last executing test programs: 4m21.128475388s ago: executing program 3 (id=99): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4665, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000004f0000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x124152fc84234b5f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 4m20.762346034s ago: executing program 3 (id=103): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mq_open(0x0, 0x800, 0x0, &(0x7f0000019240)={0x6, 0x8, 0x2, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x310, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x0, 0x1, 0x1}}, 0x40) close_range(r5, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, 0x0) pread64(r8, 0x0, 0x0, 0x1000000000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) 4m20.662974708s ago: executing program 3 (id=104): socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000300), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)="b6", 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) (fail_nth: 4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) 4m20.282602404s ago: executing program 3 (id=105): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x8, 0x328}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001dc0)=@newtaction={0x14, 0x30, 0x829}, 0x14}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000120a0101000000000000000002000809080003400000000814000000020a010200000000000000000a00000114000000140a050000000000000000000100000a140000001100010000000000000000000300000a7b03aba13e6b3d9c8aa369c5cda00f05ffdba5ed07fc4c59250b"], 0x6c}, 0x1, 0x0, 0x0, 0xc005}, 0x800) 4m20.258841765s ago: executing program 3 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 4m20.204684848s ago: executing program 3 (id=107): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000400)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xbd, 0x7fff, 0x16, "0062ba7d82000000004012000000f7ffffff00"}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84880) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, r7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xf840, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@debug={'debug', 0x3d, 0x800}}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@mmap}, {@access_any}, {@afid={'afid', 0x3d, 0x6}}, {@cache_fscache}, {@version_u}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, 'fd/3\x00'}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '@'}}, {@dont_hash}, {@measure}, {@subj_user={'subj_user', 0x3d, 'uid>'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r5}}]}}) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x0, 0x8, "a77feac5934605bfc631a2719dea0f6f99aaad"}) 4m5.143234091s ago: executing program 32 (id=107): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000400)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xbd, 0x7fff, 0x16, "0062ba7d82000000004012000000f7ffffff00"}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84880) r4 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, r7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0xf840, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_any}, {@debug={'debug', 0x3d, 0x800}}, {@fscache}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@mmap}, {@access_any}, {@afid={'afid', 0x3d, 0x6}}, {@cache_fscache}, {@version_u}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, 'fd/3\x00'}}, {@subj_type={'subj_type', 0x3d, '9p\x00'}}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, '@'}}, {@dont_hash}, {@measure}, {@subj_user={'subj_user', 0x3d, 'uid>'}}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt={'uid>', r5}}]}}) r8 = syz_open_pts(r1, 0x0) dup3(r8, r1, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x1, 0x9, 0x0, 0x8, "a77feac5934605bfc631a2719dea0f6f99aaad"}) 2m16.407419975s ago: executing program 5 (id=2533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024000000080000008500000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) accept4(r1, 0x0, 0x0, 0x80800) 2m16.391158675s ago: executing program 5 (id=2534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf8, 0x1, 0x8, 0xd, 0x0, 0x5, 0x18800, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x81}, 0x2080, 0x2, 0x9, 0x7, 0x9, 0x1, 0x3, 0x0, 0x5, 0x0, 0x7fff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='/selinux/policy\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) pipe(0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) r8 = timerfd_create(0x6, 0x800) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r8, 0x4002f516, &(0x7f00000002c0)={0x47, 0x7f}) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x603f) 2m16.183841884s ago: executing program 5 (id=2538): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000fffffffc) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)}}, 0x40) 2m16.102589128s ago: executing program 5 (id=2539): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r6, 0x0, 0x4, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rss_stat\x00', r11, 0x0, 0x6}, 0x18) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r12}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x2a, &(0x7f0000000340)={0x4, {{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}}}, 0x88) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r14, 0x0, 0x0}, 0x10) 2m15.840341689s ago: executing program 5 (id=2545): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101002, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 2m15.494479153s ago: executing program 5 (id=2549): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m15.494362603s ago: executing program 33 (id=2549): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x80, 0x1000, 0x5d0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m3.718729026s ago: executing program 6 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='mr_dereg\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x6, @remote, 0x40}]}, &(0x7f0000000180)=0x10) 2m2.883445872s ago: executing program 6 (id=2713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) syz_clone(0x40000, &(0x7f0000001ec0)="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", 0x1000, &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000006c0)="7b04307c06bcafe6b64e76a916c47329a7426bb36cf2141cd084e039bf87b292f8cc3de94d54a62878da42c58a4aca27450f5c5ffa9e23dcb179e5e5e1dff49c93215af51519482ea4") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@errors_remount}, {@oldalloc}]}, 0x1, 0x524, &(0x7f0000001200)="$eJzs3c+PG1cdAPDvOLHXSbbdtPQACNrQFgKK4s06bVT1AOWEEKqE6BGkdNl1ViF2vIq9pbtEYntG4oREJU5w5A/g3BMSRy4IbgipHJD4sQJ1kTgMmvF4693YiZPdtbfrz0eazHvzZv19z9a8N36O/QKYWZciYjsiKhHxdkQsFMeTYos3elt23kc791d2d+6vJJGmb/0zycuzYzHwN5kLxWNWI+I734j4fvJg3M7m1p3lZrNxr8gvdlvri53Nrau3W8trjbXG3Xr9xtKNa69df7V+ZG19oVUpUp//8PfbX/lRVq354shgO45Sr+nlvTiZsxHxreMINgVnivZUpl0RnkgpIp6NiBfz638hzuSvJgBwmqXpQqQLg/k9yf4sAHBalPI5sKRUK+YC5qNUqtV6c3jPxflSs93pXrnV3ri72psruxjl0q3bzca1Yq7wYpSTLL+Upz/O1w/kr0fEMxHxs7lzeb620m6uTvPGBwBm2IUD4/9/5nrjPwBwylWnXQEAYOKM/wAwe4z/ADB7jP8AMHt64/+5aVcDAJgg7/8BYPYY/wFgpnz7zTezLd0tfv969Z3NjTvtd66uNjp3aq2NldpK+956ba3dXst/s6f1qMdrttvrS6/ExrsXv7re6S52Nrduttobd7s389/1vtko52dtT6BlAMAoz7zwwZ+SbER+/Vy+xcBaDuWp1gw4bqVpVwCYmjOP/yduC+CUsNoXzK5DDObliJ+6F4BPtN/l/w5Zonef6rAvCKVpmh5XtYBjd/kz5v9hVg3M//tfwDBjnmD+HzglzP/D7ErTZNxF/mPcEwGAk80cPzDi8/9ni/2viw8HvrdaHEjT9Md54v0JVA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOqP76v7ViLfD5KJVqtYinIuJilJNbt5uNaxHxdET8ca48l+WXplxnAOCwSn9LivW/Li+8PL+v6PkLe8lKRPzwF2/9/N3lbvfeHyIqyb/m+se77xfH648VuHJULQAAHq4/Tuf7gTfyH+3cX+lvk6zP378eEdVe/N2dSuzuxT8bZ/N9NcoRcf7fSZHvSQbmLg5j+72I+PSw9icxn8+B9FY+PRg/i/3UROOX9sUv5WW9ffZcfOoI6gKz5oOs/3lj2PVXikv5fvj1X817qMMr+r/soVZ28z7w4/j9/u/MiP7v0rgxXvntN3upcw+WvRfx2bMR/di7A/1PP34yIv7LY8b/8+eef3FUWfrLiMsxPP5grMVua32xs7l19XZrea2x1rhbr99YunHtteuv1hfzOerF0aPBP16/8vSosqz950fErz6i/V8cs/2/+t/b3/3CQ+J/+aVh8Uvx3EPiZ2Pil8aMv3z+N9VRZVn81RHtf9Trf2XM+B/+dWt1zFMBgAnobG7dWW42G/ckZinxlx+ciGocTCTFTf/Ic7LCk1HVBxNfm1Ssyojn5ycv9Z69A0X9e//HjDWqxziKWTfgJNi76CPiv9OuDAAAAAAAAAAAAAAAMNQkvrE07TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwev0/AAD//3PUyGE=") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}], [{@audit}, {@pcr={'pcr', 0x3d, 0x7}}, {@obj_type={'obj_type', 0x3d, '\\.\\,&)'}}, {@measure}, {@obj_role}, {@hash}, {@subj_user={'subj_user', 0x3d, 'XX\x7f*\x93^\x87\xff\xda{.\f\xecml\xf2\x05\xc8\xca\bK\xf6i\xa4A\'\xca:\x96\x0e\x1e\xb5\x1c\xbf\x86Q\x1a\xf4\xfa\xfd\x00'/53}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}, {@fowner_gt}, {@euid_lt}]}, 0x1, 0x5ea, &(0x7f0000001740)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0xf9ffff0000000000, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000005d029853dae59479d78a69fe31f72300000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000001900"/144]}, 0x108) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000200)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x9}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) unshare(0xa000200) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000007c0)=""/126) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, 0x0, 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a00000015000300686173683a69702c706f72742c6e6574000000000bf22680e12c1767cb32561d370f37abc0beda13e8d15f70af4babd75a5ec7870df21b9d"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10008803}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r6, 0x2e, 0x1, 0x4d10, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 2m1.99316805s ago: executing program 6 (id=2725): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003"], 0x58}}, 0x0) 2m1.906444864s ago: executing program 6 (id=2727): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x10ee, 0x2, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x40047459, 0xffffffffffffffff) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 2m1.827406527s ago: executing program 6 (id=2729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m1.002599343s ago: executing program 6 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003140)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYBLOB="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"], 0x1020a) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffdc, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x6}}]}}]}, 0x3c}}, 0xd4) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x0) r9 = dup(r8) preadv2(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file3\x00', 0x1d0) 2m1.002281373s ago: executing program 34 (id=2734): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003140)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESOCT=0x0, @ANYBLOB="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"], 0x1020a) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r3) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffdc, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x703d25, 0x2, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {}, {0x8, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0x6}}]}}]}, 0x3c}}, 0xd4) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x0) r9 = dup(r8) preadv2(r9, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x129242, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000580)="$eJzs2j+LHGUcB/DfnJHEC5dd8R8JiA9aqM2Q3doihyQgLiiaFaIgmXizuuy4e+wsBytirtLWl2AtlnaCpLS5xldgYXfNlSnEkWRjcnesxSHein4+zXzhmS88D8/w8BSz/9rXn44GdT4oZrGWZbF2JXbjbhbtWIs/7carL9/46fl3b7z/5mavd/WdlK5tXu90U0oXXvjxg8+/e/HO7Px731/44WzstT/cP+j+uvfs3sX9369/MqzTsE7jySwV6dZkMituVWXaGtajPKW3q7KoyzQc1+X0yPigmmxvz1Mx3tpY356WdZ2K8TyNynmaTdJsOk/Fx8VwnPI8Txvrwd/R//Zu08RB8/jNaJrmiW/i/J3Y+CVakT2ZsqeuZM/czJ7bzS4eNE1r1VPlH2H//98OHernIqqvdvo7/cVzMb45iGFUUcblaMVvce8zeWCRr73Ru3o53deOL6vbD/q3d/qPHe13ohXt5f3Oop+O9s/G+uF+N1rx9PJ+d2n/XLzy0qF+Hq34+aOYRBVbca/7qP9FJ6XX3+od61+6/x4AwH9Nnh5aen/L878aX/RPcD88dr86E5fOrHbtRNTzz0ZFVZVTQRCEh2HVJxOn4dGmr3omAAAAAAAAAAAAnMRp/E646jUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/bn8EAAD//xrx1cI=") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file3\x00', 0x1d0) 1m58.621379104s ago: executing program 4 (id=2758): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_open(0x0, 0x40, 0x9, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) 1m58.231677861s ago: executing program 4 (id=2760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x2f, 0x505102) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000000c0)=0x1) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160005000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x8) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r7, 0x2004, 0x0) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) 1m57.288135791s ago: executing program 4 (id=2772): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001a80), 0xc2202, 0x0) write(r0, &(0x7f0000001b40)="b104b9cd4624076b412d0ee26ac6521e86229377fbca5e73189bc5c1651f11e103956268f82f38d15ff718903403e8287020eccbcee89583dbd63784363cb3e621bfe227c781a15db6e3e7df78aa628ba2a9cc962bc8bd40178f851a3a51c2da550294be974b715be4b6a3a7875d1971e648ca684bddda158abcc795c63b4eee887df3601e050924e9370b60c3f5c9cea66cb9", 0x93) 1m57.210832904s ago: executing program 4 (id=2775): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYBLOB="ffeb8712a7fa923cc4090e5f3b019fe27a41aa386e8407b823a6b9b3ef8d89a60936016aa75db0b8497cbb5c4c4d8cf6ff579ebd3efa9807b97eb0f3920d15d5c83d5a4d62026620c52599b7a7dd713f398297df017f2e13a2de08487cb1cf20853bcc1920c251773d29bb89803b24fc99fe70de3015403aa6a344de66ae930bb04b942871b74c24432b98", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES32=r2, @ANYRES16=r0, @ANYRES16=r1, @ANYRES8=0x0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) 1m54.960387661s ago: executing program 4 (id=2797): setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r8 = syz_open_dev$mouse(&(0x7f0000000500), 0x3, 0x200840) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xe6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES16=r9, @ANYBLOB="0000000000000000b71a0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x15, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xf1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0x6, 0xb3, &(0x7f0000000640)=""/179, 0x40f00, 0x20, '\x00', r7, @lsm=0xe, r8, 0x8, &(0x7f0000000700)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xd, 0x4, 0x8}, 0x10, r10, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000780)=[{0x2, 0x1, 0x4, 0xb}, {0x2, 0x1, 0x10, 0x1}, {0x3, 0x4, 0x9, 0x7}], 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r11}, 0x18) listen(r3, 0x3) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r12}, 0x18) r13 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1m54.101116447s ago: executing program 4 (id=2811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000340)=r2, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x29, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x9, 0x2, 0x2, 0xc, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000380)=""/246, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x4, 0xa2b, 0xfff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x4, 0x2, 0x3}], 0x10, 0x1}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x20, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 1m52.185591699s ago: executing program 0 (id=2828): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0xdf, 0xffffdffb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x8000fffffffc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x38860bc, 0x0, 0x3, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB=',msize=0x000000000p001000,k']) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r13}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m51.740597388s ago: executing program 0 (id=2834): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (fail_nth: 5) 1m51.430925791s ago: executing program 0 (id=2835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x18, r6, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x81}, 0x18) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r10}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000080)='0', 0x1}], 0x2) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r12 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r12, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 1m50.588427547s ago: executing program 0 (id=2844): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) fallocate(r0, 0x0, 0x0, 0x8800000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='f2fs_gc_begin\x00', r0, 0x0, 0x35ed}, 0x18) memfd_secret(0x80000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32, @ANYBLOB="84110000040000001c0012800b0001006d616373656300000c00028005000a000100000074eebb146028dd909a0060bf60494a3fd97db2f1a8f2fc7543aac88e12a3fc796606c99dcb9407826e8886711b6e653a9bea05541d45657dbd4eff1785d486865ccece22811f268e760b95db01b26bc96f5386fc8ddcd75d98f4658d36041034bb360978985e5723aeb78012c242e0cf242a201014e59e8d61f5536b0135a5b2427199c3add995b74ea63cc8c0d6b517d4981a20b4d5ee5e27"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f00000002c0), 0x3ff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f0000000040)) write$selinux_load(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75788f2a6a754e257ae5cdbccc5401c61fb9856761154fab1540c4b2163639c07d7f6c3549464c824835e2976a2bf9b070a86c479a49333d07c73a53268ab27ef195accc9efc7994ec681e910072fb63806fe82b82e78c396df3f0653d3733a43ddfbdad7db41f878435ed034fcd81e345af97e3dbbde6a219506a713e1339ef221aea4cfdb8113e5a25cd6e98845812951f89016b45b7884525fb63d434"], 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) syz_open_dev$mouse(&(0x7f0000000180), 0x3dce257c, 