 [ 605.355906][ T7393] loop5: detected capacity change from 0 to 512 [ 605.380687][ T7391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.381316][ T7393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.398221][ T7391] FAULT_INJECTION: forcing a failure. [ 605.398221][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 605.423264][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.9.13014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 605.423337][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 605.423349][ T7391] Call Trace: [ 605.423357][ T7391] [ 605.423367][ T7391] __dump_stack+0x1d/0x30 [ 605.423433][ T7391] dump_stack_lvl+0xe8/0x140 [ 605.423456][ T7391] dump_stack+0x15/0x1b [ 605.423475][ T7391] should_fail_ex+0x265/0x280 [ 605.423504][ T7391] should_failslab+0x8c/0xb0 [ 605.423544][ T7391] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 605.423630][ T7391] ? security_context_to_sid_core+0x69/0x3b0 [ 605.423663][ T7391] ? security_context_to_sid_core+0x37d/0x3b0 [ 605.423697][ T7391] kmemdup_nul+0x36/0xc0 [ 605.423747][ T7391] security_context_to_sid_core+0x69/0x3b0 [ 605.423846][ T7391] security_context_to_sid_force+0x30/0x40 [ 605.423879][ T7391] selinux_inode_setxattr+0x4e8/0x6e0 [ 605.423933][ T7391] ? mntput+0x4b/0x80 [ 605.423955][ T7391] security_inode_setxattr+0x13a/0x1b0 [ 605.423984][ T7391] __vfs_setxattr_locked+0x83/0x1d0 [ 605.424022][ T7391] vfs_setxattr+0x132/0x270 [ 605.424046][ T7391] file_setxattr+0x139/0x1b0 [ 605.424131][ T7391] path_setxattrat+0x290/0x310 [ 605.424236][ T7391] __x64_sys_fsetxattr+0x6b/0x80 [ 605.424267][ T7391] x64_sys_call+0x1ced/0x3000 [ 605.424293][ T7391] do_syscall_64+0xd2/0x200 [ 605.424412][ T7391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 605.424441][ T7391] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 605.424491][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.424516][ T7391] RIP: 0033:0x7fcd0d71f749 [ 605.424534][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.424594][ T7391] RSP: 002b:00007fcd0c17f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 605.424618][ T7391] RAX: ffffffffffffffda RBX: 00007fcd0d975fa0 RCX: 00007fcd0d71f749 [ 605.424634][ T7391] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 605.424649][ T7391] RBP: 00007fcd0c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 605.424707][ T7391] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 605.424722][ T7391] R13: 00007fcd0d976038 R14: 00007fcd0d975fa0 R15: 00007ffc4be2eae8 [ 605.424743][ T7391] [ 605.665785][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.666603][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.734839][ T7405] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.774794][ T7412] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.791563][ T7405] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.829743][ T7412] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.871988][ T7405] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.901288][ T7426] loop1: detected capacity change from 0 to 1024 [ 605.910366][ T7426] EXT4-fs: Ignoring removed orlov option [ 605.920259][ T7412] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.922167][ T7426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.963826][ T7405] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.991067][ T7412] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.070546][ T52] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.102719][T31570] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.119115][T31570] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.129128][T31570] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.142855][T31570] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.161259][T31570] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.175541][T31570] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.211653][T31535] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.299884][ T7450] FAULT_INJECTION: forcing a failure. [ 606.299884][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 606.315144][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.9.13038 Not tainted syzkaller #0 PREEMPT(voluntary) [ 606.315205][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 606.315218][ T7450] Call Trace: [ 606.315226][ T7450] [ 606.315236][ T7450] __dump_stack+0x1d/0x30 [ 606.315287][ T7450] dump_stack_lvl+0xe8/0x140 [ 606.315354][ T7450] dump_stack+0x15/0x1b [ 606.315374][ T7450] should_fail_ex+0x265/0x280 [ 606.315408][ T7450] should_failslab+0x8c/0xb0 [ 606.315531][ T7450] kmem_cache_alloc_noprof+0x50/0x480 [ 606.315558][ T7450] ? skb_clone+0x151/0x1f0 [ 606.315578][ T7450] skb_clone+0x151/0x1f0 [ 606.315602][ T7450] __netlink_deliver_tap+0x2c9/0x500 [ 606.315627][ T7450] netlink_unicast+0x66b/0x690 [ 606.315729][ T7450] netlink_sendmsg+0x58b/0x6b0 [ 606.315753][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.315773][ T7450] __sock_sendmsg+0x145/0x180 [ 606.315800][ T7450] ____sys_sendmsg+0x31e/0x4e0 [ 606.315823][ T7450] ___sys_sendmsg+0x17b/0x1d0 [ 606.315876][ T7450] __x64_sys_sendmsg+0xd4/0x160 [ 606.315964][ T7450] x64_sys_call+0x191e/0x3000 [ 606.316034][ T7450] do_syscall_64+0xd2/0x200 [ 606.316054][ T7450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 606.316078][ T7450] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 606.316119][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.316138][ T7450] RIP: 0033:0x7fcd0d71f749 [ 606.316153][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.316196][ T7450] RSP: 002b:00007fcd0c17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 606.316216][ T7450] RAX: ffffffffffffffda RBX: 00007fcd0d975fa0 RCX: 00007fcd0d71f749 [ 606.316227][ T7450] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 606.316239][ T7450] RBP: 00007fcd0c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 606.316250][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.316261][ T7450] R13: 00007fcd0d976038 R14: 00007fcd0d975fa0 R15: 00007ffc4be2eae8 [ 606.316350][ T7450] [ 606.751524][ T7470] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.830844][ T7470] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.851311][ T7482] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 606.855266][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.861562][ T7482] ref_ctr increment failed for inode: 0x7af offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810c4bed40 [ 606.901043][ T7482] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 606.911701][ T7482] ref_ctr decrement failed for inode: 0x7af offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810c4bed40 [ 606.926431][ T7482] uprobe: syz.9.13051:7482 failed to unregister, leaking uprobe [ 606.930643][ T7470] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.983574][ T7494] netlink: 'syz.9.13055': attribute type 1 has an invalid length. [ 607.001000][ T7470] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.114548][T31570] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.133811][T31570] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.171548][T31570] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.199831][T31570] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.296061][ T7525] SELinux: security_context_str_to_sid (ٶm :k6p C%,$Hn-~ԯ [ 607.296061][ T7525] cI. #~ A'eC^YD'h]pm%AhvS'Bh ;لt  `d'ss-/(^țm,ڔ ׿G6񖑮uv+ ¤ 8q"Dy+I,t[A.7-?