last executing test programs: 5m49.774946535s ago: executing program 32 (id=28): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = open(&(0x7f0000000400)='./file1\x00', 0x64842, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x3, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xff}}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0x54, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {}, {0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xa, 0xfff2}}, @TCA_FLOW_XOR={0x8, 0x7, 0x562b}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x2f) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 5m49.02441361s ago: executing program 33 (id=35): syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m48.251044886s ago: executing program 34 (id=44): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m45.806437697s ago: executing program 35 (id=64): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) shmget$private(0x0, 0x3000, 0x100, &(0x7f00002aa000/0x3000)=nil) 5m44.45628135s ago: executing program 36 (id=73): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a'], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 5m43.858518738s ago: executing program 37 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0xa, 0xf7, 0x5, 0x10}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006d0000001811000046b1fbb009d50c42cbb6e0c28e024e6da15aed87eeb70d81a484392f4fc1cc9739a64522dd43532f23775055919d32f47494c9aaa08a06e2ae461ed12ebb2e1a0b83866de03e30169d5eb7f9ba24efee9cdfd9b10e3b582eb9b8bf5628e598ee1de7f969bee65a68fc679be491c1980d25f9dd9e28869e6d6c80773e61a5f662028e83e57c08f65baf68200df6438984a8f2c3773dbcdd92c42b7036cb745d09d0d4b565ba9bbbfda1168bc3019fc5a7fbe6ea14eef359e0b271a1b2e24995ae96bf0f661658ff3b31f27d23936b5ebd7f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000640)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b0, &(0x7f00000015c0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fchdir(r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 5m42.097209272s ago: executing program 38 (id=85): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x8, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000815}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x2005000, &(0x7f0000000380)="b587ed7e69c3037cdf31db7aa2f72b83b28421f4d8da14d4f473da8f4086505fda8c62b81dfb9675ab4078cb45f50fffd39aa31db81fa99cff94fcce74f7c879ccf749a103997d14d1709942ba855b077244502231c961d604437a3b1e46044c9b98932acfe75399b41180", 0x6b, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000400)="304672c0f85131a92e3335a84c570966ba51f30898bdec87a5df734baf9783c40bcdf03bd4af21ddbf89561c0e563b77befe0679f2bfc80db9f688") sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000180)={0x2000101c}) epoll_pwait(r5, &(0x7f0000000100)=[{}], 0x1, 0xeb, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x1, 0x0, 0xe, 0x9, 0x7, 0x6}) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[], 0x0) 5m40.112521818s ago: executing program 39 (id=93): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x200004, 0x0, 0x81, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x220080, 0x0) mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) chdir(&(0x7f0000001180)='./bus\x00') (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x6408}, {r2, 0x80}], 0x2, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0), 0x40200, 0x0) (rerun: 32) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9}, 0x18) (async) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) (async) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timerfd_settime(r8, 0x2, &(0x7f0000000540)={{r9, r10+10000000}, {0x77359400}}, &(0x7f0000000580)) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, 0x10) sendfile(r12, r6, 0x0, 0x9) 5m36.266749336s ago: executing program 40 (id=103): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x3c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x6}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x200000}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x9e}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x4}, @TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}]}}]}, 0x68}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f0000002240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32=r7, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r7}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0x3}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d4, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, r7, &(0x7f00000001c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@empty, @in=@broadcast, 0x4e23, 0x0, 0x4e24, 0xe000, 0x2, 0xa0, 0x20, 0x1, 0x0, r7}, {0x3, 0x2, 0x7c10, 0x3, 0x1, 0x7, 0x6, 0x1ff}, {0x2, 0x8, 0x28, 0x7}, 0xd, 0x0, 0x0, 0x0, 0x1}, {{@in6=@local, 0x4d1, 0x2b}, 0x2, @in6=@empty, 0x0, 0x2, 0x3, 0x6d, 0xffffffff, 0x80000000, 0x7}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r8 = dup(r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 5m5.310670516s ago: executing program 41 (id=495): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c394f305916c4516999da286dddd7595", 0x11, 0x0, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) 4m47.339088886s ago: executing program 42 (id=749): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x55) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001c2dcf6468279e5f298a19d99c181100", @ANYRES32, @ANYRES8], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) 3m58.612961486s ago: executing program 4 (id=1641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) dup(0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 3m58.352774212s ago: executing program 4 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m58.251809481s ago: executing program 4 (id=1644): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000140)={0x4, r1, 'id0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733dbf", @ANYBLOB=',']) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r5, 0x400, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m58.052654141s ago: executing program 4 (id=1646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000880)="2a841783218e124b0fa738e76ce2f5d888731440439d2c7ed29149022704662734be17d6f6f4764240619c3082de838cb9ad0a2a98a3707d2d0a5408c3405bd417e4aba1a07a11c8fff33292214ece086c0d81a23cfc1168f274869705151bcec1b9a1649a3c47868b31f54c10493aff8274c646641f9ced8d47f6c5dc2491ea975a11f58ec453d64b5ca6dbdca2f0399172a184ff665cf9caf93ca212e11d5e0734a469b542e49c11a31d4b342f233ad77dcbcbe85f0a0e765f2f19d8080bddd8f68ad3b8910e4d462b0bce0c61ae8c2b49fe522f28f4c669a87f12f5f8867bbb3dd1932eafb935cce530be394e8fd90e56a7850160e343aedb452610f77e91393ff9bb4cd37dd0e9568efc9fdfea7cbbce838fc45805c911a7faea1aae4e02c69e890c89aa8156b4aff88f74ca55e0cea8c0eca6cf5b63dc37983f0241b921bd0fb67535cb2ae8558bb726f2be8e37d3d5e8cbc5cf3c3f84833038bb21c7921d8ccd7b80230520c8ae888250e69e343837bba081823324a452259b85e6ecea914c7fc3416893c6452043c4057e70ca1a522356823c5c2d552df87eb7fe8cc949f8675377ea00bc652ab0f9c77093d6ecdd3b39db83da53149d65f2e83433e45e78ace30d0f104735339f59c4cd6e7a0bd06178415d8cac810c65f18c2564a3cc113d0acdd73d51aa69fd0dd642fd00ba940afee122902d440d616ac10ee2f74dae33711c0094d8a06e9beb5529efd30a3963f22b4383ef81457463869fd6d1ff07e29001e593c3b148a1f8c9ed0b7afaf108a7fc862b73b7890be2856565461d4868b73348476b46b9cbde4fbd4c78d3f988a35026587881f90e883811fbb8bcea580a5ad81a4ce6bc6b9c1ab1fa500532cc1119aca2d7b211b1af86b70dd3f34f0db295f8c574854183a7790873a6989c761866b1e6c0d09a280605605287aec6f3c4d193055b2187c01acd8606f9d7cb9ba3508953f231ebc2b60fe33f548f8d41d575230965850aea763c2233b55824be1103aafc9d8e2bf87c7e55b706d51dc6ef3c9533d70928e742947d5ef6166e963d712ad0074be70b0feef4a105355efebf41c5bfa1d06259969ae448ba7518791cd1270e0a37d08774f46006c8c9950d1b833a90c91a8d1380c4352b021bfd5a12b8f5abfc6c305a97f04f69c6b8cb843757b6bcf758e8474530143e739cc4ce6a18178cf6468be0dcd6cd4e85b8cdb5d576cdf642ce10f6ad68228db6873f791c6260a22cf3e0a7864a69b3c0ef8f3f56bb9a035787aba0257adb98dc7cb33bb482f05ca1ab1d8085e9332a30b64e11ace390993b4c88c11bc59398255d9792b9930dd289df51c07b3b95182485a5471bc756a91ba1b96e139dad17778b4b2ec358a947adb8aaa56f5c290cc502d8e7ff7a977041bdd2effdfaee20d259f873482c99c2880501a69e402146a8ef7ec20d2872e73632fce1d38082ca8de37197d9421c18d43f365441cacdc9a63221fc872be16e433dd72a4c4162db11992a0d4e7810e712d5807ea0a528d8f814590828e9f64756656a3d30d9ee50235ac2ca655ae7e30005b9520954120c8c21d036eb6aacef2d64e2763505c6a059be1bbfe118fabc788742737d4d3ff48dbe6ad07b02f524537495d8707355e4aeb1f8373cdce70dbbe0938d268bdf21b524e46b6ffdc95ba25a77fccf4335abfe293ef161d33c091b355a10f92cc04c5510b6a1ec91ae5ab8454aeddb2d35e51e5652b660c7692e5c2d5269f4caaa800bc699fdc3bb1e1dccef3c511f78cfd0a56279f14eb1605841dce6d9f55e4c76ce984dbd44db31f5e40fc51c7424471a1d738a2113967c651822f4b2f0b6bfd65a1a24460dfd4b829dde29ac9164fe8322cbf1330031277efd6f3653a8a2f969b02f5f1a4ae3ace8f03bbdc2121e041fef66aa967a52bafe933e71792c247af3858158810c2b1989b3635e4fedee9dcc81a59bed071279b727fdeb566a960c8e6aefcb37431ba9c4d7059bc237b278410f8a187c8970adf19183ce2dc8c0dc1b9d7a362f8ef299de66a327d8bd3bca52be7af34e83868abfa22d3b53d29d92ba64cbde13682fca7ed72b2b07781cb976d49589d3034c33da4e99ecd03844e1f6d5ae96a972fbcac1b507cd78e3cf6386fcbf024d80b417c0c9ea6fc23a52a2ff86f37325d5df4a9ba4c99e029f88f772d3662a065052aebad435d04157093d6ba0c3baa5e969409806d190074f9ece3662a649e89fb644f93b48849909ba71c485fab2f1ad97a2693cd05f344d97c2cbc3a8a2a846e3a634edf2e15b033365ac0e6d28b7beec39f0308f2044f9aeef07d6f61932c42844edc8e9b7a01abab744ffa3a22318e881bdf5fe283898cd711e2795fc1ab05302bc9a57833c68608b70556893416680b80457fbc1ff06b71000765f449b8976d59ae420f6312dcf4756748fb0deb93076b72384a47159983eeb79808bbf2c62eb42061a9fa854b71046343e6505d5f971864ee4725c448e298fa7cde5d285590985a14894f404c2f118abe12a724b4910b91b40e63f0570fea029c4e5d5f811e866d1feda972e5fd54c8289071798ffad67ff1e23ab6e8def5bc2f2791b6d52989dc5593a84d2fa1ed9fdfca30ca3bdd411e87799a411d88a1626ffeb01a20eefe44623aa54929a0e91641066e78478d88b44b20f56804b4e8320988f3b4e3b515113254111fbb9854a22fb3d262f0faae2ccf2964905193dd90ff1d7a25540677f2c2b52d1da9237224d87b047fe5d3cf3f7571a965b6c807ad6ffff0d94207e4b43c874ed2481aa9682cfe150c6a3ff89fd436fe31fca9cc9fb0f7cb7f032e79db50fdb0f076527a8da45b7cedbd527c248a1ddd65bcdf91fd14dbbef7683eb020a1d113b1c21aac60addfd74c41f386f28c921512fce14b0929e30aef8d509b2e75694b8dd982b636c08d84d04c38fc091fc0653b3e8d5a9e10c5d0b63ccd9fc00ecef5cf05083c409599beb1637144da493d21e5435811b98004a23c1bb7d9dfb583ad4f6b3d8100a9a24c1e0edaa93aee42549dc8a0ce1f78e17b63a3233acc014f3665fbdb7ee46db3e78a48ed35823a42c91afc9efe8f06be3dddd7409e52a508c9f0476ddc3d4c2e2843af8aaa34f8b5fa0689d5efacbf02ff62aa59129e6d9b31ec9c0188ee8ffb7befacd11afda640c6e9c1389818d9b02a5790a90c873b4e38a9dd60f9b6c9e3295a072efdc9cdd4874dd79834f3ed7606822dd91c119cbde4537e63e4f88658f226f2e8842fdcb1c18f22d2121264e7986ea9ab91c8f1efa4e217624883f437ce9de6f8c2d378cc7ed511b83a5e3f7c704b0f00595da30a55b0bc42f0ae847113205d55328e0724933eb19df2b91ef2b214520bdb5963987d6e1464d2dfcc372956dd17599dee1984045f55402d5ef6f1dd2c8537b92887c54a8b2d68e6bffa5b0b6e79933cbe4bf62f44f197ae1bff6abcb3c2c98b25e29ff8ccea3ede49478879bb186f25dc4f49d788f8d03c2c0c3859329dcf0c7fadff23a762ec20b31d7b36f0330d6dcf52f336917433827773a05f94b1f25d51c750827225eab7ccbc232b523ed5dba09fee9a3dbb01e8c434088d607f11c07eeae2306149cd0d6ee1f5ec55fd1891834623ab2b761154f87722342ee79cb0a72b940999cc4a3f0079f402ae923b65fff021919bd3f2098bcfb6d1bc50c423d139bcf5379c45eea9bc6a3dad8b24d37b807002804e40058a43787b5f0d75d45f1ae665495e0ea098f63f0407d8fe67eb78bb6a5f5f6e0cb2c716b6a77835cef729a75d87058c00aae3d74e06188e57798dc303c7e5cb89bc90b097c8fe3991fba41b0b2771323d37cab0de3df8ad02b857c7d340de93ced2fb83942194f814a9798eb51519f979ee781a3733dbd8bd5ec44bc7c4758265122e811e5a2aff0ebd05c8ff12006891465f0de94cca443c901ae25d1170a4e1760a8a0a6be0917ae46a9025f819f84e16fc87a8080ab41a7678f17c0650f67c005e549035789b762cc522cfaca464a1406456cf1549d542f17e05554221e513ff3ad194bbbb1966b438aa0f02858acbecb529be00ba2a91f85877948d6c802364b04e8806c99cc1916fd3fe767546c65e7c6a6b53d32d429620aa09375b7063882154e8af9991f057906ac2dca7e362448154fdaf7a4bbe9b660ec905c153cb7d2b2ee64e6f663161df3e7f46b894400acfb11decfb8c40c68ed2cc992a3a512ff9ef02da195210ab35b5dc3823ae5ff60c4250bb8b22d63e2d8dee1a65375870d05536cc7b84f145140ed6e53d6c426f7d39ef97fd57ad5ab3250de0b9ae7490a11bb1bc06556a1f2013af37504efe28fe843522db067dba3e42291ec856244a4f55ba45c71723c8759ca8def271b9898b9544c332d65ac9100bb443e036dc14e0c3fb8107a7271a51f0877b2cd9b1d0225623d38186ca0692c2e7ba047e5f0ff5328a3d227aa97cea88e8de4a79ff055a9c94852f5b2017b50aff7487ca3f4d80a09942f093d47e2a3a33d5719a70dd8c24038adaff91f0793206a6cea17f31fb63115e639e1ce8585b36554ba00d77e758dc617342e1b1d1e1cecd86ce1e93733b001b62dfeb6bbce41c1a97cac3476efdf6dbd8714d995690153ba63061171cb2e9c8f15a1a0fe58b04e3a665d23c582e5b4f5ac30e8f0827d6bcb0b718d32004f2edd19f535165be5c8f22f6e64f518f49ba69191db1e703548ddb1f21e9ac92b5da1affbff748e367331832349c548689962e8465f8043d511e616783e80aa9ff7fc2419360820f1dc4ac817d3b22da00c5c5343741fcbf11f8200e5fbc5a2cc20464fc6b34a6c8caf1b252855b97ad3a94f13cf1127e569f39d4c68a5d59fad21d109577e53a84a7a3d9391a93a45fb5d328439552738f7c55ba9599abaf10efbea441b3ca9a78348c319a9e345bb963db78f586755fece8a2e57f14bdb66f6f960e44d44195d05844045d2c8afdee9ee348b5660c05b62b778afb52f4ac479d907dd8c8ddf4296cbd2f0874f27c1a525414afe5701eae80c64761e30d6b3e7ccab58c34ddcd777e8f4100c1d8943df1fe6a1255d224225776b98426d02e5469530c79b45377c33b882c2b153e2c0d4e30fcf12ded75270dcc6a60b314f19b53051b1fc98a06db228e8ab3d6f111ea31ecc77fac46959fffd76311122e46e496171b2f5367559bf662471e375e409f4f9d1ae2b69986cfd78347e69cd4a151e301bc24f566af173591ab8e4005e2aebe04f37b6e97e0eec897eaa55dfb679fd0cd8a4f5de752fafaa93f6c65bc01d2e461356e58469d7232490a90aa9366e5f68646227270fe48cb331cd4846f5a5ae48ee12e5c994c9544e00e339aad3b87219f771d239036399b9d020bd8ef18afc278900fc942000ad03b6eae3a60558d78c5e221883ddb4503dc7644e9ca5637aff00d974e16bf8c45055d6f943513944954ce457e12c6404cef318ccb85ce253031d44a031ae38d0ee1b89d4221e115d63f8b070103688a1aa4224cad0b334ceaadc829aed1b1dd87d3459396f70604c8037c1ac101f4e21f12ce595073ad909eff3038e14a6aba29c1717907e3e0f6696a8ccada0f8cee02ffc58c72f16b2ae80186221d09940025a6f93f665aafd21e805686dbf0a70eb3651967e070d57855a601b1915a9664f32ab79f28cfe8c3d7596da0a2ff0f5863f49b8fec3230a18ae7c33734e0c79d729ff9a721de5a2c6805246903971df4491e1928d73efcf16a49d30c7f971fb29f5622abb787f0086e66ca43da53ba449701d60cd29", 0x1000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0xb43, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 3m55.035719118s ago: executing program 4 (id=1678): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'pim6reg1\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x2, [0x8, 0x200]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d6974"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a819b601050f584e70000010900010073797a310000000b0900020073797a320000000028000480240001800b0001006f626a7265660000140002800800054000000000080003407dfb1100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008002, &(0x7f0000000400)={[{@subsystem='freezer'}, {@noprefix}]}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/6) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) 3m54.259180605s ago: executing program 4 (id=1688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) 3m54.20421016s ago: executing program 43 (id=1688): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0) 2m54.685151633s ago: executing program 8 (id=2748): rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000001000f159d5bf796bf8fcd81930000006bbaf46155752617605307ec7f4f93907790def1aa19ef4ef3dba80a109d82f9cc5ed2ccfe19c46be69f2ad0e97dceb752dfe2b3722e9b1c903d252455858a42663324b6837feba8bf70761576f1616189cb75fdf3447ebeeddb6c76c6433bd4f21c152dafccd813f024935f4d2b8453bee233aef944"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x7) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB="00000000000000005d796591988e0a5700e19ca20700aa382e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRESDEC=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r8}, 0xa) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a3100000000ff070000736977001400500076657468345f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40, 0x11c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request}}}}}, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5393, &(0x7f0000000000)) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000040)=0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='mctp_key_release\x00', r12}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) 2m54.678799993s ago: executing program 8 (id=2749): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)}], 0x2}, 0x404c080) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m54.645192867s ago: executing program 8 (id=2751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 2m54.626971659s ago: executing program 8 (id=2752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r0], 0x48) rseq(&(0x7f0000000540), 0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() ptrace$ARCH_SET_CPUID(0x1e, r3, 0x1, 0x1012) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x41) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08210340000000045c000000"], 0xe8}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) uname(0x0) getpid() 2m53.550790794s ago: executing program 8 (id=2760): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'pim6reg1\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x1, [0x200]}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d6974"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a819b601050f584e70000010900010073797a310000000b0900020073797a320000000028000480240001800b0001006f626a7265660000140002800800054000000000080003407dfb1100010000000000000000000100000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008002, &(0x7f0000000400)={[{@subsystem='freezer'}, {@noprefix}]}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/6) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) 2m53.342521825s ago: executing program 8 (id=2765): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xf4}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x80000, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e) pipe2$watch_queue(&(0x7f00000000c0), 0x80) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) 2m53.324544237s ago: executing program 44 (id=2765): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xf4}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x80000, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e) pipe2$watch_queue(&(0x7f00000000c0), 0x80) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) 2m51.233778983s ago: executing program 6 (id=2800): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x4, 0x2, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x9b, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1", 0x6c}], 0x1}, 0x20000090) inotify_init() syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x0, 0x65b2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe25}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dedbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m48.348033507s ago: executing program 6 (id=2833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x5a3, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000180)="f7", 0x1, 0x200980) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$FIBMAP(r1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0xffef, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m48.082976824s