last executing test programs: 2m16.087677372s ago: executing program 0 (id=1313): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@nodiscard}, {@nogrpid}, {@dioread_lock}]}, 0x3, 0x556, &(0x7f0000001180)="$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") creat(&(0x7f0000000280)='./file2/file0/file0\x00', 0x84) 2m15.882973231s ago: executing program 0 (id=1315): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000001040), 0x80, 0x64b, &(0x7f00000009c0)="$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") (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) (async) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) (async) prctl$PR_SET_UNALIGN(0x6, 0x1) 2m15.639946173s ago: executing program 0 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b000000050000000700000009000000013678db1e3570c4a3ee03950a83004000feccc460", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x2, 0x96c, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x7, 0x2}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x8080}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x29}, {0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r6 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x400) ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000580)={0x55, 0x8, 0x2, {0x0, 0x2}, {0x9, 0xd4fc}, @period={0x58, 0x9, 0x7, 0x109, 0x0, {0x9, 0x81, 0x4, 0x584d}, 0x0, &(0x7f0000000300)}}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r9}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x181000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$tipc(0x1e, 0x5, 0x0) 2m15.124925049s ago: executing program 0 (id=1322): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x4}, 0x80, 0x4000000000000002, 0xfffffbfe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000001d000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000100)) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r3, 0x0, 0x11, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4008000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYRESHEX=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8}, 0x4) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0x3000) unshare(0x64000600) 2m14.468573539s ago: executing program 0 (id=1333): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x10}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) (async) listen(0xffffffffffffffff, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x26, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffffe43f6642531e88a84a00811027f9ff0b040000a008020015079287feffffff9f2b864e020e97852768a72bd039f9dc25c93cc9d8ad4c5b24da18cd84d4aaade0417afdcd8093d8cecf01d9ba3b0046b00f6966057ce1f364d5d6d0141cf2082debea20208f7c9b1da0fa5d1d71bff42e0ae5416da1c030ca4a0e130118829af56a67ba20a1e3cb17f4e87ef6c9203a0c5301ee79fd9fb00083b1fe5e28820ad49c676f016fd17d996000093ca5ef8c7142ac7417db0077e7542a775d14103926cf07"], 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000014b77e5133910000007b8af8ff00000000bfa2bbc7311bbf096a85492223b28177ad00000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009558039347ff0b50bf486d18374ed431b5ac54756b8e6f0b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x94) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000011, &(0x7f0000001080)={[{@data_err_ignore}, {@nouid32}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@nouser_xattr}, {@debug}, {@data_err_ignore}, {@data_journal}, {@data_ordered}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") (async, rerun: 64) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x18) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000440)=0x200, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'macvtap0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b031407e0ff640f020047540f68a13bb1000e00080008004803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 2m14.205931442s ago: executing program 0 (id=1338): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}], 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x10007ffffffff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xd, 0xffe0}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20048054) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 2m14.138880358s ago: executing program 32 (id=1338): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r4}, &(0x7f0000000400), &(0x7f0000000440)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000}], 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x10007ffffffff}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xd, 0xffe0}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20048054) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) 1.356376188s ago: executing program 2 (id=3898): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000000), 0x10, 0x0, 0x0, 0x0, 0x0, 0x200448c0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x2048004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x80}, 0x18) lsm_list_modules(0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r6, 0x2) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4503000}]}}}]}]}], {0x14}}, 0xc0}}, 0x4800) sendto$inet6(r7, &(0x7f0000000240)="c4", 0xffffffffffffff95, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 1.311268842s ago: executing program 2 (id=3899): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @private=0xa010102, {[@generic={0x7, 0x8, "044158a35b9e"}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000036600)=""/102378, 0x18fea, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r7, 0x303, 0x4, 0x25dfdbfd, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000080) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd000411000400000000006e6ad9ba00442f01000000000000002000d76b1369000001ff02000000000000000000000000000104"], 0x7a) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10, 0x0, 0x400007}, 0x18) r11 = syz_io_uring_setup(0x4a0, &(0x7f0000000080)={0x0, 0x79ae, 0x400, 0x0, 0x2af}, &(0x7f00000004c0)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd, 0x6, &(0x7f00000007c0)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r11, 0xfd0, 0xced0, 0x8, 0x0, 0xffffff86) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) 1.00093146s ago: executing program 1 (id=3912): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 966.484223ms ago: executing program 1 (id=3915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 936.347556ms ago: executing program 1 (id=3916): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x5, 0x80, 0x76, 0x2, 0x2, 0x2, 0x0, 0x4, 0x80400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001440), 0xd}, 0x104, 0x9, 0x0, 0x8, 0x7, 0x2, 0x8, 0x0, 0xc6af, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0xcb}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="e7daa4b730688ea3740fcb1247824d9591192af13649f1428f148c6dd738caa7e0783cecdffb9f5003621c09fba43aae7efbeadac60e36e553eec60d8b328b9ae76e0eda0166e7135fec8a667dac6bcbf67e666f8993a074d505d97b916703e0b02724ed8e21e5ad0067351e06b1a2295420ace2ae0404a8e6f730543a86ed866777970a9da2a2ef97bc3192", 0x8c}], 0x1, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}, {{&(0x7f0000000200)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x8000}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000240)="1faa1bb0f3023345db428d7580ac96439479f9731236e3e775fc81752b533c78829af36ea0d510db48c58560dc0b4303e7d1bc89e79b42d7a8aa25c4ab010760ea4448e543eec1ac1ecb5218cfee694e194d9e9ad38ab611e40255cc19b625af8af31a77208b52b8502660820d52309ad0b01b85304445c3e1a82649ea3965f1ecd9afb0a68de992eb0662d58ea23504143beab7f680c6a6563ef3fe286f2f51396d2ab1fa21bb1f3b8d95fb44c7e5cd8a572b3a43687c09b5532bf52bc487b894e92439a907be9e3c7a3e515fde64b549205d173e79040d58ba402a489e7df66234073022ced96f0ca570388f10246c58dc26f8dc89cce0763c8d53c62da268c322e369a0f2fe764488e7661d504d33983879704f6983ff26376a55d1968096351cdb054e99ec1415c38da2f2f3e5b87ba5c8aed453e39294ee456dbc034ab8bb2c7e8fc2d3e323e0c1c950696d31a394497140099f4f23385513394d198b1ddb098d56b882fb728dba3b14be9971705ba779416a236779c145126822c77011afeee580e64bbfec54cd0f12d47554eba92b7582f2601a7b39434d148ef88549e53f25e843de5b6a5d87a781a29d7efa6480ef77468b3ae51171d7873ed4db723b6190f6e224e0b9f5944fca462f27a4c1908d5fe82803a87903897537b2cc2bc2d453e8b125e813e85920273ea88b075de0e173fc194c40df953811ad6416fee8e94329d98db0f0cd045d7301c695d887c9d48593f412aa59f28cec0e03487d87d2be66f6b6e01a09c3da0c456853b2299c07e07835a80051e8e70175e778621cec966e78f4d357a77be3f9a2757a91ad37449e48c1d8e87e15cbe4ba8d69514daff965423ce52a66c6cb93e5e45c1f96d47ca08c9b69706f0e306668fa12f40b4e1619177bfeb03e46a6ee7365cb57e26b77cd1b282367967a92bb13dcd63f30f110b971b40d38478b5b1d02f7469f9783daf972faf03f6db354c138c74c09ee7ef7100399448a0c72f4e5d96e6fac2357e6c03b28e8c2611cde3904ac20137d714134ecd2baefafdbd818176cb7e167ac8c4a6878cb3e52db5849976df9c5748791db94b73988ce75907dd99332a0551324869255966544f8fa8937887f29c1ac037d8d51934e259844ecca73b8919ee5eafde0fbc339d54aee22abc25fb5e631cd29ae51a4b4a5c22176119a54d13e42e473f744d4499434cea92645dd3db390a0e59046381c70657be83408c10189c62048cec63b0b62d01b9c2a667a923b72daca3979b07e33fcb1225a4db28d99d3fdea6dfb0d939f83b463f2be1d868461fb39a0ff4c032960cafc28457f6b88a1321958c0d8468d5bc4a9378d1521a824da927b6e6c7ef9a9c7125aa938a8b167c062346b1205d01eda17ad49801e9a08d7cd0cfa153c90702eb2af5897ca3ef3f43494064df332fdef66109db69c218c95cf29c3e329c6f95dfae616685d4564fed866ce9d4bfaa5fcce52b5056e01e50907ab730e8cfa93c340b85e2d41ba4f0beba591f90c51af0e7b9f979e7b66f1cd9c23c80fac92f6722cca37c9bc96c8a4c942fb918449ded4cedb27983cbb826cbe00a835a24df1a8cf6fbb1d6406871634d9a3f0920ffd528aec7d8549d4482c17ffafe145ce3cdd61047d18a32e42535200e17902671afe2609d2b0ce79304275de4053b50e827d56d86c4fcabec8ff43fb79e7ca18f44485899196cc1b810775563eeb3e0c58eea98d94acacf625c4672ee5dedb8d290f300d6d9d43f6c781d7dd331b504b760d4e7c78a1638a12d6f3f52f61abb6222b428f8697c7bc4fac65e8a23f947e8d1bf25e573c4d1ffb8508c9190251dc1aba95c1331f57dc3d750171aa59aabdef8ad53dc16128c5e8a6442f93356fa8d9ccc7ecd971aab3fb84f7bd5f80a9e82ac725e756780628f23c3615ee076188eb3f099ac4fc3e4328a338817c835ff9da5cad610ec8ed50e008fe13970e799a487adf58efe5df110a05a3856df2162a53e91cfea50f232ebf450c12c3e8b68fbd5f89236433ffd5fb6c02a3a5961fc4889110c05ea4ef115ea339bab389e7eadc2ba39bb5a9035b5fad908a3395583094dc798d4a931f933bcad53b91494d0e28f5190f0726e81ed0f0fee1de6412d83e4b6a7dc0fa3717f3b1efd2ebc6bad400daff0c9afe25c4864b77f341338a0c811f53870ff11f69ee680526c1e8cdf04337527f7378e572fa8e01763697fcfaa42d153ffadbd0bf9ca0a96d84b029c99806371ebee0fc319db5b23f44d0c5dfd68b7c2084a3b09ea72f19fe0b53b2a6d790d7c39df29992bdc265faf818cd5be5e5261f032242a342010a071fc77e04f5a9ae62667cc9d359e7b3712123080c5e88333e86309f2f1cf5aa347f7944c638ce88b39d207515fb5b68d5226f7bac01e92ac0ed20cac779c5affd3429dffd99566d38589a5f717d1ca4e2f055d7d992ac9b5fb81ab08b719387337bc5a455821fc9f713946867bf52c9851cd7188aeb89fa9728ab542b7222f0e05ae0cb2cd664553d2e8f74675969902f25a1d43c5156b26c5c64bceec3ca47f0da0c4b7e5107a9e51edb0ca17063bf4311fff525dfedc4e62c1f6f0a3762bce6551224260ad43b82dd3dd29741747edc88d4fca0d6e783b0c0216a0e0791abe2a0f086e80a181b02b74c5fff4b0d18bb3da0d240c1c9ef2f00eb129518c58c7ffd49f5e7167ba7593f5bff80184472b560c9856d8fcae66fc38f42b2799e1747a790cce1d925750cb031e39bb314b30ab528616e8d5eb6df2ca3486852317057dc84f766ec0b84efbd2c64f36bb2472b819423ba5a46b87b0046ea407a7b2f3bf069f01f5372058a44972bba901418f42591eff83f9f1d6e0637c228adcc658c6dd366d5ea74ad5eca2780509774c695767aa554bee625b4e11da0d30b932444b90c8bb167f5f1681560bf1b9c53547a85333de05bcb94f4793d6f486b469e508d5f0d1e1bf8fccc0d143e3ffb35439a4a67ea63727452fb7d1454c64930466aa242a9fc7ad6f41dafe6e5f15a7e84ed152bfd08085ea02af3d7b54d685033d9a40b901577144962a8e55d0d23193cc317f94499152cbba1340f1a9b20c2b1f6658a921d73c7e9a550c0c0e0672cdd5b176d70a36d5545f9af60cf8bcbcc12be5e68cf39ff652254d1c636062bb82b696fa9e0dd4c122b8711ffcfa6f476b966f3ff99186308a81ef8c91944272eed515ff9764ea887b08bbae4c747b03b49976e695828c7c853ba8e7b4cbd8316a187fbe98068bf14359a7f95effa164672fbbf56783eaa2b1e7e4e418f1df0b075149990e51d5e0254aa82c6eb31af2487cf3f2a89c0ff24c2a788e2a52e9a35cbbb27a6e9f8a8158f2577623fb062eb169e7b1694c1c8c8b1818bf27cae2fd95f6c0b767efa522d4250826bd5a9bca16e5ff961aa4e0fb144be06007826b0279444d89a316f023cfb758117f0956fdf0091d53c204e6e50ae98de07a75c109e9e39cb622b6904f777aac6bacec871130f7e4c9e567bbc8957fd450e5f1a98e388505e30a99103ee94223fe45c4eccb73728b36491f659f36b6ae21080e8ea672c1a30786d29e34a786cae3a7c93e23e7594e22cda4f731d9361bc9e807a5c6346ffbfd0d8e5877ea7805dd7e49feef46d7d0bf34f6c734303f2c7e3885bad5d72f38fe210d28462a61ec43981099920ec667d89b0398f638d9942ae807c45c718ad612f23c85f1c92c8df4a0a53fa00c1398f8e7bd36d55745a4df8b2d72528818c18216a52a7ed7c929e2cc68842531d19799628e6ef449558b0428771fd111bf4923741061aa3a6bdfc7548e46d4f7821a3e6b84c68ff08088abf57ebcbb27a4bf8bf9f92c3c14c2cad33cdf18c5609407b745ea63ff9142690abac2846f60025aa49a65ed95cb44bd4fb5bc86bcbbd2c5bef4621a54c503c089df17f68087a4e22f7fea6221494a07afdaca0aa9b5e92a5c396e1f0cdefc82c6e1be3c0c09a8d0152cf48a4b91642c18c2a4b466e22a4678e0ad74ba9d2794693de0f571a5edd27ecd09c7f9fcb15f297897cd266c465f329fb73db2d819fe8de7ea93786714b5ff3d858c040ef487d09f630b78f5e8716b958ea91b2d721442b088e699c88bd220ff63be8a2f0f3f03df3c81d972440e29060157ec66bcbd42d49b638b868b7a95fb486e943ee181e9c73369584e05b1f1bf7412adc4b2e9fa2a4e319380ba0c78ddf6061f725806aca70bad7e150f6618c80675a7442d81e29e2fdcbecc314b7fa6fb0d382499692665568cab555f9865498b5101d1bba4b4d220cef001096c78c5e495da0c2d254f932615f699a4f8b42466cf7d1ad73a82159bc3f49d529f4d12d9bd86877b583fb378cf7cf3ee72b58cd8bd2fbb65c5021a7c22fcebf81d5101f0dc5dfcb125ea2e2aac78f431142b8e22a8fea09ae25727f74e3fe81f5dd6052debd53992fda647260e8ac1b53773a434c7653a1ace6fe835294fd8e1e58ef9fdf68393234f928cbf683d71a94b0727c6a7fec94b7d67898a0268f8bb322f363e47725e530045637e3d6241ee6415a9843ea76dd30c69e18b8feae31428b43e4575ebda42a79aaf59fe3db729a2e43614cb6d55272781da195e3586d6817ccdf2855d607e104e4b12451e9053caae0e15ff469dafad91ad75279e5aae831c85bb259b6db173094318f5b6722b47c7fd8c64965a94d92abe4fd13d9b4920f2ad5092e44fd5aa77513e513488a519e52776d94ec8f086130237e82f7f5e831d1b6a7e886468b57ace9138eedfb1a701b32c55a161cd4af50224ab341dd6509405f053e248b83acd2122a10419027b8744143acad1cc69ef548322083391da64782e7058c9663391149cac1b6a1f5ad62c6ea893bb279c8d7382211e1b44180810efb094b01864f60f56a07eaf57edd1d663e12f9c4cd0f82ff6e6948707dd919b35984dabe5a39bccfcf485c3648fce32d750a35dfe95681385f3b6c9894aa257f49efa6c943af6be6bf2d079850f977e15defc1a2db0f4e9be9dcb9a0af9b5e66caa2e281f9964c516dd65a41ca032809868ea5e57bbad4784bc86607e9425ce03abe6ee614180265bcdf63cf161f90922f7d701c1c848972ded2d65c414c0d034befdd83226eb698ee34d8f17b3dc987c7c5034192d97ab8d9139f83c2a7cf658f661de870cde2b181b34d9169a84fad57d6ec9833a5058e5273e66b85f8e50f19ab24629fc1d6813f025f6a657574d255e2bce9e784e0d3789980377706cd708cca554d101caa81ffb154f2f7fa62ab9de613f927f8cfd5d86988e0d2df2ffc2492ac299e3281e3e81b849ce7b71c6629ad2586a558bd0f63cdd67b8e379cc396ae3d6ad8122278bb36550049062690fe36835ea0bb480b0c4fb8bbbb445d5c5982d4f1a7314631720efa9fe20934a251407f134798ae054f1c079dcc0de880684333d05e25af745c263a01362da3a8961011e15e31ba9848144ccce7e2feb9e8068451200135adc4c7d71207212d6cf7b4cad75c3d460812d4dec02244987ce17da01b71260a0a1441355300428096aef50f6b7a1bb2e0c45a68e0a1937e58db9bd4463fa9b8eba29bfd3709d87053a3063b2dc4cfe5540437f7479b372b1bbbdb294741936ef46265949ba8933992cba2e629fc603ef535418fbafb375967eac27297a5f90bf9e51afab098462172a8d1ae72c8937bb4046b54a1422e3a046bb64388c0b6a287d01a6fcc28f0fe874dd161b632b04a44899ceb9780cb14229949370aad00b1b313f7443798d8ab9c6f5246a2012931b4", 0x1000}, {&(0x7f0000001240)="7879fcbc8d262bffda4d04677e4dac52509ab03b5d8a9d231d27e05d0eafc8bfcfab5baded983dd95490ca1879c650ad9dc65fc35ba8a9a960616e9c1f8a7d6786ae6688f70fda36c36ea98eb4de6d15a9c44b4e1e0b87631bd5469f56d27b491f955c22ba541ddb23837d816ebf282a7e003226add64cb7f0cbc81c97bd", 0x7e}], 0x2, &(0x7f0000001300)}}], 0x2, 0x4001c00) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001600)={0x1, 0xbd, &(0x7f0000001500)="881e1220b74f499de56aa513d34e8852114d67368c2c4dbb99134095bf9f971a2029b4aee3b8c855c73351974ec4435cadbb8373691633dd2ecffe661131e860167da39269b5c65b39472eebf7d860f356500a56464c9eb4187dcea0f6785afac8c82e976e08027235b978f152c0b9552c3b96f317bf0ea576d5cce3b665b2ee913431200ab97aa34bd0449e7e07852a6635baa858ab56624e990175ea71e8d39ba6e8e036702b4dc76b17f5772e63a936ea19561c475bc7f77ec067cb"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 917.778378ms ago: executing program 1 (id=3917): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 906.450779ms ago: executing program 5 (id=3918): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 887.929881ms ago: executing program 5 (id=3920): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 862.556632ms ago: executing program 1 (id=3921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="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", 0x437}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 855.218243ms ago: executing program 5 (id=3923): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xe}, {0x0, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x16}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x44}}, 0x20004055) (async) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000005c0)={0xe000202b}) (async) dup3(r1, r2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 828.722556ms ago: executing program 1 (id=3924): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000004000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7}]}) r4 = io_uring_setup(0x2e01, 0x0) r5 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r4], 0x1) r6 = socket$inet(0xa, 0x6, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x9}, &(0x7f0000000380)=0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d01008cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f7"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r8}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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") 779.713701ms ago: executing program 4 (id=3927): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) 763.118222ms ago: executing program 3 (id=3928): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x5, 0x80, 0x76, 0x2, 0x2, 0x2, 0x0, 0x4, 0x80400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001440), 0xd}, 0x104, 0x9, 0x0, 0x8, 0x7, 0x2, 0x8, 0x0, 0xc6af, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x8000}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000240)="1faa1bb0f3023345db428d7580ac96439479f9731236e3e775fc81752b533c78829af36ea0d510db48c58560dc0b4303e7d1bc89e79b42d7a8aa25c4ab010760ea4448e543eec1ac1ecb5218cfee694e194d9e9ad38ab611e40255cc19b625af8af31a77208b52b8502660820d52309ad0b01b85304445c3e1a82649ea3965f1ecd9afb0a68de992eb0662d58ea23504143beab7f680c6a6563ef3fe286f2f51396d2ab1fa21bb1f3b8d95fb44c7e5cd8a572b3a43687c09b5532bf52bc487b894e92439a907be9e3c7a3e515fde64b549205d173e79040d58ba402a489e7df66234073022ced96f0ca570388f10246c58dc26f8dc89cce0763c8d53c62da268c322e369a0f2fe764488e7661d504d33983879704f6983ff26376a55d1968096351cdb054e99ec1415c38da2f2f3e5b87ba5c8aed453e39294ee456dbc034ab8bb2c7e8fc2d3e323e0c1c950696d31a394497140099f4f23385513394d198b1ddb098d56b882fb728dba3b14be9971705ba779416a236779c145126822c77011afeee580e64bbfec54cd0f12d47554eba92b7582f2601a7b39434d148ef88549e53f25e843de5b6a5d87a781a29d7efa6480ef77468b3ae51171d7873ed4db723b6190f6e224e0b9f5944fca462f27a4c1908d5fe82803a87903897537b2cc2bc2d453e8b125e813e85920273ea88b075de0e173fc194c40df953811ad6416fee8e94329d98db0f0cd045d7301c695d887c9d48593f412aa59f28cec0e03487d87d2be66f6b6e01a09c3da0c456853b2299c07e07835a80051e8e70175e778621cec966e78f4d357a77be3f9a2757a91ad37449e48c1d8e87e15cbe4ba8d69514daff965423ce52a66c6cb93e5e45c1f96d47ca08c9b69706f0e306668fa12f40b4e1619177bfeb03e46a6ee7365cb57e26b77cd1b282367967a92bb13dcd63f30f110b971b40d38478b5b1d02f7469f9783daf972faf03f6db354c138c74c09ee7ef7100399448a0c72f4e5d96e6fac2357e6c03b28e8c2611cde3904ac20137d714134ecd2baefafdbd818176cb7e167ac8c4a6878cb3e52db5849976df9c5748791db94b73988ce75907dd99332a0551324869255966544f8fa8937887f29c1ac037d8d51934e259844ecca73b8919ee5eafde0fbc339d54aee22abc25fb5e631cd29ae51a4b4a5c22176119a54d13e42e473f744d4499434cea92645dd3db390a0e59046381c70657be83408c10189c62048cec63b0b62d01b9c2a667a923b72daca3979b07e33fcb1225a4db28d99d3fdea6dfb0d939f83b463f2be1d868461fb39a0ff4c032960cafc28457f6b88a1321958c0d8468d5bc4a9378d1521a824da927b6e6c7ef9a9c7125aa938a8b167c062346b1205d01eda17ad49801e9a08d7cd0cfa153c90702eb2af5897ca3ef3f43494064df332fdef66109db69c218c95cf29c3e329c6f95dfae616685d4564fed866ce9d4bfaa5fcce52b5056e01e50907ab730e8cfa93c340b85e2d41ba4f0beba591f90c51af0e7b9f979e7b66f1cd9c23c80fac92f6722cca37c9bc96c8a4c942fb918449ded4cedb27983cbb826cbe00a835a24df1a8cf6fbb1d6406871634d9a3f0920ffd528aec7d8549d4482c17ffafe145ce3cdd61047d18a32e42535200e17902671afe2609d2b0ce79304275de4053b50e827d56d86c4fcabec8ff43fb79e7ca18f44485899196cc1b810775563eeb3e0c58eea98d94acacf625c4672ee5dedb8d290f300d6d9d43f6c781d7dd331b504b760d4e7c78a1638a12d6f3f52f61abb6222b428f8697c7bc4fac65e8a23f947e8d1bf25e573c4d1ffb8508c9190251dc1aba95c1331f57dc3d750171aa59aabdef8ad53dc16128c5e8a6442f93356fa8d9ccc7ecd971aab3fb84f7bd5f80a9e82ac725e756780628f23c3615ee076188eb3f099ac4fc3e4328a338817c835ff9da5cad610ec8ed50e008fe13970e799a487adf58efe5df110a05a3856df2162a53e91cfea50f232ebf450c12c3e8b68fbd5f89236433ffd5fb6c02a3a5961fc4889110c05ea4ef115ea339bab389e7eadc2ba39bb5a9035b5fad908a3395583094dc798d4a931f933bcad53b91494d0e28f5190f0726e81ed0f0fee1de6412d83e4b6a7dc0fa3717f3b1efd2ebc6bad400daff0c9afe25c4864b77f341338a0c811f53870ff11f69ee680526c1e8cdf04337527f7378e572fa8e01763697fcfaa42d153ffadbd0bf9ca0a96d84b029c99806371ebee0fc319db5b23f44d0c5dfd68b7c2084a3b09ea72f19fe0b53b2a6d790d7c39df29992bdc265faf818cd5be5e5261f032242a342010a071fc77e04f5a9ae62667cc9d359e7b3712123080c5e88333e86309f2f1cf5aa347f7944c638ce88b39d207515fb5b68d5226f7bac01e92ac0ed20cac779c5affd3429dffd99566d38589a5f717d1ca4e2f055d7d992ac9b5fb81ab08b719387337bc5a455821fc9f713946867bf52c9851cd7188aeb89fa9728ab542b7222f0e05ae0cb2cd664553d2e8f74675969902f25a1d43c5156b26c5c64bceec3ca47f0da0c4b7e5107a9e51edb0ca17063bf4311fff525dfedc4e62c1f6f0a3762bce6551224260ad43b82dd3dd29741747edc88d4fca0d6e783b0c0216a0e0791abe2a0f086e80a181b02b74c5fff4b0d18bb3da0d240c1c9ef2f00eb129518c58c7ffd49f5e7167ba7593f5bff80184472b560c9856d8fcae66fc38f42b2799e1747a790cce1d925750cb031e39bb314b30ab528616e8d5eb6df2ca3486852317057dc84f766ec0b84efbd2c64f36bb2472b819423ba5a46b87b0046ea407a7b2f3bf069f01f5372058a44972bba901418f42591eff83f9f1d6e0637c228adcc658c6dd366d5ea74ad5eca2780509774c695767aa554bee625b4e11da0d30b932444b90c8bb167f5f1681560bf1b9c53547a85333de05bcb94f4793d6f486b469e508d5f0d1e1bf8fccc0d143e3ffb35439a4a67ea63727452fb7d1454c64930466aa242a9fc7ad6f41dafe6e5f15a7e84ed152bfd08085ea02af3d7b54d685033d9a40b901577144962a8e55d0d23193cc317f94499152cbba1340f1a9b20c2b1f6658a921d73c7e9a550c0c0e0672cdd5b176d70a36d5545f9af60cf8bcbcc12be5e68cf39ff652254d1c636062bb82b696fa9e0dd4c122b8711ffcfa6f476b966f3ff99186308a81ef8c91944272eed515ff9764ea887b08bbae4c747b03b49976e695828c7c853ba8e7b4cbd8316a187fbe98068bf14359a7f95effa164672fbbf56783eaa2b1e7e4e418f1df0b075149990e51d5e0254aa82c6eb31af2487cf3f2a89c0ff24c2a788e2a52e9a35cbbb27a6e9f8a8158f2577623fb062eb169e7b1694c1c8c8b1818bf27cae2fd95f6c0b767efa522d4250826bd5a9bca16e5ff961aa4e0fb144be06007826b0279444d89a316f023cfb758117f0956fdf0091d53c204e6e50ae98de07a75c109e9e39cb622b6904f777aac6bacec871130f7e4c9e567bbc8957fd450e5f1a98e388505e30a99103ee94223fe45c4eccb73728b36491f659f36b6ae21080e8ea672c1a30786d29e34a786cae3a7c93e23e7594e22cda4f731d9361bc9e807a5c6346ffbfd0d8e5877ea7805dd7e49feef46d7d0bf34f6c734303f2c7e3885bad5d72f38fe210d28462a61ec43981099920ec667d89b0398f638d9942ae807c45c718ad612f23c85f1c92c8df4a0a53fa00c1398f8e7bd36d55745a4df8b2d72528818c18216a52a7ed7c929e2cc68842531d19799628e6ef449558b0428771fd111bf4923741061aa3a6bdfc7548e46d4f7821a3e6b84c68ff08088abf57ebcbb27a4bf8bf9f92c3c14c2cad33cdf18c5609407b745ea63ff9142690abac2846f60025aa49a65ed95cb44bd4fb5bc86bcbbd2c5bef4621a54c503c089df17f68087a4e22f7fea6221494a07afdaca0aa9b5e92a5c396e1f0cdefc82c6e1be3c0c09a8d0152cf48a4b91642c18c2a4b466e22a4678e0ad74ba9d2794693de0f571a5edd27ecd09c7f9fcb15f297897cd266c465f329fb73db2d819fe8de7ea93786714b5ff3d858c040ef487d09f630b78f5e8716b958ea91b2d721442b088e699c88bd220ff63be8a2f0f3f03df3c81d972440e29060157ec66bcbd42d49b638b868b7a95fb486e943ee181e9c73369584e05b1f1bf7412adc4b2e9fa2a4e319380ba0c78ddf6061f725806aca70bad7e150f6618c80675a7442d81e29e2fdcbecc314b7fa6fb0d382499692665568cab555f9865498b5101d1bba4b4d220cef001096c78c5e495da0c2d254f932615f699a4f8b42466cf7d1ad73a82159bc3f49d529f4d12d9bd86877b583fb378cf7cf3ee72b58cd8bd2fbb65c5021a7c22fcebf81d5101f0dc5dfcb125ea2e2aac78f431142b8e22a8fea09ae25727f74e3fe81f5dd6052debd53992fda647260e8ac1b53773a434c7653a1ace6fe835294fd8e1e58ef9fdf68393234f928cbf683d71a94b0727c6a7fec94b7d67898a0268f8bb322f363e47725e530045637e3d6241ee6415a9843ea76dd30c69e18b8feae31428b43e4575ebda42a79aaf59fe3db729a2e43614cb6d55272781da195e3586d6817ccdf2855d607e104e4b12451e9053caae0e15ff469dafad91ad75279e5aae831c85bb259b6db173094318f5b6722b47c7fd8c64965a94d92abe4fd13d9b4920f2ad5092e44fd5aa77513e513488a519e52776d94ec8f086130237e82f7f5e831d1b6a7e886468b57ace9138eedfb1a701b32c55a161cd4af50224ab341dd6509405f053e248b83acd2122a10419027b8744143acad1cc69ef548322083391da64782e7058c9663391149cac1b6a1f5ad62c6ea893bb279c8d7382211e1b44180810efb094b01864f60f56a07eaf57edd1d663e12f9c4cd0f82ff6e6948707dd919b35984dabe5a39bccfcf485c3648fce32d750a35dfe95681385f3b6c9894aa257f49efa6c943af6be6bf2d079850f977e15defc1a2db0f4e9be9dcb9a0af9b5e66caa2e281f9964c516dd65a41ca032809868ea5e57bbad4784bc86607e9425ce03abe6ee614180265bcdf63cf161f90922f7d701c1c848972ded2d65c414c0d034befdd83226eb698ee34d8f17b3dc987c7c5034192d97ab8d9139f83c2a7cf658f661de870cde2b181b34d9169a84fad57d6ec9833a5058e5273e66b85f8e50f19ab24629fc1d6813f025f6a657574d255e2bce9e784e0d3789980377706cd708cca554d101caa81ffb154f2f7fa62ab9de613f927f8cfd5d86988e0d2df2ffc2492ac299e3281e3e81b849ce7b71c6629ad2586a558bd0f63cdd67b8e379cc396ae3d6ad8122278bb36550049062690fe36835ea0bb480b0c4fb8bbbb445d5c5982d4f1a7314631720efa9fe20934a251407f134798ae054f1c079dcc0de880684333d05e25af745c263a01362da3a8961011e15e31ba9848144ccce7e2feb9e8068451200135adc4c7d71207212d6cf7b4cad75c3d460812d4dec02244987ce17da01b71260a0a1441355300428096aef50f6b7a1bb2e0c45a68e0a1937e58db9bd4463fa9b8eba29bfd3709d87053a3063b2dc4cfe5540437f7479b372b1bbbdb294741936ef46265949ba8933992cba2e629fc603ef535418fbafb375967eac27297a5f90bf9e51afab098462172a8d1ae72c8937bb4046b54a1422e3a046bb64388c0b6a287d01a6fcc28f0fe874dd161b632b04a44899ceb9780cb14229949370aad00b1b313f7443798d8ab9c6f5246a2012931b4", 0x1000}, {&(0x7f0000001240)="7879fcbc8d262bffda4d04677e4dac52509ab03b5d8a9d231d27e05d0eafc8bfcfab5baded983dd95490ca1879c650ad9dc65fc35ba8a9a960616e9c1f8a7d6786ae6688f70fda36c36ea98eb4de6d15a9c44b4e1e0b87631bd5469f56d27b491f955c22ba541ddb23837d816ebf282a7e003226add64cb7f0cbc81c97bd", 0x7e}], 0x2, &(0x7f0000001300)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x4001c00) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001600)={0x1, 0xbd, &(0x7f0000001500)="881e1220b74f499de56aa513d34e8852114d67368c2c4dbb99134095bf9f971a2029b4aee3b8c855c73351974ec4435cadbb8373691633dd2ecffe661131e860167da39269b5c65b39472eebf7d860f356500a56464c9eb4187dcea0f6785afac8c82e976e08027235b978f152c0b9552c3b96f317bf0ea576d5cce3b665b2ee913431200ab97aa34bd0449e7e07852a6635baa858ab56624e990175ea71e8d39ba6e8e036702b4dc76b17f5772e63a936ea19561c475bc7f77ec067cb"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 762.709712ms ago: executing program 4 (id=3929): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb, 0x2}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9780, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x190da) 742.765794ms ago: executing program 3 (id=3930): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/120) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1ff, 0x1) write$tun(r5, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x2e, 0x4, 0x0, 0x4, 0x13b, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x3, 0x83}, @end, @lsrr={0x83, 0x23, 0x16, [@local, @local, @broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0xb, [{@multicast1, 0xffff}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010101]}, @timestamp_addr={0x44, 0x44, 0x73, 0x1, 0x9, [{@loopback, 0x7}, {@loopback}, {@empty, 0xbc}, {@local}, {@empty, 0x6}, {@rand_addr=0x2, 0xe359}, {@empty, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x83, 0xb, "b5375f3d9ff5fba49c"}, @noop, @lsrr={0x83, 0x17, 0x1c, [@empty, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e23, 0x41424344, r6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0xab81, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"482e97f3b05e16f4c6bfcde6a44633e18d89c1a42d1bc67558c4c839e92b0185829c1995735ee5766892aac51a4697674ba334d81343f3cf5f3cdb5e0a20b19fa063c715aedc64283feda30820e0c4ae64476de96f3af981b3319c49c0824b8f7d5f3a"}}}}, 0x149) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1ff, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x30, 0x4, 0x0, 0x4, 0x143, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x3, 0x83}, @end, @lsrr={0x83, 0x23, 0x16, [@local, @local, @broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0xb, [{@multicast1, 0xffff}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010101]}, @timestamp_addr={0x44, 0x4c, 0x73, 0x1, 0x9, [{@loopback, 0x7}, {@loopback}, {@empty, 0xbc}, {@local}, {@empty, 0x6}, {@rand_addr=0x2, 0xe359}, {@empty, 0x80}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x83, 0xb, "b5375f3d9ff5fba49c"}, @noop, @lsrr={0x83, 0x17, 0x1c, [@empty, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0xab81, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"482e97f3b05e16f4c6bfcde6a44633e18d89c1a42d1bc67558c4c839e92b0185829c1995735ee5766892aac51a4697674ba334d81343f3cf5f3cdb5e0a20b19fa063c715aedc64283feda30820e0c4ae64476de96f3af981b3319c49c0824b8f7d5f3a"}}}}, 0x151) syz_emit_ethernet(0x18f, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @local, @void, {@ipv4={0x800, @tcp={{0x1e, 0x4, 0x0, 0x0, 0x181, 0x68, 0x0, 0xe, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x83, 0x5, "af034e"}, @lsrr={0x83, 0x1b, 0x3e, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, @remote]}, @end, @rr={0x7, 0x23, 0x5e, [@remote, @rand_addr=0x64010100, @empty, @empty, @remote, @empty, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x9, [{@local, 0x45}, {@local, 0x200}, {@empty, 0x3}]}, @end]}}, {{0x4e24, 0x4e21, r6, r7, 0x0, 0x0, 0x19, 0x40, 0x100, 0x0, 0xf2, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "fb28a14416ff8ffbe3782f1123ab4242"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x34}, @mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0x5, 0x3ff, 0x3}, @eol, @timestamp={0x8, 0xa, 0x7, 0x6}, @generic={0x4, 0x11, "7e04f90b6672c2889b6443be236389"}]}}, {"488072a076f408bcece61a5247c593e2746f9f30d89a878a98690acd3d7da8cc53f9992fb5c62eda2d59f9e92e2faf666d3e1ffca4bddb7ddfe6c3ec30107ea2b53b210575e32e6442ffbfe970127197d463ac621b09fef15efaa81baf9a5055bb1ee227eebb0682c3bf01889820e975702f2c95464888d91abe87d75c281c7387268fcacbb1f04ce85fa79afa4cebf9bb0f8308e2ea1f97cca8357951dd3b8c1481dcc702"}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 506.103525ms ago: executing program 4 (id=3931): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x1) 373.068577ms ago: executing program 5 (id=3932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x136) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r6, r7, 0x1, 0x5}, 0x50) 354.038099ms ago: executing program 3 (id=3933): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00080095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r5 = socket(0x1a, 0x6, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5524, 0x64}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6c804}, 0x80d0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) getsockopt$llc_int(r9, 0x10c, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setns(0xffffffffffffffff, 0x8020000) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x8}, 0x5, 0x4, 0xffff, 0x4, 0xe, 'syz1\x00', "f40348e1e9da12b209819a39d0c74184011a549e11b03d612e7be0b26e5f72c4", "9594ee962d1a23962b57600bf81dc79dd15378b0e8ccdaa848f81b419bc901bf", [{0x0, 0xfffd, {0x2, 0x800}}, {0x9, 0x6, {0x1, 0x40}}, {0x0, 0x5, {0x2, 0x9}}, {0x7, 0x0, {0x3, 0x2}}, {0xac, 0x8, {0x0, 0x7}}, {0x2, 0x8000}, {0x4, 0xe, {0x0, 0x7}}, {0x8, 0x3, {0x0, 0x7fff}}, {0x5, 0x1, {0x2, 0x8}}, {0xf, 0x5, {0x3, 0x7f}}, {0x7, 0xb, {0x1, 0x7f}}, {0x8, 0x8000, {0x0, 0x7e}}, {0x5, 0x4, {0x3, 0x1}}, {0x7, 0x4, {0x2, 0x10}}, {0xc3ae, 0x3, {0x3, 0x6}}, {0x9, 0x2b, {0x3, 0x241}}, {0x7f, 0x5, {0x1, 0x2}}, {0x31a, 0x2, {0x3, 0x5}}, {0x100, 0x0, {0x1, 0x40000000}}, {0xfffb, 0x62, {0x0, 