0x101500) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000006"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r4], 0xfc}}, 0x0) fallocate(r2, 0x20, 0x0, 0x8000) 1m50.419791545s ago: executing program 0 (id=2845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m45.270422964s ago: executing program 0 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7ffffffe}]}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000180)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x801000f4) r9 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000000c0)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x12, r11, {0xb}, {0x9, 0xffff}, {0xfff1, 0xfff7}}}, 0x24}}, 0x0) write$selinux_context(r2, &(0x7f0000000000)='system_u:object_r:var_log_t:s0\x00', 0x1f) 1m45.270171594s ago: executing program 35 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x401, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r3) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7ffffffe}]}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r7, 0x8983, &(0x7f0000000180)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r8, 0x0, 0x0, 0x801000f4) r9 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000000c0)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x1, {0x0, 0x0, 0x12, r11, {0xb}, {0x9, 0xffff}, {0xfff1, 0xfff7}}}, 0x24}}, 0x0) write$selinux_context(r2, &(0x7f0000000000)='system_u:object_r:var_log_t:s0\x00', 0x1f) 1m39.034768671s ago: executing program 36 (id=2811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000340)=r2, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x29, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @alu={0x4, 0x1, 0x9, 0x2, 0x2, 0xc, 0xfffffffffffffffc}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x96}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000380)=""/246, 0x40f00, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x4, 0xa2b, 0xfff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x4, 0x4, 0x2, 0x3}], 0x10, 0x1}, 0x94) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x20, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 3.51287138s ago: executing program 9 (id=4077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={[0x9]}, 0x8) 3.373907126s ago: executing program 9 (id=4082): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) clock_gettime(0x5, &(0x7f0000000000)) socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) setgroups(0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare(0x2a020400) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0xa000, 0xce) unshare(0x2000400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xf9, 0x7ffc1ffb}]}) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) r7 = syz_open_dev$rtc(&(0x7f00000001c0), 0x7, 0x1) readv(r7, &(0x7f0000001840)=[{&(0x7f0000000240)=""/150, 0x96}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000018c0)=""/143, 0x8f}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/112, 0x70}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/126, 0x7e}], 0x8) close(r5) writev(r4, 0x0, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x48040) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r8, 0x1, 0x80, 0x6, @broadcast}, 0xffffffc5) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 3.341727467s ago: executing program 9 (id=4085): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) fsetxattr$security_capability(r3, &(0x7f0000000040), 0x0, 0x0, 0x2) 3.27849423s ago: executing program 9 (id=4087): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 3.188494824s ago: executing program 8 (id=4088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = epoll_create(0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r7) 2.855372128s ago: executing program 9 (id=4092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/partitions\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000000c0)=""/4092, 0xffc) read$hiddev(r4, &(0x7f0000001100)=""/234, 0xea) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.372601779s ago: executing program 1 (id=4098): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffffc}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007112aa00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$VT_RESIZEX(r0, 0x4b30, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = memfd_create(0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000f87d28a6330000000000000000010000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) fsetxattr$security_selinux(r3, &(0x7f0000000480), 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = io_uring_setup(0x3449, &(0x7f0000000640)={0x0, 0xddb0, 0x1, 0x503fc, 0x8100014e}) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000002c0)) ppoll(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x8) utimes(&(0x7f0000000c00)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 2.318707731s ago: executing program 8 (id=4099): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f00000001c0)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_lt={'euid<', r0}}, {@dont_appraise}, {@uid_eq={'uid', 0x3d, r0}}, {@audit}, {@dont_measure}, {@audit}]}, 0x1, 0x7c0, &(0x7f0000000380)="$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") 2.241241014s ago: executing program 8 (id=4100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r1}, &(0x7f0000000940), &(0x7f0000001a40)='%-5lx \x00'}, 0x20) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x490, &(0x7f0000000100)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x2}, 0x3}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000001c0)=0x7, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x94) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r6 = socket(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="bc0300001c0023052dbd7000ffdbdf256c0c0015005b073500020000002400090003000000000000000400000000000000050000000000000000000000000000000a00aa5877c90000000000007f001c00", @ANYRES32=r7, @ANYBLOB="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"], 0x3bc}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) openat$cgroup(r6, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='uid_map\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.09800161s ago: executing program 1 (id=4102): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_getoverrun(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0) 1.422487919s ago: executing program 2 (id=4105): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={[0x9]}, 0x8) 1.392754871s ago: executing program 8 (id=4106): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000020000"], 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.338005253s ago: executing program 2 (id=4107): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r8, 0x20, &(0x7f0000000a40)={&(0x7f00000008c0)=""/84, 0x54, 0x0, &(0x7f0000000940)=""/248, 0xf8}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r4, 0xffffffffffffffff, 0x17, 0x1, r5, @void, @value=r5, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xf8, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r12 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="010000007e000000040000000210000000000000", @ANYRES32=r12, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f0000000000000000e2ff000000000800000000000000000000000040be7ddebaef0a24"], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex=r11, r0, 0x21, 0x2004, r0, @value=r12, @void, @void, @void, r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") 1.337294093s ago: executing program 2 (id=4108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000c80)="8f36f8e4b8472d8d35048242073c43ffc4bdd753e557030c33823f5b05373adcf503115273a90a7616d71a45d8a65f7e8b202a7dc634fe0288728cbaf6bdf57441b85475d604414feebde47248d2968e870a197f03aac13737c6ece0eaf165578bc17b8957231efe780b76af16380874eb2ca0651f594760fe377d762cf9985464315f970635b4c3e9759b3e05dbb5597dc261f2c245810c9455cecaa5017fe4dc113dfac4fcaba524d6b858d8b8cf9689299dea7f1f1624061734ebc6d53b4e4e", 0xc1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000040)={@multicast, @remote, @void, {@llc={0x4, {@snap={0x0, 0x0, "af", "1a0c65"}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020000000400000008000000016fb8d1e6a6212b76036bfdbb6cbed730d4b9935ace9fff9203000000000000003c8c28afaa2f4d6d19e651b2b2243c66a3b21fbc132ba36aca7cb21c6f87aea46cd555afe3e9943adbb41abb04005a9ad31bc1dbc913186a8cd6e786a652219d4793f1db13b98841016495afc74b2fb1707e9cd6b20e46a01e02000000a2942ae43bb2d42247d9a7fbcfeec097b0b883b6a71badf48222d2c99995fc38c368d2fe042952eab92e398965a3015b1e23618c3537e22065b92162f764098f63ca"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='f2fs_destroy_extent_tree\x00', r6, 0x0, 0x80000000010000}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r7}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffe0}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="40118b37694428c8204c2d6400323e305c0000001000370100"/36, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200ac1e00010500040000000000"], 0x40}}, 0x0) 1.311584154s ago: executing program 8 (id=4109): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0}, 0x18) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000071c0)=[{{&(0x7f0000000280), 0x80, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/44, 0x2c}], 0x1, &(0x7f0000001c80)=""/96, 0x60}, 0x4}, {{&(0x7f0000001d00)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/101, 0x65}, {&(0x7f0000001e00)=""/144, 0x90}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/56, 0x38}, {&(0x7f0000002f00)=""/81, 0x51}, {&(0x7f0000002f80)=""/84, 0x54}, {&(0x7f0000003000)=""/156, 0x9c}], 0x7, &(0x7f0000003140)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000004480)=""/183, 0xb7}, {&(0x7f0000004280)=""/245, 0xf5}, {&(0x7f0000004380)=""/194, 0xc2}, {&(0x7f00000041c0)=""/131, 0x83}, {&(0x7f0000007400)=""/160, 0xa0}, {&(0x7f00000074c0)=""/198, 0xc6}], 0x6, &(0x7f0000004580)}, 0x4}, {{&(0x7f00000045c0)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004640)=""/97, 0x61}], 0x1, &(0x7f0000004700)=""/208, 0xd0}, 0x4357}, {{&(0x7f0000004800)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/131, 0x83}], 0x1, &(0x7f0000004980)=""/157, 0x9d}}, {{&(0x7f0000004a40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004ac0)=""/161, 0xa1}, {&(0x7f0000004b80)=""/208, 0xd0}, {&(0x7f0000004c80)=""/145, 0x91}, {&(0x7f0000004d40)=""/213, 0xd5}, {&(0x7f0000004e40)=""/80, 0x50}, {&(0x7f0000004ec0)=""/13, 0xd}, {&(0x7f0000004f00)=""/140, 0x8c}, {&(0x7f0000004fc0)=""/119, 0x77}, {&(0x7f0000005040)=""/17, 0x11}, {&(0x7f0000005080)=""/99, 0x63}], 0xa, &(0x7f00000051c0)=""/156, 0x9c}, 0x3}, {{&(0x7f0000005280)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000005800)=[{&(0x7f0000005300)=""/72, 0x48}, {&(0x7f0000005380)=""/228, 0xe4}, {&(0x7f0000005480)=""/63, 0x3f}, {&(0x7f00000054c0)=""/249, 0xf9}, {&(0x7f00000055c0)=""/213, 0xd5}, {&(0x7f0000005740)=""/156, 0x9c}], 0x6, &(0x7f0000005880)=""/92, 0x5c}, 0x5}, {{&(0x7f0000005900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}}}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/105, 0x69}, {&(0x7f0000006a00)=""/8, 0x8}, {&(0x7f0000006a40)=""/168, 0xa8}, {&(0x7f0000006b00)=""/21, 0x15}, {&(0x7f0000006b40)=""/113, 0x71}, {&(0x7f0000006bc0)=""/244, 0xf4}, {&(0x7f0000006cc0)=""/58, 0x3a}, {&(0x7f0000006d00)=""/190, 0xbe}, {&(0x7f0000006dc0)=""/235, 0xeb}], 0xa, &(0x7f0000006f80)=""/144, 0x90}, 0xfffffffd}, {{&(0x7f0000007040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000007100)=[{&(0x7f00000070c0)=""/1, 0x1}], 0x1, &(0x7f0000007140)=""/92, 0x5c}, 0xd01}], 0x9, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000004}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x200000000000000) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 1.210682988s ago: executing program 7 (id=4110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) 1.189648789s ago: executing program 7 (id=4111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) (fail_nth: 2) 887.083762ms ago: executing program 7 (id=4112): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_open(0x0, 0x40, 0x9, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x1000000000000000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x40040, 0x1a5, 0x10}, 0x18) 842.309174ms ago: executing program 1 (id=4113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES64=r3, @ANYRES64=r3, @ANYBLOB="70726c71405ece1fb670726c6ffcbe1b5c02561c538d582375113eb2aa3074371acd475d1461a38a6d0a5f55d4aa173b59491dd52e2a67ca390d13475c27d626a894d98761bb1f074b10dcb2ab590dc53dd0250f838b6b2443dbf5526dbbff42ae85786b0f9e58262c11b4b27255ce055a7a2754605f8bff2d5948e378b4f8850fa9550c59ca77a8577e50", @ANYRESOCT=0x0, @ANYBLOB="dd6fb1d8357cf7730b0865e0f8a2c11fefdd3eafb8ac1a1601ec71c5c7d81e6bd5cd"], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = accept$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000900)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu==0||!') r10 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x3, 0x400251}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r5, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r10, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 655.568652ms ago: executing program 9 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x0, 0x71, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c}, 0x48010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10100, 0xfffffffd, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r1, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r3, 0x27e2, 0x0, 0x7, 0x0, 0x0) write(r2, &(0x7f00000000c0)='\n', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f00000001c0)={0xc34, 0x2, 'client0\x00', 0xa, "733cc903116220ad", "14ab78f8b8124d8cd6db929db52f8ed589dfbb651a9679c6fef4c9a6316ba249", 0x2, 0xc4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "ebda657897de9963760676151d00332c5c94224a2a7f20c55635c416cca8cc2eb7f167fa628942f2184ed5dc69ef79baca6b0bba797857b2d0a4870dae55f62128ff"}, 0x4d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r10, 0xffffffffffffffff, 0x200000000000000) 577.295745ms ago: executing program 7 (id=4115): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 521.470498ms ago: executing program 1 (id=4116): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) capset(0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 420.224682ms ago: executing program 1 (id=4117): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001a80)={{r1}, &(0x7f0000000940), &(0x7f0000001a40)='%-5lx \x00'}, 0x20) sendto$inet6(r3, &(0x7f0000000000)="aa", 0x1, 0x490, &(0x7f0000000100)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x2}, 0x3}, 0x1c) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000001c0)=0x7, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x94) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r5, 0xa, 0x13) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r6 = socket(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000540)={'wg0\x00', 0x0}) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000c40)=ANY=[@ANYBLOB="bc0300001c0023052dbd7000ffdbdf256c0c0015005b073500020000002400090003000000000000000400000000000000050000000000000000000000000000000a00aa5877c90000000000007f001c00", @ANYRES32=r7, @ANYBLOB="030000003b0114007368613531322d6176783200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007807000000020000caa700f7c9d57bc7a06e08530e6971390b874d6038fe0eeaef1ab68018dd94c1b9281387c1eaf0cee9eae79c53fd6064546d28759e0b6ba6e564da02b6a6987c0c0de2bfc2cba10f90a9e2c5ec2d0f07443f082bd4baae18f6aa0fe6bef8c5afe32f237ca0eb9df26b0a0993965a7b327f8feec61643876ded50ebf033c4c49ea3b5461121fb0c2897589f24fb3c3978850c0b1d3834abc9944917ee4c72f5abe3e6e93efdb55fff7b2bb7beb0ea5d7fd8823b3f86b0dccede33f61c2ebf960e61e6f9e5ffa3dd64b80698f7c1eb9f1791af724feb751cc88f88a12e65b99d450d1b55af987ec52c270059245e2b140028001a000a010102000000000000000000000000fe880000000000000000000000000101000003063c01120072666334313036286d6f72757336343029000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080070000000100001dbb048bec260a88b953ad406c61b3affe1380e1364f94c61c53a38d354a26d2755fa0109493b12bbc6ec74490567e102d037670a168e7f59b3b21838308c73b7d49497864fa38aeabdb37d41166410a64849780d0a979593cb3ac4440c0253fb5802de91d809bb1b205e2058ce8b54aa5a4bb4de618805ceb1c20fdd806b8269c5c3ec98e042e3fd48e19e766373c463ac027d624fe07370732d187a85707a13ca6b7c597e8ec47c5256a192746fa2df745febc06c0119c0363676864d50282c665e3a76e443e44e05faf8f8f65156565018da71871e12d6cee74bd5229f0f6b2144cacab24d62d6c401ed32a0d3eb808001e000d000000b5001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480300008000000000f32dd7cc973223ffe54a97dd17f22bed73e0b1466c8a67b9b775d36be594251afeb028aa66e93106fef621ec015b60083cfedd527d6bd1334649b72dfa3f451d2f8763a48f2fecf442d2c2cbaa827772e427c9625c4fb2a527fb33780b596bc177634423500041a0000000000000"], 0x3bc}, 0x1, 0x0, 0x0, 0x28000000}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) openat$cgroup(r6, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 357.083005ms ago: executing program 2 (id=4118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={r8, 0x20, &(0x7f0000000a40)={&(0x7f00000008c0)=""/84, 0x54, 0x0, &(0x7f0000000940)=""/248, 0xf8}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x0, 0x1, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r4, 0xffffffffffffffff, 0x17, 0x1, r5, @void, @value=r5, @void, @void, r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, r3, 0x34, 0x0, @val=@tcx={@void, @value=r10, @void, @void, r9}}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xf8, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r12 