ago: executing program 6 (id=2836): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) tkill(0x0, 0xb) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 2m47.368704534s ago: executing program 6 (id=2839): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x180) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xa, 0x1, "ef359f413bb93852f7d6a4ae6dddfb01005d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6e246cd454b926ede000000001ce1a311ef54ec32d71e14ef3dc177e90000000000000000070100", "f2834c6681ffffff14ffd200e6d6020091000000000008000000000200", [0x200]}) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 2m46.955091375s ago: executing program 6 (id=2844): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 2m40.19503614s ago: executing program 6 (id=2880): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 2m40.191461391s ago: executing program 45 (id=2880): r0 = gettid() r1 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 2m27.651587246s ago: executing program 0 (id=3000): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00']}) 2m27.582628823s ago: executing program 0 (id=3003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @private}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x3b5a, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), 0x0}, 0x20) prlimit64(0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r1, &(0x7f0000001900)=""/4079, 0xfef, 0x66) 2m27.227126728s ago: executing program 0 (id=3006): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)={'c', ' *:* ', 'w\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)={'b', ' *:* ', 'rwm\x00'}, 0xa) 2m27.20280502s ago: executing program 0 (id=3009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) read$msr(r0, &(0x7f0000000680)=""/97, 0x61) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000740), 0x9) r1 = syz_clone(0x4800880, &(0x7f0000000200)="479599a45a26cc3bf59e7b503385395f41af06693d7a65a580b63b091c0593a02cc492dc0dc70d3ac7da59b36c19578ba61e471a7eaa4cb6f3c531a193f045ce9786f219087345fb12747fe2d06e9a239e15c7f5773a8c5758f6b74454cdd89219dafd229f8336b429667d017f85de3400dd0f8063fe81366fa1955becc6110838dab72d64b79eb6", 0x88, &(0x7f0000000000), &(0x7f0000000100), 0x0) r2 = socket(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socket$kcm(0x10, 0x2, 0x0) ptrace(0x4207, r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xdb) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) 2m26.570287932s ago: executing program 0 (id=3011): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) 2m26.456086114s ago: executing program 0 (id=3013): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 2m23.85826307s ago: executing program 1 (id=3027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') read$watch_queue(r4, &(0x7f0000019140)=""/185, 0xb9) 2m22.883145476s ago: executing program 1 (id=3034): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x692ad000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2a, 0x800000002, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x5411, 0x1000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) 2m19.706896508s ago: executing program 1 (id=3049): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = shmget$private(0x0, 0x3000, 0x100, &(0x7f00002aa000/0x3000)=nil) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x2, 0xee00, 0xee01, r3, 0x0, 0x60, 0xe}, 0x2, 0x7, 0x2, 0x1ff, 0x0, 0x0, 0x5}) 2m19.619076507s ago: executing program 1 (id=3050): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x210d099, 0x0) 2m18.831732555s ago: executing program 1 (id=3059): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000e80)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000780)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x54c, 0x47}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40021}, 0x20048001) 2m17.651450531s ago: executing program 1 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 2m17.603816916s ago: executing program 46 (id=3068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) 2m11.393793778s ago: executing program 47 (id=3013): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 6.014965617s ago: executing program 7 (id=4641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0xa, 0xf7, 0x5, 0x10}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006d0000001811000046b1fbb009d50c42cbb6e0c28e024e6da15aed87eeb70d81a484392f4fc1cc9739a64522dd43532f23775055919d32f47494c9aaa08a06e2ae461ed12ebb2e1a0b83866de03e30169d5eb7f9ba24efee9cdfd9b10e3b582eb9b8bf5628e598ee1de7f969bee65a68fc679be491c1980d25f9dd9e28869e6d6c80773e61a5f662028e83e57c08f65baf68200df6438984a8f2c3773dbcdd92c42b7036cb745d09d0d4b565ba9bbbfda1168bc3019fc5a7fbe6ea14eef359e0b271a1b2e24995ae96bf0f661658ff3b31f27d23936b5ebd7f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000640)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b0, &(0x7f00000015c0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fchdir(r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 5.103905667s ago: executing program 7 (id=4650): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = syz_clone(0x280991, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbe98}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x5, 0x5003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="26c32ac38cfdf58747d96d15ce35138d8f71b8c675cd93cd90c40c66db4b00edd286e77109a8d2e30f89bddc5932e186c271f3e4f9c2a1347c60cdfa8eb611f7905adf028190ed6d187aa1eb7259a86f23b0da6b238072d62262687d77faf3d682cde4bb37f244948302d9a0f300d8e81cb2ff3ae8af4ef48ea84ffeaeafbc9bc3570bca0763bb7fc689d77d08c2d870f044e33845f9011d862d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000440)='ib_mad_send_done_handler\x00'}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000480)="aa7a5316305609b3e78e105e181a875c94741a1c83c69817efe1c6e51f903832ea9cebe5804add73c1aadc4db46f838dae73281108b099b7ff12416703d749c56092a2ed49aa3371cbd550977816525472da117e129c4c06994ee35c4da4eb1f4f88bdf5bc5f32f1f53fa8d41a903ebc44d253a43271964f5c3197c1e4d79adcce4ec011f64df46df4cb846d209aef3f0d5a076b28886f185f000d0000007856f4d7f3cce5df309313571777e2d536ccedf3ce15f912b79d3c", 0xb9, 0x2004c090, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r5, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) 4.910941806s ago: executing program 3 (id=4654): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = syz_clone(0x280991, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbe98}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x5, 0x5003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="26c32ac38cfdf58747d96d15ce35138d8f71b8c675cd93cd90c40c66db4b00edd286e77109a8d2e30f89bddc5932e186c271f3e4f9c2a1347c60cdfa8eb611f7905adf028190ed6d187aa1eb7259a86f23b0da6b238072d62262687d77faf3d682cde4bb37f244948302d9a0f300d8e81cb2ff3ae8af4ef48ea84ffeaeafbc9bc3570bca0763bb7fc689d77d08c2d870f044e33845f9011d862d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000440)='ib_mad_send_done_handler\x00'}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000480)="aa7a5316305609b3e78e105e181a875c94741a1c83c69817efe1c6e51f903832ea9cebe5804add73c1aadc4db46f838dae73281108b099b7ff12416703d749c56092a2ed49aa3371cbd550977816525472da117e129c4c06994ee35c4da4eb1f4f88bdf5bc5f32f1f53fa8d41a903ebc44d253a43271964f5c3197c1e4d79adcce4ec011f64df46df4cb846d209aef3f0d5a076b28886f185f000d0000007856f4d7f3cce5df309313571777e2d536ccedf3ce15f912b79d3c", 0xb9, 0x2004c090, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="08002cbd7000ffdbdf25010000000500140001000000060001000400000006001c00fdff000006000300060000004e53577092353c4f061bef12b426853ba411c624981b2720dccf483515542584c0edd846e8539d33345c3af771002f54e9148876a08a0b597c5b7e32b842c72ada70d943b34a68fc1a55557d201bae42dc5ffea1094bd16590ddeeec95d8b0a3da8d91afbea3a3849031bcf57d843ca546485dd8d35837d3b1ed4d62"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r7, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) 4.133467673s ago: executing program 7 (id=4667): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000880)="2a841783218e124b0fa738e76ce2f5d888731440439d2c7ed29149022704662734be17d6f6f4764240619c3082de838cb9ad0a2a98a3707d2d0a5408c3405bd417e4aba1a07a11c8fff33292214ece086c0d81a23cfc1168f274869705151bcec1b9a1649a3c47868b31f54c10493aff8274c646641f9ced8d47f6c5dc2491ea975a11f58ec453d64b5ca6dbdca2f0399172a184ff665cf9caf93ca212e11d5e0734a469b542e49c11a31d4b342f233ad77dcbcbe85f0a0e765f2f19d8080bddd8f68ad3b8910e4d462b0bce0c61ae8c2b49fe522f28f4c669a87f12f5f8867bbb3dd1932eafb935cce530be394e8fd90e56a7850160e343aedb452610f77e91393ff9bb4cd37dd0e9568efc9fdfea7cbbce838fc45805c911a7faea1aae4e02c69e890c89aa8156b4aff88f74ca55e0cea8c0eca6cf5b63dc37983f0241b921bd0fb67535cb2ae8558bb726f2be8e37d3d5e8cbc5cf3c3f84833038bb21c7921d8ccd7b80230520c8ae888250e69e343837bba081823324a452259b85e6ecea914c7fc3416893c6452043c4057e70ca1a522356823c5c2d552df87eb7fe8cc949f8675377ea00bc652ab0f9c77093d6ecdd3b39db83da53149d65f2e83433e45e78ace30d0f104735339f59c4cd6e7a0bd06178415d8cac810c65f18c2564a3cc113d0acdd73d51aa69fd0dd642fd00ba940afee122902d440d616ac10ee2f74dae33711c0094d8a06e9beb5529efd30a3963f22b4383ef81457463869fd6d1ff07e29001e593c3b148a1f8c9ed0b7afaf108a7fc862b73b7890be2856565461d4868b73348476b46b9cbde4fbd4c78d3f988a35026587881f90e883811fbb8bcea580a5ad81a4ce6bc6b9c1ab1fa500532cc1119aca2d7b211b1af86b70dd3f34f0db295f8c574854183a7790873a6989c761866b1e6c0d09a280605605287aec6f3c4d193055b2187c01acd8606f9d7cb9ba3508953f231ebc2b60fe33f548f8d41d575230965850aea763c2233b55824be1103aafc9d8e2bf87c7e55b706d51dc6ef3c9533d70928e742947d5ef6166e963d712ad0074be70b0feef4a105355efebf41c5bfa1d06259969ae448ba7518791cd1270e0a37d08774f46006c8c9950d1b833a90c91a8d1380c4352b021bfd5a12b8f5abfc6c305a97f04f69c6b8cb843757b6bcf758e8474530143e739cc4ce6a18178cf6468be0dcd6cd4e85b8cdb5d576cdf642ce10f6ad68228db6873f791c6260a22cf3e0a7864a69b3c0ef8f3f56bb9a035787aba0257adb98dc7cb33bb482f05ca1ab1d8085e9332a30b64e11ace390993b4c88c11bc59398255d9792b9930dd289df51c07b3b95182485a5471bc756a91ba1b96e139dad17778b4b2ec358a947adb8aaa56f5c290cc502d8e7ff7a977041bdd2effdfaee20d259f873482c99c2880501a69e402146a8ef7ec20d2872e73632fce1d38082ca8de37197d9421c18d43f365441cacdc9a63221fc872be16e433dd72a4c4162db11992a0d4e7810e712d5807ea0a528d8f814590828e9f64756656a3d30d9ee50235ac2ca655ae7e30005b9520954120c8c21d036eb6aacef2d64e2763505c6a059be1bbfe118fabc788742737d4d3ff48dbe6ad07b02f524537495d8707355e4aeb1f8373cdce70dbbe0938d268bdf21b524e46b6ffdc95ba25a77fccf4335abfe293ef161d33c091b355a10f92cc04c5510b6a1ec91ae5ab8454aeddb2d35e51e5652b660c7692e5c2d5269f4caaa800bc699fdc3bb1e1dccef3c511f78cfd0a56279f14eb1605841dce6d9f55e4c76ce984dbd44db31f5e40fc51c7424471a1d738a2113967c651822f4b2f0b6bfd65a1a24460dfd4b829dde29ac9164fe8322cbf1330031277efd6f3653a8a2f969b02f5f1a4ae3ace8f03bbdc2121e041fef66aa967a52bafe933e71792c247af3858158810c2b1989b3635e4fedee9dcc81a59bed071279b727fdeb566a960c8e6aefcb37431ba9c4d7059bc237b278410f8a187c8970adf19183ce2dc8c0dc1b9d7a362f8ef299de66a327d8bd3bca52be7af34e83868abfa22d3b53d29d92ba64cbde13682fca7ed72b2b07781cb976d49589d3034c33da4e99ecd03844e1f6d5ae96a972fbcac1b507cd78e3cf6386fcbf024d80b417c0c9ea6fc23a52a2ff86f37325d5df4a9ba4c99e029f88f772d3662a065052aebad435d04157093d6ba0c3baa5e969409806d190074f9ece3662a649e89fb644f93b48849909ba71c485fab2f1ad97a2693cd05f344d97c2cbc3a8a2a846e3a634edf2e15b033365ac0e6d28b7beec39f0308f2044f9aeef07d6f61932c42844edc8e9b7a01abab744ffa3a22318e881bdf5fe283898cd711e2795fc1ab05302bc9a57833c68608b70556893416680b80457fbc1ff06b71000765f449b8976d59ae420f6312dcf4756748fb0deb93076b72384a47159983eeb79808bbf2c62eb42061a9fa854b71046343e6505d5f971864ee4725c448e298fa7cde5d285590985a14894f404c2f118abe12a724b4910b91b40e63f0570fea029c4e5d5f811e866d1feda972e5fd54c8289071798ffad67ff1e23ab6e8def5bc2f2791b6d52989dc5593a84d2fa1ed9fdfca30ca3bdd411e87799a411d88a1626ffeb01a20eefe44623aa54929a0e91641066e78478d88b44b20f56804b4e8320988f3b4e3b515113254111fbb9854a22fb3d262f0faae2ccf2964905193dd90ff1d7a25540677f2c2b52d1da9237224d87b047fe5d3cf3f7571a965b6c807ad6ffff0d94207e4b43c874ed2481aa9682cfe150c6a3ff89fd436fe31fca9cc9fb0f7cb7f032e79db50fdb0f076527a8da45b7cedbd527c248a1ddd65bcdf91fd14dbbef7683eb020a1d113b1c21aac60addfd74c41f386f28c921512fce14b0929e30aef8d509b2e75694b8dd982b636c08d84d04c38fc091fc0653b3e8d5a9e10c5d0b63ccd9fc00ecef5cf05083c409599beb1637144da493d21e5435811b98004a23c1bb7d9dfb583ad4f6b3d8100a9a24c1e0edaa93aee42549dc8a0ce1f78e17b63a3233acc014f3665fbdb7ee46db3e78a48ed35823a42c91afc9efe8f06be3dddd7409e52a508c9f0476ddc3d4c2e2843af8aaa34f8b5fa0689d5efacbf02ff62aa59129e6d9b31ec9c0188ee8ffb7befacd11afda640c6e9c1389818d9b02a5790a90c873b4e38a9dd60f9b6c9e3295a072efdc9cdd4874dd79834f3ed7606822dd91c119cbde4537e63e4f88658f226f2e8842fdcb1c18f22d2121264e7986ea9ab91c8f1efa4e217624883f437ce9de6f8c2d378cc7ed511b83a5e3f7c704b0f00595da30a55b0bc42f0ae847113205d55328e0724933eb19df2b91ef2b214520bdb5963987d6e1464d2dfcc372956dd17599dee1984045f55402d5ef6f1dd2c8537b92887c54a8b2d68e6bffa5b0b6e79933cbe4bf62f44f197ae1bff6abcb3c2c98b25e29ff8ccea3ede49478879bb186f25dc4f49d788f8d03c2c0c3859329dcf0c7fadff23a762ec20b31d7b36f0330d6dcf52f336917433827773a05f94b1f25d51c750827225eab7ccbc232b523ed5dba09fee9a3dbb01e8c434088d607f11c07eeae2306149cd0d6ee1f5ec55fd1891834623ab2b761154f87722342ee79cb0a72b940999cc4a3f0079f402ae923b65fff021919bd3f2098bcfb6d1bc50c423d139bcf5379c45eea9bc6a3dad8b24d37b807002804e40058a43787b5f0d75d45f1ae665495e0ea098f63f0407d8fe67eb78bb6a5f5f6e0cb2c716b6a77835cef729a75d87058c00aae3d74e06188e57798dc303c7e5cb89bc90b097c8fe3991fba41b0b2771323d37cab0de3df8ad02b857c7d340de93ced2fb83942194f814a9798eb51519f979ee781a3733dbd8bd5ec44bc7c4758265122e811e5a2aff0ebd05c8ff12006891465f0de94cca443c901ae25d1170a4e1760a8a0a6be0917ae46a9025f819f84e16fc87a8080ab41a7678f17c0650f67c005e549035789b762cc522cfaca464a1406456cf1549d542f17e05554221e513ff3ad194bbbb1966b438aa0f02858acbecb529be00ba2a91f85877948d6c802364b04e8806c99cc1916fd3fe767546c65e7c6a6b53d32d429620aa09375b7063882154e8af9991f057906ac2dca7e362448154fdaf7a4bbe9b660ec905c153cb7d2b2ee64e6f663161df3e7f46b894400acfb11decfb8c40c68ed2cc992a3a512ff9ef02da195210ab35b5dc3823ae5ff60c4250bb8b22d63e2d8dee1a65375870d05536cc7b84f145140ed6e53d6c426f7d39ef97fd57ad5ab3250de0b9ae7490a11bb1bc06556a1f2013af37504efe28fe843522db067dba3e42291ec856244a4f55ba45c71723c8759ca8def271b9898b9544c332d65ac9100bb443e036dc14e0c3fb8107a7271a51f0877b2cd9b1d0225623d38186ca0692c2e7ba047e5f0ff5328a3d227aa97cea88e8de4a79ff055a9c94852f5b2017b50aff7487ca3f4d80a09942f093d47e2a3a33d5719a70dd8c24038adaff91f0793206a6cea17f31fb63115e639e1ce8585b36554ba00d77e758dc617342e1b1d1e1cecd86ce1e93733b001b62dfeb6bbce41c1a97cac3476efdf6dbd8714d995690153ba63061171cb2e9c8f15a1a0fe58b04e3a665d23c582e5b4f5ac30e8f0827d6bcb0b718d32004f2edd19f535165be5c8f22f6e64f518f49ba69191db1e703548ddb1f21e9ac92b5da1affbff748e367331832349c548689962e8465f8043d511e616783e80aa9ff7fc2419360820f1dc4ac817d3b22da00c5c5343741fcbf11f8200e5fbc5a2cc20464fc6b34a6c8caf1b252855b97ad3a94f13cf1127e569f39d4c68a5d59fad21d109577e53a84a7a3d9391a93a45fb5d328439552738f7c55ba9599abaf10efbea441b3ca9a78348c319a9e345bb963db78f586755fece8a2e57f14bdb66f6f960e44d44195d05844045d2c8afdee9ee348b5660c05b62b778afb52f4ac479d907dd8c8ddf4296cbd2f0874f27c1a525414afe5701eae80c64761e30d6b3e7ccab58c34ddcd777e8f4100c1d8943df1fe6a1255d224225776b98426d02e5469530c79b45377c33b882c2b153e2c0d4e30fcf12ded75270dcc6a60b314f19b53051b1fc98a06db228e8ab3d6f111ea31ecc77fac46959fffd76311122e46e496171b2f5367559bf662471e375e409f4f9d1ae2b69986cfd78347e69cd4a151e301bc24f566af173591ab8e4005e2aebe04f37b6e97e0eec897eaa55dfb679fd0cd8a4f5de752fafaa93f6c65bc01d2e461356e58469d7232490a90aa9366e5f68646227270fe48cb331cd4846f5a5ae48ee12e5c994c9544e00e339aad3b87219f771d239036399b9d020bd8ef18afc278900fc942000ad03b6eae3a60558d78c5e221883ddb4503dc7644e9ca5637aff00d974e16bf8c45055d6f943513944954ce457e12c6404cef318ccb85ce253031d44a031ae38d0ee1b89d4221e115d63f8b070103688a1aa4224cad0b334ceaadc829aed1b1dd87d3459396f70604c8037c1ac101f4e21f12ce595073ad909eff3038e14a6aba29c1717907e3e0f6696a8ccada0f8cee02ffc58c72f16b2ae80186221d09940025a6f93f665aafd21e805686dbf0a70eb3651967e070d57855a601b1915a9664f32ab79f28cfe8c3d7596da0a2ff0f5863f49b8fec3230a18ae7c33734e0c79d729ff9a721de5a2c6805246903971df4491e1928d73efcf16a49d30c7f971fb29f5622abb787f0086e66ca43da53ba449701d60cd", 0xfff) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0xb43, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4.033588912s ago: executing program 3 (id=4668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="48010000100013070000000000000000fe880000000000000000000000000001ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000023500000a00000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="060000004c00140073686131"], 0x148}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) 2.906802344s ago: executing program 2 (id=4671): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xf4}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x80000, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000340)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip6gre0\x00'}}, 0x1e) pipe2$watch_queue(&(0x7f00000000c0), 0x80) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd}, 0x94) close_range(r4, 0xffffffffffffffff, 0x0) 2.777033246s ago: executing program 3 (id=4673): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x4, 0x2, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x9b, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1", 0x43}], 0x1}, 0x20000090) inotify_init() syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x7, 0x7e2, &(0x7f0000001740)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x0, 0x65b2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffe25}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b3178c965c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dedbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.495664944s ago: executing program 2 (id=4675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.422146061s ago: executing program 2 (id=4677): rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000001000f159d5bf796bf8fcd81930000006bbaf46155752617605307ec7f4f93907790def1aa19ef4ef3dba80a109d82f9cc5ed2ccfe19c46be69f2ad0e97dceb752dfe2b3722e9b1c903d252455858a42663324b6837feba8bf70761576f1616189cb75fdf3447ebeeddb6c76c6433bd4f21c152dafccd813f024935f4d2b8453bee233aef944"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @empty, 0x9}, 0x1c, 0x0}}], 0x1, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x7) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB="00000000000000005d796591988e0a5700e19ca20700aa382e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRESDEC=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r8}, 0xa) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r10 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40, 0x11c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @echo_request}}}}}, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5393, &(0x7f0000000000)) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000040)=0x5) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='mctp_key_release\x00', r12}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) 2.253280108s ago: executing program 2 (id=4679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX=r2], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0xa, 0xf7, 0x5, 