0x80000001}}, {0x7, 0x159c, {0x3, 0x8}}, {0x8120, 0x7, {0x1, 0x22}}, {0x8, 0x9, {0x3, 0x6}}, {0x1ff, 0x8, {0x2, 0xfffffffd}}, {0x2, 0x3, {0x0, 0x2}}, {0x81, 0x0, {0x1, 0x1}}, {0x2, 0x2, {0x0, 0x6}}, {0x80, 0x9448, {0x0, 0xbd5}}, {0x5, 0x401, {0x3, 0x3}}, {0x9, 0xfffa, {0x0, 0x3}}, {0x8, 0x6, {0x2, 0x8}}, {0x8, 0x1090, {0x2, 0x5}}, {0x0, 0x8, {0x0, 0x9}}, {0xfff7, 0x8, {0x0, 0xfffffff2}}, {0x8, 0x1, {0x1, 0x4}}, {0x5, 0x1, {0x1, 0x4d24}}, {0x6, 0x4, {0x1, 0xf7}}, {0x3, 0x3, {0x2, 0x5}}, {0x64, 0x9, {0x1, 0x400}}, {0x2, 0x3, {0x0, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x0, 0x30, 0x3, 0x7fff, 0x25, 'syz0\x00', "783389600ad35a883769b887fb7232cc01bc3051afca2d8c023ec24df0dceb0e", "4bd392f920e266bd533772b46e83ab4dd389fbabe512ec913b8cbaba61c9597f", [{0xd9, 0x8, {0x1, 0x189}}, {0x32c7, 0x7, {0x1, 0x10000}}, {0x1, 0x7fff, {0x3, 0x5}}, {0xc, 0x1, {0x1, 0x2}}, {0x7, 0xfff5, {0x0, 0x1}}, {0xfff8, 0x1, {0x0, 0x6}}, {0xb, 0x0, {0x1, 0xec10}}, {0x800, 0x5, {0x2, 0x4}}, {0x2, 0x9, {0x1, 0x6}}, {0x8, 0x7, {0x3, 0x7}}, {0xd0, 0x2, {0x3, 0xc72}}, {0x5, 0x6, {0x1, 0x4}}, {0x3, 0xfff, {0x1, 0x3}}, {0x96, 0x2, {0x1, 0x4a78}}, {0x7, 0x6, {0x1, 0x3ff}}, {0x5, 0x5, {0x0, 0x572}}, {0x3, 0x8000, {0x0, 0xb}}, {0x2, 0x0, {0x1, 0x100}}, {0x10, 0x200, {0x1, 0x9}}, {0x7, 0x2, {0x2, 0x2}}, {0xfff7, 0x6, {0x2, 0x9}}, {0xdfd, 0x261, {0x3, 0x8}}, {0x5, 0xfffb, {0x1, 0x8001}}, {0x20ef, 0xa, {0x1, 0x4}}, {0x3, 0x3, {0x0, 0x2}}, {0x5, 0x800, {0x2, 0x7f}}, {0x0, 0x3, {0x0, 0x7ff}}, {0x3, 0x7, {0x3, 0x8}}, {0x0, 0x5, {0x1, 0x400}}, {0x6, 0x2, {0x1, 0x300000}}, {0x3ff, 0x4, {0x1, 0x7}}, {0x0, 0x0, {0x2, 0x9}}, {0x958, 0x2, {0x1, 0xd5c}}, {0x4, 0x3, {0x2, 0x2}}, {0x7912, 0x4, {0x2, 0x6}}, {0x7, 0x8, {0x0, 0x72b}}, {0x0, 0x6, {0x0, 0xa}}, {0xf, 0x5, {0x2, 0x5}}, {0x8, 0x8, {0x3, 0x1ff}}, {0x8001, 0xe, {0x3, 0xfffffa2d}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xe, 0x4, 0x7fff, 0xfff, 0x16, 'syz1\x00', "5f9b68fc2d4a0d386f4a3084e8691f6b1b181ed923f0b7368040ada816a070e9", "503adbd4fe7212f334ba0a7f2d1ea1c02549125f528472b7682db376cbc87d13", [{0x9, 0x6, {0x1, 0x9b}}, {0x3, 0xed, {0x2, 0x40}}, {0xfffb, 0x1, {0x2}}, {0x0, 0x101, {0x2, 0xa27}}, {0x7, 0x6550, {0x3, 0x1}}, {0x4000, 0xa0ca, {0x0, 0x46f}}, {0x1000, 0x1, {0x1, 0x3}}, {0x66, 0xc, {0x1, 0x4}}, {0x40, 0x6, {0x1, 0xa00000}}, {0x2, 0x9, {0x2, 0xfffffffa}}, {0x1, 0x8, {0x7, 0x9}}, {0x4, 0x800, {0x0, 0xae71}}, {0x9, 0x800, {0x3, 0xc435}}, {0x9, 0x871, {0x0, 0x4}}, {0xe, 0x9, {0x3, 0x80}}, {0x401, 0x8, {0x1, 0x4}}, {0xb7e, 0x1, {0x1, 0xf}}, {0x6, 0x3, {0x0, 0x3}}, {0x7ac, 0x9, {0x2, 0x8}}, {0x400, 0x71, {0x0, 0x1}}, {0x1, 0xb, {0x0, 0x3}}, {0x6, 0x0, {0x3, 0x3}}, {0x9, 0x1ff, {0x0, 0x80000000}}, {0x9, 0x6, {0x0, 0xfffffffe}}, {0xf, 0x4, {0x3}}, {0x3ff, 0xfffe, {0x1, 0x100}}, {0x0, 0x0, {0x3, 0xffffffc0}}, {0x7, 0xfffb, {0x1, 0x48}}, {0x8, 0x81, {0x1, 0x7fffffff}}, {0x8, 0x7, {0x2, 0x3}}, {0x1000, 0xa6, {0x1, 0x6}}, {0x0, 0xffff, {0x1, 0xc}}, {0xc, 0x57, {0x0, 0x8c9}}, {0x0, 0x0, {0x0, 0xd9fa}}, {0x2, 0x9, {0x1, 0x6}}, {0x4, 0x721, {0x0, 0x5}}, {0x1c, 0x70, {0x1, 0x2}}, {0x0, 0x5f94, {0x3, 0x6}}, {0x80, 0x0, {0x0, 0x100}}, {0x8, 0x5d9f, {0x1, 0x1}}]}}}]}, 0x710}}, 0x20000000) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) ioctl$SG_GET_SCSI_ID(r10, 0x2276, &(0x7f0000000040)) 336.69804ms ago: executing program 4 (id=3934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x8, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) pipe2$watch_queue(&(0x7f0000000080), 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x1, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) close(r9) 321.152442ms ago: executing program 2 (id=3935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") mkdir(&(0x7f0000000300)='./bus\x00', 0x136) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f"], 0xe8}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r6, r7, 0x1, 0x5}, 0x50) 234.45809ms ago: executing program 5 (id=3936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e802e325da5bc2bcbe5b7a64c411a780ae8d0902118894f5f63fe989623f25a7e201e135e8f25b5365c3a615a4727144109cc4b88660728445ce841940d20e87069cb74f63fbfb5dd7992dc4ccde1484aeec05630a440ed9481d03267585eed156484d23b07280cc045ff023abd628d43f7d3b7bc5a9e8e6445f94271d508e5bb17b12216dba8a5f1a02aef9126389dcf725197440404b29b95e71d45b9dad8f3fdf1c6a2734632ca7991026304d869a94259cc32ac8a45da5ba38f54e9d98faf2af04e3f11ab495eb490daa88cbf465fe127cf144081196d8319692a51d3bae449ff531427c829d9cfab8cb15ae4ff6f4392e2c657beae5364b55d05729bc7f950e4b99c7ce71136168a3fda8b7ead182973c1f5fb52f7c6f488f6383c1259345306375ebe0639e40f367be4a480c2babf3e0572a5c089cccd06588489fdf12ff256af41faef912dea1c1cf122e8e4b99770b19fdc9f6b12cdfa51d0b0d3b6dbc18af665f0f92b83b12eda1fae071a9fb49575763d1bfce45616089b868e37bad0c806a5cff911ae163f82f98c885e7c9afa4d55a4117246086b07e55991205ad345dde63ef855097c7be09343ff9dd982e7e8332337c1b9c8aedd1afeb06010e59aeb5008f7bb0d971963f79df825d94773c9b79e6897c53a83388ef89bddd1d35addfb6c3dc0121ac2a7936643159365a0ef14dc95de2d1f60f41a687c04ba42ed9b225496a418e593587f40a25bbb761eeddc2080512646d163a9968ea00f599239b3abd581253d383fb72abad3b19e0d85a7eafdc02e92cbe784129c37152934a286c2a3d5c5eb1ac65caf63f352e58c96a26b0b13462b992926bae78774d7d9de575bf86b50da743692fb38ee9fbc51ac0eff40589f725", 0x437}], 0x1, 0x0, 0x0, 0x10}, 0x4004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 188.477814ms ago: executing program 4 (id=3937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x136) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r5, r6, 0x1, 0x5}, 0x50) 186.330634ms ago: executing program 5 (id=3938): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x35}, 0x800, 0x0, 0x2, 0x1, 0x25a, 0xffff}, 0x20) 149.102777ms ago: executing program 3 (id=3939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 143.573578ms ago: executing program 2 (id=3940): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x5, 0x80, 0x76, 0x2, 0x2, 0x2, 0x0, 0x4, 0x80400, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001440), 0xd}, 0x104, 0x9, 0x0, 0x8, 0x7, 0x2, 0x8, 0x0, 0xc6af, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x8000}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="7879fcbc8d262bffda4d04677e4dac52509ab03b5d8a9d231d27e05d0eafc8bfcfab5baded983dd95490ca1879c650ad9dc65fc35ba8a9a960616e9c1f8a7d6786ae6688f70fda36c36ea98eb4de6d15a9c44b4e1e0b87631bd5469f56d27b491f955c22ba541ddb23837d816ebf282a7e003226add64cb7f0cbc81c97bd", 0x7e}], 0x2, &(0x7f0000001300)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x4001c00) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000001600)={0x1, 0xbd, &(0x7f0000001500)="881e1220b74f499de56aa513d34e8852114d67368c2c4dbb99134095bf9f971a2029b4aee3b8c855c73351974ec4435cadbb8373691633dd2ecffe661131e860167da39269b5c65b39472eebf7d860f356500a56464c9eb4187dcea0f6785afac8c82e976e08027235b978f152c0b9552c3b96f317bf0ea576d5cce3b665b2ee913431200ab97aa34bd0449e7e07852a6635baa858ab56624e990175ea71e8d39ba6e8e036702b4dc76b17f5772e63a936ea19561c475bc7f77ec067cb"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) 116.18301ms ago: executing program 3 (id=3941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x136) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f"], 0xe8}}, 0x0) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r6, r7, 0x1, 0x5}, 0x50) 87.772783ms ago: executing program 2 (id=3942): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb, 0x2}}, './file1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], &(0x7f00000000c0)='syzkaller\x00', 0x9780, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x190da) 82.886683ms ago: executing program 4 (id=3943): r0 = syz_create_resource$binfmt(&(0x7f0000000500)='./file0\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/120) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r2, r2, 0x21) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1ff, 0x1) write$tun(r5, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x2e, 0x4, 0x0, 0x4, 0x13b, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x3, 0x83}, @end, @lsrr={0x83, 0x23, 0x16, [@local, @local, @broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0xb, [{@multicast1, 0xffff}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010101]}, @timestamp_addr={0x44, 0x44, 0x73, 0x1, 0x9, [{@loopback, 0x7}, {@loopback}, {@empty, 0xbc}, {@local}, {@empty, 0x6}, {@rand_addr=0x2, 0xe359}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x83, 0xb, "b5375f3d9ff5fba49c"}, @noop, @lsrr={0x83, 0x17, 0x1c, [@empty, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e23, 0x41424344, r6, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0xab81, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"482e97f3b05e16f4c6bfcde6a44633e18d89c1a42d1bc67558c4c839e92b0185829c1995735ee5766892aac51a4697674ba334d81343f3cf5f3cdb5e0a20b19fa063c715aedc64283feda30820e0c4ae64476de96f3af981b3319c49c0824b8f7d5f3a"}}}}, 0x149) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x1ff, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x30, 0x4, 0x0, 0x4, 0x143, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x3, 0x83}, @end, @lsrr={0x83, 0x23, 0x16, [@local, @local, @broadcast, @broadcast, @rand_addr=0x64010102, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0xc, 0x8, 0x3, 0xb, [{@multicast1, 0xffff}]}, @rr={0x7, 0x7, 0x57, [@private=0xa010101]}, @timestamp_addr={0x44, 0x4c, 0x73, 0x1, 0x9, [{@loopback, 0x7}, {@loopback}, {@empty, 0xbc}, {@local}, {@empty, 0x6}, {@rand_addr=0x2, 0xe359}, {@empty, 0x80}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @generic={0x83, 0xb, "b5375f3d9ff5fba49c"}, @noop, @lsrr={0x83, 0x17, 0x1c, [@empty, @multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {{0x4e21, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0xab81, {[@exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}]}}, {"482e97f3b05e16f4c6bfcde6a44633e18d89c1a42d1bc67558c4c839e92b0185829c1995735ee5766892aac51a4697674ba334d81343f3cf5f3cdb5e0a20b19fa063c715aedc64283feda30820e0c4ae64476de96f3af981b3319c49c0824b8f7d5f3a"}}}}, 0x151) syz_emit_ethernet(0x18f, &(0x7f0000000540)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @local, @void, {@ipv4={0x800, @tcp={{0x1e, 0x4, 0x0, 0x0, 0x181, 0x68, 0x0, 0xe, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x83, 0x5, "af034e"}, @lsrr={0x83, 0x1b, 0x3e, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010101, @remote]}, @end, @rr={0x7, 0x23, 0x5e, [@remote, @rand_addr=0x64010100, @empty, @empty, @remote, @empty, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x9, [{@local, 0x45}, {@local, 0x200}, {@empty, 0x3}]}, @end]}}, {{0x4e24, 0x4e21, r6, r7, 0x0, 0x0, 0x19, 0x40, 0x100, 0x0, 0xf2, {[@exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "fb28a14416ff8ffbe3782f1123ab4242"}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x34}, @mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0x5, 0x3ff, 0x3}, @eol, @timestamp={0x8, 0xa, 0x7, 0x6}, @generic={0x4, 