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="010000007e000000040000000210000000000000", @ANYRES32=r12, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1f0000000000000000e2ff000000000800000000000000000000000040be7ddebaef0a24"], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@ifindex=r11, r0, 0x21, 0x2004, r0, @value=r12, @void, @void, @void, r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_regs={0x12}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") 312.752247ms ago: executing program 8 (id=4119): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r7}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 283.311478ms ago: executing program 2 (id=4120): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000300)=[{0x2b, 0x0, [0x1, 0x40000000, 0x7fffffff, 0x162, 0x6, 0x92b, 0x200, 0x8, 0x400, 0x6, 0xff, 0x7ff, 0x8, 0x1ff, 0x0, 0x7]}], r1, 0x1, 0x1, 0x48}}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x50, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0xf226, 0x33, 0xff, @loopback, @empty, [@hopopts={0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}]}}}}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 260.779509ms ago: executing program 2 (id=4121): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000003060102000000f4000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (fail_nth: 2) 254.160199ms ago: executing program 7 (id=4122): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$inet(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[]) write$selinux_context(r0, &(0x7f0000000000)='system_u:object_r:var_log_t:s0\x00', 0x1f) 570.89µs ago: executing program 7 (id=4123): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_getoverrun(0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40000000, 0x0) 0s ago: executing program 1 (id=4124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x100000000000000}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d46c000000ac141437000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffbf000000002abd700003350000ffdaeedb4e50a799909d49101ef8020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000058259c636deb6e18e690ae4232f47bd7d99de7c4983a1a800855744685ca245fa512448d021566e69151626fea05ef34018a719fe2915e0d402cfa49b29acbefbf124a82a56027dc2d0a491f32dacfb02ebf8377be03c123b0ce631ff4099bc111"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r9, 0x0, 0x9}, 0x2f) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)="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", 0x1e1}], 0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) kernel console output (not intermixed with test programs): 0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.528389][ T29] audit: type=1326 audit(1763883923.033:19805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.9.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.552054][ T29] audit: type=1326 audit(1763883923.033:19806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.9.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.575946][ T29] audit: type=1326 audit(1763883923.033:19807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.9.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.599618][ T29] audit: type=1326 audit(1763883923.043:19808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.9.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.623324][ T29] audit: type=1326 audit(1763883923.043:19809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.9.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 244.661514][T15676] loop9: detected capacity change from 0 to 512 [ 244.668297][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3532'. [ 244.684604][T15676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.700729][T15676] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.721709][T15673] tipc: Enabled bearer , priority 0 [ 244.736650][T15688] tipc: Enabled bearer , priority 0 [ 244.744855][T15673] syzkaller0: entered promiscuous mode [ 244.750411][T15673] syzkaller0: entered allmulticast mode [ 244.758905][T15688] syzkaller0: entered promiscuous mode [ 244.764465][T15688] syzkaller0: entered allmulticast mode [ 244.778909][T15688] tipc: Resetting bearer [ 244.787455][T15687] tipc: Resetting bearer [ 244.796405][T15687] tipc: Disabling bearer [ 244.804410][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.817118][T15690] loop1: detected capacity change from 0 to 128 [ 244.892982][T15696] loop1: detected capacity change from 0 to 512 [ 244.919654][T15696] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.926281][T15696] EXT4-fs: inline encryption not supported [ 244.964019][T15697] loop8: detected capacity change from 0 to 2048 [ 244.971252][T15694] Failed to initialize the IGMP autojoin socket (err -2) [ 244.985851][T15696] EXT4-fs: test_dummy_encryption option not supported [ 244.991012][T15697] ext4: Unknown parameter 'smackfsfloor' [ 245.068917][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3538'. [ 245.088288][T15694] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3536'. [ 245.127152][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3538'. [ 245.531369][T15672] tipc: Resetting bearer [ 245.557854][T15672] tipc: Disabling bearer [ 245.638378][T15707] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3539'. [ 245.647412][T15707] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3539'. [ 245.715410][T15706] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3540'. [ 245.834710][T15713] loop7: detected capacity change from 0 to 512 [ 245.855733][T15718] loop9: detected capacity change from 0 to 512 [ 245.873218][T15718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.902374][T15713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.914537][T15718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.932090][T15718] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.947064][T15713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.013119][T15713] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.185019][T15737] siw: device registration error -23 [ 246.205398][T15737] loop8: detected capacity change from 0 to 128 [ 246.213303][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.246887][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.101514][T15773] loop2: detected capacity change from 0 to 512 [ 247.285678][T15773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.307569][T15773] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.339851][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.399038][T15787] siw: device registration error -23 [ 247.431452][T15791] loop7: detected capacity change from 0 to 128 [ 247.431459][T15787] loop2: detected capacity change from 0 to 128 [ 247.498863][T15791] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 247.506780][T15791] FAT-fs (loop7): Filesystem has been set read-only [ 247.623452][T15791] bio_check_eod: 2937 callbacks suppressed [ 247.623469][T15791] syz.7.3563: attempt to access beyond end of device [ 247.623469][T15791] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 247.643423][T15791] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 247.651469][T15791] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 247.664805][T15791] syz.7.3563: attempt to access beyond end of device [ 247.664805][T15791] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.145097][T15791] syz.7.3563: attempt to access beyond end of device [ 248.145097][T15791] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.353930][T15791] syz.7.3563: attempt to access beyond end of device [ 248.353930][T15791] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 248.702561][T15813] veth0_vlan: entered allmulticast mode [ 249.004096][T15822] loop2: detected capacity change from 0 to 1024 [ 249.010867][T15822] EXT4-fs: Ignoring removed orlov option [ 249.030339][T15822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.057334][T15831] loop1: detected capacity change from 0 to 128 [ 249.107927][T15825] tipc: Enabled bearer , priority 0 [ 249.141363][T15825] syzkaller0: entered promiscuous mode [ 249.147034][T15825] syzkaller0: entered allmulticast mode [ 249.222733][T15825] tipc: Resetting bearer [ 249.253762][T15819] tipc: Resetting bearer [ 249.322901][T15846] __nla_validate_parse: 2 callbacks suppressed [ 249.322921][T15846] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3583'. [ 249.366104][T15819] tipc: Disabling bearer [ 249.542238][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 249.542257][ T29] audit: type=1326 audit(1763883928.153:20181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.8.3584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f744f91f749 code=0x7ffc0000 [ 249.985195][T15862] loop7: detected capacity change from 0 to 512 [ 250.001944][T15862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 250.028974][T15864] siw: device registration error -23 [ 250.037646][T15864] loop9: detected capacity change from 0 to 128 [ 250.045518][T15862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.073020][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.082367][T15862] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.139911][T15875] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3594'. [ 250.150777][T15876] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3595'. [ 250.165068][ T29] audit: type=1326 audit(1763883928.793:20182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.188769][ T29] audit: type=1326 audit(1763883928.793:20183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.212447][ T29] audit: type=1326 audit(1763883928.793:20184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.236188][ T29] audit: type=1326 audit(1763883928.793:20185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.259960][ T29] audit: type=1326 audit(1763883928.793:20186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.283986][ T29] audit: type=1326 audit(1763883928.793:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.307579][ T29] audit: type=1326 audit(1763883928.793:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.331166][ T29] audit: type=1326 audit(1763883928.793:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.355649][ T29] audit: type=1326 audit(1763883928.993:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15861 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 250.412284][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.427815][T15881] loop1: detected capacity change from 0 to 1024 [ 250.435142][T15881] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 250.446205][T15881] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 250.457905][T15881] JBD2: no valid journal superblock found [ 250.463882][T15881] EXT4-fs (loop1): Could not load journal inode [ 250.575989][T15881] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 250.611457][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.077795][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.085023][T15893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.380871][T15913] loop2: detected capacity change from 0 to 2048 [ 251.510017][T15913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.682479][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.724618][T15920] loop1: detected capacity change from 0 to 512 [ 251.732005][T15920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.759934][T15920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.778771][T15920] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.800341][T15931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3614'. [ 251.829770][T15921] 9pnet_fd: Insufficient options for proto=fd [ 251.841938][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3615'. [ 251.957843][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.006892][T15945] loop7: detected capacity change from 0 to 512 [ 252.034794][T15945] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.912951][T15973] loop9: detected capacity change from 0 to 512 [ 252.994415][T15973] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.079561][T15973] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.336703][T15983] loop8: detected capacity change from 0 to 512 [ 253.367934][T15983] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.409920][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3633'. [ 253.419006][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3633'. [ 253.729501][T15991] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3634'. [ 253.897335][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3637'. [ 253.906370][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3637'. [ 254.980744][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 254.980762][ T29] audit: type=1326 audit(1763883933.613:20550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.099500][ T29] audit: type=1326 audit(1763883933.613:20551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.123504][ T29] audit: type=1326 audit(1763883933.613:20552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.147300][ T29] audit: type=1326 audit(1763883933.613:20553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.170936][ T29] audit: type=1326 audit(1763883933.613:20554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.194673][ T29] audit: type=1326 audit(1763883933.613:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.204505][T16015] syzkaller0: entered promiscuous mode [ 255.218427][ T29] audit: type=1326 audit(1763883933.613:20556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.223788][T16015] syzkaller0: entered allmulticast mode [ 255.253074][ T29] audit: type=1326 audit(1763883933.613:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.276821][ T29] audit: type=1326 audit(1763883933.613:20558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.300615][ T29] audit: type=1326 audit(1763883933.613:20559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16011 comm="syz.9.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 255.409954][T16022] loop7: detected capacity change from 0 to 512 [ 255.421159][T16026] loop2: detected capacity change from 0 to 128 [ 255.427911][T16022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.430527][T16026] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 255.444477][T16026] FAT-fs (loop2): Filesystem has been set read-only [ 255.462936][T16026] syz.2.3645: attempt to access beyond end of device [ 255.462936][T16026] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 255.477686][T16024] loop1: detected capacity change from 0 to 128 [ 255.484738][T16022] EXT4-fs mount: 6 callbacks suppressed [ 255.484758][T16022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.511958][T16026] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 255.519851][T16026] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 255.522176][T16022] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 255.568748][T16033] loop9: detected capacity change from 0 to 512 [ 255.575809][T16033] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.582387][T16033] EXT4-fs: inline encryption not supported [ 255.588855][T16033] EXT4-fs: test_dummy_encryption option not supported [ 255.601141][T16034] loop1: detected capacity change from 0 to 1024 [ 255.608748][T16034] EXT4-fs: Ignoring removed orlov option [ 255.613532][T16026] syz.2.3645: attempt to access beyond end of device [ 255.613532][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.641500][T16026] syz.2.3645: attempt to access beyond end of device [ 255.641500][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.655043][T16026] syz.2.3645: attempt to access beyond end of device [ 255.655043][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.668469][T16026] syz.2.3645: attempt to access beyond end of device [ 255.668469][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.705084][T16026] syz.2.3645: attempt to access beyond end of device [ 255.705084][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.730499][T16034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.774000][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.784048][T16026] syz.2.3645: attempt to access beyond end of device [ 255.784048][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.798753][T16026] syz.2.3645: attempt to access beyond end of device [ 255.798753][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.812321][T16026] syz.2.3645: attempt to access beyond end of device [ 255.812321][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.825860][T16026] syz.2.3645: attempt to access beyond end of device [ 255.825860][T16026] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 255.826144][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.030363][T16044] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3650'. [ 256.145846][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3651'. [ 256.154917][T16050] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3651'. [ 256.354698][T16061] loop1: detected capacity change from 0 to 512 [ 256.422241][T16061] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.428727][T16061] EXT4-fs: inline encryption not supported [ 256.436675][T16064] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3654'. [ 256.481949][T16061] EXT4-fs: test_dummy_encryption option not supported [ 256.630547][T16082] loop7: detected capacity change from 0 to 512 [ 256.653580][T16082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.681690][T16082] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.767007][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.780765][T16090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3661'. [ 