0x10}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0xd, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000020000000850000006d0000001811000046b1fbb009d50c42cbb6e0c28e024e6da15aed87eeb70d81a484392f4fc1cc9739a64522dd43532f23775055919d32f47494c9aaa08a06e2ae461ed12ebb2e1a0b83866de03e30169d5eb7f9ba24efee9cdfd9b10e3b582eb9b8bf5628e598ee1de7f969bee65a68fc679be491c1980d25f9dd9e28869e6d6c80773e61a5f662028e83e57c08f65baf68200df6438984a8f2c3773dbcdd92c42b7036cb745d09d0d4b565ba9bbbfda1168bc3019fc5a7fbe6ea14eef359e0b271a1b2e24995ae96bf0f661658ff3b31f27d23936b5ebd7f", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000640)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b0, &(0x7f00000015c0)="$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") r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r6, &(0x7f0000000140)='./file1\x00', r6, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') exit(0xffff) fchdir(r7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 1.866807896s ago: executing program 5 (id=4681): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv2(r0, &(0x7f0000002ac0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/243, 0xf3}, {0xfffffffffffffffe}, {&(0x7f0000001a00)=""/179, 0xb3}, {0x0}], 0x5, 0x5, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @loopback}}}}}}, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000002c80)={[], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r6}}, {@subj_role={'subj_role', 0x3d, 'ext3\x00'}}, {@subj_role={'subj_role', 0x3d, '}\'):,,'}}, {@euid_gt={'euid>', r6}}]}, 0xfe, 0x488, &(0x7f0000000440)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002c40)={'gretap0\x00', &(0x7f0000002b40)={'syztnl1\x00', r5, 0x7, 0x80, 0x1, 0x9, {{0x21, 0x4, 0x0, 0x1, 0x84, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xb4, 0x1, 0x6, [{@broadcast, 0x101}, {@remote, 0x3}]}, @rr={0x7, 0x1f, 0xc5, [@loopback, @loopback, @multicast1, @broadcast, @local, @local, @remote]}, @generic={0x7, 0xd, "ca7ea0c67abdc333e0df17"}, @generic={0x44, 0x2}, @end, @timestamp_addr={0x44, 0x2c, 0x21, 0x1, 0xf, [{@loopback, 0x9}, {@broadcast, 0x2}, {@local, 0x5}, {@broadcast, 0xf1b3}, {@local, 0x4}]}]}}}}}) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.731078879s ago: executing program 3 (id=4682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x180a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffff000000000001, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) ustat(0x7fffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 1.588226454s ago: executing program 5 (id=4683): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.509016561s ago: executing program 5 (id=4684): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv2(r0, &(0x7f0000002ac0)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/243, 0xf3}, {0xfffffffffffffffe}, {&(0x7f0000001a00)=""/179, 0xb3}, {0x0}], 0x5, 0x5, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @loopback}}}}}}, 0x0) fcntl$setstatus(r1, 0x4, 0x7c00) dup3(r2, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f00000000c0)=0xe8) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000002c80)={[], [{@uid_eq={'uid', 0x3d, r6}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r6}}, {@subj_role={'subj_role', 0x3d, 'ext3\x00'}}, {@subj_role={'subj_role', 0x3d, '}\'):,,'}}, {@euid_gt={'euid>', r6}}]}, 0xfe, 0x488, &(0x7f0000000440)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002c40)={'gretap0\x00', &(0x7f0000002b40)={'syztnl1\x00', r5, 0x7, 0x80, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010100, @multicast2}}}}) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.391389133s ago: executing program 3 (id=4686): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xf4}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x80000, 0x0, 0x0, 0x0, 0xb}, {}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r4, 0xffffffffffffffff, 0x0) 1.390762073s ago: executing program 2 (id=4687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) 1.248895197s ago: executing program 5 (id=4688): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nombcache}, {@errors_remount}, {@noinit_itable}, {@bsdgroups}, {@bsdgroups}, {@dioread_lock}]}, 0x1, 0x785, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x1000000, 0x4) 1.204069981s ago: executing program 7 (id=4689): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) 755.402616ms ago: executing program 7 (id=4690): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create1(0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x10000011}) write$vga_arbiter(r3, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mkdirat(r8, &(0x7f00000000c0)='./file0\x00', 0x105) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3ac, 0xe0, 0x0, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0x2, 0x1, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8000, 0x401, 0x6, 0xa, 0x3ff, 0x9, 'dvmrp0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x81}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@multicast2, @broadcast, 0xff, 0x0, 0x90, 0xf, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="9b90ceb9f7a9", {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'bridge_slave_1\x00', {}, {0x103}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @empty}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xe0}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) 703.050241ms ago: executing program 7 (id=4691): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nombcache}, {@errors_remount}, {@noinit_itable}, {@bsdgroups}, {@bsdgroups}, {@dioread_lock}]}, 0x1, 0x785, &(0x7f0000000a40)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r2, &(0x7f0000000040)=""/4109, 0x100d) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r5) r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) r7 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$sock_buf(r7, 0x1, 0x37, 0x0, &(0x7f0000000200)) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_read_part_table(0x1054, &(0x7f0000001340)="$eJzsz72twjAYBdCbKC9WpnihZgimyAJMEtGzCLOwDrWR+ZGyAILinML2d+Ury+G71szbsZbknDHJX5I+U9uP13l/S/e8MfQpeQ+vUoYkh00y5hFlrfVU6vjfKu2t7Pqlnaa2dFkun/8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPy+ewAAAP//RmEMSw==") r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r9, 0x7f, 0x1000000, 0x4) 590.838031ms ago: executing program 9 (id=4692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 485.101752ms ago: executing program 2 (id=4693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000400)}, 0x10) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088"], 0xfdef) 484.793772ms ago: executing program 9 (id=4694): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 411.08896ms ago: executing program 9 (id=4695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 410.336429ms ago: executing program 9 (id=4696): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 371.931503ms ago: executing program 3 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) 366.810144ms ago: executing program 9 (id=4698): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x804) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000004c0)={'pim6reg1\x00', &(0x7f00000003c0)=@ethtool_stats={0x1d, 0x2, [0x8, 0x200]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x100080, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000000)=""/6) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) 203.61814ms ago: executing program 5 (id=4699): socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 35.481707ms ago: executing program 9 (id=4700): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r4 = syz_clone(0x280991, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x40000f63c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbe98}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r4, 0x5, 0x5003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="26c32ac38cfdf58747d96d15ce35138d8f71b8c675cd93cd90c40c66db4b00edd286e77109a8d2e30f89bddc5932e186c271f3e4f9c2a1347c60cdfa8eb611f7905adf028190ed6d187aa1eb7259a86f23b0da6b238072d62262687d77faf3d682cde4bb37f244948302d9a0f300d8e81cb2ff3ae8af4ef48ea84ffeaeafbc9bc3570bca0763bb7fc689d77d08c2d870f044e33845f9011d862d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000440)='ib_mad_send_done_handler\x00'}, 0x16) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000480)="aa7a5316305609b3e78e105e181a875c94741a1c83c69817efe1c6e51f903832ea9cebe5804add73c1aadc4db46f838dae73281108b099b7ff12416703d749c56092a2ed49aa3371cbd550977816525472da117e129c4c06994ee35c4da4eb1f4f88bdf5bc5f32f1f53fa8d41a903ebc44d253a43271964f5c3197c1e4d79adcce4ec011f64df46df4cb846d209aef3f0d5a076b28886f185f000d0000007856f4d7f3cce5df309313571777e2d536ccedf3ce15f912b79d3c", 0xb9, 0x2004c090, &(0x7f0000000100)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) shutdown(r5, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) 0s ago: executing program 5 (id=4701): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = epoll_create1(0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r6, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x10000011}) write$vga_arbiter(r3, &(0x7f0000000200)=@other={'decodes', ' ', 'none'}, 0xd) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mkdirat(r8, &(0x7f00000000c0)='./file0\x00', 0x105) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3ac, 0xe0, 0x0, 0xe0, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@arp={@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xff000000, 0x2, 0x1, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x8000, 0x401, 0x6, 0xa, 0x3ff, 0x9, 'dvmrp0\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x81}, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}, {{@arp={@multicast2, @broadcast, 0xff, 0x0, 0x90, 0xf, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, {@mac=@random="9b90ceb9f7a9", {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x5, 0x6, 0x6, 0x40d, 0xf01, 0x5592, 'bridge0\x00', 'bridge_slave_1\x00', {}, {0x103}, 0x0, 0x302}, 0xbc, 0x10c, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @remote, @empty}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xe0}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3f8) kernel console output (not intermixed with test programs): 033:0x7fdeea49eec9 [ 342.700533][T16996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.700614][T16996] RSP: 002b:00007fdee8eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.700639][T16996] RAX: ffffffffffffffda RBX: 00007fdeea6f5fa0 RCX: 00007fdeea49eec9 [ 342.700656][T16996] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000003 [ 342.700670][T16996] RBP: 00007fdee8eff090 R08: 0000000000000000 R09: 0000000000000000 [ 342.700681][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.700693][T16996] R13: 00007fdeea6f6038 R14: 00007fdeea6f5fa0 R15: 00007ffeac051548 [ 342.700712][T16996] [ 342.710914][T16993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4194'. [ 342.717796][ T29] audit: type=1400 audit(1760302838.170:15190): avc: denied { create } for pid=16992 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.910279][ T29] audit: type=1400 audit(1760302838.180:15191): avc: denied { write } for pid=16992 comm="syz.2.4194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 342.931170][ T29] audit: type=1400 audit(1760302838.190:15192): avc: denied { read write } for pid=16992 comm="syz.2.4194" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.955472][ T29] audit: type=1400 audit(1760302838.190:15193): avc: denied { open } for pid=16992 comm="syz.2.4194" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.979723][ T29] audit: type=1400 audit(1760302838.200:15194): avc: denied { ioctl } for pid=16992 comm="syz.2.4194" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 343.018367][T17005] loop2: detected capacity change from 0 to 128 [ 343.146809][T17006] lo speed is unknown, defaulting to 1000 [ 343.219847][T17013] loop7: detected capacity change from 0 to 128 [ 343.301012][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4200'. [ 343.321719][T17008] loop9: detected capacity change from 0 to 512 [ 343.330567][T17008] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 343.419744][ T29] audit: type=1400 audit(1760302838.880:15195): avc: denied { setopt } for pid=17019 comm="syz.9.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 343.420965][T17020] loop9: detected capacity change from 0 to 512 [ 343.452995][T17022] loop5: detected capacity change from 0 to 512 [ 343.471716][T17020] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.4203: missing EA_INODE flag [ 343.483516][T17022] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 343.521066][T17022] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4204: Failed to acquire dquot type 1 [ 343.533922][T17020] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.4203: error while reading EA inode 12 err=-117 [ 343.566104][T17020] EXT4-fs (loop9): 1 orphan inode deleted [ 343.572445][T17022] EXT4-fs (loop5): 1 truncate cleaned up [ 343.591884][T17022] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4204: Failed to acquire dquot type 1 [ 343.634650][T17022] veth0: entered promiscuous mode [ 343.648219][T17022] veth0: left promiscuous mode [ 343.774376][T17032] loop9: detected capacity change from 0 to 128 [ 343.806772][T17032] EXT4-fs: test_dummy_encryption option not supported [ 343.820297][T17028] loop5: detected capacity change from 0 to 512 [ 343.856661][T17028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.869085][T17032] loop9: detected capacity change from 0 to 512 [ 343.903969][T17028] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4205: invalid indirect mapped block 4294967295 (level 1) [ 343.921738][T17032] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.939579][T17028] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4205: invalid indirect mapped block 4294967295 (level 1) [ 343.967976][T17032] EXT4-fs (loop9): mount failed [ 343.968107][T17028] EXT4-fs (loop5): 2 truncates cleaned up [ 343.997333][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4209'. [ 344.118273][T17052] loop3: detected capacity change from 0 to 1024 [ 344.237850][T17060] loop9: detected capacity change from 0 to 2048 [ 344.302726][T17065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4213'. [ 344.347661][T12945] EXT4-fs unmount: 34 callbacks suppressed [ 344.347712][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.382711][T17055] loop5: detected capacity change from 0 to 512 [ 344.415764][T17055] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 344.542269][T17072] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4217'. [ 344.714265][T17082] loop9: detected capacity change from 0 to 128 [ 344.742118][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4223'. [ 344.756607][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.799630][T17084] vlan2: entered allmulticast mode [ 344.804836][T17084] bridge_slave_0: entered allmulticast mode [ 345.085733][T17099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4225'. [ 345.147832][T17101] serio: Serial port ptm0 [ 345.237261][T17106] loop3: detected capacity change from 0 to 512 [ 345.244171][T17106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 345.254000][T17106] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4227: invalid indirect mapped block 4294967295 (level 1) [ 345.268307][T17106] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4227: invalid indirect mapped block 4294967295 (level 1) [ 345.282972][T17106] EXT4-fs (loop3): 2 truncates cleaned up [ 345.289400][T17106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.289513][ T6701] bio_check_eod: 214 callbacks suppressed [ 345.289574][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.289574][ T6701] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 345.324557][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.324557][ T6701] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 345.338208][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.338208][ T6701] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 345.338863][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.351792][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.351792][ T6701] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 345.374293][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.374293][ T6701] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 345.393616][T17112] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4228'. [ 345.402771][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.402771][ T6701] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 345.418973][T17112] loop7: detected capacity change from 0 to 512 [ 345.430087][T17112] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 345.438647][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.438647][ T6701] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 345.462359][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.462359][ T6701] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 345.473495][T17116] loop3: detected capacity change from 0 to 512 [ 345.484136][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.484136][ T6701] loop2: rw=1, sector=273, nr_sectors = 8 limit=128 [ 345.497679][ T6701] kworker/u8:66: attempt to access beyond end of device [ 345.497679][ T6701] loop2: rw=1, sector=289, nr_sectors = 8 limit=128 [ 345.677217][T17134] loop2: detected capacity change from 0 to 1024 [ 345.702336][T17134] EXT4-fs: Ignoring removed oldalloc option [ 345.709336][T17134] EXT4-fs: Ignoring removed bh option [ 345.763726][T17134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.859404][T13541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.976005][T17142] loop9: detected capacity change from 0 to 512 [ 345.987031][T17142] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.015341][T17142] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4239: invalid indirect mapped block 4294967295 (level 1) [ 346.073336][T17142] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4239: invalid indirect mapped block 4294967295 (level 1) [ 346.131889][T17142] EXT4-fs (loop9): 2 truncates cleaned up [ 346.138532][T17147] FAULT_INJECTION: forcing a failure. [ 346.138532][T17147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.151819][T17147] CPU: 1 UID: 0 PID: 17147 Comm: syz.5.4240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.151884][T17147] Tainted: [W]=WARN [ 346.151893][T17147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 346.151907][T17147] Call Trace: [ 346.151962][T17147] [ 346.151971][T17147] __dump_stack+0x1d/0x30 [ 346.151993][T17147] dump_stack_lvl+0xe8/0x140 [ 346.152085][T17147] dump_stack+0x15/0x1b [ 346.152108][T17147] should_fail_ex+0x265/0x280 [ 346.152153][T17147] should_fail+0xb/0x20 [ 346.152183][T17147] should_fail_usercopy+0x1a/0x20 [ 346.152214][T17147] _copy_from_user+0x1c/0xb0 [ 346.152311][T17147] ___sys_sendmsg+0xc1/0x1d0 [ 346.152446][T17147] __x64_sys_sendmsg+0xd4/0x160 [ 346.152489][T17147] x64_sys_call+0x191e/0x3000 [ 346.152518][T17147] do_syscall_64+0xd2/0x200 [ 346.152570][T17147] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 346.152601][T17147] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 346.152623][T17147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.152734][T17147] RIP: 0033:0x7fdeea49eec9 [ 346.152751][T17147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.152776][T17147] RSP: 002b:00007fdee8eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.152823][T17147] RAX: ffffffffffffffda RBX: 00007fdeea6f5fa0 RCX: 00007fdeea49eec9 [ 346.152840][T17147] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 346.152857][T17147] RBP: 00007fdee8eff090 R08: 0000000000000000 R09: 0000000000000000 [ 346.152873][T17147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.152890][T17147] R13: 00007fdeea6f6038 R14: 00007fdeea6f5fa0 R15: 00007ffeac051548 [ 346.152915][T17147] [ 346.256200][T17142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.323439][T17149] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4241'. [ 346.446905][T17154] loop5: detected capacity change from 0 to 128 [ 346.476929][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.767559][T17176] vlan3: entered allmulticast mode [ 346.900264][T17184] loop7: detected capacity change from 0 to 764 [ 346.929641][T17184] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.954262][T17186] loop3: detected capacity change from 0 to 512 [ 346.966864][T17184] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.968581][T17186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 346.995578][T17186] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4254: invalid indirect mapped block 4294967295 (level 1) [ 347.010209][T17186] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4254: invalid indirect mapped block 4294967295 (level 1) [ 347.025010][T17186] EXT4-fs (loop3): 2 truncates cleaned up [ 347.099310][T17186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.137034][T17184] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.160297][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.265651][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 347.265742][ T29] audit: type=1400 audit(1760302842.700:15512): avc: denied { getopt } for pid=17188 comm="syz.9.