*eVFY0«T*:$ cB;.dH &ި?q;S̞*4. >7W) failed with errno=-22 [ 607.471984][ T7545] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.520341][ T7545] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.533983][ T7549] x_tables: duplicate underflow at hook 2 [ 607.571464][ T7545] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.662424][ T7545] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.704432][ T7549] loop5: detected capacity change from 0 to 1024 [ 607.714512][ T7549] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 607.729010][ T7549] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 607.743545][ T7549] JBD2: no valid journal superblock found [ 607.751209][ T7549] EXT4-fs (loop5): Could not load journal inode [ 608.043336][ T7569] loop1: detected capacity change from 0 to 128 [ 608.055591][ T7570] loop9: detected capacity change from 0 to 1024 [ 608.106545][ T7569] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 608.131365][ T7570] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.13084: Failed to acquire dquot type 0 [ 608.155589][ T7570] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 608.175884][ T7570] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13084: corrupted inode contents [ 608.190444][ T7576] loop5: detected capacity change from 0 to 7 [ 608.197718][ T7576] Buffer I/O error on dev loop5, logical block 0, async page read [ 608.199517][ T7570] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.13084: mark_inode_dirty error [ 608.205602][ T7576] Buffer I/O error on dev loop5, logical block 0, async page read [ 608.225859][ T7576] loop5: unable to read partition table [ 608.234738][ T7576] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 608.234738][ T7576] ) failed (rc=-5) [ 608.249140][ T7579] xt_recent: Unsupported userspace flags (000000b1) [ 608.253449][ T7570] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13084: corrupted inode contents [ 608.281804][ T5627] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 608.293679][ T7570] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13084: mark_inode_dirty error [ 608.307646][ T7570] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13084: corrupted inode contents [ 608.323766][ T7570] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 608.343650][ T7570] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13084: corrupted inode contents [ 608.360015][ T7570] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.13084: mark_inode_dirty error [ 608.406163][ T7570] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 608.414275][ T7591] netlink: 'syz.0.13094': attribute type 1 has an invalid length. [ 608.428967][ T7570] EXT4-fs (loop9): 1 truncate cleaned up [ 608.435197][ T7570] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.471324][ T7596] loop1: detected capacity change from 0 to 512 [ 608.491300][ T7596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.551446][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.575436][ T7608] serio: Serial port ptm0 [ 608.604176][ T7614] loop5: detected capacity change from 0 to 7 [ 608.612513][ T7614] Buffer I/O error on dev loop5, logical block 0, async page read [ 608.622443][ T7614] Buffer I/O error on dev loop5, logical block 0, async page read [ 608.632773][ T7614] loop5: unable to read partition table [ 608.641262][ T7614] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 608.641262][ T7614] ) failed (rc=-5) [ 608.655603][ T7616] xt_recent: Unsupported userspace flags (000000b1) [ 608.699186][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.831281][ T7637] __nla_validate_parse: 20 callbacks suppressed [ 608.831299][ T7637] netlink: 112 bytes leftover after parsing attributes in process `syz.1.13111'. [ 608.873342][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13113'. [ 608.885063][ T7634] FAULT_INJECTION: forcing a failure. [ 608.885063][ T7634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.885599][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13113'. [ 608.900862][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.5.13109 Not tainted syzkaller #0 PREEMPT(voluntary) [ 608.900892][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 608.900904][ T7634] Call Trace: [ 608.900912][ T7634] [ 608.901018][ T7634] __dump_stack+0x1d/0x30 [ 608.901043][ T7634] dump_stack_lvl+0xe8/0x140 [ 608.901064][ T7634] dump_stack+0x15/0x1b [ 608.901082][ T7634] should_fail_ex+0x265/0x280 [ 608.901267][ T7634] should_fail+0xb/0x20 [ 608.901284][ T7634] should_fail_usercopy+0x1a/0x20 [ 608.901327][ T7634] _copy_to_iter+0xd2/0xe70 [ 608.901376][ T7634] ? xfd_validate_state+0x45/0xf0 [ 608.901397][ T7634] ? save_fpregs_to_fpstate+0x100/0x160 [ 608.901493][ T7634] copy_page_to_iter+0x18f/0x2d0 [ 608.901517][ T7634] sk_msg_recvmsg+0x1e4/0x900 [ 608.901575][ T7634] ? __list_del_entry_valid_or_report+0x65/0x130 [ 608.901605][ T7634] unix_bpf_recvmsg+0x272/0x730 [ 608.901631][ T7634] ? __pfx_woken_wake_function+0x10/0x10 [ 608.901738][ T7634] unix_dgram_recvmsg+0x6a/0x90 [ 608.901775][ T7634] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 608.901846][ T7634] sock_recvmsg+0x139/0x170 [ 608.901871][ T7634] ____sys_recvmsg+0xf5/0x280 [ 608.901897][ T7634] ___sys_recvmsg+0x11f/0x370 [ 608.901926][ T7634] __x64_sys_recvmsg+0xd1/0x160 [ 608.902014][ T7634] x64_sys_call+0x2b46/0x3000 [ 608.902035][ T7634] do_syscall_64+0xd2/0x200 [ 608.902094][ T7634] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 608.902121][ T7634] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 608.902212][ T7634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.902234][ T7634] RIP: 0033:0x7f6677c4f749 [ 608.902253][ T7634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.902271][ T7634] RSP: 002b:00007f66766af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 608.902292][ T7634] RAX: ffffffffffffffda RBX: 00007f6677ea5fa0 