0x11, "7e04f90b6672c2889b6443be236389"}]}}, {"488072a076f408bcece61a5247c593e2746f9f30d89a878a98690acd3d7da8cc53f9992fb5c62eda2d59f9e92e2faf666d3e1ffca4bddb7ddfe6c3ec30107ea2b53b210575e32e6442ffbfe970127197d463ac621b09fef15efaa81baf9a5055bb1ee227eebb0682c3bf01889820e975702f2c95464888d91abe87d75c281c7387268fcacbb1f04ce85fa79afa4cebf9bb0f8308e2ea1f97cca8357951dd3b8c1481dcc702"}}}}}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 26.128338ms ago: executing program 2 (id=3944): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x194, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x4050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00080095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x10, 0x3000}], 0x1, 0x0) r6 = socket(0x1a, 0x6, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r8, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5524, 0x64}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6c804}, 0x80d0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) getsockopt$llc_int(r10, 0x10c, 0x1, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) setns(0xffffffffffffffff, 0x8020000) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000000c0)={0x710, 0x1, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x3, 0x8}, 0x5, 0x4, 0xffff, 0x4, 0xe, 'syz1\x00', "f40348e1e9da12b209819a39d0c74184011a549e11b03d612e7be0b26e5f72c4", "9594ee962d1a23962b57600bf81dc79dd15378b0e8ccdaa848f81b419bc901bf", [{0x0, 0xfffd, {0x2, 0x800}}, {0x9, 0x6, {0x1, 0x40}}, {0x0, 0x5, {0x2, 0x9}}, {0x7, 0x0, {0x3, 0x2}}, {0xac, 0x8, {0x0, 0x7}}, {0x2, 0x8000}, {0x4, 0xe, {0x0, 0x7}}, {0x8, 0x3, {0x0, 0x7fff}}, {0x5, 0x1, {0x2, 0x8}}, {0xf, 0x5, {0x3, 0x7f}}, {0x7, 0xb, {0x1, 0x7f}}, {0x8, 0x8000, {0x0, 0x7e}}, {0x5, 0x4, {0x3, 0x1}}, {0x7, 0x4, {0x2, 0x10}}, {0xc3ae, 0x3, {0x3, 0x6}}, {0x9, 0x2b, {0x3, 0x241}}, {0x7f, 0x5, {0x1, 0x2}}, {0x31a, 0x2, {0x3, 0x5}}, {0x100, 0x0, {0x1, 0x40000000}}, {0xfffb, 0x62, {0x0, 0x80000001}}, {0x7, 0x159c, {0x3, 0x8}}, {0x8120, 0x7, {0x1, 0x22}}, {0x8, 0x9, {0x3, 0x6}}, {0x1ff, 0x8, {0x2, 0xfffffffd}}, {0x2, 0x3, {0x0, 0x2}}, {0x81, 0x0, {0x1, 0x1}}, {0x2, 0x2, {0x0, 0x6}}, {0x80, 0x9448, {0x0, 0xbd5}}, {0x5, 0x401, {0x3, 0x3}}, {0x9, 0xfffa, {0x0, 0x3}}, {0x8, 0x6, {0x2, 0x8}}, {0x8, 0x1090, {0x2, 0x5}}, {0x0, 0x8, {0x0, 0x9}}, {0xfff7, 0x8, {0x0, 0xfffffff2}}, {0x8, 0x1, {0x1, 0x4}}, {0x5, 0x1, {0x1, 0x4d24}}, {0x6, 0x4, {0x1, 0xf7}}, {0x3, 0x3, {0x2, 0x5}}, {0x64, 0x9, {0x1, 0x400}}, {0x2, 0x3, {0x0, 0x7fff}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x0, 0x30, 0x3, 0x7fff, 0x25, 'syz0\x00', "783389600ad35a883769b887fb7232cc01bc3051afca2d8c023ec24df0dceb0e", "4bd392f920e266bd533772b46e83ab4dd389fbabe512ec913b8cbaba61c9597f", [{0xd9, 0x8, {0x1, 0x189}}, {0x32c7, 0x7, {0x1, 0x10000}}, {0x1, 0x7fff, {0x3, 0x5}}, {0xc, 0x1, {0x1, 0x2}}, {0x7, 0xfff5, {0x0, 0x1}}, {0xfff8, 0x1, {0x0, 0x6}}, {0xb, 0x0, {0x1, 0xec10}}, {0x800, 0x5, {0x2, 0x4}}, {0x2, 0x9, {0x1, 0x6}}, {0x8, 0x7, {0x3, 0x7}}, {0xd0, 0x2, {0x3, 0xc72}}, {0x5, 0x6, {0x1, 0x4}}, {0x3, 0xfff, {0x1, 0x3}}, {0x96, 0x2, {0x1, 0x4a78}}, {0x7, 0x6, {0x1, 0x3ff}}, {0x5, 0x5, {0x0, 0x572}}, {0x3, 0x8000, {0x0, 0xb}}, {0x2, 0x0, {0x1, 0x100}}, {0x10, 0x200, {0x1, 0x9}}, {0x7, 0x2, {0x2, 0x2}}, {0xfff7, 0x6, {0x2, 0x9}}, {0xdfd, 0x261, {0x3, 0x8}}, {0x5, 0xfffb, {0x1, 0x8001}}, {0x20ef, 0xa, {0x1, 0x4}}, {0x3, 0x3, {0x0, 0x2}}, {0x5, 0x800, {0x2, 0x7f}}, {0x0, 0x3, {0x0, 0x7ff}}, {0x3, 0x7, {0x3, 0x8}}, {0x0, 0x5, {0x1, 0x400}}, {0x6, 0x2, {0x1, 0x300000}}, {0x3ff, 0x4, {0x1, 0x7}}, {0x0, 0x0, {0x2, 0x9}}, {0x958, 0x2, {0x1, 0xd5c}}, {0x4, 0x3, {0x2, 0x2}}, {0x7912, 0x4, {0x2, 0x6}}, {0x7, 0x8, {0x0, 0x72b}}, {0x0, 0x6, {0x0, 0xa}}, {0xf, 0x5, {0x2, 0x5}}, {0x8, 0x8, {0x3, 0x1ff}}, {0x8001, 0xe, {0x3, 0xfffffa2d}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0xe, 0x4, 0x7fff, 0xfff, 0x16, 'syz1\x00', "5f9b68fc2d4a0d386f4a3084e8691f6b1b181ed923f0b7368040ada816a070e9", "503adbd4fe7212f334ba0a7f2d1ea1c02549125f528472b7682db376cbc87d13", [{0x9, 0x6, {0x1, 0x9b}}, {0x3, 0xed, {0x2, 0x40}}, {0xfffb, 0x1, {0x2}}, {0x0, 0x101, {0x2, 0xa27}}, {0x7, 0x6550, {0x3, 0x1}}, {0x4000, 0xa0ca, {0x0, 0x46f}}, {0x1000, 0x1, {0x1, 0x3}}, {0x66, 0xc, {0x1, 0x4}}, {0x40, 0x6, {0x1, 0xa00000}}, {0x2, 0x9, {0x2, 0xfffffffa}}, {0x1, 0x8, {0x7, 0x9}}, {0x4, 0x800, {0x0, 0xae71}}, {0x9, 0x800, {0x3, 0xc435}}, {0x9, 0x871, {0x0, 0x4}}, {0xe, 0x9, {0x3, 0x80}}, {0x401, 0x8, {0x1, 0x4}}, {0xb7e, 0x1, {0x1, 0xf}}, {0x6, 0x3, {0x0, 0x3}}, {0x7ac, 0x9, {0x2, 0x8}}, {0x400, 0x71, {0x0, 0x1}}, {0x1, 0xb, {0x0, 0x3}}, {0x6, 0x0, {0x3, 0x3}}, {0x9, 0x1ff, {0x0, 0x80000000}}, {0x9, 0x6, {0x0, 0xfffffffe}}, {0xf, 0x4, {0x3}}, {0x3ff, 0xfffe, {0x1, 0x100}}, {0x0, 0x0, {0x3, 0xffffffc0}}, {0x7, 0xfffb, {0x1, 0x48}}, {0x8, 0x81, {0x1, 0x7fffffff}}, {0x8, 0x7, {0x2, 0x3}}, {0x1000, 0xa6, {0x1, 0x6}}, {0x0, 0xffff, {0x1, 0xc}}, {0xc, 0x57, {0x0, 0x8c9}}, {0x0, 0x0, {0x0, 0xd9fa}}, {0x2, 0x9, {0x1, 0x6}}, {0x4, 0x721, {0x0, 0x5}}, {0x1c, 0x70, {0x1, 0x2}}, {0x0, 0x5f94, {0x3, 0x6}}, {0x80, 0x0, {0x0, 0x100}}, {0x8, 0x5d9f, {0x1, 0x1}}]}}}]}, 0x710}}, 0x20000000) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x48e01) ioctl$SG_GET_SCSI_ID(r11, 0x2276, &(0x7f0000000040)) 0s ago: executing program 3 (id=3945): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x109) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x1) kernel console output (not intermixed with test programs): aw Gadget: couldn't find an available UDC or it's busy [ 199.802425][T16313] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3097: invalid indirect mapped block 4294967295 (level 1) [ 199.812885][T16323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.827734][T16313] EXT4-fs (loop3): 2 truncates cleaned up [ 199.841303][T16313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.859269][T16313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3097'. [ 199.947756][T13817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.386754][T16337] syz.3.3100 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 200.401038][T16337] CPU: 0 UID: 0 PID: 16337 Comm: syz.3.3100 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 200.401092][T16337] Tainted: [W]=WARN [ 200.401100][T16337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 200.401115][T16337] Call Trace: [ 200.401124][T16337] [ 200.401135][T16337] __dump_stack+0x1d/0x30 [ 200.401204][T16337] dump_stack_lvl+0x95/0xd0 [ 200.401232][T16337] dump_stack+0x15/0x1b [ 200.401258][T16337] dump_header+0x81/0x240 [ 200.401284][T16337] oom_kill_process+0x295/0x350 [ 200.401312][T16337] out_of_memory+0x97b/0xb80 [ 200.401427][T16337] try_charge_memcg+0x610/0xa10 [ 200.401461][T16337] obj_cgroup_charge_pages+0xa6/0x150 [ 200.401528][T16337] __memcg_kmem_charge_page+0x9f/0x170 [ 200.401566][T16337] __alloc_frozen_pages_noprof+0x18f/0x360 [ 200.401598][T16337] alloc_pages_mpol+0xb3/0x260 [ 200.401637][T16337] alloc_pages_noprof+0x90/0x130 [ 200.401676][T16337] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 200.401717][T16337] __kvmalloc_node_noprof+0x492/0x6b0 [ 200.401752][T16337] ? ip_set_alloc+0x24/0x30 [ 200.401782][T16337] ? ip_set_alloc+0x24/0x30 [ 200.401814][T16337] ? __slab_alloc+0x25/0x50 [ 200.401895][T16337] ip_set_alloc+0x24/0x30 [ 200.401924][T16337] hash_netiface_create+0x282/0x740 [ 200.401961][T16337] ? __pfx_hash_netiface_create+0x10/0x10 [ 200.402038][T16337] ip_set_create+0x3cc/0x970 [ 200.402081][T16337] ? __nla_parse+0x40/0x60 [ 200.402149][T16337] nfnetlink_rcv_msg+0x4c6/0x590 [ 200.402203][T16337] netlink_rcv_skb+0x123/0x220 [ 200.402283][T16337] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.402354][T16337] nfnetlink_rcv+0x167/0x16c0 [ 200.402382][T16337] ? kmem_cache_free+0xe3/0x3a0 [ 200.402414][T16337] ? __kfree_skb+0x109/0x150 [ 200.402446][T16337] ? nlmon_xmit+0x4f/0x60 [ 200.402479][T16337] ? consume_skb+0x49/0x150 [ 200.402560][T16337] ? nlmon_xmit+0x4f/0x60 [ 200.402654][T16337] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 200.402709][T16337] ? __dev_queue_xmit+0x138d/0x1ec0 [ 200.402743][T16337] ? __dev_queue_xmit+0x148/0x1ec0 [ 200.402773][T16337] ? xas_find+0x239/0x3e0 [ 200.402861][T16337] ? ref_tracker_free+0x37d/0x3e0 [ 200.402924][T16337] ? __netlink_deliver_tap+0x4dc/0x500 [ 200.403012][T16337] netlink_unicast+0x5c0/0x690 [ 200.403046][T16337] netlink_sendmsg+0x58b/0x6b0 [ 200.403217][T16337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.403263][T16337] __sock_sendmsg+0x145/0x180 [ 200.403290][T16337] ____sys_sendmsg+0x31e/0x4a0 [ 200.403323][T16337] ___sys_sendmsg+0x17b/0x1d0 [ 200.403400][T16337] __x64_sys_sendmsg+0xd4/0x160 [ 200.403437][T16337] x64_sys_call+0x17ba/0x3000 [ 200.403469][T16337] do_syscall_64+0xca/0x2b0 [ 200.403580][T16337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.403603][T16337] RIP: 0033:0x7fb3763cf749 [ 200.403622][T16337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.403645][T16337] RSP: 002b:00007fb374e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.403746][T16337] RAX: ffffffffffffffda RBX: 00007fb376625fa0 RCX: 00007fb3763cf749 [ 200.403760][T16337] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 200.403772][T16337] RBP: 00007fb376453f91 R08: 0000000000000000 R09: 0000000000000000 [ 200.403787][T16337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.403822][T16337] R13: 00007fb376626038 R14: 00007fb376625fa0 R15: 00007ffd74541b78 [ 200.403918][T16337] [ 200.403926][T16337] memory: usage 307200kB, limit 307200kB, failcnt 268 [ 200.458368][T16339] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3101'. [ 200.462902][T16337] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 200.572930][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3101'. [ 200.573494][T16337] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 200.782438][T16337] Memory cgroup stats for /syz3: [ 200.782687][T16337] cache 65536 [ 200.791031][T16337] rss 0 [ 200.793926][T16337] shmem 0 [ 200.796900][T16337] mapped_file 0 [ 200.800357][T16337] dirty 0 [ 200.803366][T16337] writeback 0 [ 200.806658][T16337] workingset_refault_anon 33 [ 200.811241][T16337] workingset_refault_file 257 [ 200.816105][T16337] swap 176128 [ 200.819422][T16337] swapcached 16384 [ 200.823128][T16337] pgpgin 288148 [ 200.826659][T16337] pgpgout 288128 [ 200.830223][T16337] pgfault 237445 [ 200.833758][T16337] pgmajfault 22 [ 200.837258][T16337] inactive_anon 12288 [ 200.841360][T16337] active_anon 4096 [ 200.848201][T16337] inactive_file 65536 [ 200.852308][T16337] active_file 0 [ 200.855872][T16337] unevictable 0 [ 200.859498][T16337] hierarchical_memory_limit 314572800 [ 200.864882][T16337] hierarchical_memsw_limit 9223372036854771712 [ 200.871083][T16337] total_cache 65536 [ 200.874892][T16337] total_rss 0 [ 200.878192][T16337] total_shmem 0 [ 200.881783][T16337] total_mapped_file 0 [ 200.885755][T16337] total_dirty 0 [ 200.889234][T16337] total_writeback 