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 347.446614][T17184] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.470721][ T29] audit: type=1400 audit(1760302842.930:15513): avc: denied { unmount } for pid=15912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 347.566747][ T6540] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.592571][ T6540] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.607811][ T29] audit: type=1326 audit(1760302843.080:15514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17183 comm="syz.7.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c0adeec9 code=0x7ffc0000 [ 347.631521][ T29] audit: type=1326 audit(1760302843.080:15515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17183 comm="syz.7.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59c0adeec9 code=0x7ffc0000 [ 347.655277][ T6540] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.667569][ T6540] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.693333][T17210] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 347.700006][ T29] audit: type=1400 audit(1760302843.150:15516): avc: denied { unmount } for pid=12519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 347.723620][ T29] audit: type=1400 audit(1760302843.160:15517): avc: denied { read } for pid=17209 comm="syz.2.4260" dev="nsfs" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.745002][ T29] audit: type=1400 audit(1760302843.160:15518): avc: denied { open } for pid=17209 comm="syz.2.4260" path="net:[4026532372]" dev="nsfs" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.768536][ T29] audit: type=1400 audit(1760302843.160:15519): avc: denied { read write } for pid=17209 comm="syz.2.4260" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 347.779950][T17212] __nla_validate_parse: 1 callbacks suppressed [ 347.779980][T17212] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4262'. [ 347.793371][ T29] audit: type=1400 audit(1760302843.160:15520): avc: denied { open } for pid=17209 comm="syz.2.4260" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 347.833174][ T29] audit: type=1400 audit(1760302843.160:15521): avc: denied { ioctl } for pid=17209 comm="syz.2.4260" path="socket:[65294]" dev="sockfs" ino=65294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.931593][T17212] vlan3: entered allmulticast mode [ 347.973677][T17226] netlink: 87 bytes leftover after parsing attributes in process `syz.9.4267'. [ 348.143557][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4266'. [ 348.158458][T17240] serio: Serial port ptm0 [ 348.177867][T17224] loop5: detected capacity change from 0 to 512 [ 348.211904][T17224] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 348.271185][T17224] loop2: detected capacity change from 0 to 7 [ 348.546702][T17234] loop9: detected capacity change from 0 to 512 [ 348.576709][T17234] EXT4-fs: Ignoring removed bh option [ 348.627008][T17234] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.642189][T17252] program syz.7.4272 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.654811][T17252] loop7: detected capacity change from 0 to 512 [ 348.661766][T17234] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 348.675740][T17254] loop5: detected capacity change from 0 to 512 [ 348.685676][T17234] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 348.685933][T17254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.695565][T17234] EXT4-fs (loop9): orphan cleanup on readonly fs [ 348.712617][T17252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.725751][T17234] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4270: Failed to acquire dquot type 1 [ 348.733435][T17252] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.737923][T17234] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4270: Invalid block bitmap block 0 in block_group 0 [ 348.747795][T17254] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4274: invalid indirect mapped block 4294967295 (level 1) [ 348.761488][T17234] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4270: Invalid block bitmap block 0 in block_group 0 [ 348.789076][T17234] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4270: Invalid block bitmap block 0 in block_group 0 [ 348.790426][T17254] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.4274: invalid indirect mapped block 4294967295 (level 1) [ 348.804397][T17234] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4270: Failed to acquire dquot type 1 [ 348.818005][T17254] EXT4-fs (loop5): 2 truncates cleaned up [ 348.828964][T17234] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4270: Failed to acquire dquot type 1 [ 348.845589][T17254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.850677][T17234] EXT4-fs (loop9): 1 orphan inode deleted [ 348.865309][T17234] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 348.902483][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.915555][T17234] syz.9.4270 (17234) used greatest stack depth: 8920 bytes left [ 348.926512][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.964583][T17264] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4276'. [ 348.974999][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.044891][T17269] loop5: detected capacity change from 0 to 1764 [ 349.052374][T17269] grow_buffers: requested out-of-range block 18446744071681881834 for device loop5 [ 349.061840][T17269] isofs_fill_super: bread failed, dev=loop5, iso_blknum=1133648757, block=-2027669782 [ 349.149226][T17278] netlink: 536 bytes leftover after parsing attributes in process `syz.5.4282'. [ 349.158626][T17278] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4282'. [ 349.169073][T17262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.197640][T17262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.210763][T17267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.231931][T17267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.280373][T17281] FAULT_INJECTION: forcing a failure. [ 349.280373][T17281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.293519][T17281] CPU: 0 UID: 60929 PID: 17281 Comm: syz.7.4275 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.293596][T17281] Tainted: [W]=WARN [ 349.293605][T17281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.293623][T17281] Call Trace: [ 349.293633][T17281] [ 349.293643][T17281] __dump_stack+0x1d/0x30 [ 349.293670][T17281] dump_stack_lvl+0xe8/0x140 [ 349.293806][T17281] dump_stack+0x15/0x1b [ 349.293832][T17281] should_fail_ex+0x265/0x280 [ 349.293876][T17281] should_fail+0xb/0x20 [ 349.293968][T17281] should_fail_usercopy+0x1a/0x20 [ 349.294042][T17281] _copy_from_user+0x1c/0xb0 [ 349.294152][T17281] ___sys_sendmsg+0xc1/0x1d0 [ 349.294327][T17281] __x64_sys_sendmsg+0xd4/0x160 [ 349.294364][T17281] x64_sys_call+0x191e/0x3000 [ 349.294427][T17281] do_syscall_64+0xd2/0x200 [ 349.294459][T17281] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 349.294495][T17281] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 349.294524][T17281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.294608][T17281] RIP: 0033:0x7f59c0adeec9 [ 349.294625][T17281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.294647][T17281] RSP: 002b:00007f59bf51e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.294670][T17281] RAX: ffffffffffffffda RBX: 00007f59c0d36090 RCX: 00007f59c0adeec9 [ 349.294686][T17281] RDX: 0000000004040084 RSI: 0000200000004bc0 RDI: 0000000000000007 [ 349.294704][T17281] RBP: 00007f59bf51e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.294721][T17281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.294788][T17281] R13: 00007f59c0d36128 R14: 00007f59c0d36090 R15: 00007fff25952d08 [ 349.294811][T17281] [ 349.303935][T17282] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4278'. [ 349.371946][T17280] loop5: detected capacity change from 0 to 512 [ 349.522673][T17280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.4284: missing EA_INODE flag [ 349.546301][T17280] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4284: error while reading EA inode 12 err=-117 [ 349.596534][T17280] EXT4-fs (loop5): 1 orphan inode deleted [ 349.611484][T17280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.760348][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.675533][T17303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4290'. [ 350.809607][T17305] serio: Serial port ptm0 [ 351.078202][T17315] netlink: 'syz.7.4295': attribute type 13 has an invalid length. [ 351.086115][T17315] netlink: 'syz.7.4295': attribute type 17 has an invalid length. [ 351.236775][T17313] netlink: 'syz.2.4293': attribute type 13 has an invalid length. [ 351.244667][T17313] netlink: 'syz.2.4293': attribute type 17 has an invalid length. [ 351.272833][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4294'. [ 351.337274][T17334] loop7: detected capacity change from 0 to 512 [ 351.352185][T17336] loop9: detected capacity change from 0 to 128 [ 351.375497][T17334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.395891][T17336] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4299'. [ 351.415814][T17341] FAULT_INJECTION: forcing a failure. [ 351.415814][T17341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.429119][T17341] CPU: 0 UID: 0 PID: 17341 Comm: syz.2.4300 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.429191][T17341] Tainted: [W]=WARN [ 351.429200][T17341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.429214][T17341] Call Trace: [ 351.429221][T17341] [ 351.429229][T17341] __dump_stack+0x1d/0x30 [ 351.429257][T17341] dump_stack_lvl+0xe8/0x140 [ 351.429281][T17341] dump_stack+0x15/0x1b [ 351.429340][T17341] should_fail_ex+0x265/0x280 [ 351.429519][T17341] should_fail+0xb/0x20 [ 351.429558][T17341] should_fail_usercopy+0x1a/0x20 [ 351.429578][T17341] _copy_from_user+0x1c/0xb0 [ 351.429604][T17341] __sys_bpf+0x183/0x7c0 [ 351.429716][T17341] __x64_sys_bpf+0x41/0x50 [ 351.429747][T17341] x64_sys_call+0x2aee/0x3000 [ 351.429842][T17341] do_syscall_64+0xd2/0x200 [ 351.429937][T17341] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 351.429973][T17341] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 351.430002][T17341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.430030][T17341] RIP: 0033:0x7fba427beec9 [ 351.430049][T17341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.430154][T17341] RSP: 002b:00007fba4121f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.430173][T17341] RAX: ffffffffffffffda RBX: 00007fba42a15fa0 RCX: 00007fba427beec9 [ 351.430186][T17341] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 351.430198][T17341] RBP: 00007fba4121f090 R08: 0000000000000000 R09: 0000000000000000 [ 351.430209][T17341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.430236][T17341] R13: 00007fba42a16038 R14: 00007fba42a15fa0 R15: 00007ffd66f48d58 [ 351.430257][T17341] [ 351.662324][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.753077][T17359] loop7: detected capacity change from 0 to 512 [ 351.771625][T17359] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.918389][T17365] loop2: detected capacity change from 0 to 512 [ 351.925376][T17365] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 352.002380][T17351] loop2: detected capacity change from 0 to 7 [ 352.008612][ C0] vcan0: j1939_tp_rxtimer: 0xffff888103409200: rx timeout, send abort [ 352.008654][ C0] vcan0: j1939_tp_rxtimer: 0xffff888103408c00: rx timeout, send abort [ 352.016977][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888103409200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.017031][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888103408c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 352.210155][T17368] loop5: detected capacity change from 0 to 128 [ 352.310339][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.318407][T17368] FAT-fs (loop5): Filesystem has been set read-only [ 352.335043][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 352.335060][ T29] audit: type=1400 audit(1760302847.800:15757): avc: denied { unmount } for pid=12519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 352.458708][T17368] bio_check_eod: 102 callbacks suppressed [ 352.458728][T17368] syz.5.4307: attempt to access beyond end of device [ 352.458728][T17368] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 352.481379][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.489378][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.499983][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.510205][T17368] syz.5.4307: attempt to access beyond end of device [ 352.510205][T17368] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 352.524726][ T29] audit: type=1400 audit(1760302847.990:15758): avc: denied { create } for pid=17374 comm="syz.7.4309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.545975][T17371] syz.5.4307: attempt to access beyond end of device [ 352.545975][T17371] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 352.559330][T17371] buffer_io_error: 1 callbacks suppressed [ 352.559348][T17371] Buffer I/O error on dev loop5, logical block 2065, async page read [ 352.594442][ T29] audit: type=1400 audit(1760302848.060:15759): avc: denied { ioctl } for pid=17374 comm="syz.7.4309" path="socket:[65509]" dev="sockfs" ino=65509 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.619868][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.627808][T17368] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 352.635903][T17371] syz.5.4307: attempt to access beyond end of device [ 352.635903][T17371] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 352.649204][T17371] Buffer I/O error on dev loop5, logical block 2066, async page read [ 352.657843][T17371] syz.5.4307: attempt to access beyond end of device [ 352.657843][T17371] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 352.671163][T17371] Buffer I/O error on dev loop5, logical block 2067, async page read [ 352.681027][T17383] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 352.681501][ T29] audit: type=1400 audit(1760302848.140:15760): avc: denied { setopt } for pid=17380 comm="syz.3.4311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.692762][T17371] syz.5.4307: attempt to access beyond end of device [ 352.692762][T17371] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 352.710139][ T29] audit: type=1400 audit(1760302848.150:15761): avc: denied { mac_admin } for pid=17382 comm="syz.9.4312" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 352.723387][T17371] Buffer I/O error on dev loop5, logical block 2068, async page read [ 352.767691][ T29] audit: type=1400 audit(1760302848.160:15762): avc: denied { relabelto } for pid=17382 comm="syz.9.4312" name="memfd:" dev="hugetlbfs" ino=66056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 352.794658][ T29] audit: type=1400 audit(1760302848.160:15763): avc: denied { associate } for pid=17382 comm="syz.9.4312" name="memfd:" dev="hugetlbfs" ino=66056 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 352.795703][T17371] syz.5.4307: attempt to access beyond end of device [ 352.795703][T17371] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 352.822750][ T29] audit: type=1400 audit(1760302848.160:15764): avc: denied { mount } for pid=17382 comm="syz.9.4312" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 352.835976][T17371] Buffer I/O error on dev loop5, logical block 2069, async page read [ 352.866624][ T29] audit: type=1400 audit(1760302848.230:15765): avc: denied { create } for pid=17367 comm="syz.5.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.885655][T17371] syz.5.4307: attempt to access beyond end of device [ 352.885655][T17371] loop5: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 352.886327][ T29] audit: type=1400 audit(1760302848.230:15766): avc: denied { read } for pid=17367 comm="syz.5.