RCX: 00007f6677c4f749 [ 608.902345][ T7634] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000005 [ 608.902358][ T7634] RBP: 00007f66766af090 R08: 0000000000000000 R09: 0000000000000000 [ 608.902371][ T7634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.902383][ T7634] R13: 00007f6677ea6038 R14: 00007f6677ea5fa0 R15: 00007ffd6b7665a8 [ 608.902402][ T7634] [ 608.964072][ T7645] loop5: detected capacity change from 0 to 7 [ 609.017569][ T7649] xt_recent: Unsupported userspace flags (000000b1) [ 609.195337][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.205370][ T7645] Buffer I/O error on dev loop5, logical block 0, async page read [ 609.215955][ T7645] loop5: unable to read partition table [ 609.227910][ T7645] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 609.227910][ T7645] ) failed (rc=-5) [ 609.344195][ T7668] loop1: detected capacity change from 0 to 512 [ 609.356432][ T7673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13125'. [ 609.403937][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13127'. [ 609.416303][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13127'. [ 609.432102][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13127'. [ 609.462442][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13127'. [ 609.462686][ T7684] loop1: detected capacity change from 0 to 1024 [ 609.484123][ T7684] EXT4-fs: Ignoring removed nobh option [ 609.492315][ T7684] EXT4-fs: Ignoring removed bh option [ 609.500630][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 609.500647][ T29] audit: type=1326 audit(609.468:65614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7677 comm="syz.9.13127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 609.535124][ T29] audit: type=1326 audit(609.468:65615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7677 comm="syz.9.13127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 609.600687][ T7684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.618705][ T29] audit: type=1326 audit(609.568:65616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.5.13126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 609.876077][ T7707] loop9: detected capacity change from 0 to 512 [ 609.908877][ T29] audit: type=1400 audit(609.868:65617): avc: denied { create } for pid=7708 comm="syz.5.13139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.929818][ T29] audit: type=1400 audit(609.868:65618): avc: denied { write } for pid=7708 comm="syz.5.13139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 609.979686][ T7707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.045422][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.181730][ T29] audit: type=1326 audit(610.158:65619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7726 comm="syz.0.13146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bb5fff749 code=0x7ffc0000 [ 610.209426][ T29] audit: type=1326 audit(610.178:65621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.9.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 610.235338][ T29] audit: type=1326 audit(610.178:65622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.9.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 610.260327][ T29] audit: type=1326 audit(610.178:65623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.9.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 610.280424][ T7681] delete_channel: no stack [ 610.285093][ T29] audit: type=1326 audit(610.178:65620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7730 comm="syz.9.13148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 610.341135][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.379006][ T3393] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 610.404675][ T7739] loop1: detected capacity change from 0 to 2048 [ 610.412333][ T3393] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 610.431078][ T7739] EXT4-fs: quotafile must be on filesystem root [ 610.559340][ T7753] ip6gre1: entered promiscuous mode [ 610.568617][ T7753] team0: Port device ip6gre1 added [ 610.629681][ T7760] FAULT_INJECTION: forcing a failure. [ 610.629681][ T7760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.644681][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.1.13161 Not tainted syzkaller #0 PREEMPT(voluntary) [ 610.644752][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 610.644760][ T7760] Call Trace: [ 610.644765][ T7760] [ 610.644771][ T7760] __dump_stack+0x1d/0x30 [ 610.644854][ T7760] dump_stack_lvl+0xe8/0x140 [ 610.644867][ T7760] dump_stack+0x15/0x1b [ 610.644879][ T7760] should_fail_ex+0x265/0x280 [ 610.644899][ T7760] should_fail+0xb/0x20 [ 610.644910][ T7760] should_fail_usercopy+0x1a/0x20 [ 610.645003][ T7760] _copy_from_user+0x1c/0xb0 [ 610.645103][ T7760] proc_do_submiturb+0x866/0x1d20 [ 610.645124][ T7760] ? proc_do_submiturb+0xf1/0x1d20 [ 610.645143][ T7760] ? should_fail_ex+0xdb/0x280 [ 610.645255][ T7760] proc_submiturb+0x7b/0xa0 [ 610.645273][ T7760] usbdev_ioctl+0xcb6/0x1700 [ 610.645290][ T7760] ? __pfx_usbdev_ioctl+0x10/0x10 [ 610.645306][ T7760] __se_sys_ioctl+0xce/0x140 [ 610.645323][ T7760] __x64_sys_ioctl+0x43/0x50 [ 610.645336][ T7760] x64_sys_call+0x1816/0x3000 [ 610.645350][ T7760] do_syscall_64+0xd2/0x200 [ 610.645381][ T7760] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 610.645412][ T7760] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 610.645432][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.645446][ T7760] RIP: 0033:0x7fc03c3df749 [ 610.645457][ T7760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.645547][ T7760] RSP: 002b:00007fc03ae47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.645561][ T7760] RAX: ffffffffffffffda RBX: 00007fc03c635fa0 RCX: 00007fc03c3df749 [ 610.645612][ T7760] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 610.645677][ T7760] RBP: 00007fc03ae47090 R08: 0000000000000000 R09: 0000000000000000 [ 610.645685][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.645693][ T7760] R13: 00007fc03c636038 R14: 00007fc03c635fa0 R15: 00007ffe36812408 [ 610.645706][ T7760] [ 611.101670][ T7777] netlink: 'syz.5.13169': attribute type 1 has an invalid length. [ 611.443507][T31544] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.476060][T31571] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.514335][T31571] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.560152][T31571] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.573497][ T7793] netlink: '+}[@': attribute type 10 has an invalid length. [ 611.583477][ T7793] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 611.599304][ T7793] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 