0 [ 200.893205][T16337] total_workingset_refault_anon 33 [ 200.898305][T16337] total_workingset_refault_file 257 [ 200.903568][T16337] total_swap 176128 [ 200.907377][T16337] total_swapcached 16384 [ 200.911627][T16337] total_pgpgin 288148 [ 200.915613][T16337] total_pgpgout 288128 [ 200.919665][T16337] total_pgfault 237445 [ 200.923758][T16337] total_pgmajfault 22 [ 200.927742][T16337] total_inactive_anon 12288 [ 200.932334][T16337] total_active_anon 4096 [ 200.936670][T16337] total_inactive_file 65536 [ 200.941169][T16337] total_active_file 0 [ 200.945165][T16337] total_unevictable 0 [ 200.949306][T16337] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3100,pid=16335,uid=0 [ 200.964274][T16337] Memory cgroup out of memory: Killed process 16335 (syz.3.3100) total-vm:93900kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 201.047964][T16360] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 201.056216][T16360] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 201.064469][T16360] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 201.100742][T16360] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 201.173799][T16372] set_capacity_and_notify: 12 callbacks suppressed [ 201.173832][T16372] loop3: detected capacity change from 0 to 512 [ 201.191130][T16375] loop5: detected capacity change from 0 to 512 [ 201.205456][T16379] loop2: detected capacity change from 0 to 512 [ 201.209554][T16375] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3107: invalid indirect mapped block 4294967295 (level 1) [ 201.227878][T16375] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3107: invalid indirect mapped block 4294967295 (level 1) [ 201.256271][T16372] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3106: error while reading EA inode 32 err=-116 [ 201.266822][T16379] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3108: invalid block [ 201.273248][T16372] EXT4-fs (loop3): Remounting filesystem read-only [ 201.281346][T16375] EXT4-fs (loop5): 2 truncates cleaned up [ 201.293457][T16379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3108: invalid indirect mapped block 4294967295 (level 1) [ 201.293898][T16375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.309228][T16379] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3108: invalid indirect mapped block 4294967295 (level 1) [ 201.322533][T16372] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 201.335607][T16379] EXT4-fs (loop2): 2 truncates cleaned up [ 201.344375][T16372] EXT4-fs (loop3): 1 orphan inode deleted [ 201.351815][T16379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.356328][T16372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.445417][T13817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.456647][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.521729][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.640301][T16439] loop3: detected capacity change from 0 to 512 [ 201.660475][T16439] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3121: error while reading EA inode 32 err=-116 [ 201.664055][T16446] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 201.679020][T16445] loop5: detected capacity change from 0 to 512 [ 201.686762][T16439] EXT4-fs (loop3): Remounting filesystem read-only [ 201.693497][T16439] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 201.704034][T16439] EXT4-fs (loop3): 1 orphan inode deleted [ 201.710680][T16439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.739051][T16445] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3122: invalid block [ 201.751848][T16445] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3122: invalid indirect mapped block 4294967295 (level 1) [ 201.770498][T16445] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3122: invalid indirect mapped block 4294967295 (level 1) [ 201.785092][T16445] EXT4-fs (loop5): 2 truncates cleaned up [ 201.791858][T16445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.873485][T13817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.900081][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.977805][T16499] FAULT_INJECTION: forcing a failure. [ 201.977805][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 201.990584][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.4.3133 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.990687][T16499] Tainted: [W]=WARN [ 201.990696][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.990711][T16499] Call Trace: [ 201.990719][T16499] [ 201.990730][T16499] __dump_stack+0x1d/0x30 [ 201.990756][T16499] dump_stack_lvl+0x95/0xd0 [ 201.990858][T16499] dump_stack+0x15/0x1b [ 201.990878][T16499] should_fail_ex+0x265/0x280 [ 201.990901][T16499] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 201.990924][T16499] should_failslab+0x8c/0xb0 [ 201.991001][T16499] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 201.991027][T16499] ? debugfs_alloc_inode+0x34/0x40 [ 201.991053][T16499] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 201.991077][T16499] debugfs_alloc_inode+0x34/0x40 [ 201.991108][T16499] alloc_inode+0x40/0x170 [ 201.991132][T16499] new_inode+0x1d/0xe0 [ 201.991154][T16499] __debugfs_create_file+0x97/0x2b0 [ 201.991176][T16499] debugfs_create_file_full+0x3f/0x60 [ 201.991206][T16499] ? __pfx_caifdev_setup+0x10/0x10 [ 201.991255][T16499] ref_tracker_dir_debugfs+0x100/0x210 [ 201.991293][T16499] alloc_netdev_mqs+0x1a7/0xa40 [ 201.991330][T16499] ldisc_open+0x102/0x530 [ 201.991359][T16499] ? should_failslab+0x19/0xb0 [ 201.991471][T16499] tty_ldisc_failto+0xe8/0x1a0 [ 201.991499][T16499] tty_ldisc_restore+0x2f/0xc0 [ 201.991614][T16499] tty_set_ldisc+0x209/0x380 [ 201.991636][T16499] tiocsetd+0x51/0x60 [ 201.991657][T16499] tty_ioctl+0xa79/0xb80 [ 201.991757][T16499] ? __pfx_tty_ioctl+0x10/0x10 [ 201.991780][T16499] __se_sys_ioctl+0xce/0x140 [ 201.991817][T16499] __x64_sys_ioctl+0x43/0x50 [ 201.991867][T16499] x64_sys_call+0x14b0/0x3000 [ 201.991895][T16499] do_syscall_64+0xca/0x2b0 [ 201.991986][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.992063][T16499] RIP: 0033:0x7f116b70f749 [ 201.992081][T16499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.992103][T16499] RSP: 002b:00007f116a177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.992127][T16499] RAX: ffffffffffffffda RBX: 00007f116b965fa0 RCX: 00007f116b70f749 [ 201.992142][T16499] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000006 [ 201.992158][T16499] RBP: 00007f116a177090 R08: 0000000000000000 R09: 0000000000000000 [ 201.992207][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.992222][T16499] R13: 00007f116b966038 R14: 00007f116b965fa0 R15: 00007ffe82dc0b08 [ 201.992241][T16499] [ 201.992249][T16499] debugfs: out of free dentries, can not create file 'netdev@ffff888109a21558' [ 202.136587][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 202.136604][ T29] audit: type=1326 audit(1766925558.817:33816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabddef65e7 code=0x7ffc0000 [ 202.141109][T16499] debugfs: 'ptm0' already exists in 'caif_serial' [ 202.146690][ T29] audit: type=1326 audit(1766925558.826:33817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabdde9b829 code=0x7ffc0000 [ 202.164235][T16507] loop5: detected capacity change from 0 to 1024 [ 202.169893][ T29] audit: type=1326 audit(1766925558.826:33818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabddef65e7 code=0x7ffc0000 [ 202.226163][T16507] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3132: bad orphan inode 2 [ 202.226644][ T29] audit: type=1326 audit(1766925558.826:33819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabdde9b829 code=0x7ffc0000 [ 202.236389][T16507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 202.242771][ T29] audit: type=1326 audit(1766925558.826:33820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fabddeff749 code=0x7ffc0000 [ 202.415047][ T29] audit: type=1326 audit(1766925558.864:33821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabddef65e7 code=0x7ffc0000 [ 202.439039][ T29] audit: type=1326 audit(1766925558.864:33822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabdde9b829 code=0x7ffc0000 [ 202.462777][ T29] audit: type=1326 audit(1766925558.864:33823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fabddeff749 code=0x7ffc0000 [ 202.486472][ T29] audit: type=1326 audit(1766925558.864:33824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fabddef65e7 code=0x7ffc0000 [ 202.510105][ T29] audit: type=1326 audit(1766925558.864:33825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16434 comm="syz.2.3119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fabdde9b829 code=0x7ffc0000 [ 202.644321][T16533] loop2: detected capacity change from 0 to 512 [ 202.644349][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 202.674228][T16533] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3136: invalid indirect mapped block 4294967295 (level 1) [ 202.709987][T16533] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3136: invalid indirect mapped block 4294967295 (level 1) [ 202.724654][T16533] EXT4-fs (loop2): 2 truncates cleaned up [ 202.731772][T16533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.836107][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.968850][T16609] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 202.985161][T16609] SELinux: failed to load policy [ 203.006103][T16604] bridge_slave_0: left allmulticast mode [ 203.011900][T16604] bridge_slave_0: left promiscuous mode [ 203.017683][T16604] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.030179][T16614] loop5: detected capacity change from 0 to 512 [ 203.032649][T16618] netlink: 'syz.1.3146': attribute type 10 has an invalid length. [ 203.038452][T16614] vfat: Unknown parameter '' [ 203.051729][T16604] bridge_slave_1: left allmulticast mode [ 203.057486][T16604] bridge_slave_1: left promiscuous mode [ 203.063464][T16604] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.064809][T16616] loop3: detected capacity change from 0 to 512 [ 203.079484][T16604] bond0: (slave bond_slave_0): Releasing backup interface [ 203.091107][T16604] bond0: (slave bond_slave_1): Releasing backup interface [ 203.108296][T16616] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.3149: error while reading EA inode 32 err=-116 [ 203.123527][T16604] team0: Port device team_slave_0 removed [ 203.129684][T16616] EXT4-fs (loop3): Remounting filesystem read-only [ 203.136381][T16616] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 203.138192][T16604] team0: Port device team_slave_1 removed [ 203.146710][T16616] EXT4-fs (loop3): 1 orphan inode deleted [ 203.157361][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.165418][T16616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.165457][T16604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.191710][T16632] loop5: detected capacity change