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 352.899517][T17371] Buffer I/O error on dev loop5, logical block 2070, async page read [ 352.942211][T17375] vlan3: entered allmulticast mode [ 352.957399][T17371] syz.5.4307: attempt to access beyond end of device [ 352.957399][T17371] loop5: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 352.970786][T17371] Buffer I/O error on dev loop5, logical block 2071, async page read [ 352.986746][T17385] lo speed is unknown, defaulting to 1000 [ 352.990275][T17371] syz.5.4307: attempt to access beyond end of device [ 352.990275][T17371] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 353.005883][T17371] Buffer I/O error on dev loop5, logical block 2072, async page read [ 353.014031][T17368] Buffer I/O error on dev loop5, logical block 2065, async page read [ 353.037039][T17368] Buffer I/O error on dev loop5, logical block 2066, async page read [ 353.081168][T17391] __nla_validate_parse: 4 callbacks suppressed [ 353.081191][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4314'. [ 353.130011][T17390] vlan2: entered allmulticast mode [ 353.239373][T17395] loop5: detected capacity change from 0 to 512 [ 353.291710][T17395] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.4315: missing EA_INODE flag [ 353.310430][T17400] lo speed is unknown, defaulting to 1000 [ 353.381326][T17395] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4315: error while reading EA inode 12 err=-117 [ 353.443313][T17395] EXT4-fs (loop5): 1 orphan inode deleted [ 353.473260][T17395] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.505698][T17411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 353.576007][T17416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4319'. [ 353.608285][T17406] loop7: detected capacity change from 0 to 512 [ 353.626940][T17406] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 353.657533][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.693687][T17406] loop2: detected capacity change from 0 to 7 [ 354.064905][T17429] loop3: detected capacity change from 0 to 2048 [ 354.086283][T17429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.141647][T17445] serio: Serial port ptm0 [ 354.267566][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.849573][T17462] loop7: detected capacity change from 0 to 512 [ 354.860652][T17462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.873323][T17462] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4335: invalid indirect mapped block 4294967295 (level 1) [ 354.905105][T17462] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4335: invalid indirect mapped block 4294967295 (level 1) [ 354.920204][T17462] EXT4-fs (loop7): 2 truncates cleaned up [ 354.926907][T17462] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.976636][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.131371][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.152654][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.165043][T17480] pim6reg: entered allmulticast mode [ 355.173777][T17470] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 355.181604][T17470] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4339'. [ 355.190710][T17470] NCSI netlink: No device for ifindex 0 [ 355.199771][T17480] pim6reg: left allmulticast mode [ 355.211422][T17482] loop9: detected capacity change from 0 to 512 [ 355.227588][T17482] EXT4-fs: Ignoring removed bh option [ 355.236458][T17484] loop7: detected capacity change from 0 to 2048 [ 355.243197][T17482] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.260292][T17482] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 355.280421][T17484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.302726][T17482] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 355.325788][T17482] EXT4-fs (loop9): orphan cleanup on readonly fs [ 355.349951][T17493] netlink: 'syz.5.4347': attribute type 1 has an invalid length. [ 355.359850][T17482] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4343: Failed to acquire dquot type 1 [ 355.384026][T17493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.397596][T17482] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4343: Invalid block bitmap block 0 in block_group 0 [ 355.412971][T17496] FAULT_INJECTION: forcing a failure. [ 355.412971][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.426116][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.5.4347 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.426171][T17496] Tainted: [W]=WARN [ 355.426178][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.426195][T17496] Call Trace: [ 355.426203][T17496] [ 355.426214][T17496] __dump_stack+0x1d/0x30 [ 355.426259][T17496] dump_stack_lvl+0xe8/0x140 [ 355.426294][T17496] dump_stack+0x15/0x1b [ 355.426313][T17496] should_fail_ex+0x265/0x280 [ 355.426349][T17496] should_fail+0xb/0x20 [ 355.426466][T17496] should_fail_usercopy+0x1a/0x20 [ 355.426495][T17496] _copy_from_user+0x1c/0xb0 [ 355.426558][T17496] ___sys_sendmsg+0xc1/0x1d0 [ 355.426621][T17496] __x64_sys_sendmsg+0xd4/0x160 [ 355.426706][T17496] x64_sys_call+0x191e/0x3000 [ 355.426735][T17496] do_syscall_64+0xd2/0x200 [ 355.426760][T17496] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 355.426788][T17496] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 355.426922][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.426968][T17496] RIP: 0033:0x7fdeea49eec9 [ 355.426989][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.427015][T17496] RSP: 002b:00007fdee8ede038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.427041][T17496] RAX: ffffffffffffffda RBX: 00007fdeea6f6090 RCX: 00007fdeea49eec9 [ 355.427059][T17496] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 355.427106][T17496] RBP: 00007fdee8ede090 R08: 0000000000000000 R09: 0000000000000000 [ 355.427118][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.427130][T17496] R13: 00007fdeea6f6128 R14: 00007fdeea6f6090 R15: 00007ffeac051548 [ 355.427216][T17496] [ 355.435136][T17491] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.452419][T17482] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4343: Invalid block bitmap block 0 in block_group 0 [ 355.638127][T17482] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.4343: Invalid block bitmap block 0 in block_group 0 [ 355.647236][T17500] loop5: detected capacity change from 0 to 2048 [ 355.655389][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.668441][T17482] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4343: Failed to acquire dquot type 1 [ 355.680478][T17482] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4343: Failed to acquire dquot type 1 [ 355.692836][T17491] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.699156][T17482] EXT4-fs (loop9): 1 orphan inode deleted [ 355.709434][T17482] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.731022][T17500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.745753][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.777403][T17506] serio: Serial port ptm0 [ 355.785774][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.795965][T17491] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.838467][T17491] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.891454][ T6596] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.903483][ T6596] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.921442][ T6596] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.940057][ T6596] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.974934][T17521] loop9: detected capacity change from 0 to 764 [ 356.003788][T17521] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.085541][T17521] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.100571][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4360'. [ 356.109568][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4360'. [ 356.123952][ T1085] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.132761][ T1085] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.145527][ T1085] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.179817][T17521] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.192424][ T1085] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.219706][T17540] loop3: detected capacity change from 0 to 2048 [ 356.268176][T17540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.645243][T17521] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.684414][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.709126][ T6583] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.723276][ T6583] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.755805][ T6583] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.795821][ T6583] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.816949][T17562] loop5: detected capacity change from 0 to 128 [ 356.957444][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4372'. [ 356.966468][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4372'. [ 356.982515][ T6583] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.992858][ T6583] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.001510][ T6583] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.010278][ T6583] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.164701][T17586] serio: Serial port ptm0 [ 357.257489][T17598] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4381'. [ 357.295383][T17602] netlink: 'syz.2.4383': attribute type 5 has an invalid length. [ 357.351223][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 357.351240][ T29] audit: type=1400 audit(1760302852.820:16315): avc: denied { map_create } for pid=17605 comm="syz.2.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.376810][ T29] audit: type=1400 audit(1760302852.820:16316): avc: denied { bpf } for pid=17605 comm="syz.2.4385" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.397645][ T29] audit: type=1400 audit(1760302852.820:16317): avc: denied { map_read map_write } for pid=17605 comm="syz.2.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.417878][ T29] audit: type=1400 audit(1760302852.820:16318): avc: denied { prog_load } for pid=17605 comm="syz.2.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.437174][ T29] audit: type=1400 audit(1760302852.820:16319): avc: denied { perfmon } for pid=17605 comm="syz.2.4385" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 357.471783][ T29] audit: type=1400 audit(1760302852.820:16320): avc: denied { prog_run } for pid=17605 comm="syz.2.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 357.487481][T17609] loop3: detected capacity change from 0 to 764 [ 357.491063][ T29] audit: type=1400 audit(1760302852.860:16321): avc: denied { read write } for pid=13727 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.521622][ T29] audit: type=1400 audit(1760302852.860:16322): avc: denied { open } for pid=13727 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.545912][ T29] audit: type=1400 audit(1760302852.860:16323): avc: denied { ioctl } for pid=13727 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 357.571729][ T29] audit: type=1400 audit(1760302852.900:16324): avc: denied { create } for pid=17605 comm="syz.2.4385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.645020][T17609] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.707038][T17609] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.757399][T17609] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.817182][T17609] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.874674][T17616] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4388'. [ 357.932994][ T6524] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.944979][ T6524] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.957770][ T1085] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.976975][ T1085] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.105714][T17628] loop3: detected capacity change from 0 to 2048 [ 358.127990][T17628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.224245][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.265829][T17643] netlink: 'syz.9.4395': attribute type 5 has an invalid length. [ 358.266561][T17644] FAULT_INJECTION: forcing a failure. [ 358.266561][T17644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.286722][T17644] CPU: 1 UID: 0 PID: 17644 Comm: syz.7.4399 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.286754][T17644] Tainted: [W]=WARN [ 358.286812][T17644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.286831][T17644] Call Trace: [ 358.286841][T17644] [ 358.286851][T17644] __dump_stack+0x1d/0x30 [ 358.286880][T17644] dump_stack_lvl+0xe8/0x140 [ 358.286962][T17644] dump_stack+0x15/0x1b [ 358.286985][T17644] should_fail_ex+0x265/0x280 [ 358.287036][T17644] should_fail+0xb/0x20 [ 358.287174][T17644] should_fail_usercopy+0x1a/0x20 [ 358.287198][T17644] _copy_to_user+0x20/0xa0 [ 358.287318][T17644] simple_read_from_buffer+0xb5/0x130 [ 358.287342][T17644] proc_fail_nth_read+0x10e/0x150 [ 358.287387][T17644] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.287422][T17644] vfs_read+0x1a8/0x770 [ 358.287448][T17644] ? __rcu_read_unlock+0x4f/0x70 [ 358.287511][T17644] ? __fget_files+0x184/0x1c0 [ 358.287539][T17644] ksys_read+0xda/0x1a0 [ 358.287567][T17644] __x64_sys_read+0x40/0x50 [ 358.287593][T17644] x64_sys_call+0x27c0/0x3000 [ 358.287662][T17644] do_syscall_64+0xd2/0x200 [ 358.287688][T17644] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 358.287718][T17644] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 358.287833][T17644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.287859][T17644] RIP: 0033:0x7f59c0add8dc [ 358.287877][T17644] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.287901][T17644] RSP: 002b:00007f59bf53f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.287972][T17644] RAX: ffffffffffffffda RBX: 00007f59c0d35fa0 RCX: 00007f59c0add8dc [ 358.287987][T17644] RDX: 000000000000000f RSI: 00007f59bf53f0a0 RDI: 0000000000000004 [ 358.288000][T17644] RBP: 00007f59bf53f090 R08: 0000000000000000 R09: 0000000000000000 [ 358.288158][T17644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.288174][T17644] R13: 00007f59c0d36038 R14: 00007f59c0d35fa0 R15: 00007fff25952d08 [ 358.288198][T17644] [ 358.646032][T17656] serio: Serial port ptm0 [ 358.716161][T17666] FAULT_INJECTION: forcing a failure. [ 358.716161][T17666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.729288][T17666] CPU: 0 UID: 0 PID: 17666 Comm: syz.7.4405 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.729320][T17666] Tainted: [W]=WARN [ 358.729328][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.729344][T17666] Call Trace: [ 358.729421][T17666] [ 358.729431][T17666] __dump_stack+0x1d/0x30 [ 358.729455][T17666] dump_stack_lvl+0xe8/0x140 [ 358.729474][T17666] dump_stack+0x15/0x1b [ 358.729552][T17666] should_fail_ex+0x265/0x280 [ 358.729594][T17666] should_fail+0xb/0x20 [ 358.729625][T17666] should_fail_usercopy+0x1a/0x20 [ 358.729648][T17666] _copy_from_user+0x1c/0xb0 [ 358.729713][T17666] ___sys_sendmsg+0xc1/0x1d0 [ 358.729833][T17666] __x64_sys_sendmsg+0xd4/0x160 [ 358.729866][T17666] x64_sys_call+0x191e/0x3000 [ 358.729963][T17666] do_syscall_64+0xd2/0x200 [ 358.729993][T17666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 358.730026][T17666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 358.730081][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.730103][T17666] RIP: 0033:0x7f59c0adeec9 [ 358.730118][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.730136][T17666] RSP: 002b:00007f59bf53f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.730163][T17666] RAX: ffffffffffffffda RBX: 00007f59c0d35fa0 RCX: 00007f59c0adeec9 [ 358.730176][T17666] RDX: 0000000000008000 RSI: 0000200000000180 RDI: 0000000000000003 [ 358.730188][T17666] RBP: 00007f59bf53f090 R08: 0000000000000000 R09: 0000000000000000 [ 358.730200][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.730221][T17666] R13: 00007f59c0d36038 R14: 00007f59c0d35fa0 R15: 00007fff25952d08 [ 358.730239][T17666] [ 358.944916][T17668] loop7: detected capacity change from 0 to 2048 [ 358.977917][T17668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.033099][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.300434][T17682] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4410'. [ 359.317069][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4410'. [ 359.329699][T17682] bridge0: entered promiscuous mode [ 359.452192][T17688] loop3: detected capacity change from 0 to 128 [ 359.460872][T17688] FAT-fs (loop3): bogus logical sector size 0 [ 359.465963][T17689] serio: Serial port ptm1 [ 359.467069][T17688] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 359.480787][T17688] FAT-fs (loop3): Can't find a valid FAT filesystem [ 359.541687][T17693] netlink: 'syz.9.4414': attribute type 5 has an invalid length. [ 359.550853][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4415'. [ 359.573352][T17695] vlan2: entered allmulticast mode [ 359.803668][T17712] xt_bpf: check failed: parse error [ 359.944093][T17719] serio: Serial port ptm0 [ 360.401780][T17725] lo speed is unknown, defaulting to 1000 [ 360.819724][T17729] loop5: detected capacity change from 0 to 512 [ 360.844937][T17731] loop3: detected capacity change from 0 to 1024 [ 360.851966][T17731] EXT4-fs: Ignoring removed oldalloc option [ 360.857943][T17731] EXT4-fs: Ignoring removed bh option [ 360.905306][T17729] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4427: inode #0: comm syz.5.4427: iget: illegal inode # [ 360.935928][T17729] EXT4-fs (loop5): get orphan inode failed [ 360.948371][T17729] EXT4-fs (loop5): mount failed [ 360.971676][T17744] loop7: detected capacity change from 0 to 512 [ 360.998678][T17731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.015305][T17744] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.064544][T17750] FAULT_INJECTION: forcing a failure. [ 361.064544][T17750] name failslab, interval 1, probability 0, space 0, times 0 [ 361.067880][T17729] ref_ctr_offset mismatch. inode: 0x253 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 361.077445][T17750] CPU: 0 UID: 0 PID: 17750 Comm: syz.9.4435 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.077523][T17750] Tainted: [W]=WARN [ 361.077532][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 361.077549][T17750] Call Trace: [ 361.077557][T17750] [ 361.077566][T17750] __dump_stack+0x1d/0x30 [ 361.077594][T17750] dump_stack_lvl+0xe8/0x140 [ 361.077666][T17750] dump_stack+0x15/0x1b [ 361.077688][T17750] should_fail_ex+0x265/0x280 [ 361.077752][T17750] should_failslab+0x8c/0xb0 [ 361.077814][T17750] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 361.077853][T17750] ? __alloc_skb+0x101/0x320 [ 361.077917][T17750] __alloc_skb+0x101/0x320 [ 361.077951][T17750] ? audit_log_start+0x342/0x720 [ 361.077978][T17750] audit_log_start+0x3a0/0x720 [ 361.078004][T17750] ? kstrtouint+0x76/0xc0 [ 361.078044][T17750] audit_seccomp+0x48/0x100 [ 361.078119][T17750] ? __seccomp_filter+0x82d/0x1250 [ 361.078155][T17750] __seccomp_filter+0x83e/0x1250 [ 361.078191][T17750] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 361.078231][T17750] ? vfs_write+0x7e8/0x960 [ 361.078332][T17750] ? __rcu_read_unlock+0x4f/0x70 [ 361.078368][T17750] ? __fget_files+0x184/0x1c0 [ 361.078412][T17750] __secure_computing+0x82/0x150 [ 361.078601][T17750] syscall_trace_enter+0xcf/0x1e0 [ 361.078643][T17750] do_syscall_64+0xac/0x200 [ 361.078692][T17750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 361.078733][T17750] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 361.078819][T17750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.078851][T17750] RIP: 0033:0x7f53e8b6eec9 [ 361.078874][T17750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.078901][T17750] RSP: 002b:00007f53e75d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.078953][T17750] RAX: ffffffffffffffda RBX: 00007f53e8dc5fa0 RCX: 00007f53e8b6eec9 [ 361.078972][T17750] RDX: 000000000000c884 RSI: 00002000000000c0 RDI: 0000000000000003 [ 361.078990][T17750] RBP: 00007f53e75d7090 R08: 0000000000000000 R09: 0000000000000000 [ 361.079008][T17750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.079026][T17750] R13: 00007f53e8dc6038 R14: 00007f53e8dc5fa0 R15: 00007fffd57e2f58 [ 361.079053][T17750] [ 361.342410][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.812149][T17775] netlink: 'syz.9.4443': attribute type 1 has an invalid length. [ 361.820056][T17775] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4443'. [ 361.944987][T17779] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 362.087305][T17781] loop7: detected capacity change from 0 to 512 [ 362.108706][T17781] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.4445: missing EA_INODE flag [ 362.140049][T17784] loop9: detected capacity change from 0 to 512 [ 362.150766][T17781] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.4445: error while reading EA inode 12 err=-117 [ 362.175524][T17784] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #12: comm syz.9.4446: missing EA_INODE flag [ 362.197006][T17781] EXT4-fs (loop7): 1 orphan inode deleted [ 362.211426][T17784] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.4446: error while reading EA inode 12 err=-117 [ 362.224948][T17781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.241390][T17784] EXT4-fs (loop9): 1 orphan inode deleted [ 362.298444][T17784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.435914][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 362.435932][ T29] audit: type=1400 audit(1760302859.904:16782): avc: denied { ioctl } for pid=17795 comm="syz.2.4449" path="socket:[68012]" dev="sockfs" ino=68012 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.494687][ T29] audit: type=1400 audit(1760302859.954:16783): avc: denied { create } for pid=17793 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.514678][ T29] audit: type=1400 audit(1760302859.954:16784): avc: denied { connect } for pid=17793 comm="syz.3.4448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 362.541542][ T29] audit: type=1400 audit(1760302860.004:16785): avc: denied { map_create } for pid=17801 comm="syz.5.