611.679215][ T7795] loop9: detected capacity change from 0 to 1024 [ 611.687675][ T7795] EXT4-fs: inline encryption not supported [ 611.705946][ T7795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.721154][ T7795] usb usb8: usbfs: process 7795 (syz.9.13175) did not claim interface 0 before use [ 611.733927][ T7795] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.13175: Allocating blocks 385-513 which overlap fs metadata [ 611.879862][ T7806] loop7: detected capacity change from 0 to 1024 [ 611.952226][ T7794] EXT4-fs (loop9): pa ffff888106e04f50: logic 16, phys. 129, len 24 [ 611.961256][ T7794] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 612.046514][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.118455][ T7822] loop5: detected capacity change from 0 to 7 [ 612.127672][ T7822] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.137580][ T7822] Buffer I/O error on dev loop5, logical block 0, async page read [ 612.145449][ T7822] loop5: unable to read partition table [ 612.156493][ T7824] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13184'. [ 612.171761][ T7824] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.185706][ T7822] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 612.185706][ T7822] ) failed (rc=-5) [ 612.186122][ T7826] xt_recent: Unsupported userspace flags (000000b1) [ 612.232858][ T7824] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.290283][ T7824] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.359025][ T7824] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.478796][T31573] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.492837][T31573] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.505193][T31573] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.520319][T31573] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.531645][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 625.531661][ T29] audit: type=1326 audit(625.508:65793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.569415][ T29] audit: type=1400 audit(625.518:65794): avc: denied { mounton } for pid=7844 comm="syz.0.13190" path="/346/file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 625.594733][ T29] audit: type=1326 audit(625.518:65795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.621259][ T29] audit: type=1326 audit(625.518:65796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.649533][ T29] audit: type=1326 audit(625.518:65797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.675397][ T29] audit: type=1326 audit(625.518:65798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.701750][ T29] audit: type=1326 audit(625.518:65799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.701807][ T29] audit: type=1326 audit(625.518:65800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.701881][ T29] audit: type=1326 audit(625.518:65801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.701963][ T29] audit: type=1326 audit(625.518:65802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7842 comm="syz.5.13193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6677c4f749 code=0x7ffc0000 [ 625.761267][ T7859] loop7: detected capacity change from 0 to 1024 [ 625.765424][ T7859] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.13194: Failed to acquire dquot type 0 [ 625.890667][ T7859] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 625.912826][ T7866] loop9: detected capacity change from 0 to 512 [ 625.923316][ T7859] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.13194: corrupted inode contents [ 626.122903][ T7859] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #13: comm syz.7.13194: mark_inode_dirty error [ 626.200155][ T7859] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.13194: corrupted inode contents [ 626.281772][ T7866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.317447][ T7859] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.13194: mark_inode_dirty error [ 626.574523][ T7877] hub 2-0:1.0: USB hub found [ 626.583900][ T7859] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.13194: corrupted inode contents [ 626.606731][ T7877] hub 2-0:1.0: 8 ports detected [ 626.682906][ T7859] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 626.756128][ T7859] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.13194: corrupted inode contents [ 626.841442][ T7859] EXT4-fs error (device loop7): ext4_truncate:4637: inode #13: comm syz.7.13194: mark_inode_dirty error [ 626.861846][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.874793][ T7859] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 626.890802][ T7859] EXT4-fs (loop7): 1 truncate cleaned up [ 626.898012][ T7859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.013139][ T7900] xt_recent: Unsupported userspace flags (000000b1) [ 627.073644][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.090441][ T7902] __nla_validate_parse: 1 callbacks suppressed [ 627.090460][ T7902] netlink: 112 bytes leftover after parsing attributes in process `syz.5.13210'. [ 627.124338][ T7904] FAULT_INJECTION: forcing a failure. [ 627.124338][ T7904] name failslab, interval 1, probability 0, space 0, times 0 [ 627.138120][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz.9.13212 Not tainted syzkaller #0 PREEMPT(voluntary) [ 627.138150][ T7904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 627.138164][ T7904] Call Trace: [ 627.138172][ T7904] [ 627.138181][ T7904] __dump_stack+0x1d/0x30 [ 627.138207][ T7904] dump_stack_lvl+0xe8/0x140 [ 627.138235][ T7904] dump_stack+0x15/0x1b [ 627.138254][ T7904] should_fail_ex+0x265/0x280 [ 627.138290][ T7904] should_failslab+0x8c/0xb0 [ 627.138326][ T7904] kmem_cache_alloc_noprof+0x50/0x480 [ 627.138357][ T7904] ? skb_clone+0x151/0x1f0 [ 627.138380][ T7904] skb_clone+0x151/0x1f0 [ 627.138419][ T7904] __netlink_deliver_tap+0x2c9/0x500 [ 627.138447][ T7904] netlink_unicast+0x66b/0x690 [ 627.138563][ T7904] netlink_sendmsg+0x58b/0x6b0 [ 627.138587][ T7904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.138609][ T7904] __sock_sendmsg+0x145/0x180 [ 627.138637][ T7904] ____sys_sendmsg+0x31e/0x4e0 [ 627.138660][ T7904] ___sys_sendmsg+0x17b/0x1d0 [ 627.138776][ T7904] __x64_sys_sendmsg+0xd4/0x160 [ 627.138802][ T7904] x64_sys_call+0x191e/0x3000 [ 627.138824][ T7904] do_syscall_64+0xd2/0x200 [ 627.138848][ T7904] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 627.138945][ T7904] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 627.138983][ T7904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.139017][ T7904] RIP: 0033:0x7fcd0d71f749 [ 627.139036][ T7904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.139057][ T7904] RSP: 002b:00007fcd0c17f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.139081][ T7904] RAX: ffffffffffffffda RBX: 00007fcd0d975fa0 RCX: 00007fcd0d71f749 [ 627.139095][ T7904] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 627.139109][ T7904] RBP: 00007fcd0c17f090 R08: 0000000000000000 R09: 0000000000000000 [ 627.139123][ T7904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.139137][ T7904] R13: 00007fcd0d976038 R14: 00007fcd0d975fa0 R15: 00007ffc4be2eae8 [ 627.139166][ T7904] [ 627.421737][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13214'. [ 627.496190][ T7916] FAULT_INJECTION: forcing a failure. [ 627.496190][ T7916] name failslab, interval 1, probability 0, space 0, times 0 [ 627.511605][ T7916] CPU: 0 UID: 0 PID: 7916 Comm: syz.7.13216 Not tainted syzkaller #0 PREEMPT(voluntary) [ 627.511635][ T7916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 627.511650][ T7916] Call Trace: [ 627.511658][ T7916] [ 627.511669][ T7916] __dump_stack+0x1d/0x30 [ 627.511699][ T7916] dump_stack_lvl+0xe8/0x140 [ 627.511749][ T7916] dump_stack+0x15/0x1b [ 627.511815][ T7916] should_fail_ex+0x265/0x280 [ 627.511845][ T7916] ? audit_log_d_path+0x8d/0x150 [ 627.511904][ T7916] should_failslab+0x8c/0xb0 [ 627.511942][ T7916] __kmalloc_cache_noprof+0x4c/0x4a0 [ 627.511988][ T7916] audit_log_d_path+0x8d/0x150 [ 627.512075][ T7916] audit_log_d_path_exe+0x42/0x70 [ 627.512095][ T7916] audit_log_task+0x1e9/0x250 [ 627.512126][ T7916] ? kstrtouint+0x76/0xc0 [ 627.512199][ T7916] audit_seccomp+0x61/0x100 [ 627.512304][ T7916] ? __seccomp_filter+0x82d/0x1250 [ 627.512329][ T7916] __seccomp_filter+0x83e/0x1250 [ 627.512360][ T7916] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 627.512437][ T7916] ? vfs_write+0x7e8/0x960 [ 627.512464][ T7916] __secure_computing+0x82/0x150 [ 627.512519][ T7916] syscall_trace_enter+0xcf/0x1e0 [ 627.512546][ T7916] do_syscall_64+0xac/0x200 [ 627.512638][ T7916] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 627.512669][ T7916] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 627.512705][ T7916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.512805][ T7916] RIP: 0033:0x7fdc8bb9f749 [ 627.512824][ T7916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.512842][ T7916] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 627.512861][ T7916] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 627.512876][ T7916] RDX: 00000000000000a4 RSI: 00002000000004c0 RDI: 0000000000000002 [ 627.512891][ T7916] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 627.512970][ T7916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.512982][ T7916] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 627.513000][ T7916] [ 627.767658][ T7916] netlink: 108 bytes leftover after parsing attributes in process `syz.7.13216'. [ 628.093645][ T7934] netlink: 112 bytes leftover after parsing attributes in process `syz.7.13224'. [ 628.226311][ T7938] loop5: detected capacity change from 0 to 1024 [ 628.307476][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.361186][ T7938] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.450545][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.881973][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13237'. [ 628.912053][ T7968] loop7: detected capacity change from 0 to 1024 [ 628.922556][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13237'. [ 629.001436][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13237'. [ 629.016236][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13237'. [ 629.035405][ T7971] loop7: detected capacity change from 0 to 1024 [ 629.158283][ T7976] loop1: detected capacity change from 0 to 1024 [ 629.300909][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.341367][ T7971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.443170][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.504113][ T5171] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.690731][ T7993] netlink: 112 bytes leftover after parsing attributes in process `syz.9.13246'. [ 629.821733][ T8002] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13249'. [ 629.864716][ T8008] loop5: detected capacity change from 0 to 1024 [ 629.885463][ T8008] EXT4-fs: Ignoring removed orlov option [ 629.986339][ T8008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.176258][ T8028] loop7: detected capacity change from 0 to 128 [ 630.190759][ T8028] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 630.310857][ T8028] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.355583][T31538] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.411769][ T8043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8043 comm=+}[@ [ 630.659152][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 630.659168][ T29] audit: type=1326 audit(630.638:66141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.721928][ T29] audit: type=1326 audit(630.668:66142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.749602][ T29] audit: type=1326 audit(630.668:66143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.776120][ T29] audit: type=1326 audit(630.668:66144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.802978][ T29] audit: type=1326 audit(630.678:66145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.829548][ T29] audit: type=1326 audit(630.678:66146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.856015][ T29] audit: type=1326 audit(630.678:66147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.858507][ T8074] FAULT_INJECTION: forcing a failure. [ 630.858507][ T8074] name failslab, interval 1, probability 0, space 0, times 0 [ 630.882705][ T29] audit: type=1326 audit(630.678:66148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 630.894178][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.1.13279 Not tainted syzkaller #0 PREEMPT(voluntary) [ 630.894220][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 630.894233][ T8074] Call Trace: [ 630.894241][ T8074] [ 630.894250][ T8074] __dump_stack+0x1d/0x30 [ 630.894276][ T8074] dump_stack_lvl+0xe8/0x140 [ 630.894341][ T8074] dump_stack+0x15/0x1b [ 630.894360][ T8074] should_fail_ex+0x265/0x280 [ 630.894512][ T8074] should_failslab+0x8c/0xb0 [ 630.894578][ T8074] kmem_cache_alloc_noprof+0x50/0x480 [ 630.894606][ T8074] ? security_inode_alloc+0x37/0x100 [ 630.894719][ T8074] security_inode_alloc+0x37/0x100 [ 630.894743][ T8074] inode_init_always_gfp+0x4b7/0x500 [ 630.894771][ T8074] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 630.894794][ T8074] alloc_inode+0x58/0x170 [ 630.894869][ T8074] new_inode+0x1d/0xe0 [ 630.894898][ T8074] shmem_get_inode+0x244/0x750 [ 630.894925][ T8074] shmem_tmpfile+0x3d/0x110 [ 630.894966][ T8074] vfs_tmpfile+0x226/0x4d0 [ 630.894993][ T8074] do_tmpfile+0xa8/0x190 [ 630.895029][ T8074] path_openat+0x1dd7/0x2170 [ 630.895051][ T8074] ? _parse_integer_limit+0x170/0x190 [ 630.895151][ T8074] ? kstrtouint+0x76/0xc0 [ 630.895222][ T8074] do_filp_open+0x109/0x230 [ 630.895253][ T8074] do_sys_openat2+0xa6/0x110 [ 630.895349][ T8074] __x64_sys_openat+0xf2/0x120 [ 630.895426][ T8074] x64_sys_call+0x2eab/0x3000 [ 630.895449][ T8074] do_syscall_64+0xd2/0x200 [ 630.895489][ T8074] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 630.895518][ T8074] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 630.895555][ T8074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.895579][ T8074] RIP: 0033:0x7fc03c3df749 [ 630.895596][ T8074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.895633][ T8074] RSP: 002b:00007fc03ae26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 630.895656][ T8074] RAX: ffffffffffffffda RBX: 00007fc03c636090 RCX: 00007fc03c3df749 [ 630.895669][ T8074] RDX: 0000000000515401 RSI: 00002000000000c0 RDI: 0000000000000003 [ 630.895747][ T8074] RBP: 00007fc03ae26090 R08: 0000000000000000 R09: 0000000000000000 [ 630.895760][ T8074] R10: 0000000000000408 R11: 0000000000000246 R12: 0000000000000001 [ 630.895774][ T8074] R13: 00007fc03c636128 R14: 00007fc03c636090 R15: 00007ffe36812408 [ 630.895795][ T8074] [ 631.025091][ T8087] FAULT_INJECTION: forcing a failure. [ 631.025091][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 631.026484][ T29] audit: type=1326 audit(630.678:66149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd0d71df90 code=0x7ffc0000 [ 631.033126][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.7.13284 Not tainted syzkaller #0 PREEMPT(voluntary) [ 631.033198][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 631.033210][ T8087] Call Trace: [ 631.033217][ T8087] [ 631.033225][ T8087] __dump_stack+0x1d/0x30 [ 631.033248][ T8087] dump_stack_lvl+0xe8/0x140 [ 631.033273][ T8087] dump_stack+0x15/0x1b [ 631.033333][ T8087] should_fail_ex+0x265/0x280 [ 631.033366][ T8087] ? tty_open+0x81/0xaf0 [ 631.033390][ T8087] should_failslab+0x8c/0xb0 [ 631.033418][ T8087] __kmalloc_cache_noprof+0x4c/0x4a0 [ 631.033522][ T8087] tty_open+0x81/0xaf0 [ 631.033550][ T8087] chrdev_open+0x2eb/0x3a0 [ 631.033578][ T8087] do_dentry_open+0x649/0xa20 [ 631.033597][ T8087] ? __pfx_chrdev_open+0x10/0x10 [ 631.033680][ T8087] vfs_open+0x37/0x1e0 [ 631.033697][ T8087] path_openat+0x1c5e/0x2170 [ 631.033728][ T8087] do_filp_open+0x109/0x230 [ 631.033825][ T8087] do_sys_openat2+0xa6/0x110 [ 631.033846][ T8087] __x64_sys_openat+0xf2/0x120 [ 631.033868][ T8087] x64_sys_call+0x2eab/0x3000 [ 631.034010][ T8087] do_syscall_64+0xd2/0x200 [ 631.034031][ T8087] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 631.034058][ T8087] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 631.034227][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.034307][ T8087] RIP: 0033:0x7fdc8bb9f749 [ 631.034324][ T8087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.034342][ T8087] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 631.034362][ T8087] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 631.034375][ T8087] RDX: 0000000000101000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 631.034413][ T8087] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 631.034426][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.034438][ T8087] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 631.034457][ T8087] [ 631.057765][ T8089] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 631.128546][ T5893] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.217637][ T8090] netlink: 'syz.0.13280': attribute type 13 has an invalid length. [ 631.226075][ T29] audit: type=1326 audit(630.678:66150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8064 comm="syz.9.13276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 631.711493][ T8109] loop9: detected capacity change from 0 to 1024 [ 631.732691][ T8109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.811515][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.879084][ T8119] netlink: 'syz.0.13295': attribute type 13 has an invalid length. [ 631.943071][ T8119] gretap0: refused to change device tx_queue_len [ 631.959139][ T8119] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 632.083142][ T8134] atomic_op ffff88814d0c6128 conn xmit_atomic 0000000000000000 [ 632.095570][ T8134] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 632.183460][ T8145] __nla_validate_parse: 11 callbacks suppressed [ 632.183478][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13303'. [ 632.214393][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13303'. [ 632.230178][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13303'. [ 632.240701][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13303'. [ 632.289011][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13305'. [ 632.299592][ T8151] FAULT_INJECTION: forcing a failure. [ 632.299592][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 632.313186][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: syz.7.13305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 632.313219][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.313233][ T8151] Call Trace: [ 632.313241][ T8151] [ 632.313250][ T8151] __dump_stack+0x1d/0x30 [ 632.313305][ T8151] dump_stack_lvl+0xe8/0x140 [ 632.313396][ T8151] dump_stack+0x15/0x1b [ 632.313442][ T8151] should_fail_ex+0x265/0x280 [ 632.313480][ T8151] should_failslab+0x8c/0xb0 [ 632.313591][ T8151] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 632.313623][ T8151] ? __alloc_skb+0x101/0x320 [ 632.313650][ T8151] __alloc_skb+0x101/0x320 [ 632.313675][ T8151] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 632.313766][ T8151] ? dev_deactivate_many+0x1eb/0x730 [ 632.313845][ T8151] rtmsg_ifinfo+0x6d/0x110 [ 632.313864][ T8151] netif_close_many+0x14d/0x240 [ 632.313887][ T8151] ? finish_task_switch+0xad/0x2b0 [ 632.313925][ T8151] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 632.313994][ T8151] unregister_netdevice_many_notify+0x509/0x1690 [ 632.314019][ T8151] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 632.314065][ T8151] rtnl_dellink+0x3cb/0x550 [ 632.314109][ T8151] ? selinux_capable+0x31/0x40 [ 632.314137][ T8151] ? security_capable+0x83/0x90 [ 632.314171][ T8151] ? ns_capable+0x7d/0xb0 [ 632.314199][ T8151] ? __pfx_rtnl_dellink+0x10/0x10 [ 632.314226][ T8151] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 632.314251][ T8151] netlink_rcv_skb+0x123/0x220 [ 632.314281][ T8151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.314388][ T8151] rtnetlink_rcv+0x1c/0x30 [ 632.314412][ T8151] netlink_unicast+0x5c0/0x690 [ 632.314461][ T8151] netlink_sendmsg+0x58b/0x6b0 [ 632.314486][ T8151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.314510][ T8151] __sock_sendmsg+0x145/0x180 [ 632.314559][ T8151] ____sys_sendmsg+0x31e/0x4e0 [ 632.314585][ T8151] ___sys_sendmsg+0x17b/0x1d0 [ 632.314615][ T8151] __x64_sys_sendmsg+0xd4/0x160 [ 632.314636][ T8151] x64_sys_call+0x191e/0x3000 [ 632.314666][ T8151] do_syscall_64+0xd2/0x200 [ 632.314713][ T8151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 632.314743][ T8151] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 632.314832][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.314902][ T8151] RIP: 0033:0x7fdc8bb9f749 [ 632.314919][ T8151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.314958][ T8151] RSP: 002b:00007fdc8a5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.314983][ T8151] RAX: ffffffffffffffda RBX: 00007fdc8bdf5fa0 RCX: 00007fdc8bb9f749 [ 632.314998][ T8151] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 632.315014][ T8151] RBP: 00007fdc8a5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 632.315029][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.315044][ T8151] R13: 00007fdc8bdf6038 R14: 00007fdc8bdf5fa0 R15: 00007ffff3fa65e8 [ 632.315067][ T8151] [ 632.605151][ T8155] netlink: 108 bytes leftover after parsing attributes in process `syz.0.13304'. [ 632.629065][ T8157] FAULT_INJECTION: forcing a failure. [ 632.629065][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 632.642930][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.5.13306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 632.642995][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.643006][ T8157] Call Trace: [ 632.643013][ T8157] [ 632.643020][ T8157] __dump_stack+0x1d/0x30 [ 632.643041][ T8157] dump_stack_lvl+0xe8/0x140 [ 632.643085][ T8157] dump_stack+0x15/0x1b [ 632.643100][ T8157] should_fail_ex+0x265/0x280 [ 632.643129][ T8157] should_failslab+0x8c/0xb0 [ 632.643154][ T8157] kmem_cache_alloc_noprof+0x50/0x480 [ 632.643210][ T8157] ? audit_log_start+0x342/0x720 [ 632.643229][ T8157] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 632.643250][ T8157] audit_log_start+0x342/0x720 [ 632.643339][ T8157] audit_seccomp+0x48/0x100 [ 632.643367][ T8157] ? __seccomp_filter+0x82d/0x1250 [ 632.643435][ T8157] __seccomp_filter+0x83e/0x1250 [ 632.643464][ T8157] ? _raw_spin_unlock+0x26/0x50 [ 632.643490][ T8157] __secure_computing+0x82/0x150 [ 632.643546][ T8157] syscall_trace_enter+0xcf/0x1e0 [ 632.643595][ T8157] do_syscall_64+0xac/0x200 [ 632.643613][ T8157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 632.643638][ T8157] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 632.643696][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.643715][ T8157] RIP: 0033:0x7f6677c4e15c [ 632.643730][ T8157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.643747][ T8157] RSP: 002b:00007f66766af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.643817][ T8157] RAX: ffffffffffffffda RBX: 00007f6677ea5fa0 RCX: 00007f6677c4e15c [ 632.643828][ T8157] RDX: 000000000000000f RSI: 00007f66766af0a0 RDI: 0000000000000006 [ 632.643839][ T8157] RBP: 00007f66766af090 R08: 0000000000000000 R09: 0000000000000000 [ 632.643850][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.643861][ T8157] R13: 00007f6677ea6038 R14: 00007f6677ea5fa0 R15: 00007ffd6b7665a8 [ 632.643952][ T8157] [ 632.905557][ T8164] netlink: 112 bytes leftover after parsing attributes in process `syz.0.13310'. [ 632.948682][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13312'. [ 632.962255][ T8168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13312'. [ 633.001920][ T8168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.029015][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.7.13313'. [ 633.061227][ T8173] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.075848][ T8168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.118369][ T8173] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.169030][ T8168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.194166][ T8190] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 633.194166][ T8190] program syz.9.13319 not setting count and/or reply_len properly [ 633.212033][ T8187] loop5: detected capacity change from 0 to 2048 [ 633.225477][ T8173] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.248097][ T8187] loop5: p1 < > p4 [ 633.252803][ T8187] loop5: p4 size 8388608 extends beyond EOD, truncated [ 633.338602][ T8168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.391255][ T8173] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.401919][ T8203] loop5: detected capacity change from 0 to 512 [ 633.440865][ T8206] netlink: 'syz.5.13324': attribute type 21 has an invalid length. [ 633.473545][T31543] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.492166][T31543] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.515667][T31543] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.530678][T31543] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.552486][T31543] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.570321][T31543] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.665897][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.682632][ T8211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.726999][T31535] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.748785][T31535] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.765617][T31535] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.775241][T31535] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.787662][T31535] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.797750][T31535] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.683543][ T8236] syzkaller0: entered promiscuous mode [ 634.693076][ T8236] syzkaller0: entered allmulticast mode [ 634.750682][ T8250] FAULT_INJECTION: forcing a failure. [ 634.750682][ T8250] name failslab, interval 1, probability 0, space 0, times 0 [ 634.769703][ T8250] CPU: 0 UID: 0 PID: 8250 Comm: syz.5.13343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 634.769735][ T8250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.769766][ T8250] Call Trace: [ 634.769774][ T8250] [ 634.769782][ T8250] __dump_stack+0x1d/0x30 [ 634.769808][ T8250] dump_stack_lvl+0xe8/0x140 [ 634.769871][ T8250] dump_stack+0x15/0x1b [ 634.769893][ T8250] should_fail_ex+0x265/0x280 [ 634.770020][ T8250] should_failslab+0x8c/0xb0 [ 634.770052][ T8250] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 634.770089][ T8250] ? __alloc_skb+0x101/0x320 [ 634.770196][ T8250] __alloc_skb+0x101/0x320 [ 634.770223][ T8250] netlink_alloc_large_skb+0xbf/0xf0 [ 634.770332][ T8250] netlink_sendmsg+0x3cf/0x6b0 [ 634.770418][ T8250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.770440][ T8250] __sock_sendmsg+0x145/0x180 [ 634.770464][ T8250] ____sys_sendmsg+0x345/0x4e0 [ 634.770490][ T8250] ___sys_sendmsg+0x17b/0x1d0 [ 634.770527][ T8250] __sys_sendmmsg+0x178/0x300 [ 634.770561][ T8250] __x64_sys_sendmmsg+0x57/0x70 [ 634.770659][ T8250] x64_sys_call+0x1c4a/0x3000 [ 634.770683][ T8250] do_syscall_64+0xd2/0x200 [ 634.770707][ T8250] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 634.770737][ T8250] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 634.770788][ T8250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.770814][ T8250] RIP: 0033:0x7f6677c4f749 [ 634.770853][ T8250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.770870][ T8250] RSP: 002b:00007f66766af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 634.770890][ T8250] RAX: ffffffffffffffda RBX: 00007f6677ea5fa0 RCX: 00007f6677c4f749 [ 634.770904][ T8250] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000006 [ 634.770928][ T8250] RBP: 00007f66766af090 R08: 0000000000000000 R09: 0000000000000000 [ 634.770943][ T8250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.770984][ T8250] R13: 00007f6677ea6038 R14: 00007f6677ea5fa0 R15: 00007ffd6b7665a8 [ 634.771002][ T8250] [ 634.994495][ T8238] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.163965][ T8238] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.331643][ T8238] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.391229][ T8238] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.522133][ T8269] loop1: detected capacity change from 0 to 1024 [ 635.541994][ T8269] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 635.753887][ T8275] loop1: detected capacity change from 0 to 512 [ 635.791841][ T8275] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 635.841443][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 635.841460][ T29] audit: type=1326 audit(635.818:66541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 635.883965][ T29] audit: type=1326 audit(635.858:66542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 635.910588][ T29] audit: type=1326 audit(635.858:66543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 635.933746][ T29] audit: type=1326 audit(635.858:66544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 635.960305][ T29] audit: type=1326 audit(635.858:66545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 635.989749][ T29] audit: type=1326 audit(635.858:66546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 636.016305][ T29] audit: type=1326 audit(635.858:66547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 636.043340][ T29] audit: type=1326 audit(635.858:66548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 636.070085][ T29] audit: type=1326 audit(635.858:66549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd0d71df90 code=0x7ffc0000 [ 636.096566][ T29] audit: type=1326 audit(635.858:66550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8279 comm="syz.9.13353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0d71f749 code=0x7ffc0000 [ 636.229997][ T8274] SET target dimension over the limit! [ 636.383630][ T8306] loop9: detected capacity change from 0 to 1024 [ 636.414209][ T8306] EXT4-fs: Ignoring removed orlov option [ 636.442352][ T8306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.854063][ T8319] ================================================================== [ 636.862238][ T8319] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 636.870419][ T8319] [ 636.872757][ T8319] write to 0xffff8881092b254c of 4 bytes by task 8306 on cpu 0: [ 636.880416][ T8319] xas_set_mark+0x12b/0x140 [ 636.884938][ T8319] tag_pages_for_writeback+0xc2/0x290 [ 636.890331][ T8319] ext4_do_writepages+0x6b2/0x2750 [ 636.895464][ T8319] ext4_writepages+0x176/0x300 [ 636.900251][ T8319] do_writepages+0x1c6/0x310 [ 636.904869][ T8319] file_write_and_wait_range+0x156/0x2c0 [ 636.910576][ T8319] generic_buffers_fsync_noflush+0x45/0x120 [ 636.916497][ T8319] ext4_sync_file+0x1ab/0x690 [ 636.921198][ T8319] vfs_fsync_range+0x10d/0x130 [ 636.925991][ T8319] ext4_buffered_write_iter+0x34f/0x3c0 [ 636.931667][ T8319] ext4_file_write_iter+0x387/0xf60 [ 636.936898][ T8319] iter_file_splice_write+0x666/0xa60 [ 636.942298][ T8319] direct_splice_actor+0x156/0x2a0 [ 636.947434][ T8319] splice_direct_to_actor+0x312/0x680 [ 636.952831][ T8319] do_splice_direct+0xda/0x150 [ 636.957622][ T8319] do_sendfile+0x380/0x650 [ 636.962083][ T8319] __x64_sys_sendfile64+0x105/0x150 [ 636.967314][ T8319] x64_sys_call+0x2bb4/0x3000 [ 636.972014][ T8319] do_syscall_64+0xd2/0x200 [ 636.976543][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.982544][ T8319] [ 636.984881][ T8319] read to 0xffff8881092b254c of 4 bytes by task 8319 on cpu 1: [ 636.992471][ T8319] file_write_and_wait_range+0x10e/0x2c0 [ 636.998134][ T8319] generic_buffers_fsync_noflush+0x45/0x120 [ 637.004053][ T8319] ext4_sync_file+0x1ab/0x690 [ 637.008763][ T8319] vfs_fsync_range+0x10d/0x130 [ 637.013551][ T8319] ext4_buffered_write_iter+0x34f/0x3c0 [ 637.019157][ T8319] ext4_file_write_iter+0x387/0xf60 [ 637.024381][ T8319] iter_file_splice_write+0x666/0xa60 [ 637.029812][ T8319] direct_splice_actor+0x156/0x2a0 [ 637.034964][ T8319] splice_direct_to_actor+0x312/0x680 [ 637.040452][ T8319] do_splice_direct+0xda/0x150 [ 637.045333][ T8319] do_sendfile+0x380/0x650 [ 637.049785][ T8319] __x64_sys_sendfile64+0x105/0x150 [ 637.055023][ T8319] x64_sys_call+0x2bb4/0x3000 [ 637.059806][ T8319] do_syscall_64+0xd2/0x200 [ 637.064336][ T8319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.070247][ T8319] [ 637.072584][ T8319] value changed: 0x02000021 -> 0x04000021 [ 637.078346][ T8319] [ 637.080680][ T8319] Reported by Kernel Concurrency Sanitizer on: [ 637.086842][ T8319] CPU: 1 UID: 0 PID: 8319 Comm: syz.9.13362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 637.096672][ T8319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 637.106754][ T8319] ================================================================== [ 637.286471][ T3118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.463541][T31535] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.475202][T31535] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.488178][T31573] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.501257][T31573] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0