256.818448][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3662'. [ 256.827624][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3662'. [ 256.838677][T16097] siw: device registration error -23 [ 256.865845][T16097] loop9: detected capacity change from 0 to 128 [ 256.867314][T16099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16099 comm=syz.7.3665 [ 256.931509][T16101] loop9: detected capacity change from 0 to 128 [ 256.968543][T16105] tipc: Enabled bearer , priority 0 [ 256.984713][T16105] syzkaller0: entered promiscuous mode [ 256.990415][T16105] syzkaller0: entered allmulticast mode [ 257.082034][T16101] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.104999][T16101] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.280624][T16109] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 257.689642][T16111] FAULT_INJECTION: forcing a failure. [ 257.689642][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 257.702457][T16111] CPU: 1 UID: 0 PID: 16111 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.702491][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 257.702513][T16111] Call Trace: [ 257.702521][T16111] [ 257.702530][T16111] __dump_stack+0x1d/0x30 [ 257.702556][T16111] dump_stack_lvl+0xe8/0x140 [ 257.702581][T16111] dump_stack+0x15/0x1b [ 257.702601][T16111] should_fail_ex+0x265/0x280 [ 257.702639][T16111] should_failslab+0x8c/0xb0 [ 257.702733][T16111] kmem_cache_alloc_noprof+0x50/0x480 [ 257.702769][T16111] ? skb_clone+0x151/0x1f0 [ 257.702792][T16111] skb_clone+0x151/0x1f0 [ 257.702814][T16111] __netlink_deliver_tap+0x2c9/0x500 [ 257.702840][T16111] netlink_unicast+0x66b/0x690 [ 257.702885][T16111] netlink_sendmsg+0x58b/0x6b0 [ 257.702909][T16111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.702932][T16111] __sock_sendmsg+0x145/0x180 [ 257.702960][T16111] ____sys_sendmsg+0x345/0x4e0 [ 257.703016][T16111] ___sys_sendmsg+0x17b/0x1d0 [ 257.703051][T16111] __sys_sendmmsg+0x178/0x300 [ 257.703084][T16111] __x64_sys_sendmmsg+0x57/0x70 [ 257.703106][T16111] x64_sys_call+0x1c4a/0x3000 [ 257.703228][T16111] do_syscall_64+0xd2/0x200 [ 257.703251][T16111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.703283][T16111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 257.703319][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.703422][T16111] RIP: 0033:0x7f2f294bf749 [ 257.703440][T16111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.703460][T16111] RSP: 002b:00007f2f27f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.703482][T16111] RAX: ffffffffffffffda RBX: 00007f2f29715fa0 RCX: 00007f2f294bf749 [ 257.703535][T16111] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 257.703549][T16111] RBP: 00007f2f27f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.703563][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.703576][T16111] R13: 00007f2f29716038 R14: 00007f2f29715fa0 R15: 00007ffcbc50e978 [ 257.703598][T16111] [ 257.772342][T13648] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.987934][T16098] tipc: Resetting bearer [ 258.008277][T16098] tipc: Disabling bearer [ 258.017098][T16120] loop9: detected capacity change from 0 to 512 [ 258.032406][T16120] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.038876][T16120] EXT4-fs: inline encryption not supported [ 258.063603][T16120] EXT4-fs: test_dummy_encryption option not supported [ 258.159590][T16124] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3674'. [ 258.195739][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3675'. [ 258.204861][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3675'. [ 258.226165][T16129] siw: device registration error -23 [ 258.249234][T16129] loop8: detected capacity change from 0 to 128 [ 259.128358][T16160] loop7: detected capacity change from 0 to 128 [ 259.142756][T16160] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 259.150667][T16160] FAT-fs (loop7): Filesystem has been set read-only [ 259.161099][T16160] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 259.169021][T16160] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 259.246286][T16164] FAULT_INJECTION: forcing a failure. [ 259.246286][T16164] name failslab, interval 1, probability 0, space 0, times 0 [ 259.259087][T16164] CPU: 1 UID: 0 PID: 16164 Comm: syz.2.3685 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.259173][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 259.259206][T16164] Call Trace: [ 259.259213][T16164] [ 259.259221][T16164] __dump_stack+0x1d/0x30 [ 259.259244][T16164] dump_stack_lvl+0xe8/0x140 [ 259.259332][T16164] dump_stack+0x15/0x1b [ 259.259412][T16164] should_fail_ex+0x265/0x280 [ 259.259453][T16164] should_failslab+0x8c/0xb0 [ 259.259529][T16164] __kmalloc_noprof+0xa5/0x570 [ 259.259565][T16164] ? bcm_rx_setup+0x3cd/0xe10 [ 259.259608][T16164] bcm_rx_setup+0x3cd/0xe10 [ 259.259661][T16164] bcm_sendmsg+0x1b2/0x480 [ 259.259699][T16164] ? __pfx_bcm_sendmsg+0x10/0x10 [ 259.259812][T16164] __sock_sendmsg+0x145/0x180 [ 259.259841][T16164] ____sys_sendmsg+0x31e/0x4e0 [ 259.259864][T16164] ___sys_sendmsg+0x17b/0x1d0 [ 259.259970][T16164] __x64_sys_sendmsg+0xd4/0x160 [ 259.260171][T16164] x64_sys_call+0x191e/0x3000 [ 259.260193][T16164] do_syscall_64+0xd2/0x200 [ 259.260231][T16164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.260293][T16164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.260393][T16164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.260449][T16164] RIP: 0033:0x7f2f294bf749 [ 259.260495][T16164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.260516][T16164] RSP: 002b:00007f2f27f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.260592][T16164] RAX: ffffffffffffffda RBX: 00007f2f29715fa0 RCX: 00007f2f294bf749 [ 259.260605][T16164] RDX: 0000000004004010 RSI: 0000200000000a80 RDI: 0000000000000003 [ 259.260619][T16164] RBP: 00007f2f27f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.260635][T16164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.260651][T16164] R13: 00007f2f29716038 R14: 00007f2f29715fa0 R15: 00007ffcbc50e978 [ 259.260675][T16164] [ 259.566331][T16176] loop1: detected capacity change from 0 to 128 [ 259.641262][T16180] loop8: detected capacity change from 0 to 512 [ 259.701140][T16180] EXT4-fs: inline encryption not supported [ 259.724677][T16180] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 259.760152][T16189] Failed to initialize the IGMP autojoin socket (err -2) [ 259.834391][T16196] loop9: detected capacity change from 0 to 128 [ 259.841148][T16196] vfat: Unknown parameter '0x0000000000000006‡ÓppgÓ' [ 259.996514][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 259.996562][ T29] audit: type=1326 audit(1763883938.633:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.026752][ T29] audit: type=1326 audit(1763883938.633:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.050516][ T29] audit: type=1326 audit(1763883938.633:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.074330][ T29] audit: type=1326 audit(1763883938.633:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.076537][T16232] syzkaller0: entered promiscuous mode [ 260.098098][ T29] audit: type=1326 audit(1763883938.633:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.098137][ T29] audit: type=1326 audit(1763883938.633:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.103654][T16232] syzkaller0: entered allmulticast mode [ 260.127259][ T29] audit: type=1326 audit(1763883938.633:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.127296][ T29] audit: type=1326 audit(1763883938.633:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.204462][ T29] audit: type=1326 audit(1763883938.633:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.228170][ T29] audit: type=1326 audit(1763883938.633:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16225 comm="syz.7.3701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4506f5f749 code=0x7ffc0000 [ 260.253878][T16230] 9pnet_fd: Insufficient options for proto=fd [ 260.265575][T16232] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 260.322830][T16241] Failed to initialize the IGMP autojoin socket (err -2) [ 260.353467][T16242] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 260.518707][T16246] loop2: detected capacity change from 0 to 512 [ 260.527615][T16246] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.534140][T16246] EXT4-fs: inline encryption not supported [ 260.540279][T16246] EXT4-fs: test_dummy_encryption option not supported [ 260.641508][T16249] Failed to initialize the IGMP autojoin socket (err -2) [ 261.973524][T16294] 9pnet: Could not find request transport: t [ 262.200011][T16312] loop8: detected capacity change from 0 to 512 [ 262.207712][T16312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.216671][T16312] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.264221][T16312] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.3721: Allocating blocks 41-42 which overlap fs metadata [ 262.290944][T16312] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3721: Failed to acquire dquot type 1 [ 262.331469][T16312] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 262.380450][T16312] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.3721: corrupted inode contents [ 262.403724][T16312] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #12: comm syz.8.3721: mark_inode_dirty error [ 262.439741][T16312] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.3721: corrupted inode contents [ 262.474392][T16312] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.3721: mark_inode_dirty error [ 262.492861][T16312] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.3721: corrupted inode contents [ 262.529923][T16312] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 262.561873][T16312] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #12: comm syz.8.3721: corrupted inode contents [ 262.582002][T16312] EXT4-fs error (device loop8): ext4_truncate:4637: inode #12: comm syz.8.3721: mark_inode_dirty error [ 262.601512][T16312] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 262.621264][T16312] EXT4-fs (loop8): 1 truncate cleaned up [ 262.633183][T16312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.670173][T16312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.812127][T16324] __nla_validate_parse: 9 callbacks suppressed [ 262.812146][T16324] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 262.825285][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 262.835861][T16327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3725'. [ 262.867320][T16329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3726'. [ 262.885521][T16331] loop2: detected capacity change from 0 to 512 [ 262.906464][T16331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.046974][T16331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.062989][T16331] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.554980][T16348] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3733'. [ 263.716611][T16353] loop9: detected capacity change from 0 to 512 [ 263.855989][T16353] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.923934][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.928156][T16353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.947101][T16353] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 264.045392][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3739'. [ 264.054552][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3739'. [ 264.103585][T16372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36368 sclass=netlink_route_socket pid=16372 comm=syz.7.3743 [ 264.116677][T16373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36368 sclass=netlink_route_socket pid=16373 comm=syz.7.3743 [ 264.202584][T16374] loop2: detected capacity change from 0 to 1024 [ 264.213539][T16374] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 264.255113][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.669705][T16374] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3741: Invalid block bitmap block 0 in block_group 0 [ 264.693730][T16374] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3741: Failed to acquire dquot type 0 [ 264.705361][T16374] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.3741: Freeing blocks not in datazone - block = 0, count = 4096 [ 264.729474][T16374] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3741: Invalid inode bitmap blk 0 in block_group 0 [ 264.742414][ T4604] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 0 [ 264.765869][T16390] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3746'. [ 264.782327][T16374] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 264.791124][T16374] EXT4-fs (loop2): 1 orphan inode deleted [ 264.797503][T16374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.814115][T16395] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16395 comm=syz.7.3748 [ 264.856636][T16399] loop9: detected capacity change from 0 to 512 [ 264.864203][T16399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.940905][T16401] tipc: Enabled bearer , priority 0 [ 264.949768][T16401] syzkaller0: entered promiscuous mode [ 264.955470][T16401] syzkaller0: entered allmulticast mode [ 264.968335][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 264.977458][T16403] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 265.138675][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 265.138695][ T29] audit: type=1326 audit(1763883943.623:21747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.168592][ T29] audit: type=1326 audit(1763883943.623:21748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.192351][ T29] audit: type=1400 audit(1763883943.693:21749): avc: denied { nlmsg_read } for pid=16369 comm="syz.2.3741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 265.213116][ T29] audit: type=1326 audit(1763883943.773:21750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.236825][ T29] audit: type=1326 audit(1763883943.773:21751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.260448][ T29] audit: type=1326 audit(1763883943.773:21752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.284226][ T29] audit: type=1326 audit(1763883943.773:21753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.2.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 265.550595][T16411] loop1: detected capacity change from 0 to 512 [ 265.577413][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.598619][T16411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.608980][T16399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.622420][T16399] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.643620][T16411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.658271][T16411] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.732561][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.751915][ T29] audit: type=1326 audit(1763883944.373:21754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.8.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744f91f749 code=0x7ffc0000 [ 265.775603][ T29] audit: type=1326 audit(1763883944.373:21755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.8.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f744f91f749 code=0x7ffc0000 [ 265.799318][ T29] audit: type=1326 audit(1763883944.373:21756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.8.3755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f744f91f749 code=0x7ffc0000 [ 265.841314][T16417] loop8: detected capacity change from 0 to 512 [ 265.847994][T16394] tipc: Resetting bearer [ 265.873728][T16394] tipc: Disabling bearer [ 265.874196][T16417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.922534][T16417] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.987368][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.044505][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.259012][T16442] Failed to initialize the IGMP autojoin socket (err -2) [ 266.684891][T16461] loop9: detected capacity change from 0 to 512 [ 266.718231][T16461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.772429][T16461] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.799697][T16461] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.883604][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.979833][T16485] siw: device registration error -23 [ 266.990225][T16483] loop2: detected capacity change from 0 to 128 [ 267.030439][T16491] siw: device registration error -23 [ 267.050946][T16488] loop8: detected capacity change from 0 to 512 [ 267.060732][T16488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.078815][T16498] loop7: detected capacity change from 0 to 512 [ 267.086406][T16498] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.178443][T16488] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.239078][T16491] loop2: detected capacity change from 0 to 128 [ 267.262328][T16488] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.678972][T16508] loop7: detected capacity change from 0 to 512 [ 267.739562][T16508] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.853485][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.893395][T16517] siw: device registration error -23 [ 267.901524][T16517] loop8: detected capacity change from 0 to 128 [ 267.904615][T16514] loop2: detected capacity change from 0 to 512 [ 267.924637][T16519] __nla_validate_parse: 2 callbacks suppressed [ 267.924651][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3783'. [ 267.940849][T16514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.955461][T16521] loop8: detected capacity change from 0 to 1024 [ 267.963611][T16514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.976790][T16514] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.987216][T16521] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.989197][T16526] loop7: detected capacity change from 0 to 1024 [ 267.999702][T16521] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.3784: Invalid block bitmap block 0 in block_group 0 [ 268.004669][T16526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.018195][T16521] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.3784: Failed to acquire dquot type 0 [ 268.033880][T16526] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.048015][T16521] EXT4-fs error (device loop8): ext4_free_blocks:6706: comm syz.8.3784: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.063294][T16521] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3784: Invalid inode bitmap blk 0 in block_group 0 [ 268.076244][T16521] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 268.085338][ T4619] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:24: Failed to release dquot type 0 [ 268.108181][T16521] EXT4-fs (loop8): 1 orphan inode deleted [ 268.134358][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.153343][T16521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.194165][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.232418][T16535] loop1: detected capacity change from 0 to 512 [ 268.244403][T16537] loop2: detected capacity change from 0 to 512 [ 268.246669][T16535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.252112][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.263930][T16535] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.274815][T16537] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.289568][T16537] EXT4-fs: inline encryption not supported [ 268.295874][T16537] EXT4-fs: test_dummy_encryption option not supported [ 268.314703][T16541] siw: device registration error -23 [ 268.316699][T16543] loop7: detected capacity change from 0 to 512 [ 268.327337][T16543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.336023][T16541] loop8: detected capacity change from 0 to 128 [ 268.363012][T16543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.375871][T16543] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.442911][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.473637][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.489644][T16554] loop1: detected capacity change from 0 to 128 [ 268.525249][T16558] loop7: detected capacity change from 0 to 1024 [ 268.642296][T16558] EXT4-fs: Ignoring removed orlov option [ 268.648031][T16558] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.654610][T16564] loop8: detected capacity change from 0 to 512 [ 268.664760][T16564] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.674132][T16558] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 268.687918][T16564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.702630][T16564] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.713452][T16509] delete_channel: no stack [ 268.721998][T16558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.847171][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.947906][T16558] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3796'. [ 268.959700][T16574] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3800'. [ 268.968804][T16574] IPVS: Error during creation of socket; terminating [ 269.113443][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.265005][T16583] loop7: detected capacity change from 0 to 512 [ 269.292380][T16583] EXT4-fs warning (device loop7): ext4_xattr_inode_get:546: inode #11: comm syz.7.3802: ea_inode file size=0 entry size=6 [ 269.305374][T16583] ------------[ cut here ]------------ [ 269.310928][T16583] EA inode 11 i_nlink=2 [ 269.311248][T16583] WARNING: CPU: 0 PID: 16583 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 269.325779][T16583] Modules linked in: [ 269.329814][T16583] CPU: 0 UID: 0 PID: 16583 Comm: syz.7.3802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.339702][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.349986][T16583] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 269.356762][T16583] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 a5 d6 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 269.376839][T16583] RSP: 0018:ffffc90004a23778 EFLAGS: 00010246 [ 269.383014][T16583] RAX: bfdeb8857dade700 RBX: ffff88811a326d18 RCX: 0000000000080000 [ 269.390998][T16583] RDX: ffffc90006a7a000 RSI: 00000000000046ec RDI: 00000000000046ed [ 269.399040][T16583] RBP: 0000000000000002 R08: 0001c90004a235f7 R09: 0000000000000000 [ 269.407300][T16583] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a326cc8 [ 269.415366][T16583] R13: 000000000000000b R14: ffff88811a326c80 R15: 0000000000000001 [ 269.423470][T16583] FS: 00007f45059c76c0(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 269.432466][T16583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.439085][T16583] CR2: 00007f4506f42a60 CR3: 00000001451a0000 CR4: 00000000003506f0 [ 269.447136][T16583] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000200000000300 [ 269.455222][T16583] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 269.463476][T16583] Call Trace: [ 269.466775][T16583] [ 269.469733][T16583] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 269.475838][T16583] ? errseq_check+0x2c/0x50 [ 269.480505][T16583] ext4_xattr_delete_inode+0x6b7/0x790 [ 269.486102][T16583] ? ext4_truncate+0x92e/0xae0 [ 269.491003][T16583] ext4_evict_inode+0xa6a/0xd90 [ 269.495990][T16583] ? __pfx_ext4_evict_inode+0x10/0x10 [ 269.501412][T16583] evict+0x2e3/0x550 [ 269.505350][T16583] ? __dquot_initialize+0x146/0x7c0 [ 269.510747][T16583] iput+0x4ed/0x650 [ 269.514680][T16583] ext4_process_orphan+0x1a9/0x1c0 [ 269.519895][T16583] ext4_orphan_cleanup+0x6a8/0xa00 [ 269.525167][T16583] ext4_fill_super+0x3483/0x3810 [ 269.530194][T16583] ? snprintf+0x86/0xb0 [ 269.534452][T16583] ? set_blocksize+0x1a8/0x310 [ 269.539270][T16583] ? sb_set_blocksize+0xe3/0x100 [ 269.544312][T16583] ? setup_bdev_super+0x30e/0x370 [ 269.549369][T16583] ? __pfx_ext4_fill_super+0x10/0x10 [ 269.554789][T16583] get_tree_bdev_flags+0x291/0x300 [ 269.560013][T16583] ? __pfx_ext4_fill_super+0x10/0x10 [ 269.565540][T16583] get_tree_bdev+0x1f/0x30 [ 269.570500][T16583] ext4_get_tree+0x1c/0x30 [ 269.575041][T16583] vfs_get_tree+0x57/0x1d0 [ 269.579630][T16583] do_new_mount+0x24d/0x660 [ 269.580441][T16588] siw: device registration error -23 [ 269.584230][T16583] path_mount+0x4a5/0xb70 [ 269.593893][T16583] ? user_path_at+0x109/0x130 [ 269.594855][T16588] loop2: detected capacity change from 0 to 128 [ 269.598603][T16583] __se_sys_mount+0x28c/0x2e0 [ 269.609569][T16583] __x64_sys_mount+0x67/0x80 [ 269.614324][T16583] x64_sys_call+0x2b51/0x3000 [ 269.619041][T16583] do_syscall_64+0xd2/0x200 [ 269.623693][T16583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.630449][T16583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 269.636316][T16583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.642532][T16583] RIP: 0033:0x7f4506f60eea [ 269.647012][T16583] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.667102][T16583] RSP: 002b:00007f45059c6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.669506][T16593] loop2: detected capacity change from 0 to 512 [ 269.675658][T16583] RAX: ffffffffffffffda RBX: 00007f45059c6ef0 RCX: 00007f4506f60eea [ 269.675678][T16583] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f45059c6eb0 [ 269.675695][T16583] RBP: 0000200000000180 R08: 00007f45059c6ef0 R09: 0000000000800700 [ 269.684526][T16593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.690119][T16583] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 269.715497][T16593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.722812][T16583] R13: 00007f45059c6eb0 R14: 0000000000000473 R15: 0000200000000680 [ 269.735756][T16593] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.743342][T16583] [ 269.756714][T16583] ---[ end trace 0000000000000000 ]--- [ 269.772603][T16583] EXT4-fs (loop7): 1 orphan inode deleted [ 269.779309][T16583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.843157][T16598] loop1: detected capacity change from 0 to 2048 [ 269.849959][T16598] ext4: Unknown parameter 'smackfsfloor' [ 269.882951][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.903592][T16601] siw: device registration error -23 [ 269.912537][T16601] loop2: detected capacity change from 0 to 128 [ 269.942641][T16604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3809'. [ 269.978148][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.989836][T16606] loop2: detected capacity change from 0 to 512 [ 270.001854][T16606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.019542][T16608] loop8: detected capacity change from 0 to 512 [ 270.028524][T16606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.042356][T16606] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.052953][T16614] loop7: detected capacity change from 0 to 512 [ 270.059682][T16614] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.066221][T16614] EXT4-fs: inline encryption not supported [ 270.072448][T16614] EXT4-fs: test_dummy_encryption option not supported [ 270.164692][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.257113][T16621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3816'. [ 270.295015][T16623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16623 comm=syz.1.3815 [ 270.316193][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 270.316266][ T29] audit: type=1400 audit(1763883948.943:22145): avc: denied { create } for pid=16622 comm="syz.1.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 270.343494][ T29] audit: type=1400 audit(1763883948.953:22146): avc: denied { create } for pid=16622 comm="syz.1.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 270.376447][ T29] audit: type=1400 audit(1763883949.003:22147): avc: denied { write } for pid=16622 comm="syz.1.3815" path="socket:[47499]" dev="sockfs" ino=47499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 270.431927][T16627] tipc: Enabled bearer , priority 0 [ 270.497275][ T29] audit: type=1400 audit(1763883949.053:22148): avc: denied { write } for pid=16622 comm="syz.1.3815" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 270.552114][T16629] syzkaller0: entered promiscuous mode [ 270.557826][T16629] syzkaller0: entered allmulticast mode [ 271.135621][T16634] siw: device registration error -23 [ 271.178022][T16634] loop8: detected capacity change from 0 to 128 [ 271.265592][T16622] tipc: Resetting bearer [ 271.284452][ T29] audit: type=1400 audit(1763883949.923:22149): avc: denied { write } for pid=16635 comm="syz.8.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.305240][ T29] audit: type=1400 audit(1763883949.923:22150): avc: denied { nlmsg_write } for pid=16635 comm="syz.8.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.465747][T16622] tipc: Disabling bearer [ 271.926049][ T29] audit: type=1400 audit(1763883950.563:22151): avc: denied { setopt } for pid=16642 comm="syz.1.3822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.197793][ T29] audit: type=1400 audit(1763883950.833:22152): avc: denied { append } for pid=16644 comm="syz.1.3823" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 272.231647][T16645] netlink: 'syz.1.3823': attribute type 3 has an invalid length. [ 272.262218][T16645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'. [ 272.271495][T16645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'. [ 272.290426][ T29] audit: type=1400 audit(1763883950.923:22153): avc: denied { module_request } for pid=16644 comm="syz.1.3823" kmod=6E66742D657870722D312D636D7006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 272.301217][T16645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'. [ 272.323003][T16645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3823'. [ 272.329758][ T29] audit: type=1400 audit(1763883950.963:22154): avc: denied { read write } for pid=16646 comm="syz.8.3824" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 272.335341][T16652] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3826'. [ 272.386717][T16656] tipc: Enabled bearer , priority 0 [ 272.403441][T16656] syzkaller0: entered promiscuous mode [ 272.408967][T16656] syzkaller0: entered allmulticast mode [ 272.441711][T16666] loop9: detected capacity change from 0 to 128 [ 272.451057][T16666] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.465405][T16666] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.475073][T16668] loop1: detected capacity change from 0 to 128 [ 272.485787][T16656] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 272.507946][T16656] tipc: Resetting bearer [ 272.516892][T16654] tipc: Resetting bearer [ 272.529077][T16672] loop1: detected capacity change from 0 to 512 [ 272.539716][T16672] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.546354][T16672] EXT4-fs: inline encryption not supported [ 272.552539][T16672] EXT4-fs: test_dummy_encryption option not supported [ 272.572170][T16654] tipc: Disabling bearer [ 272.642870][ T4617] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.663921][T16676] loop9: detected capacity change from 0 to 512 [ 272.670632][T16676] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.677136][T16676] EXT4-fs: inline encryption not supported [ 272.683596][T16676] EXT4-fs: test_dummy_encryption option not supported [ 273.565361][T16694] __nla_validate_parse: 4 callbacks suppressed [ 273.565378][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3839'. [ 273.580622][T16694] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3839'. [ 273.691054][T16703] siw: device registration error -23 [ 273.723111][T16703] loop8: detected capacity change from 0 to 128 [ 273.832232][T16709] loop7: detected capacity change from 0 to 512 [ 273.846783][T16709] EXT4-fs: dax option not supported [ 273.880400][T16709] loop7: detected capacity change from 0 to 1024 [ 273.896424][T16709] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 273.907596][T16709] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 273.940628][T16709] JBD2: no valid journal superblock found [ 273.946472][T16709] EXT4-fs (loop7): Could not load journal inode [ 274.004199][T16709] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 274.085871][T16729] loop2: detected capacity change from 0 to 128 [ 274.125170][T16729] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 274.133124][T16729] FAT-fs (loop2): Filesystem has been set read-only [ 274.139995][T16729] bio_check_eod: 15238 callbacks suppressed [ 274.140012][T16729] syz.2.3847: attempt to access beyond end of device [ 274.140012][T16729] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 274.160154][T16729] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 274.168098][T16729] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 274.177816][T16729] syz.2.3847: attempt to access beyond end of device [ 274.177816][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.191475][T16729] syz.2.3847: attempt to access beyond end of device [ 274.191475][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.231141][T16729] syz.2.3847: attempt to access beyond end of device [ 274.231141][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.282151][T16729] syz.2.3847: attempt to access beyond end of device [ 274.282151][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.296290][T16736] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3850'. [ 274.305301][T16736] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3850'. [ 274.332303][T16729] syz.2.3847: attempt to access beyond end of device [ 274.332303][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.388849][T16729] syz.2.3847: attempt to access beyond end of device [ 274.388849][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.671072][T16729] syz.2.3847: attempt to access beyond end of device [ 274.671072][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.797665][T16729] syz.2.3847: attempt to access beyond end of device [ 274.797665][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 274.955606][T16729] syz.2.3847: attempt to access beyond end of device [ 274.955606][T16729] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 275.137566][T16748] siw: device registration error -23 [ 275.185824][T16748] loop8: detected capacity change from 0 to 128 [ 275.777082][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3861'. [ 275.786339][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3861'. [ 275.935545][T16769] loop1: detected capacity change from 0 to 512 [ 275.970434][T16769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.977931][T16777] loop9: detected capacity change from 0 to 512 [ 275.995079][T16777] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.006273][T16769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.021677][T16769] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.041210][T16777] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.055655][T16777] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.069151][T16794] FAULT_INJECTION: forcing a failure. [ 276.069151][T16794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.082307][T16794] CPU: 0 UID: 0 PID: 16794 Comm: syz.7.3867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.082350][T16794] Tainted: [W]=WARN [ 276.082432][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.082449][T16794] Call Trace: [ 276.082457][T16794] [ 276.082465][T16794] __dump_stack+0x1d/0x30 [ 276.082487][T16794] dump_stack_lvl+0xe8/0x140 [ 276.082511][T16794] dump_stack+0x15/0x1b [ 276.082535][T16794] should_fail_ex+0x265/0x280 [ 276.082674][T16794] should_fail+0xb/0x20 [ 276.082696][T16794] should_fail_usercopy+0x1a/0x20 [ 276.082798][T16794] _copy_from_user+0x1c/0xb0 [ 276.082832][T16794] ___sys_sendmsg+0xc1/0x1d0 [ 276.082871][T16794] __x64_sys_sendmsg+0xd4/0x160 [ 276.082962][T16794] x64_sys_call+0x191e/0x3000 [ 276.083060][T16794] do_syscall_64+0xd2/0x200 [ 276.083087][T16794] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.083124][T16794] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 276.083292][T16794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.083376][T16794] RIP: 0033:0x7f4506f5f749 [ 276.083397][T16794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.083422][T16794] RSP: 002b:00007f45059c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.083446][T16794] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5f749 [ 276.083463][T16794] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 276.083480][T16794] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.083495][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.083521][T16794] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 276.083540][T16794] [ 276.272632][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 276.272650][ T29] audit: type=1326 audit(1763883954.913:22356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.302674][ T29] audit: type=1326 audit(1763883954.913:22357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.326217][ T29] audit: type=1326 audit(1763883954.913:22358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.349918][ T29] audit: type=1326 audit(1763883954.913:22359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.373678][ T29] audit: type=1326 audit(1763883954.913:22360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.397461][ T29] audit: type=1326 audit(1763883954.913:22361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.421522][ T29] audit: type=1326 audit(1763883954.913:22362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.445173][ T29] audit: type=1326 audit(1763883954.913:22363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.9.