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.561103][ T29] audit: type=1400 audit(1760302860.004:16786): avc: denied { bpf } for pid=17801 comm="syz.5.4450" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 362.581874][ T29] audit: type=1400 audit(1760302860.004:16787): avc: denied { map_read map_write } for pid=17801 comm="syz.5.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.601952][ T29] audit: type=1400 audit(1760302860.004:16788): avc: denied { prog_load } for pid=17801 comm="syz.5.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.621220][ T29] audit: type=1400 audit(1760302860.004:16789): avc: denied { perfmon } for pid=17801 comm="syz.5.4450" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 362.642373][ T29] audit: type=1400 audit(1760302860.004:16790): avc: denied { prog_run } for pid=17801 comm="syz.5.4450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.661806][ T29] audit: type=1400 audit(1760302860.114:16791): avc: denied { create } for pid=17804 comm="syz.2.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 362.738586][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.748479][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.784511][T17807] loop9: detected capacity change from 0 to 128 [ 362.964421][T17821] vlan2: entered allmulticast mode [ 363.397149][T17834] netlink: 'syz.5.4462': attribute type 1 has an invalid length. [ 363.404946][T17834] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4462'. [ 363.570502][T17837] loop5: detected capacity change from 0 to 764 [ 363.719944][T17837] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.729786][T17837] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.895154][T17837] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.905149][T17837] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.118555][T17837] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.128390][T17837] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.168215][T17852] loop7: detected capacity change from 0 to 2048 [ 364.182709][T17857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4469'. [ 364.193522][T17852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.227618][T17837] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.237546][T17837] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.309491][ T6534] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.317796][ T6534] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.360640][T17868] netlink: 'syz.2.4472': attribute type 1 has an invalid length. [ 364.365433][ T6534] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.368460][T17868] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4472'. [ 364.385854][ T6534] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.395145][ T6534] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.403436][ T6534] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.442129][ T6534] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.450378][ T6534] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.473653][T17870] netlink: 'syz.5.4473': attribute type 1 has an invalid length. [ 364.481531][T17870] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4473'. [ 364.496225][T17868] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 364.519701][T17873] loop3: detected capacity change from 0 to 764 [ 364.565420][T17873] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.568656][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.597900][T17873] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.645123][T17884] netlink: 'syz.7.4479': attribute type 10 has an invalid length. [ 364.653954][T17884] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4479'. [ 364.695342][T17885] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 364.707881][T17884] team0: Port device geneve1 added [ 364.734515][T17873] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.783850][T17873] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.806376][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4480'. [ 365.218898][ T6597] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.228414][ T6597] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.236693][ T6597] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.244972][ T6597] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.286850][T17894] loop3: detected capacity change from 0 to 2048 [ 365.319890][T17894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.332849][T17902] loop9: detected capacity change from 0 to 764 [ 365.384226][T17902] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.497506][T17902] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.546813][T17910] netlink: 'syz.5.4488': attribute type 1 has an invalid length. [ 365.554615][T17910] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4488'. [ 365.575575][T17902] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.639623][T17902] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.707701][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.719559][ T1086] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.741507][ T1086] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.780702][ T1086] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.820407][ T1086] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.850680][T17922] loop9: detected capacity change from 0 to 2048 [ 365.888967][T17922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.266637][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.319206][T17934] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4495'. [ 366.479004][T17943] loop5: detected capacity change from 0 to 512 [ 366.500776][T17943] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 366.597580][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4502'. [ 366.799687][T17958] FAULT_INJECTION: forcing a failure. [ 366.799687][T17958] name failslab, interval 1, probability 0, space 0, times 0 [ 366.812538][T17958] CPU: 0 UID: 0 PID: 17958 Comm: syz.5.4505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.812580][T17958] Tainted: [W]=WARN [ 366.812587][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.812600][T17958] Call Trace: [ 366.812607][T17958] [ 366.812616][T17958] __dump_stack+0x1d/0x30 [ 366.812644][T17958] dump_stack_lvl+0xe8/0x140 [ 366.812671][T17958] dump_stack+0x15/0x1b [ 366.812716][T17958] should_fail_ex+0x265/0x280 [ 366.812763][T17958] should_failslab+0x8c/0xb0 [ 366.812807][T17958] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 366.812899][T17958] ? __alloc_skb+0x101/0x320 [ 366.812934][T17958] __alloc_skb+0x101/0x320 [ 366.813034][T17958] ? audit_log_start+0x342/0x720 [ 366.813061][T17958] audit_log_start+0x3a0/0x720 [ 366.813087][T17958] ? kstrtouint+0x76/0xc0 [ 366.813176][T17958] audit_seccomp+0x48/0x100 [ 366.813207][T17958] ? __seccomp_filter+0x82d/0x1250 [ 366.813258][T17958] __seccomp_filter+0x83e/0x1250 [ 366.813331][T17958] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 366.813367][T17958] ? vfs_write+0x7e8/0x960 [ 366.813403][T17958] ? __rcu_read_unlock+0x4f/0x70 [ 366.813429][T17958] ? __fget_files+0x184/0x1c0 [ 366.813502][T17958] __secure_computing+0x82/0x150 [ 366.813534][T17958] syscall_trace_enter+0xcf/0x1e0 [ 366.813564][T17958] do_syscall_64+0xac/0x200 [ 366.813590][T17958] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 366.813668][T17958] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 366.813742][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.813841][T17958] RIP: 0033:0x7fdeea49eec9 [ 366.813862][T17958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.813885][T17958] RSP: 002b:00007fdee8eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 366.813906][T17958] RAX: ffffffffffffffda RBX: 00007fdeea6f5fa0 RCX: 00007fdeea49eec9 [ 366.813923][T17958] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 366.813940][T17958] RBP: 00007fdee8eff090 R08: 0000000000000000 R09: 0000000000000000 [ 366.813957][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.814049][T17958] R13: 00007fdeea6f6038 R14: 00007fdeea6f5fa0 R15: 00007ffeac051548 [ 366.814073][T17958] [ 367.079659][T17961] loop7: detected capacity change from 0 to 512 [ 367.116652][T17961] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.4506: missing EA_INODE flag [ 367.143952][T17961] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.4506: error while reading EA inode 12 err=-117 [ 367.169874][T17966] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4508'. [ 367.193863][T17961] EXT4-fs (loop7): 1 orphan inode deleted [ 367.200519][T17961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.238341][T17968] loop3: detected capacity change from 0 to 512 [ 367.251250][T17968] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 367.323449][T17973] loop3: detected capacity change from 0 to 128 [ 367.370796][T17975] netlink: 'syz.5.4511': attribute type 1 has an invalid length. [ 367.378662][T17975] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4511'. [ 367.395049][T17975] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 367.422018][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.529434][T17985] loop9: detected capacity change from 0 to 2048 [ 367.552799][T17985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.565321][T17985] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.588041][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 367.588059][ T29] audit: type=1400 audit(1760302867.060:17244): avc: denied { read } for pid=17981 comm="syz.9.4514" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.588585][T17985] sd 0:0:1:0: device reset [ 367.608368][ T29] audit: type=1400 audit(1760302867.060:17245): avc: denied { open } for pid=17981 comm="syz.9.4514" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.646743][ T29] audit: type=1400 audit(1760302867.060:17246): avc: denied { ioctl } for pid=17981 comm="syz.9.4514" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 367.675841][T17992] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4512'. [ 367.687938][T17993] loop5: detected capacity change from 0 to 512 [ 367.695217][ T29] audit: type=1326 audit(1760302867.160:17247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 367.715993][T17993] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 367.718906][ T29] audit: type=1326 audit(1760302867.160:17248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 367.787957][ T29] audit: type=1326 audit(1760302867.160:17249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 367.811687][ T29] audit: type=1326 audit(1760302867.160:17250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53e8b6ef03 code=0x7ffc0000 [ 367.835241][ T29] audit: type=1326 audit(1760302867.160:17251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53e8b6d97f code=0x7ffc0000 [ 367.858672][ T29] audit: type=1400 audit(1760302867.200:17252): avc: denied { ioctl } for pid=17977 comm="syz.5.4513" path="socket:[68881]" dev="sockfs" ino=68881 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 367.884780][ T29] audit: type=1326 audit(1760302867.230:17253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17981 comm="syz.9.4514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f53e8b6ef57 code=0x7ffc0000 [ 367.926137][ T6590] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:53: bg 0: block 345: padding at end of block bitmap is not set [ 367.953710][ T6590] EXT4-fs (loop9): Remounting filesystem read-only [ 367.966486][T17994] EXT4-fs (loop9): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30 [ 368.193367][T17996] loop3: detected capacity change from 0 to 764 [ 368.227163][T17996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.287268][T17996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.347374][T17996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.407263][T17996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.480110][T17982] syz.9.4514 (17982) used greatest stack depth: 6088 bytes left [ 368.491307][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.524178][T17998] lo speed is unknown, defaulting to 1000 [ 368.530914][T18000] FAULT_INJECTION: forcing a failure. [ 368.530914][T18000] name failslab, interval 1, probability 0, space 0, times 0 [ 368.543646][T18000] CPU: 0 UID: 0 PID: 18000 Comm: syz.5.4518 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 368.543688][T18000] Tainted: [W]=WARN [ 368.543697][T18000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.543714][T18000] Call Trace: [ 368.543721][T18000] [ 368.543772][T18000] __dump_stack+0x1d/0x30 [ 368.543861][T18000] dump_stack_lvl+0xe8/0x140 [ 368.543921][T18000] dump_stack+0x15/0x1b [ 368.543939][T18000] should_fail_ex+0x265/0x280 [ 368.544047][T18000] should_failslab+0x8c/0xb0 [ 368.544118][T18000] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 368.544158][T18000] ? __alloc_skb+0x101/0x320 [ 368.544193][T18000] __alloc_skb+0x101/0x320 [ 368.544256][T18000] ? audit_log_start+0x342/0x720 [ 368.544282][T18000] audit_log_start+0x3a0/0x720 [ 368.544302][T18000] ? kstrtouint+0x76/0xc0 [ 368.544345][T18000] audit_seccomp+0x48/0x100 [ 368.544382][T18000] ? __seccomp_filter+0x82d/0x1250 [ 368.544540][T18000] __seccomp_filter+0x83e/0x1250 [ 368.544576][T18000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 368.544675][T18000] ? vfs_write+0x7e8/0x960 [ 368.544721][T18000] __secure_computing+0x82/0x150 [ 368.544826][T18000] syscall_trace_enter+0xcf/0x1e0 [ 368.544864][T18000] do_syscall_64+0xac/0x200 [ 368.544904][T18000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 368.544940][T18000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 368.545038][T18000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.545067][T18000] RIP: 0033:0x7fdeea49eec9 [ 368.545121][T18000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.545147][T18000] RSP: 002b:00007fdee8eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 368.545222][T18000] RAX: ffffffffffffffda RBX: 00007fdeea6f5fa0 RCX: 00007fdeea49eec9 [ 368.545239][T18000] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 368.545255][T18000] RBP: 00007fdee8eff090 R08: 0000000000000000 R09: 0000000000000000 [ 368.545272][T18000] R10: 0000000000000144 R11: 0000000000000246 R12: 0000000000000001 [ 368.545289][T18000] R13: 00007fdeea6f6038 R14: 00007fdeea6f5fa0 R15: 00007ffeac051548 [ 368.545329][T18000] [ 368.761588][T17998] loop7: detected capacity change from 0 to 512 [ 368.805083][T17998] EXT4-fs (loop7): too many log groups per flexible block group [ 368.814866][T17998] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 368.825664][T17998] EXT4-fs (loop7): mount failed [ 368.884655][T18012] loop9: detected capacity change from 0 to 512 [ 368.924485][T18012] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 368.989533][T18018] loop7: detected capacity change from 0 to 512 [ 369.000454][T18018] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.163500][T18024] loop9: detected capacity change from 0 to 512 [ 369.186503][T18024] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.295825][T18032] FAULT_INJECTION: forcing a failure. [ 369.295825][T18032] name failslab, interval 1, probability 0, space 0, times 0 [ 369.308696][T18032] CPU: 1 UID: 0 PID: 18032 Comm: syz.9.4528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.308740][T18032] Tainted: [W]=WARN [ 369.308749][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.308829][T18032] Call Trace: [ 369.308838][T18032] [ 369.308855][T18032] __dump_stack+0x1d/0x30 [ 369.308879][T18032] dump_stack_lvl+0xe8/0x140 [ 369.308904][T18032] dump_stack+0x15/0x1b [ 369.308921][T18032] should_fail_ex+0x265/0x280 [ 369.308957][T18032] should_failslab+0x8c/0xb0 [ 369.309043][T18032] __kmalloc_noprof+0xa5/0x570 [ 369.309145][T18032] ? sock_kmalloc+0x85/0xc0 [ 369.309188][T18032] sock_kmalloc+0x85/0xc0 [ 369.309260][T18032] ____sys_sendmsg+0xf8/0x4e0 [ 369.309295][T18032] ___sys_sendmsg+0x17b/0x1d0 [ 369.309338][T18032] __x64_sys_sendmsg+0xd4/0x160 [ 369.309458][T18032] x64_sys_call+0x191e/0x3000 [ 369.309481][T18032] do_syscall_64+0xd2/0x200 [ 369.309571][T18032] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 369.309608][T18032] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 369.309638][T18032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.309667][T18032] RIP: 0033:0x7f53e8b6eec9 [ 369.309722][T18032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.309751][T18032] RSP: 002b:00007f53e75d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.309777][T18032] RAX: ffffffffffffffda RBX: 00007f53e8dc5fa0 RCX: 00007f53e8b6eec9 [ 369.309793][T18032] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000006 [ 369.309809][T18032] RBP: 00007f53e75d7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.309825][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.309841][T18032] R13: 00007f53e8dc6038 R14: 00007f53e8dc5fa0 R15: 00007fffd57e2f58 [ 369.309878][T18032] [ 369.320928][T18035] loop5: detected capacity change from 0 to 1024 [ 369.439325][T18038] __nla_validate_parse: 4 callbacks suppressed [ 369.439348][T18038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4527'. [ 369.472337][T18039] loop9: detected capacity change from 0 to 2048 [ 369.528583][T18035] EXT4-fs: Ignoring removed oldalloc option [ 369.534601][T18035] EXT4-fs: Ignoring removed bh option [ 369.552880][T18035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.570723][T18039] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.586891][T18046] veth0_to_team: entered promiscuous mode [ 369.611624][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.622366][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.643734][ T1086] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.660133][ T1086] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.693975][ T1086] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.749093][ T1086] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.793114][T18059] loop9: detected capacity change from 0 to 512 [ 