from 0 to 2048 [ 203.200944][T16604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.208459][T16604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.226740][T16632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.233313][T16604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 203.259483][T16618] batman_adv: batadv0: Adding interface: veth1_vlan [ 203.266178][T16618] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.292239][T16618] batman_adv: batadv0: Interface activated: veth1_vlan [ 203.293115][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.330578][T13817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.390365][T16648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=16648 comm=syz.5.3151 [ 203.515286][T16678] ªªªªªª: renamed from vlan0 (while UP) [ 203.535675][T16684] ªªªªªª: renamed from wg2 (while UP) [ 203.544910][T16682] smc: net device bond0 applied user defined pnetid SYZ0 [ 203.552943][T16682] smc: net device bond0 erased user defined pnetid SYZ0 [ 203.574645][T16682] netlink: 'syz.1.3160': attribute type 1 has an invalid length. [ 203.591021][T16686] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 203.618181][T16686] SELinux: failed to load policy [ 203.635734][T16687] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 203.648828][T16687] SELinux: failed to load policy [ 203.811986][T16748] FAULT_INJECTION: forcing a failure. [ 203.811986][T16748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.825706][T16748] CPU: 0 UID: 0 PID: 16748 Comm: syz.4.3174 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.825746][T16748] Tainted: [W]=WARN [ 203.825831][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.825917][T16748] Call Trace: [ 203.825925][T16748] [ 203.825974][T16748] __dump_stack+0x1d/0x30 [ 203.826005][T16748] dump_stack_lvl+0x95/0xd0 [ 203.826030][T16748] dump_stack+0x15/0x1b [ 203.826050][T16748] should_fail_ex+0x265/0x280 [ 203.826098][T16748] should_fail+0xb/0x20 [ 203.826121][T16748] should_fail_usercopy+0x1a/0x20 [ 203.826144][T16748] _copy_from_iter+0xcf/0xe70 [ 203.826169][T16748] ? __build_skb_around+0x164/0x1c0 [ 203.826249][T16748] ? __alloc_skb+0x396/0x4b0 [ 203.826273][T16748] ? __alloc_skb+0x228/0x4b0 [ 203.826297][T16748] pfkey_sendmsg+0x126/0x900 [ 203.826332][T16748] ? avc_has_perm+0xf7/0x180 [ 203.826469][T16748] ? selinux_socket_sendmsg+0x175/0x1b0 [ 203.826503][T16748] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 203.826547][T16748] __sock_sendmsg+0x145/0x180 [ 203.826567][T16748] ____sys_sendmsg+0x31e/0x4a0 [ 203.826746][T16748] ___sys_sendmsg+0x17b/0x1d0 [ 203.826785][T16748] __x64_sys_sendmsg+0xd4/0x160 [ 203.826830][T16748] x64_sys_call+0x17ba/0x3000 [ 203.826866][T16748] do_syscall_64+0xca/0x2b0 [ 203.826943][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.827022][T16748] RIP: 0033:0x7f116b70f749 [ 203.827042][T16748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.827064][T16748] RSP: 002b:00007f116a177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.827089][T16748] RAX: ffffffffffffffda RBX: 00007f116b965fa0 RCX: 00007f116b70f749 [ 203.827106][T16748] RDX: 0000000000044840 RSI: 0000200000000100 RDI: 0000000000000003 [ 203.827189][T16748] RBP: 00007f116a177090 R08: 0000000000000000 R09: 0000000000000000 [ 203.827202][T16748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.827264][T16748] R13: 00007f116b966038 R14: 00007f116b965fa0 R15: 00007ffe82dc0b08 [ 203.827284][T16748] [ 204.072224][T16761] FAULT_INJECTION: forcing a failure. [ 204.072224][T16761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.085437][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.5.3178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.085473][T16761] Tainted: [W]=WARN [ 204.085481][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.085494][T16761] Call Trace: [ 204.085501][T16761] [ 204.085510][T16761] __dump_stack+0x1d/0x30 [ 204.085591][T16761] dump_stack_lvl+0x95/0xd0 [ 204.085617][T16761] dump_stack+0x15/0x1b [ 204.085640][T16761] should_fail_ex+0x265/0x280 [ 204.085666][T16761] should_fail+0xb/0x20 [ 204.085687][T16761] should_fail_usercopy+0x1a/0x20 [ 204.085765][T16761] _copy_from_iter+0xcf/0xe70 [ 204.085790][T16761] ? __alloc_skb+0x396/0x4b0 [ 204.085815][T16761] ? __alloc_skb+0x228/0x4b0 [ 204.085908][T16761] netlink_sendmsg+0x471/0x6b0 [ 204.085954][T16761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.085977][T16761] __sock_sendmsg+0x145/0x180 [ 204.085992][T16761] ____sys_sendmsg+0x31e/0x4a0 [ 204.086014][T16761] ___sys_sendmsg+0x17b/0x1d0 [ 204.086087][T16761] __x64_sys_sendmsg+0xd4/0x160 [ 204.086170][T16761] x64_sys_call+0x17ba/0x3000 [ 204.086188][T16761] do_syscall_64+0xca/0x2b0 [ 204.086212][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.086252][T16761] RIP: 0033:0x7f7b502df749 [ 204.086265][T16761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.086278][T16761] RSP: 002b:00007f7b4ed47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.086293][T16761] RAX: ffffffffffffffda RBX: 00007f7b50535fa0 RCX: 00007f7b502df749 [ 204.086303][T16761] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 204.086311][T16761] RBP: 00007f7b4ed47090 R08: 0000000000000000 R09: 0000000000000000 [ 204.086375][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.086383][T16761] R13: 00007f7b50536038 R14: 00007f7b50535fa0 R15: 00007ffdfcd9ef28 [ 204.086397][T16761] [ 204.309525][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.417249][T16792] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3186: invalid indirect mapped block 4294967295 (level 1) [ 204.432128][T16792] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3186: invalid indirect mapped block 4294967295 (level 1) [ 204.446629][T16792] EXT4-fs (loop5): 2 truncates cleaned up [ 204.453157][T16792] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.457254][T16799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.476973][T16799] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3182: inode has both inline data and extents flags [ 204.493004][T16799] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3182: couldn't read orphan inode 15 (err -117) [ 204.516573][T16799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.545555][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.582421][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.608609][T16809] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3188: invalid block [ 204.621043][T16809] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3188: invalid indirect mapped block 4294967295 (level 1) [ 204.635934][T16809] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3188: invalid indirect mapped block 4294967295 (level 1) [ 204.666860][T16809] EXT4-fs (loop3): 2 truncates cleaned up [ 204.674170][T16809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.743187][T13817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.845394][T16862] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3197: invalid indirect mapped block 4294967295 (level 1) [ 204.868665][T16862] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3197: invalid indirect mapped block 4294967295 (level 1) [ 204.883946][T16862] EXT4-fs (loop5): 2 truncates cleaned up [ 204.891418][T16862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.921346][T16875] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3200: invalid indirect mapped block 4294967295 (level 1) [ 204.935739][T16875] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3200: invalid indirect mapped block 4294967295 (level 1) [ 204.950461][T16875] EXT4-fs (loop2): 2 truncates cleaned up [ 204.956725][T16875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.002708][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.041292][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.069671][T16899] __nla_validate_parse: 34 callbacks suppressed [ 205.069688][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 205.093353][T16899] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3202: invalid indirect mapped block 4294967295 (level 1) [ 205.118392][T16899] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3202: invalid indirect mapped block 4294967295 (level 1) [ 205.133335][T16899] EXT4-fs (loop2): 2 truncates cleaned up [ 205.139553][T16899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.153844][T16905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.164206][T16905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.221173][T16905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.231719][T16905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.275229][T16916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3204'. [ 205.289642][T16916] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3204'. [ 205.299884][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.333667][T16905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.344192][T16905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.414950][T16905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.425389][T16905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.455829][T16944] SELinux: Context system_u:object_r:qemu_device_t:s0 is not valid (left unmapped). [ 205.467142][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3211'. [ 205.502999][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3211'. [ 205.512944][ T3774] Alternate GPT is invalid, using primary GPT. [ 205.519378][ T3774] loop3: p1 p2 p3 [ 205.523113][ T3774] loop3: partition table partially beyond EOD, truncated [ 205.538788][ T6967] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.547138][ T6967] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.550485][T16951] Alternate GPT is invalid, using primary GPT. [ 205.555862][ T6967] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.561681][T16951] loop3: p1 p2 p3 [ 205.569740][ T6967] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.570235][ T6967] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.573564][T16951] loop3: partition table partially beyond EOD, [ 205.581787][ T6967] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.589953][T16951] truncated [ 205.614319][ T6967] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.622606][ T6967] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.665282][T16991] syz.5.3215: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 205.680137][T16991] CPU: 1 UID: 0 PID: 16991 Comm: syz.5.3215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.680265][T16991] Tainted: [W]=WARN [ 205.680274][T16991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.680289][T16991] Call Trace: [ 205.680298][T16991] [ 205.680308][T16991] __dump_stack+0x1d/0x30 [ 205.680339][T16991] dump_stack_lvl+0x95/0xd0 [ 205.680384][T16991] dump_stack+0x15/0x1b [ 205.680409][T16991] warn_alloc+0x12b/0x1a0 [ 205.680442][T16991] __vmalloc_node_range_noprof+0xa0/0x1310 [ 