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 276.480264][ T29] audit: type=1326 audit(1763883954.963:22364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff632b4f749 code=0x7ffc0000 [ 276.504054][ T29] audit: type=1326 audit(1763883954.963:22365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.1.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff632b4f749 code=0x7ffc0000 [ 276.538274][T16802] siw: device registration error -23 [ 276.555621][T16802] loop8: detected capacity change from 0 to 128 [ 276.563942][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.610688][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.643301][T16804] loop7: detected capacity change from 0 to 512 [ 276.695943][T16804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.708751][T16810] loop9: detected capacity change from 0 to 512 [ 276.720947][T16804] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.733815][T16810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 276.778138][T16810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.791710][T13337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.801498][T16810] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.956049][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.013858][T16852] loop1: detected capacity change from 0 to 512 [ 277.022108][T16852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.050572][T16852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.063776][T16852] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 277.149561][T16864] siw: device registration error -23 [ 277.158312][T16864] loop9: detected capacity change from 0 to 128 [ 277.188761][T16866] ip6gre1: entered allmulticast mode [ 277.254646][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.337062][T16873] Failed to initialize the IGMP autojoin socket (err -2) [ 277.645431][T16868] netlink: 'syz.9.3886': attribute type 29 has an invalid length. [ 277.714199][T16868] netlink: 'syz.9.3886': attribute type 29 has an invalid length. [ 277.723108][T16868] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3886'. [ 277.737131][T16868] loop9: detected capacity change from 0 to 512 [ 277.751979][T16868] EXT4-fs: Mount option(s) incompatible with ext3 [ 277.778199][T16881] loop8: detected capacity change from 0 to 512 [ 277.809171][T16881] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.821870][T16881] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.843125][T16868] SELinux: ebitmap start bit (7340416) is beyond the end of the bitmap (1472) [ 277.856459][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.876355][T16868] SELinux: failed to load policy [ 277.902923][T16868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16868 comm=syz.9.3886 [ 278.032199][T16897] siw: device registration error -23 [ 278.056344][T16902] ip6gre1: entered allmulticast mode [ 278.069739][T16897] loop7: detected capacity change from 0 to 128 [ 278.113993][T16906] loop9: detected capacity change from 0 to 512 [ 278.121306][T16906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.160739][T16906] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.174336][T16906] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 278.394877][T16930] loop2: detected capacity change from 0 to 512 [ 278.440730][T16930] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.567760][T16930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.612464][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.647901][T16930] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.115394][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.132167][T16948] loop9: detected capacity change from 0 to 512 [ 279.150888][T16950] loop7: detected capacity change from 0 to 512 [ 279.166535][T16952] syzkaller0: entered promiscuous mode [ 279.172325][T16952] syzkaller0: entered allmulticast mode [ 279.180519][T16954] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3910'. [ 279.190043][T16950] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.196524][T16950] EXT4-fs: inline encryption not supported [ 279.200302][T16952] tipc: Enabled bearer , priority 0 [ 279.217027][T16950] EXT4-fs: test_dummy_encryption option not supported [ 279.266090][T16957] FAULT_INJECTION: forcing a failure. [ 279.266090][T16957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.279733][T16957] CPU: 0 UID: 0 PID: 16957 Comm: syz.9.3911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 279.279773][T16957] Tainted: [W]=WARN [ 279.279781][T16957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.279797][T16957] Call Trace: [ 279.279806][T16957] [ 279.279814][T16957] __dump_stack+0x1d/0x30 [ 279.279843][T16957] dump_stack_lvl+0xe8/0x140 [ 279.279930][T16957] dump_stack+0x15/0x1b [ 279.279949][T16957] should_fail_ex+0x265/0x280 [ 279.279993][T16957] should_fail+0xb/0x20 [ 279.280015][T16957] should_fail_usercopy+0x1a/0x20 [ 279.280040][T16957] _copy_from_user+0x1c/0xb0 [ 279.280074][T16957] __sys_bpf+0x183/0x7c0 [ 279.280215][T16957] __x64_sys_bpf+0x41/0x50 [ 279.280256][T16957] x64_sys_call+0x2aee/0x3000 [ 279.280319][T16957] do_syscall_64+0xd2/0x200 [ 279.280346][T16957] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.280379][T16957] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.280487][T16957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.280508][T16957] RIP: 0033:0x7fe8250df749 [ 279.280524][T16957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.280559][T16957] RSP: 002b:00007fe823b47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 279.280578][T16957] RAX: ffffffffffffffda RBX: 00007fe825335fa0 RCX: 00007fe8250df749 [ 279.280592][T16957] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 279.280616][T16957] RBP: 00007fe823b47090 R08: 0000000000000000 R09: 0000000000000000 [ 279.280632][T16957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.280648][T16957] R13: 00007fe825336038 R14: 00007fe825335fa0 R15: 00007ffecea31208 [ 279.280674][T16957] [ 279.500955][T16939] sg_read: process 579 (syz.1.3904) changed security contexts after opening file descriptor, this is not allowed. [ 279.516232][T16960] loop9: detected capacity change from 0 to 1024 [ 279.523857][T16960] EXT4-fs: Mount option(s) incompatible with ext2 [ 279.539855][T16958] tipc: Resetting bearer [ 279.558392][T16963] siw: device registration error -23 [ 279.567221][T16963] loop8: detected capacity change from 0 to 128 [ 279.607305][T16967] loop9: detected capacity change from 0 to 512 [ 279.620296][T16967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.729653][T16967] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.745214][T16967] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.986293][T16951] tipc: Resetting bearer [ 280.048661][T16951] tipc: Disabling bearer [ 280.107218][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.542974][T16989] netlink: 'syz.9.3918': attribute type 13 has an invalid length. [ 280.625185][T16995] loop8: detected capacity change from 0 to 512 [ 280.641384][T16997] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3921'. [ 280.665544][T16995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 280.687030][T16999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3922'. [ 280.696300][T16999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3922'. [ 280.844873][T16995] ext4 filesystem being mounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 280.859110][T17008] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3924'. [ 281.038703][T17015] loop1: detected capacity change from 0 to 512 [ 281.130672][T17015] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.228147][T17015] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 281.340357][T17015] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3925: bg 0: block 248: padding at end of block bitmap is not set [ 281.382239][T17021] loop9: detected capacity change from 0 to 512 [ 281.410593][T17021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.422050][T17015] __quota_error: 526 callbacks suppressed [ 281.422069][T17015] Quota error (device loop1): write_blk: dquota write failed [ 281.435333][T17015] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 281.445336][T17015] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3925: Failed to acquire dquot type 1 [ 281.460634][T17015] EXT4-fs (loop1): 1 truncate cleaned up [ 281.461096][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3930'. [ 281.475511][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3930'. [ 281.498504][T17021] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 281.637103][T17039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3933'. [ 281.762352][ T29] audit: type=1326 audit(1763883960.393:22889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.823065][ T29] audit: type=1326 audit(1763883960.433:22890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.846768][ T29] audit: type=1326 audit(1763883960.433:22891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.870374][ T29] audit: type=1326 audit(1763883960.433:22892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.894093][ T29] audit: type=1326 audit(1763883960.433:22893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.917925][ T29] audit: type=1326 audit(1763883960.433:22894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.941687][ T29] audit: type=1326 audit(1763883960.433:22895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 281.965663][ T29] audit: type=1326 audit(1763883960.443:22896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17020 comm="syz.9.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe8250df749 code=0x7ffc0000 [ 282.074528][T17050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3936'. [ 282.085490][T17049] syzkaller0: entered promiscuous mode [ 282.090999][T17049] syzkaller0: entered allmulticast mode [ 282.099720][T17053] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3937'. [ 282.187974][T17066] loop9: detected capacity change from 0 to 128 [ 282.223332][T17068] loop1: detected capacity change from 0 to 128 [ 282.269768][T17068] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 282.277756][T17068] FAT-fs (loop1): Filesystem has been set read-only [ 282.309025][T17081] loop7: detected capacity change from 0 to 512 [ 282.345183][T17068] syz.1.3941: attempt to access beyond end of device [ 282.345183][T17068] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 282.359223][T17068] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 282.367205][T17068] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 282.397106][T17068] syz.1.3941: attempt to access beyond end of device [ 282.397106][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.398627][T17081] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.410639][T17068] syz.1.3941: attempt to access beyond end of device [ 282.410639][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.434702][T17068] syz.1.3941: attempt to access beyond end of device [ 282.434702][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.453498][T17068] syz.1.3941: attempt to access beyond end of device [ 282.453498][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.490939][T17068] syz.1.3941: attempt to access beyond end of device [ 282.490939][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.518434][T17068] syz.1.3941: attempt to access beyond end of device [ 282.518434][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.538064][T17068] syz.1.3941: attempt to access beyond end of device [ 282.538064][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.567083][T17068] syz.1.3941: attempt to access beyond end of device [ 282.567083][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.585011][T17068] syz.1.3941: attempt to access beyond end of device [ 282.585011][T17068] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 282.602651][T17097] Failed to initialize the IGMP autojoin socket (err -2) [ 282.721606][T17109] random: crng reseeded on system resumption [ 282.844878][T17121] loop7: detected capacity change from 0 to 128 [ 282.895293][T17121] ext4 filesystem being mounted at /syzcgroup/unified/syz7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.967969][T17127] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17127 comm=syz.9.3957 [ 282.994005][T17129] siw: device registration error -23 [ 283.085118][T17130] tipc: Enabled bearer , priority 0 [ 283.128240][T17130] syzkaller0: entered promiscuous mode [ 283.133966][T17130] syzkaller0: entered allmulticast mode [ 283.163869][T17135] Failed to initialize the IGMP autojoin socket (err -2) [ 283.493561][T17145] loop2: detected capacity change from 0 to 512 [ 283.545213][T17145] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.812927][T17126] tipc: Resetting bearer [ 283.842492][T17126] tipc: Disabling bearer [ 283.934610][T17152] loop2: detected capacity change from 0 to 512 [ 283.942586][T17152] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.978627][T17154] syzkaller0: entered promiscuous mode [ 283.984226][T17154] syzkaller0: entered allmulticast mode [ 283.991120][T17152] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.050359][T17154] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 284.202995][T17177] loop2: detected capacity change from 0 to 128 [ 284.227705][T17177] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 284.235696][T17177] FAT-fs (loop2): Filesystem has been set read-only [ 284.251528][T17177] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 284.259517][T17177] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 284.386259][T17190] loop9: detected capacity change from 0 to 512 [ 284.393336][T17190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.413913][T17190] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.489416][T17195] Failed to initialize the IGMP autojoin socket (err -2) [ 284.539367][T17196] __nla_validate_parse: 10 callbacks suppressed [ 284.539386][T17196] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3973'. [ 284.565720][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3974'. [ 284.636024][T17204] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17204 comm=syz.9.3977 [ 284.728828][T17206] tipc: Enabled bearer , priority 0 [ 284.743794][T17206] syzkaller0: entered promiscuous mode [ 284.749334][T17206] syzkaller0: entered allmulticast mode [ 285.099739][T17211] loop2: detected capacity change from 0 to 512 [ 285.109301][T17212] loop1: detected capacity change from 0 to 512 [ 285.167382][T17214] smc: net device hsr0 applied user defined pnetid SYZ2 [ 285.181281][T17214] smc: net device hsr0 erased user defined pnetid SYZ2 [ 285.190722][T17212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.202027][T17211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.221645][T17214] netlink: 'syz.7.3978': attribute type 1 has an invalid length. [ 285.229566][T17214] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3978'. [ 285.240591][T17211] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.263418][T17212] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 285.326823][T17224] SELinux: Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped). [ 