369.804723][T18059] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 369.855125][T18066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4538'. [ 370.054032][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4539'. [ 370.064631][T18072] loop3: detected capacity change from 0 to 512 [ 370.084047][T18071] FAULT_INJECTION: forcing a failure. [ 370.084047][T18071] name failslab, interval 1, probability 0, space 0, times 0 [ 370.096781][T18071] CPU: 1 UID: 0 PID: 18071 Comm: syz.5.4539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.096823][T18071] Tainted: [W]=WARN [ 370.096831][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.096844][T18071] Call Trace: [ 370.096850][T18071] [ 370.096858][T18071] __dump_stack+0x1d/0x30 [ 370.096879][T18071] dump_stack_lvl+0xe8/0x140 [ 370.096899][T18071] dump_stack+0x15/0x1b [ 370.096922][T18071] should_fail_ex+0x265/0x280 [ 370.096967][T18071] should_failslab+0x8c/0xb0 [ 370.097002][T18071] kmem_cache_alloc_noprof+0x50/0x480 [ 370.097037][T18071] ? mas_alloc_nodes+0x1a2/0x210 [ 370.097066][T18071] mas_alloc_nodes+0x1a2/0x210 [ 370.097095][T18071] mas_preallocate+0x2ca/0x510 [ 370.097123][T18071] __split_vma+0x240/0x650 [ 370.097147][T18071] ? __rcu_read_unlock+0x4f/0x70 [ 370.097180][T18071] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 370.097218][T18071] ? plist_check_list+0x1e4/0x210 [ 370.097250][T18071] ? perf_cgroup_switch+0x10c/0x480 [ 370.097286][T18071] vma_modify+0x21e/0xc80 [ 370.097314][T18071] ? _raw_spin_unlock+0x26/0x50 [ 370.097351][T18071] ? finish_task_switch+0xad/0x2b0 [ 370.097384][T18071] vma_modify_policy+0x101/0x130 [ 370.097414][T18071] mbind_range+0x1b8/0x440 [ 370.097438][T18071] __se_sys_set_mempolicy_home_node+0x33f/0x520 [ 370.097484][T18071] __x64_sys_set_mempolicy_home_node+0x55/0x70 [ 370.097526][T18071] x64_sys_call+0x2261/0x3000 [ 370.097555][T18071] do_syscall_64+0xd2/0x200 [ 370.097586][T18071] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 370.097621][T18071] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 370.097648][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.097677][T18071] RIP: 0033:0x7fdeea49eec9 [ 370.097697][T18071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.097721][T18071] RSP: 002b:00007fdee8eff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 370.097747][T18071] RAX: ffffffffffffffda RBX: 00007fdeea6f5fa0 RCX: 00007fdeea49eec9 [ 370.097777][T18071] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000417000 [ 370.097790][T18071] RBP: 00007fdee8eff090 R08: 0000000000000000 R09: 0000000000000000 [ 370.097802][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.097818][T18071] R13: 00007fdeea6f6038 R14: 00007fdeea6f5fa0 R15: 00007ffeac051548 [ 370.097842][T18071] [ 370.355562][T18072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.364305][T18071] loop5: detected capacity change from 0 to 1024 [ 370.397953][T18071] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4539: Failed to acquire dquot type 0 [ 370.413159][T18072] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4535: invalid indirect mapped block 4294967295 (level 1) [ 370.428241][T18071] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 370.433429][T18072] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4535: invalid indirect mapped block 4294967295 (level 1) [ 370.443475][T18071] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #13: comm syz.5.4539: corrupted inode contents [ 370.460923][T18072] EXT4-fs (loop3): 2 truncates cleaned up [ 370.469561][T18071] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #13: comm syz.5.4539: mark_inode_dirty error [ 370.476116][T18072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.486983][T18071] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #13: comm syz.5.4539: corrupted inode contents [ 370.510407][T18071] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.4539: mark_inode_dirty error [ 370.522072][T18071] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #13: comm syz.5.4539: corrupted inode contents [ 370.536638][T18071] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 370.545398][T18071] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #13: comm syz.5.4539: corrupted inode contents [ 370.557934][T18071] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.4539: mark_inode_dirty error [ 370.569402][T18071] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 370.588648][T18071] EXT4-fs (loop5): 1 truncate cleaned up [ 370.596255][T18071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.633496][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.643044][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.665514][T18088] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4541'. [ 370.892462][T18102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4543'. [ 370.942213][T18090] loop5: detected capacity change from 0 to 512 [ 370.970658][T18090] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 371.281770][T18105] loop5: detected capacity change from 0 to 764 [ 371.387421][T18105] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.397357][T18105] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.788353][T18105] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.798254][T18105] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.883409][T18113] loop3: detected capacity change from 0 to 128 [ 371.962492][T18117] lo speed is unknown, defaulting to 1000 [ 371.973209][T18105] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.983049][T18105] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.006388][T18120] loop9: detected capacity change from 0 to 512 [ 372.022463][T18120] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 372.052921][T18105] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.062760][T18105] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.191670][T18125] loop9: detected capacity change from 0 to 128 [ 372.217632][ T6534] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.225923][ T6534] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.285834][ T6534] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.294059][ T6534] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.317862][ T6534] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.326120][ T6534] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.336919][ T6534] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.345133][ T6534] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.360648][T18131] pimreg: entered allmulticast mode [ 372.467415][T18139] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4555'. [ 372.558176][T18144] wireguard0: entered promiscuous mode [ 372.563707][T18144] wireguard0: entered allmulticast mode [ 372.624881][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 372.624948][ T29] audit: type=1400 audit(1760302872.090:17560): avc: denied { allowed } for pid=18143 comm="syz.9.4560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 372.672103][ T29] audit: type=1400 audit(1760302872.100:17561): avc: denied { create } for pid=18143 comm="syz.9.4560" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.693820][ T29] audit: type=1400 audit(1760302872.100:17562): avc: denied { map } for pid=18143 comm="syz.9.4560" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.706543][T18146] lo speed is unknown, defaulting to 1000 [ 372.718278][ T29] audit: type=1400 audit(1760302872.100:17563): avc: denied { read write } for pid=18143 comm="syz.9.4560" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=69948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 372.861960][T18149] loop3: detected capacity change from 0 to 2048 [ 372.868811][ T29] audit: type=1400 audit(1760302872.250:17564): avc: denied { unmount } for pid=13727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 372.899438][ T29] audit: type=1400 audit(1760302872.370:17565): avc: denied { create } for pid=18153 comm="syz.9.4563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 372.919392][ T29] audit: type=1400 audit(1760302872.370:17566): avc: denied { execmem } for pid=18151 comm="syz.7.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 372.982160][ T29] audit: type=1400 audit(1760302872.380:17567): avc: denied { mounton } for pid=18148 comm="syz.3.4561" path="/268/file1" dev="tmpfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 373.005637][T18149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.057499][ T29] audit: type=1400 audit(1760302872.520:17568): avc: denied { mount } for pid=18148 comm="syz.3.4561" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 373.116649][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.145502][ T29] audit: type=1400 audit(1760302872.580:17569): avc: denied { unmount } for pid=13727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 373.166414][T18130] pimreg: left allmulticast mode [ 373.171865][T18160] loop3: detected capacity change from 0 to 2048 [ 373.364990][T18165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.407669][T18165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.447585][T18165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.463473][T18175] loop3: detected capacity change from 0 to 512 [ 373.480802][T18175] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 373.499792][T18165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.530759][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4569'. [ 373.575352][ T6597] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.621386][ T6534] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.629936][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4571'. [ 373.638949][T18182] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4571'. [ 373.647961][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4571'. [ 373.705746][T18182] netlink: 'syz.5.4571': attribute type 6 has an invalid length. [ 373.729010][ T6534] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.737433][ T6534] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.968299][T18195] vlan2: entered allmulticast mode [ 374.090430][T18200] netlink: 'syz.2.4577': attribute type 1 has an invalid length. [ 374.128854][T18200] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.218076][T18200] bond1: (slave batadv1): Opening slave failed [ 374.360878][T18206] serio: Serial port ptm0 [ 374.480063][T18214] __nla_validate_parse: 1 callbacks suppressed [ 374.480082][T18214] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4582'. [ 374.539263][T18218] loop3: detected capacity change from 0 to 512 [ 374.558285][T18218] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 374.573020][T18221] netlink: 'syz.7.4585': attribute type 1 has an invalid length. [ 374.581004][T18221] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4585'. [ 374.598757][T18221] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 374.666318][T18224] netlink: 'syz.3.4586': attribute type 1 has an invalid length. [ 374.674142][T18224] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4586'. [ 374.697909][T18224] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 374.740811][T18227] loop3: detected capacity change from 0 to 2048 [ 374.767217][T18227] EXT4-fs mount: 2 callbacks suppressed [ 374.767236][T18227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.791550][T18229] loop7: detected capacity change from 0 to 2048 [ 374.794985][T18227] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.842382][T18229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.885006][T18239] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4588: bg 0: block 345: padding at end of block bitmap is not set [ 374.910782][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.912478][T18239] EXT4-fs (loop3): Remounting filesystem read-only [ 374.986123][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.257167][T18250] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 375.263827][T18250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 375.271419][T18250] vhci_hcd vhci_hcd.0: Device attached [ 375.442825][T18259] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4597'. [ 375.521193][T18261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4596'. [ 375.530488][ T3430] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 375.659795][T18252] vhci_hcd: connection reset by peer [ 375.665413][ T6582] vhci_hcd: stop threads [ 375.669796][ T6582] vhci_hcd: release socket [ 375.674269][ T6582] vhci_hcd: disconnect device [ 375.750628][T18270] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4598'. [ 375.778723][T18264] loop9: detected capacity change from 0 to 512 [ 375.793764][T18264] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 375.882727][T18278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4603'. [ 375.906295][T18278] IPVS: Error connecting to the multicast addr [ 375.959568][T18284] loop7: detected capacity change from 0 to 512 [ 375.973484][T18284] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.071194][T18301] loop7: detected capacity change from 0 to 2048 [ 376.103039][T18301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.139699][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.222023][T18321] loop7: detected capacity change from 0 to 512 [ 376.229320][T18321] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.354801][T18332] loop7: detected capacity change from 0 to 2048 [ 376.387158][T18332] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.404973][T18332] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.448091][T18344] loop3: detected capacity change from 0 to 512 [ 376.458927][T18344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.475093][T18344] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4612: invalid indirect mapped block 4294967295 (level 1) [ 376.493567][T18351] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4613: bg 0: block 345: padding at end of block bitmap is not set [ 376.510842][T18351] EXT4-fs (loop7): Remounting filesystem read-only [ 376.511482][T18344] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.4612: invalid indirect mapped block 4294967295 (level 1) [ 376.542796][T18344] EXT4-fs (loop3): 2 truncates cleaned up [ 376.549327][T18344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.594401][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.640640][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.661340][T18361] loop3: detected capacity change from 0 to 2048 [ 376.685434][T18361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.844520][T18387] futex_wake_op: syz.9.4617 tries to shift op by 144; fix this program [ 376.918399][T18398] loop7: detected capacity change from 0 to 512 [ 376.964930][T18398] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.974934][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.049515][T18419] FAULT_INJECTION: forcing a failure. [ 377.049515][T18419] name failslab, interval 1, probability 0, space 0, times 0 [ 377.062331][T18419] CPU: 1 UID: 0 PID: 18419 Comm: syz.3.4621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.062373][T18419] Tainted: [W]=WARN [ 377.062382][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.062398][T18419] Call Trace: [ 377.062443][T18419] [ 377.062454][T18419] __dump_stack+0x1d/0x30 [ 377.062481][T18419] dump_stack_lvl+0xe8/0x140 [ 377.062507][T18419] dump_stack+0x15/0x1b [ 377.062572][T18419] should_fail_ex+0x265/0x280 [ 377.062618][T18419] should_failslab+0x8c/0xb0 [ 377.062685][T18419] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 377.062724][T18419] ? __get_vm_area_node+0x106/0x1d0 [ 377.062763][T18419] __get_vm_area_node+0x106/0x1d0 [ 377.062854][T18419] __vmalloc_node_range_noprof+0x28c/0xed0 [ 377.062895][T18419] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.062938][T18419] ? __rcu_read_unlock+0x4f/0x70 [ 377.062973][T18419] ? cred_has_capability+0x210/0x280 [ 377.063057][T18419] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.063123][T18419] __vmalloc_noprof+0x83/0xc0 [ 377.063160][T18419] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.063226][T18419] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.063299][T18419] ? bpf_prog_alloc+0x2a/0x150 [ 377.063334][T18419] bpf_prog_alloc+0x3c/0x150 [ 377.063368][T18419] bpf_prog_load+0x506/0x1100 [ 377.063467][T18419] ? security_bpf+0x2b/0x90 [ 377.063501][T18419] __sys_bpf+0x469/0x7c0 [ 377.063604][T18419] __x64_sys_bpf+0x41/0x50 [ 377.063644][T18419] x64_sys_call+0x2aee/0x3000 [ 377.063673][T18419] do_syscall_64+0xd2/0x200 [ 377.063762][T18419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 377.063842][T18419] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 377.063871][T18419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.063960][T18419] RIP: 0033:0x7fd932c0eec9 [ 377.063975][T18419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.064014][T18419] RSP: 002b:00007fd93166f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.064039][T18419] RAX: ffffffffffffffda RBX: 00007fd932e65fa0 RCX: 00007fd932c0eec9 [ 377.064074][T18419] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 377.064092][T18419] RBP: 00007fd93166f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.064160][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.064177][T18419] R13: 00007fd932e66038 R14: 00007fd932e65fa0 R15: 00007fff89d8c998 [ 377.064203][T18419] [ 377.064213][T18419] syz.3.4621: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 377.148216][T18421] loop9: detected capacity change from 0 to 1024 [ 377.151709][T18419] ,cpuset=/,mems_allowed=0 [ 377.332399][T18419] CPU: 1 UID: 0 PID: 18419 Comm: syz.3.4621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 377.332491][T18419] Tainted: [W]=WARN [ 377.332499][T18419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.332576][T18419] Call Trace: [ 377.332583][T18419] [ 377.332592][T18419] __dump_stack+0x1d/0x30 [ 377.332614][T18419] dump_stack_lvl+0xe8/0x140 [ 377.332635][T18419] dump_stack+0x15/0x1b [ 377.332653][T18419] warn_alloc+0x12b/0x1a0 [ 377.332696][T18419] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 377.332733][T18419] ? __rcu_read_unlock+0x4f/0x70 [ 377.332764][T18419] ? cred_has_capability+0x210/0x280 [ 377.332808][T18419] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.332843][T18419] __vmalloc_noprof+0x83/0xc0 [ 377.332907][T18419] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.332942][T18419] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 377.333047][T18419] ? bpf_prog_alloc+0x2a/0x150 [ 377.333080][T18419] bpf_prog_alloc+0x3c/0x150 [ 377.333113][T18419] bpf_prog_load+0x506/0x1100 [ 377.333177][T18419] ? security_bpf+0x2b/0x90 [ 377.333204][T18419] __sys_bpf+0x469/0x7c0 [ 377.333283][T18419] __x64_sys_bpf+0x41/0x50 [ 377.333314][T18419] x64_sys_call+0x2aee/0x3000 [ 377.333337][T18419] do_syscall_64+0xd2/0x200 [ 377.333404][T18419] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 377.333435][T18419] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 377.333459][T18419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.333482][T18419] RIP: 0033:0x7fd932c0eec9 [ 377.333498][T18419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.333587][T18419] RSP: 002b:00007fd93166f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.333606][T18419] RAX: ffffffffffffffda RBX: 00007fd932e65fa0 RCX: 00007fd932c0eec9 [ 377.333620][T18419] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 377.333634][T18419] RBP: 00007fd93166f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.333647][T18419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.333660][T18419] R13: 00007fd932e66038 R14: 00007fd932e65fa0 R15: 00007fff89d8c998 [ 377.333725][T18419] [ 377.333764][T18419] Mem-Info: [ 377.476641][T18421] EXT4-fs: Ignoring removed oldalloc option [ 377.480463][T18419] active_anon:61050 inactive_anon:3725 isolated_anon:0 [ 377.480463][T18419] active_file:14869 inactive_file:18035 isolated_file:0 [ 377.480463][T18419] unevictable:0 dirty:529 writeback:0 [ 377.480463][T18419] slab_reclaimable:3851 slab_unreclaimable:49622 [ 377.480463][T18419] mapped:31082 shmem:56984 pagetables:1211 [ 377.480463][T18419] sec_pagetables:0 bounce:0 [ 377.480463][T18419] kernel_misc_reclaimable:0 [ 377.480463][T18419] free:1724015 free_pcp:13803 free_cma:0 [ 377.500181][T18421] EXT4-fs: Ignoring removed bh option [ 377.508583][T18419] Node 0 active_anon:244200kB inactive_anon:14900kB active_file:59476kB inactive_file:72140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124328kB dirty:2116kB writeback:0kB shmem:227936kB kernel_stack:4448kB pagetables:4844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.639654][T18419] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.669359][T18419] lowmem_reserve[]: 0 2883 7862 7862 [ 377.674784][T18419] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 377.706322][T18419] lowmem_reserve[]: 0 0 4978 4978 [ 377.711389][T18419] Node 0 Normal free:3929596kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:244200kB inactive_anon:14900kB active_file:59476kB inactive_file:71560kB unevictable:0kB writepending:2116kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52044kB local_pcp:19400kB free_cma:0kB [ 377.744962][T18419] lowmem_reserve[]: 0 0 0 0 [ 377.749565][T18419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.762421][T18419] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949056kB [ 377.778690][T18419] Node 0 Normal: 1015*4kB (UME) 684*8kB (UME) 768*16kB (UM) 362*32kB (UM) 182*64kB (UM) 186*128kB (UM) 125*256kB (UME) 50*512kB (UME) 28*1024kB (UME) 7*2048kB (UME) 918*4096kB (UM) = 3929596kB [ 377.797919][T18419] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 377.806337][T18421] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.807335][T18419] 89911 total pagecache pages [ 377.824441][T18419] 498 pages in swap cache [ 377.826204][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 377.826222][ T29] audit: type=1400 audit(1760302877.290:17879): avc: denied { mount } for pid=18420 comm="syz.9.4623" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 377.828829][T18419] Free swap = 71864kB [ 377.860833][T18419] Total swap = 124996kB [ 377.865086][T18419] 2097051 pages RAM [ 377.866266][ T29] audit: type=1326 audit(1760302877.330:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 377.868923][T18419] 0 pages HighMem/MovableOnly [ 377.892484][ T29] audit: type=1326 audit(1760302877.330:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 377.897181][T18419] 80479 pages reserved [ 377.982629][ T29] audit: type=1326 audit(1760302877.390:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.006317][ T29] audit: type=1326 audit(1760302877.390:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.029993][ T29] audit: type=1326 audit(1760302877.390:17884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.053859][ T29] audit: type=1326 audit(1760302877.400:17885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53e8b6d710 code=0x7ffc0000 [ 378.077669][ T29] audit: type=1326 audit(1760302877.400:17886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.101491][ T29] audit: type=1326 audit(1760302877.400:17887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.116696][T18443] loop3: detected capacity change from 0 to 764 [ 378.125151][ T29] audit: type=1326 audit(1760302877.400:17888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18420 comm="syz.9.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f53e8b6eec9 code=0x7ffc0000 [ 378.160516][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.206845][T18443] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.222045][T18440] loop7: detected capacity change from 0 to 2048 [ 378.230863][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4625'. [ 378.254700][ T6582] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.267415][T18443] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.286896][ T6597] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.295124][ T6597] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.304839][T18440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.314469][ T6597] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.341239][T18443] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.408198][T18443] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.460442][T18470] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 378.468328][T18470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4630'. [ 378.524241][ T6582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.537160][ T1086] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.551322][ T6582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.576327][T18484] netlink: 'syz.9.4632': attribute type 1 has an invalid length. [ 378.584195][T18484] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4632'. [ 378.597598][ T6582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.641903][T18484] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 378.721770][T18497] loop9: detected capacity change from 0 to 512 [ 378.728980][T18483] sd 0:0:1:0: device reset [ 378.747462][T18497] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.771577][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.848102][T18503] vlan3: entered allmulticast mode [ 378.958350][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.984660][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.001839][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.030392][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.042784][T18517] loop3: detected capacity change from 0 to 2048 [ 379.091797][T18519] loop7: detected capacity change from 0 to 128 [ 379.106482][T18517] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.156204][T18523] netlink: 'syz.9.4642': attribute type 1 has an invalid length. [ 379.221033][T18523] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 379.238646][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.432665][T18534] loop5: detected capacity change from 0 to 512 [ 379.446607][T18534] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 379.946196][T18540] __nla_validate_parse: 4 callbacks suppressed [ 379.946214][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4645'. [ 379.988183][T18542] netlink: 'syz.5.4649': attribute type 1 has an invalid length. [ 379.996016][T18542] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4649'. [ 380.028563][T18542] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 380.089646][T18553] loop5: detected capacity change from 0 to 512 [ 380.098490][T18553] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 380.424870][T18570] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.488991][T18570] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.508217][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4658'. [ 380.530469][T18565] loop5: detected capacity change from 0 to 512 [ 380.547309][T18570] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.558697][T18565] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 380.607174][T18570] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.625983][ T3430] usb 7-1: enqueue for inactive port 0 [ 380.644036][ T3430] usb 7-1: enqueue for inactive port 0 [ 380.658449][T18574] loop5: detected capacity change from 0 to 128 [ 380.690133][T18576] loop9: detected capacity change from 0 to 512 [ 380.716346][T18576] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 380.735756][ T3430] vhci_hcd: vhci_device speed not set [ 380.746835][ T6582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.772026][ T6582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.795092][ T6582] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.818091][ T6582] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.849422][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4664'. [ 380.906117][T18586] netlink: 'syz.2.4665': attribute type 1 has an invalid length. [ 381.030330][T18586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.055941][T18591] loop7: detected capacity change from 0 to 128 [ 382.108741][T18596] lo speed is unknown, defaulting to 1000 [ 382.185915][T18609] loop5: detected capacity change from 0 to 2048 [ 382.219380][T18609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.307973][T18609] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.366392][ T12] bio_check_eod: 16 callbacks suppressed [ 382.366421][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.366421][ T12] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 382.385659][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.385659][ T12] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 382.399390][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.399390][ T12] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 382.413366][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.413366][ T12] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 382.428806][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.428806][ T12] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 382.431192][T18619] loop3: detected capacity change from 0 to 764 [ 382.444665][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.444665][ T12] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 382.462222][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.462222][ T12] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 382.475673][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.475673][ T12] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 382.489114][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.489114][ T12] loop7: rw=1, sector=273, nr_sectors = 8 limit=128 [ 382.502785][ T12] kworker/u8:0: attempt to access beyond end of device [ 382.502785][ T12] loop7: rw=1, sector=289, nr_sectors = 8 limit=128 [ 382.530469][T18617] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.540417][T18617] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.628248][T18617] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.638130][T18617] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.747151][T18631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4677'. [ 382.767694][T18617] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.777600][T18617] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.847838][T18617] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.857694][T18617] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.060688][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 383.060705][ T29] audit: type=1400 audit(1760302882.530:18260): avc: denied { unmount } for pid=15912 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 383.087879][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.123810][ T29] audit: type=1400 audit(1760302882.590:18261): avc: denied { read append } for pid=18637 comm="syz.5.4680" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.147767][ T29] audit: type=1400 audit(1760302882.590:18262): avc: denied { open } for pid=18637 comm="syz.5.4680" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.171903][ T29] audit: type=1400 audit(1760302882.640:18263): avc: denied { ioctl } for pid=18637 comm="syz.5.4680" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 383.282337][ T6534] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.290665][ T6534] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.317451][ T6534] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.325798][ T6534] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.342371][ T29] audit: type=1400 audit(1760302882.810:18264): avc: denied { unmount } for pid=13727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 383.362922][ T6534] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.371162][ T6534] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.379982][ T6534] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.388286][ T6534] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.403933][T18644] loop3: detected capacity change from 0 to 1024 [ 383.420556][T18644] EXT4-fs: Ignoring removed oldalloc option [ 383.427158][T18644] EXT4-fs: Ignoring removed bh option [ 383.440946][T18645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4681'. [ 383.453249][T18640] loop5: detected capacity change from 0 to 512 [ 383.461963][T18640] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 383.502684][T18644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.524067][ T29] audit: type=1326 audit(1760302882.990:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd932c0eec9 code=0x7ffc0000 [ 383.570220][ T29] audit: type=1326 audit(1760302882.990:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fd932c0eec9 code=0x7ffc0000 [ 383.594044][ T29] audit: type=1326 audit(1760302883.000:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd932c0eec9 code=0x7ffc0000 [ 383.617916][ T29] audit: type=1326 audit(1760302883.000:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd932c0eec9 code=0x7ffc0000 [ 383.641520][ T29] audit: type=1326 audit(1760302883.010:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18643 comm="syz.3.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd932c0eec9 code=0x7ffc0000 [ 383.683706][T13727] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.779657][T18662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4684'. [ 383.792104][T18651] loop5: detected capacity change from 0 to 512 [ 383.799469][T18651] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 383.839036][T18665] loop5: detected capacity change from 0 to 2048 [ 384.304455][T18665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.321096][T18673] netlink: 'syz.7.4690': attribute type 1 has an invalid length. [ 384.328978][T18673] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4690'. [ 384.335535][T18665] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.342319][T18673] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 384.455752][T18676] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4688: bg 0: block 345: padding at end of block bitmap is not set [ 384.473583][T18677] loop7: detected capacity change from 0 to 2048 [ 384.499603][T18677] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.515299][T18676] EXT4-fs (loop5): Remounting filesystem read-only [ 384.614531][T18677] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.720252][T18677] sd 0:0:1:0: device reset [ 384.748199][T18693] loop9: detected capacity change from 0 to 512 [ 384.770226][T18693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 384.816298][T18693] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4698: invalid block [ 384.846321][T18693] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4698: invalid indirect mapped block 4294967295 (level 1) [ 384.871492][T15912] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.891241][T18693] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4698: invalid indirect mapped block 4294967295 (level 1) [ 384.916403][T18693] EXT4-fs (loop9): 2 truncates cleaned up [ 384.922592][T18693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.978501][T18702] loop5: detected capacity change from 0 to 512 [ 384.996461][T18702] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 385.039545][T12945] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.039545][ T6597] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:59: bg 0: block 345: padding at end of block bitmap is not set [ 385.049887][ T6597] EXT4-fs (loop7): Remounting filesystem read-only [ 385.074483][T18675] ================================================================== [ 385.082580][T18675] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 385.090414][T18675] [ 385.092732][T18675] write to 0xffffea0004848798 of 8 bytes by task 18698 on cpu 1: [ 385.100448][T18675] __filemap_remove_folio+0x1a5/0x2a0 [ 385.105827][T18675] __remove_mapping+0x390/0x4c0 [ 385.110688][T18675] remove_mapping+0x22/0x90 [ 385.115218][T18675] mapping_try_invalidate+0x26a/0x3f0 [ 385.120586][T18675] generic_fadvise+0x3e5/0x430 [ 385.125357][T18675] __x64_sys_fadvise64+0xcb/0x110 [ 385.130412][T18675] x64_sys_call+0x29c5/0x3000 [ 385.135107][T18675] do_syscall_64+0xd2/0x200 [ 385.139621][T18675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.145632][T18675] [ 385.147969][T18675] read to 0xffffea0004848798 of 8 bytes by task 18675 on cpu 0: [ 385.155588][T18675] folio_mapping+0xa1/0xe0 [ 385.160008][T18675] evict_folios+0xe05/0x3590 [ 385.164601][T18675] try_to_shrink_lruvec+0x5b5/0x950 [ 385.169808][T18675] shrink_lruvec+0x22e/0x1b50 [ 385.174485][T18675] shrink_node+0x686/0x2120 [ 385.178999][T18675] do_try_to_free_pages+0x3f6/0xcd0 [ 385.184215][T18675] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 385.190117][T18675] try_charge_memcg+0x383/0xa10 [ 385.194981][T18675] obj_cgroup_charge_pages+0xa6/0x150 [ 385.200376][T18675] __memcg_kmem_charge_page+0x9f/0x170 [ 385.205857][T18675] __alloc_frozen_pages_noprof+0x188/0x360 [ 385.211697][T18675] alloc_pages_mpol+0xb3/0x260 [ 385.216458][T18675] alloc_pages_noprof+0x90/0x130 [ 385.221394][T18675] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 385.227209][T18675] __kvmalloc_node_noprof+0x483/0x670 [ 385.232587][T18675] ip_set_alloc+0x24/0x30 [ 385.236922][T18675] hash_netiface_create+0x282/0x740 [ 385.242142][T18675] ip_set_create+0x3cc/0x970 [ 385.246738][T18675] nfnetlink_rcv_msg+0x4c6/0x590 [ 385.251682][T18675] netlink_rcv_skb+0x123/0x220 [ 385.256457][T18675] nfnetlink_rcv+0x167/0x16c0 [ 385.261164][T18675] netlink_unicast+0x5c0/0x690 [ 385.265935][T18675] netlink_sendmsg+0x58b/0x6b0 [ 385.270718][T18675] __sock_sendmsg+0x145/0x180 [ 385.275397][T18675] ____sys_sendmsg+0x31e/0x4e0 [ 385.280172][T18675] ___sys_sendmsg+0x17b/0x1d0 [ 385.284875][T18675] __x64_sys_sendmsg+0xd4/0x160 [ 385.289822][T18675] x64_sys_call+0x191e/0x3000 [ 385.294507][T18675] do_syscall_64+0xd2/0x200 [ 385.299016][T18675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.304910][T18675] [ 385.307230][T18675] value changed: 0xffff888106ebf248 -> 0x0000000000000000 [ 385.314332][T18675] [ 385.316652][T18675] Reported by Kernel Concurrency Sanitizer on: [ 385.322802][T18675] CPU: 0 UID: 0 PID: 18675 Comm: syz.7.4691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.334197][T18675] Tainted: [W]=WARN [ 385.337995][T18675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 385.348047][T18675] ================================================================== [ 385.375350][T18705] netlink: 'syz.5.4701': attribute type 1 has an invalid length. [ 385.383211][T18705] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4701'. [ 385.429364][T18705] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 385.647581][T12519] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.