285.339080][T17203] tipc: Resetting bearer [ 285.389089][T17203] tipc: Disabling bearer [ 285.515768][T13325] EXT4-fs unmount: 18 callbacks suppressed [ 285.515787][T13325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.355228][T17262] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3987'. [ 286.474651][T17266] loop1: detected capacity change from 0 to 512 [ 286.507245][T17266] EXT4-fs: Ignoring removed mblk_io_submit option [ 286.513815][T17266] EXT4-fs: inline encryption not supported [ 286.551865][T17266] EXT4-fs: test_dummy_encryption option not supported [ 286.628227][T17272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3992'. [ 286.649002][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.657081][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.665679][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.682075][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.698081][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.706525][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.716423][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.725233][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.733948][T17257] netlink: 'syz.7.3986': attribute type 83 has an invalid length. [ 286.753451][T17278] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 286.753451][T17278] program syz.2.3993 not setting count and/or reply_len properly [ 286.770272][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 286.770292][ T29] audit: type=1400 audit(1763883965.393:23274): avc: denied { write } for pid=17277 comm="syz.2.3993" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.800602][ T29] audit: type=1400 audit(1763883965.393:23275): avc: denied { ioctl } for pid=17277 comm="syz.2.3993" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.833678][T17281] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17281 comm=syz.7.3994 [ 286.861005][T17278] loop2: detected capacity change from 0 to 2048 [ 286.905042][T17278] Alternate GPT is invalid, using primary GPT. [ 286.911324][T17278] loop2: p1 p2 p3 [ 286.915092][T17278] loop2: partition table partially beyond EOD, truncated [ 286.939992][T17284] tipc: Enabled bearer , priority 0 [ 286.971874][T17284] syzkaller0: entered promiscuous mode [ 286.977476][T17284] syzkaller0: entered allmulticast mode [ 287.453716][T17311] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3998'. [ 287.771548][T17316] loop9: detected capacity change from 0 to 512 [ 287.817848][T17280] tipc: Resetting bearer [ 287.834213][T17316] EXT4-fs (loop9): orphan cleanup on readonly fs [ 287.854832][T17316] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3999: bg 0: block 248: padding at end of block bitmap is not set [ 287.887803][T17280] tipc: Disabling bearer [ 287.922091][T17316] Quota error (device loop9): write_blk: dquota write failed [ 287.929560][T17316] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 287.939651][T17316] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3999: Failed to acquire dquot type 1 [ 287.954284][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4003'. [ 288.014801][T17325] FAULT_INJECTION: forcing a failure. [ 288.014801][T17325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.022505][T17316] EXT4-fs (loop9): 1 truncate cleaned up [ 288.028122][T17325] CPU: 0 UID: 0 PID: 17325 Comm: syz.7.4004 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 288.028165][T17325] Tainted: [W]=WARN [ 288.028174][T17325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.028192][T17325] Call Trace: [ 288.028200][T17325] [ 288.028217][T17325] __dump_stack+0x1d/0x30 [ 288.028247][T17325] dump_stack_lvl+0xe8/0x140 [ 288.028335][T17325] dump_stack+0x15/0x1b [ 288.028360][T17325] should_fail_ex+0x265/0x280 [ 288.028475][T17325] should_fail+0xb/0x20 [ 288.028496][T17325] should_fail_usercopy+0x1a/0x20 [ 288.028566][T17325] _copy_to_user+0x20/0xa0 [ 288.028630][T17325] simple_read_from_buffer+0xb5/0x130 [ 288.028661][T17325] proc_fail_nth_read+0x10e/0x150 [ 288.028704][T17325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 288.028784][T17325] vfs_read+0x1a8/0x770 [ 288.028825][T17325] ? __rcu_read_unlock+0x4f/0x70 [ 288.028860][T17325] ? __fget_files+0x184/0x1c0 [ 288.028906][T17325] ksys_read+0xda/0x1a0 [ 288.028957][T17325] __x64_sys_read+0x40/0x50 [ 288.028990][T17325] x64_sys_call+0x27c0/0x3000 [ 288.029020][T17325] do_syscall_64+0xd2/0x200 [ 288.029120][T17325] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 288.029234][T17325] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 288.029316][T17325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.029344][T17325] RIP: 0033:0x7f4506f5e15c [ 288.029366][T17325] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.029389][T17325] RSP: 002b:00007f45059c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.029457][T17325] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5e15c [ 288.029475][T17325] RDX: 000000000000000f RSI: 00007f45059c70a0 RDI: 0000000000000004 [ 288.029492][T17325] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.029511][T17325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.029526][T17325] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 288.029611][T17325] [ 288.239114][T17316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.246297][T17337] bridge0: port 3(batadv1) entered blocking state [ 288.258216][T17337] bridge0: port 3(batadv1) entered disabled state [ 288.264743][T17337] batadv1: entered allmulticast mode [ 288.270611][T17337] batadv1: entered promiscuous mode [ 288.303229][ T29] audit: type=1400 audit(1763883966.933:23276): avc: denied { remount } for pid=17312 comm="syz.9.3999" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 288.335027][T17314] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 288.346664][ T29] audit: type=1400 audit(1763883966.983:23277): avc: denied { map } for pid=17336 comm="syz.1.4008" path="socket:[48795]" dev="sockfs" ino=48795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.370301][ T29] audit: type=1400 audit(1763883966.983:23278): avc: denied { read accept } for pid=17336 comm="syz.1.4008" path="socket:[48795]" dev="sockfs" ino=48795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.591973][ T29] audit: type=1400 audit(1763883967.163:23279): avc: denied { read append } for pid=17332 comm="syz.7.4007" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.617118][ T29] audit: type=1400 audit(1763883967.163:23280): avc: denied { open } for pid=17332 comm="syz.7.4007" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.642164][ T29] audit: type=1400 audit(1763883967.163:23281): avc: denied { ioctl } for pid=17332 comm="syz.7.4007" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 288.712682][T17314] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 288.730126][T17354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4010'. [ 288.743298][ T4639] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 288.752555][ T4639] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 288.766403][T17314] ext4 filesystem being remounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.796020][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.840454][T17357] netlink: 928 bytes leftover after parsing attributes in process `syz.9.4011'. [ 289.077294][T17366] loop2: detected capacity change from 0 to 512 [ 289.085416][T17366] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 290.543231][T17369] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17369 comm=syz.8.4014 [ 290.881322][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4015'. [ 291.028512][T17378] loop2: detected capacity change from 0 to 512 [ 291.061030][T17378] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.067618][T17378] EXT4-fs: inline encryption not supported [ 291.081476][T17379] tipc: Enabled bearer , priority 0 [ 291.107277][T17381] loop1: detected capacity change from 0 to 512 [ 291.121936][T17378] EXT4-fs: test_dummy_encryption option not supported [ 291.135152][T17369] syzkaller0: entered promiscuous mode [ 291.140682][T17369] syzkaller0: entered allmulticast mode [ 291.213548][T17381] validate_nla: 24 callbacks suppressed [ 291.213562][T17381] netlink: 'syz.1.4020': attribute type 3 has an invalid length. [ 291.296033][T17381] loop1: detected capacity change from 0 to 164 [ 291.375561][T17387] loop9: detected capacity change from 0 to 512 [ 291.389807][T17387] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.396370][T17387] EXT4-fs: inline encryption not supported [ 291.412554][T17368] tipc: Resetting bearer [ 291.418486][T17387] EXT4-fs: test_dummy_encryption option not supported [ 291.441001][T17368] tipc: Disabling bearer [ 292.332093][T17426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4027'. [ 292.429728][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 292.429748][ T29] audit: type=1400 audit(1763883971.063:23388): avc: denied { read } for pid=17432 comm="syz.1.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 292.646153][T17437] loop8: detected capacity change from 0 to 164 [ 292.656680][ T29] audit: type=1400 audit(1763883971.293:23389): avc: denied { remount } for pid=17436 comm="syz.8.4031" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 292.714903][ T29] audit: type=1400 audit(1763883971.293:23390): avc: denied { read } for pid=17436 comm="syz.8.4031" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.738344][ T29] audit: type=1400 audit(1763883971.293:23391): avc: denied { open } for pid=17436 comm="syz.8.4031" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.761979][ T29] audit: type=1400 audit(1763883971.293:23392): avc: denied { ioctl } for pid=17436 comm="syz.8.4031" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 292.814987][T17444] tipc: Enabling of bearer rejected, failed to enable media [ 292.828681][T17443] loop2: detected capacity change from 0 to 512 [ 292.835960][T17444] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4034'. [ 292.845978][T17443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.856508][T17444] netlink: 'syz.7.4034': attribute type 17 has an invalid length. [ 292.864416][T17444] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4034'. [ 292.878817][T17444] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 292.904094][T17443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.954192][T17443] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.003853][T17452] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17452 comm=syz.7.4035 [ 293.077968][ T29] audit: type=1326 audit(1763883971.713:23393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 293.101633][ T29] audit: type=1326 audit(1763883971.713:23394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 293.125425][ T29] audit: type=1326 audit(1763883971.713:23395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 293.148969][ T29] audit: type=1326 audit(1763883971.713:23396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 293.172820][ T29] audit: type=1326 audit(1763883971.713:23397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17440 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 293.208178][T17454] tipc: Enabled bearer , priority 0 [ 293.215402][T17454] syzkaller0: entered promiscuous mode [ 293.220914][T17454] syzkaller0: entered allmulticast mode [ 293.262638][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.385795][T17459] loop2: detected capacity change from 0 to 512 [ 293.417539][T17459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 293.565950][T17459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.627475][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4038'. [ 293.657350][T17459] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.907563][T17470] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4040'. [ 293.933506][T17451] tipc: Resetting bearer [ 293.972184][T17451] tipc: Disabling bearer [ 294.046853][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.407731][T17486] tipc: Enabled bearer , priority 0 [ 294.433217][T17486] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 294.448648][T17488] netlink: 'syz.7.4046': attribute type 3 has an invalid length. [ 294.449336][T17486] tipc: Resetting bearer [ 294.467339][T17485] tipc: Disabling bearer [ 294.515721][T17493] FAULT_INJECTION: forcing a failure. [ 294.515721][T17493] name failslab, interval 1, probability 0, space 0, times 0 [ 294.528454][T17493] CPU: 0 UID: 0 PID: 17493 Comm: syz.7.4048 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.528569][T17493] Tainted: [W]=WARN [ 294.528577][T17493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.528593][T17493] Call Trace: [ 294.528601][T17493] [ 294.528610][T17493] __dump_stack+0x1d/0x30 [ 294.528634][T17493] dump_stack_lvl+0xe8/0x140 [ 294.528727][T17493] dump_stack+0x15/0x1b [ 294.528804][T17493] should_fail_ex+0x265/0x280 [ 294.528838][T17493] ? __tipc_dump_start+0x9b/0xe0 [ 294.528857][T17493] should_failslab+0x8c/0xb0 [ 294.528990][T17493] __kmalloc_cache_noprof+0x4c/0x4a0 [ 294.529032][T17493] __tipc_dump_start+0x9b/0xe0 [ 294.529054][T17493] __tipc_nl_compat_dumpit+0xd7/0x640 [ 294.529143][T17493] ? __rcu_read_unlock+0x4f/0x70 [ 294.529174][T17493] ? __mod_node_page_state+0x1c/0x80 [ 294.529192][T17493] ? __lruvec_stat_mod_folio+0xea/0x120 [ 294.529220][T17493] ? __alloc_skb+0x1b2/0x320 [ 294.529316][T17493] tipc_nl_compat_dumpit+0x39a/0x420 [ 294.529397][T17493] tipc_nl_compat_recv+0x64e/0x800 [ 294.529421][T17493] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 294.529440][T17493] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 294.529465][T17493] genl_family_rcv_msg_doit+0x143/0x1b0 [ 294.529523][T17493] genl_rcv_msg+0x422/0x460 [ 294.529548][T17493] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 294.529718][T17493] netlink_rcv_skb+0x123/0x220 [ 294.529758][T17493] ? __pfx_genl_rcv_msg+0x10/0x10 [ 294.529830][T17493] genl_rcv+0x28/0x40 [ 294.529908][T17493] netlink_unicast+0x5c0/0x690 [ 294.529952][T17493] netlink_sendmsg+0x58b/0x6b0 [ 294.530024][T17493] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.530046][T17493] __sock_sendmsg+0x145/0x180 [ 294.530079][T17493] ____sys_sendmsg+0x31e/0x4e0 [ 294.530108][T17493] ___sys_sendmsg+0x17b/0x1d0 [ 294.530215][T17493] __x64_sys_sendmsg+0xd4/0x160 [ 294.530247][T17493] x64_sys_call+0x191e/0x3000 [ 294.530321][T17493] do_syscall_64+0xd2/0x200 [ 294.530347][T17493] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.530382][T17493] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.530481][T17493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.530514][T17493] RIP: 0033:0x7f4506f5f749 [ 294.530534][T17493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.530554][T17493] RSP: 002b:00007f45059c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.530601][T17493] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5f749 [ 294.530617][T17493] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 294.530633][T17493] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 294.530646][T17493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 294.530657][T17493] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 294.530676][T17493] [ 294.823669][T17495] loop2: detected capacity change from 0 to 512 [ 294.853725][T17495] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.860287][T17495] EXT4-fs: inline encryption not supported [ 294.887860][T17495] EXT4-fs: test_dummy_encryption option not supported [ 295.049174][T17503] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4052'. [ 295.073654][T17503] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4052'. [ 295.147407][T17507] loop8: detected capacity change from 0 to 512 [ 295.177465][T17507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.190171][T17507] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.234883][T17512] Failed to initialize the IGMP autojoin socket (err -2) [ 295.253216][T13367] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.353657][T17517] loop9: detected capacity change from 0 to 512 [ 295.363301][T17517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.424366][T17517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.437151][T17517] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.572500][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.576881][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4060'. [ 295.662492][T17539] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4062'. [ 295.677172][T17539] loop9: detected capacity change from 0 to 1024 [ 295.937733][T17556] siw: device registration error -23 [ 295.958363][T17556] loop2: detected capacity change from 0 to 128 [ 296.222306][T17561] __nla_validate_parse: 1 callbacks suppressed [ 296.222327][T17561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4071'. [ 296.242037][T17561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4071'. [ 296.520501][T17563] loop2: detected capacity change from 0 to 512 [ 296.583309][T17563] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.754806][T17563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.773783][T17571] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 296.781622][T17571] netlink: 'syz.1.4074': attribute type 4 has an invalid length. [ 296.789409][T17571] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4074'. [ 296.832024][T17563] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.923700][T17573] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 296.931722][T17573] netlink: 'syz.1.4074': attribute type 4 has an invalid length. [ 296.939510][T17573] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4074'. [ 296.984359][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.113000][T17590] netlink: 928 bytes leftover after parsing attributes in process `syz.2.4078'. [ 297.183981][T17596] SELinux: policydb version 0 does not match my version range 15-35 [ 297.201913][T17596] SELinux: failed to load policy [ 297.217325][T17596] vhci_hcd: invalid port number 254 [ 297.287911][T17602] loop2: detected capacity change from 0 to 512 [ 297.299971][T17600] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.315044][T17604] FAULT_INJECTION: forcing a failure. [ 297.315044][T17604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.328218][T17604] CPU: 0 UID: 0 PID: 17604 Comm: syz.7.4090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.328253][T17604] Tainted: [W]=WARN [ 297.328260][T17604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.328330][T17604] Call Trace: [ 297.328338][T17604] [ 297.328348][T17604] __dump_stack+0x1d/0x30 [ 297.328416][T17604] dump_stack_lvl+0xe8/0x140 [ 297.328440][T17604] dump_stack+0x15/0x1b [ 297.328462][T17604] should_fail_ex+0x265/0x280 [ 297.328505][T17604] should_fail+0xb/0x20 [ 297.328523][T17604] should_fail_usercopy+0x1a/0x20 [ 297.328601][T17604] _copy_from_iter+0xd2/0xe80 [ 297.328622][T17604] ? __build_skb_around+0x1ab/0x200 [ 297.328652][T17604] ? __alloc_skb+0x223/0x320 [ 297.328713][T17604] netlink_sendmsg+0x471/0x6b0 [ 297.328742][T17604] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.328769][T17604] __sock_sendmsg+0x145/0x180 [ 297.328802][T17604] ____sys_sendmsg+0x31e/0x4e0 [ 297.328868][T17604] ___sys_sendmsg+0x17b/0x1d0 [ 297.328910][T17604] __x64_sys_sendmsg+0xd4/0x160 [ 297.329048][T17604] x64_sys_call+0x191e/0x3000 [ 297.329077][T17604] do_syscall_64+0xd2/0x200 [ 297.329128][T17604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 297.329172][T17604] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 297.329294][T17604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.329322][T17604] RIP: 0033:0x7f4506f5f749 [ 297.329393][T17604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.329416][T17604] RSP: 002b:00007f45059c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.329482][T17604] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5f749 [ 297.329545][T17604] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 297.329562][T17604] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 297.329577][T17604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.329593][T17604] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 297.329618][T17604] [ 297.554976][T17602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.569741][T17600] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.571017][T17602] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.623832][T17600] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.641990][ T29] kauditd_printk_skb: 571 callbacks suppressed [ 297.642010][ T29] audit: type=1400 audit(1763883976.243:23969): avc: denied { firmware_load } for pid=17610 comm="syz.7.4091" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 297.678421][ T29] audit: type=1326 audit(1763883976.313:23970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f294bdf90 code=0x7ffc0000 [ 297.702116][ T29] audit: type=1326 audit(1763883976.313:23971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2f294be497 code=0x7ffc0000 [ 297.725661][ T29] audit: type=1326 audit(1763883976.313:23972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f294bdf90 code=0x7ffc0000 [ 297.749432][ T29] audit: type=1326 audit(1763883976.313:23973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.773112][ T29] audit: type=1326 audit(1763883976.313:23974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.808030][ T29] audit: type=1326 audit(1763883976.343:23975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.809309][T14047] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.831719][ T29] audit: type=1326 audit(1763883976.343:23976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.864431][ T29] audit: type=1326 audit(1763883976.343:23977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.888117][ T29] audit: type=1326 audit(1763883976.343:23978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.2.4089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f294bf749 code=0x7ffc0000 [ 297.913295][T17600] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.986843][T17621] siw: device registration error -23 [ 298.020622][ T4656] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.033515][ T4656] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.052140][ T4656] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.071600][ T4656] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.107375][T17630] loop8: detected capacity change from 0 to 2048 [ 298.144276][T17630] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 298.226786][T17636] netlink: 928 bytes leftover after parsing attributes in process `syz.8.4100'. [ 298.508488][T17645] FAULT_INJECTION: forcing a failure. [ 298.508488][T17645] name failslab, interval 1, probability 0, space 0, times 0 [ 298.521349][T17645] CPU: 1 UID: 0 PID: 17645 Comm: syz.7.4103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.521391][T17645] Tainted: [W]=WARN [ 298.521400][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.521417][T17645] Call Trace: [ 298.521468][T17645] [ 298.521519][T17645] __dump_stack+0x1d/0x30 [ 298.521548][T17645] dump_stack_lvl+0xe8/0x140 [ 298.521571][T17645] dump_stack+0x15/0x1b [ 298.521588][T17645] should_fail_ex+0x265/0x280 [ 298.521668][T17645] should_failslab+0x8c/0xb0 [ 298.521777][T17645] kmem_cache_alloc_noprof+0x50/0x480 [ 298.521814][T17645] ? skb_clone+0x151/0x1f0 [ 298.521841][T17645] skb_clone+0x151/0x1f0 [ 298.521866][T17645] __netlink_deliver_tap+0x2c9/0x500 [ 298.521964][T17645] netlink_unicast+0x66b/0x690 [ 298.522085][T17645] netlink_sendmsg+0x58b/0x6b0 [ 298.522106][T17645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.522160][T17645] __sock_sendmsg+0x145/0x180 [ 298.522190][T17645] ____sys_sendmsg+0x31e/0x4e0 [ 298.522220][T17645] ___sys_sendmsg+0x17b/0x1d0 [ 298.522259][T17645] __x64_sys_sendmsg+0xd4/0x160 [ 298.522346][T17645] x64_sys_call+0x191e/0x3000 [ 298.522375][T17645] do_syscall_64+0xd2/0x200 [ 298.522402][T17645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.522478][T17645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.522512][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.522547][T17645] RIP: 0033:0x7f4506f5f749 [ 298.522567][T17645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.522591][T17645] RSP: 002b:00007f45059c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.522673][T17645] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5f749 [ 298.522685][T17645] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 298.522699][T17645] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.522714][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.522731][T17645] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 298.522756][T17645] [ 298.788768][T17648] FAULT_INJECTION: forcing a failure. [ 298.788768][T17648] name failslab, interval 1, probability 0, space 0, times 0 [ 298.801695][T17648] CPU: 0 UID: 0 PID: 17648 Comm: syz.7.4104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.801756][T17648] Tainted: [W]=WARN [ 298.801769][T17648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.801858][T17648] Call Trace: [ 298.801867][T17648] [ 298.801874][T17648] __dump_stack+0x1d/0x30 [ 298.801902][T17648] dump_stack_lvl+0xe8/0x140 [ 298.801959][T17648] dump_stack+0x15/0x1b [ 298.801982][T17648] should_fail_ex+0x265/0x280 [ 298.802022][T17648] should_failslab+0x8c/0xb0 [ 298.802108][T17648] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 298.802148][T17648] ? __alloc_skb+0x101/0x320 [ 298.802195][T17648] __alloc_skb+0x101/0x320 [ 298.802229][T17648] netlink_alloc_large_skb+0xbf/0xf0 [ 298.802278][T17648] netlink_sendmsg+0x3cf/0x6b0 [ 298.802306][T17648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.802333][T17648] __sock_sendmsg+0x145/0x180 [ 298.802360][T17648] ____sys_sendmsg+0x31e/0x4e0 [ 298.802406][T17648] ___sys_sendmsg+0x17b/0x1d0 [ 298.802447][T17648] __x64_sys_sendmsg+0xd4/0x160 [ 298.802475][T17648] x64_sys_call+0x191e/0x3000 [ 298.802502][T17648] do_syscall_64+0xd2/0x200 [ 298.802557][T17648] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.802608][T17648] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 298.802641][T17648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.802672][T17648] RIP: 0033:0x7f4506f5f749 [ 298.802691][T17648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.802715][T17648] RSP: 002b:00007f45059c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.802822][T17648] RAX: ffffffffffffffda RBX: 00007f45071b5fa0 RCX: 00007f4506f5f749 [ 298.802834][T17648] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 298.802850][T17648] RBP: 00007f45059c7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.802866][T17648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.802881][T17648] R13: 00007f45071b6038 R14: 00007f45071b5fa0 R15: 00007fff1e99b118 [ 298.802907][T17648] [ 299.078893][T17653] siw: device registration error -23 [ 299.087102][T17653] loop2: detected capacity change from 0 to 128 [ 299.114933][T17656] loop2: detected capacity change from 0 to 512 [ 299.121468][T17656] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.128102][T17656] EXT4-fs: inline encryption not supported [ 299.209554][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4110'. [ 299.218884][T17656] EXT4-fs: test_dummy_encryption option not supported [ 299.277482][T17663] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4111'. [ 299.307245][T17663] FAULT_INJECTION: forcing a failure. [ 299.307245][T17663] name failslab, interval 1, probability 0, space 0, times 0 [ 299.320210][T17663] CPU: 0 UID: 0 PID: 17663 Comm: syz.7.4111 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.320248][T17663] Tainted: [W]=WARN [ 299.320257][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 299.320274][T17663] Call Trace: [ 299.320325][T17663] [ 299.320335][T17663] __dump_stack+0x1d/0x30 [ 299.320358][T17663] dump_stack_lvl+0xe8/0x140 [ 299.320424][T17663] dump_stack+0x15/0x1b [ 299.320447][T17663] should_fail_ex+0x265/0x280 [ 299.320568][T17663] should_failslab+0x8c/0xb0 [ 299.320606][T17663] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 299.320646][T17663] ? __alloc_skb+0x101/0x320 [ 299.320750][T17663] __alloc_skb+0x101/0x320 [ 299.320788][T17663] netlink_alloc_large_skb+0xbf/0xf0 [ 299.320829][T17663] netlink_sendmsg+0x3cf/0x6b0 [ 299.320850][T17663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.320961][T17663] __sock_sendmsg+0x145/0x180 [ 299.320991][T17663] __sys_sendto+0x268/0x330 [ 299.321029][T17663] __x64_sys_sendto+0x76/0x90 [ 299.321116][T17663] x64_sys_call+0x2d14/0x3000 [ 299.321145][T17663] do_syscall_64+0xd2/0x200 [ 299.321173][T17663] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 299.321279][T17663] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 299.321356][T17663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.321383][T17663] RIP: 0033:0x7f4506f615dc [ 299.321403][T17663] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 299.321465][T17663] RSP: 002b:00007f45059c5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.321548][T17663] RAX: ffffffffffffffda RBX: 00007f45059c5fc0 RCX: 00007f4506f615dc [ 299.321584][T17663] RDX: 0000000000000024 RSI: 00007f45059c6010 RDI: 0000000000000004 [ 299.321601][T17663] RBP: 0000000000000000 R08: 00007f45059c5f14 R09: 000000000000000c [ 299.321693][T17663] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 299.321710][T17663] R13: 00007f45059c5f68 R14: 00007f45059c6010 R15: 0000000000000000 [ 299.321734][T17663] [ 300.067401][T17680] netlink: 928 bytes leftover after parsing attributes in process `syz.1.4117'. [ 300.093136][T17677] loop9: detected capacity change from 0 to 1024 [ 300.124906][T17682] siw: device registration error -23 [ 300.141244][T17682] loop2: detected capacity change from 0 to 128 [ 300.178743][T17677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.192958][T17692] FAULT_INJECTION: forcing a failure. [ 300.192958][T17692] name failslab, interval 1, probability 0, space 0, times 0 [ 300.205870][T17692] CPU: 1 UID: 0 PID: 17692 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.205982][T17692] Tainted: [W]=WARN [ 300.206031][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.206051][T17692] Call Trace: [ 300.206058][T17692] [ 300.206066][T17692] __dump_stack+0x1d/0x30 [ 300.206094][T17692] dump_stack_lvl+0xe8/0x140 [ 300.206211][T17692] dump_stack+0x15/0x1b [ 300.206236][T17692] should_fail_ex+0x265/0x280 [ 300.206273][T17692] should_failslab+0x8c/0xb0 [ 300.206302][T17692] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 300.206366][T17692] ? __alloc_skb+0x101/0x320 [ 300.206401][T17692] __alloc_skb+0x101/0x320 [ 300.206486][T17692] netlink_alloc_large_skb+0xbf/0xf0 [ 300.206605][T17692] netlink_sendmsg+0x3cf/0x6b0 [ 300.206640][T17692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.206687][T17692] __sock_sendmsg+0x145/0x180 [ 300.206712][T17692] ____sys_sendmsg+0x31e/0x4e0 [ 300.206740][T17692] ___sys_sendmsg+0x17b/0x1d0 [ 300.206851][T17692] __x64_sys_sendmsg+0xd4/0x160 [ 300.206879][T17692] x64_sys_call+0x191e/0x3000 [ 300.206910][T17692] do_syscall_64+0xd2/0x200 [ 300.206991][T17692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.207023][T17692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.207133][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.207162][T17692] RIP: 0033:0x7f2f294bf749 [ 300.207180][T17692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.207253][T17692] RSP: 002b:00007f2f27f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.207352][T17692] RAX: ffffffffffffffda RBX: 00007f2f29715fa0 RCX: 00007f2f294bf749 [ 300.207368][T17692] RDX: 0000000000040814 RSI: 0000200000000240 RDI: 0000000000000003 [ 300.207384][T17692] RBP: 00007f2f27f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 300.207398][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.207411][T17692] R13: 00007f2f29716038 R14: 00007f2f29715fa0 R15: 00007ffcbc50e978 [ 300.207437][T17692] [ 300.472217][T17701] ================================================================== [ 300.480350][T17701] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 300.487075][T17701] [ 300.489426][T17701] write to 0xffff8881477c8870 of 104 bytes by interrupt on cpu 0: [ 300.497238][T17701] __bpf_get_stackid+0x761/0x800 [ 300.502219][T17701] bpf_get_stackid+0xe9/0x120 [ 300.506928][T17701] bpf_get_stackid_raw_tp+0xf6/0x120 [ 300.512341][T17701] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 300.517837][T17701] bpf_trace_run3+0x199/0x1d0 [ 300.522542][T17701] kmem_cache_free+0x329/0x3d0 [ 300.527363][T17701] shmem_free_in_core_inode+0x76/0x80 [ 300.532805][T17701] i_callback+0x39/0x70 [ 300.537009][T17701] rcu_core+0x5aa/0xc30 [ 300.541192][T17701] rcu_core_si+0xd/0x20 [ 300.545365][T17701] handle_softirqs+0xba/0x290 [ 300.550069][T17701] run_ksoftirqd+0x1c/0x30 [ 300.554508][T17701] smpboot_thread_fn+0x32b/0x530 [ 300.559464][T17701] kthread+0x489/0x510 [ 300.563551][T17701] ret_from_fork+0x122/0x1b0 [ 300.568187][T17701] ret_from_fork_asm+0x1a/0x30 [ 300.572974][T17701] [ 300.575309][T17701] read to 0xffff8881477c88b0 of 8 bytes by task 17701 on cpu 1: [ 300.582949][T17701] bcmp+0x23/0x90 [ 300.586671][T17701] __bpf_get_stackid+0x371/0x800 [ 300.591714][T17701] bpf_get_stackid+0xe9/0x120 [ 300.596403][T17701] bpf_get_stackid_raw_tp+0xf6/0x120 [ 300.601711][T17701] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 300.607179][T17701] bpf_trace_run3+0x199/0x1d0 [ 300.611879][T17701] kmem_cache_free+0x329/0x3d0 [ 300.616683][T17701] __kfree_skb+0x109/0x150 [ 300.621122][T17701] sk_skb_reason_drop+0xbd/0x270 [ 300.626088][T17701] llc_station_rcv+0x6b3/0x7d0 [ 300.630862][T17701] llc_rcv+0x641/0x790 [ 300.635155][T17701] __netif_receive_skb_list_core+0x483/0x500 [ 300.641164][T17701] netif_receive_skb_list_internal+0x487/0x600 [ 300.647346][T17701] netif_receive_skb_list+0x31/0x200 [ 300.652660][T17701] bpf_test_run_xdp_live+0xecb/0x11c0 [ 300.658154][T17701] bpf_prog_test_run_xdp+0x525/0x970 [ 300.663469][T17701] bpf_prog_test_run+0x22a/0x390 [ 300.668426][T17701] __sys_bpf+0x4c0/0x7c0 [ 300.672694][T17701] __x64_sys_bpf+0x41/0x50 [ 300.677240][T17701] x64_sys_call+0x2aee/0x3000 [ 300.682287][T17701] do_syscall_64+0xd2/0x200 [ 300.686811][T17701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.692733][T17701] [ 300.695074][T17701] value changed: 0xffffffff84545727 -> 0xffffffff8139469c [ 300.702397][T17701] [ 300.704817][T17701] Reported by Kernel Concurrency Sanitizer on: [ 300.711020][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.7.4123 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.722497][T17701] Tainted: [W]=WARN [ 300.726318][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.736405][T17701] ================================================================== [ 300.788366][T17700] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4124'. [ 300.810779][T13648] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.853833][T17700] netlink: 'syz.1.4124': attribute type 21 has an invalid length. [ 300.861914][T17700] netlink: 'syz.1.4124': attribute type 1 has an invalid length.