205.680475][T16991] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 205.680585][T16991] ? probe_sched_wakeup+0x85/0xa0 [ 205.680633][T16991] ? ttwu_do_activate+0x1d3/0x210 [ 205.680666][T16991] ? __rcu_read_unlock+0x4f/0x70 [ 205.680688][T16991] ? avc_has_perm_noaudit+0xab/0x130 [ 205.680709][T16991] ? should_fail_ex+0x30/0x280 [ 205.680733][T16991] ? should_failslab+0x8c/0xb0 [ 205.680837][T16991] vmalloc_user_noprof+0x7d/0xb0 [ 205.680864][T16991] ? xskq_create+0x80/0xe0 [ 205.680953][T16991] xskq_create+0x80/0xe0 [ 205.680977][T16991] xsk_init_queue+0x95/0xf0 [ 205.681016][T16991] xsk_setsockopt+0x3f5/0x640 [ 205.681075][T16991] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.681106][T16991] __sys_setsockopt+0x184/0x200 [ 205.681147][T16991] __x64_sys_setsockopt+0x64/0x80 [ 205.681197][T16991] x64_sys_call+0x21d5/0x3000 [ 205.681358][T16991] do_syscall_64+0xca/0x2b0 [ 205.681402][T16991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.681484][T16991] RIP: 0033:0x7f7b502df749 [ 205.681568][T16991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.681619][T16991] RSP: 002b:00007f7b4ed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.681646][T16991] RAX: ffffffffffffffda RBX: 00007f7b50535fa0 RCX: 00007f7b502df749 [ 205.681745][T16991] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 205.681761][T16991] RBP: 00007f7b50363f91 R08: 0000000000000004 R09: 0000000000000000 [ 205.681846][T16991] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.681860][T16991] R13: 00007f7b50536038 R14: 00007f7b50535fa0 R15: 00007ffdfcd9ef28 [ 205.681880][T16991] [ 205.681888][T16991] Mem-Info: [ 205.725211][T16993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 205.727136][T16991] active_anon:11616 inactive_anon:0 isolated_anon:0 [ 205.727136][T16991] active_file:19699 inactive_file:5304 isolated_file:0 [ 205.727136][T16991] unevictable:16364 dirty:228 writeback:0 [ 205.727136][T16991] slab_reclaimable:3554 slab_unreclaimable:16438 [ 205.727136][T16991] mapped:30113 shmem:3319 pagetables:1433 [ 205.727136][T16991] sec_pagetables:0 bounce:0 [ 205.727136][T16991] kernel_misc_reclaimable:0 [ 205.727136][T16991] free:1847962 free_pcp:20449 free_cma:0 [ 205.962171][T16991] Node 0 active_anon:46580kB inactive_anon:0kB active_file:78796kB inactive_file:21216kB unevictable:65456kB isolated(anon):0kB isolated(file):0kB mapped:120452kB dirty:912kB writeback:0kB shmem:13392kB kernel_stack:3856kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.990337][T16991] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.020107][T16991] lowmem_reserve[]: 0 2880 7859 7859 [ 206.025521][T16991] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 206.056972][T16991] lowmem_reserve[]: 0 0 4978 4978 [ 206.062129][T16991] Node 0 Normal free:4430500kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46580kB inactive_anon:0kB active_file:78796kB inactive_file:21216kB unevictable:65456kB writepending:912kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:78384kB local_pcp:55588kB free_cma:0kB [ 206.095499][T16991] lowmem_reserve[]: 0 0 0 0 [ 206.100114][T16991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.112863][T16991] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 206.129052][T16991] Node 0 Normal: 2199*4kB (UM) 1321*8kB (UME) 931*16kB (UME) 825*32kB (UM) 597*64kB (UME) 392*128kB (UME) 252*256kB (UME) 146*512kB (UME) 89*1024kB (UME) 60*2048kB (UME) 959*4096kB (UM) = 4430388kB [ 206.149237][T16991] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 206.158574][T16991] 44617 total pagecache pages [ 206.163264][T16991] 0 pages in swap cache [ 206.167504][T16991] Free swap = 124996kB [ 206.171758][T16991] Total swap = 124996kB [ 206.176039][T16991] 2097051 pages RAM [ 206.179838][T16991] 0 pages HighMem/MovableOnly [ 206.184587][T16991] 81272 pages reserved [ 206.269010][T17009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3220'. [ 206.286789][T17020] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3222'. [ 206.305319][T17009] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3220: invalid block [ 206.344711][T17009] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3220: invalid indirect mapped block 4294967295 (level 1) [ 206.378596][T17009] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3220: invalid indirect mapped block 4294967295 (level 1) [ 206.394431][T17009] EXT4-fs (loop2): 2 truncates cleaned up [ 206.400892][T17009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.433224][T17009] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3220'. [ 206.503675][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.552739][T17046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3226'. [ 206.625222][T17076] set_capacity_and_notify: 10 callbacks suppressed [ 206.625239][T17076] loop2: detected capacity change from 0 to 512 [ 206.657395][T17076] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3232: invalid indirect mapped block 4294967295 (level 1) [ 206.672033][T17076] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3232: invalid indirect mapped block 4294967295 (level 1) [ 206.686670][T17076] EXT4-fs (loop2): 2 truncates cleaned up [ 206.692867][T17076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.824159][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.987607][T17116] loop5: detected capacity change from 0 to 1024 [ 206.994758][T17116] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 207.043083][T17116] lo speed is unknown, defaulting to 1000 [ 207.899037][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 207.899054][ T29] audit: type=1326 audit(1766925564.205:34443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 207.929091][ T29] audit: type=1326 audit(1766925564.205:34444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 207.952745][ T29] audit: type=1326 audit(1766925564.205:34445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 207.976415][ T29] audit: type=1326 audit(1766925564.205:34446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.000088][ T29] audit: type=1326 audit(1766925564.205:34447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17166 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb376402005 code=0x7ffc0000 [ 208.062892][ T29] audit: type=1326 audit(1766925564.271:34448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.086638][ T29] audit: type=1326 audit(1766925564.271:34449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.110294][ T29] audit: type=1326 audit(1766925564.271:34450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.134088][ T29] audit: type=1326 audit(1766925564.271:34451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.157827][ T29] audit: type=1326 audit(1766925564.271:34452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17162 comm="syz.3.3247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3763cf749 code=0x7ffc0000 [ 208.182031][T17180] loop5: detected capacity change from 0 to 512 [ 208.210791][T17180] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3249: invalid block [ 208.244116][T17194] netlink: 'syz.4.3263': attribute type 39 has an invalid length. [ 208.252459][T17180] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3249: invalid indirect mapped block 4294967295 (level 1) [ 208.267821][T17180] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3249: invalid indirect mapped block 4294967295 (level 1) [ 208.282657][T17180] EXT4-fs (loop5): 2 truncates cleaned up [ 208.289044][T17180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.290417][T17195] loop2: detected capacity change from 0 to 512 [ 208.327484][T17195] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3253: invalid indirect mapped block 4294967295 (level 1) [ 208.351795][T17195] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3253: invalid indirect mapped block 4294967295 (level 1) [ 208.367310][T17197] serio: Serial port ttyS3 [ 208.367464][T17195] EXT4-fs (loop2): 2 truncates cleaned up [ 208.379436][T17195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.406778][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.457797][T17197] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0101 with DS=0x92 [ 208.476554][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.560306][T17230] sch_fq: defrate 0 ignored. [ 208.583256][T17234] loop5: detected capacity change from 0 to 512 [ 208.602242][T17234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3258: invalid indirect mapped block 4294967295 (level 1) [ 208.651601][T17234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3258: invalid indirect mapped block 4294967295 (level 1) [ 208.677155][T17234] EXT4-fs (loop5): 2 truncates cleaned up [ 208.688865][T17234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.765830][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.077785][ T2969] IPVS: starting estimator thread 0... [ 209.146232][T17296] loop2: detected capacity change from 0 to 512 [ 209.173928][T17290] IPVS: using max 2640 ests per chain, 132000 per kthread [ 209.175033][T17296] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3271: invalid indirect mapped block 4294967295 (level 1) [ 209.227274][T17296] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3271: invalid indirect mapped block 4294967295 (level 1) [ 209.242797][T17296] EXT4-fs (loop2): 2 truncates cleaned up [ 209.250371][T17296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.323064][T17310] serio: Serial port ttyS3 [ 209.349523][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.384888][T17321] loop2: detected capacity change from 0 to 512 [ 209.400716][T17321] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3275: invalid block [ 209.414197][T17321] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3275: invalid indirect mapped block 4294967295 (level 1) [ 209.434602][T17321] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3275: invalid indirect mapped block 4294967295 (level 1) [ 209.450970][T17321] EXT4-fs (loop2): 2 truncates cleaned up [ 209.461140][T17321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.581995][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.807878][T17386] loop5: detected capacity change from 0 to 512 [ 209.833126][T17386] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3286: invalid block [ 209.854004][T17386] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3286: invalid indirect mapped block 4294967295 (level 1) [ 209.871778][T17386] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3286: invalid indirect mapped block 4294967295 (level 1) [ 209.886327][T17386] EXT4-fs (loop5): 2 truncates cleaned up [ 209.892894][T17386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.965492][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.091484][T17427] loop5: detected capacity change from 0 to 512 [ 210.116277][T17427] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3294: invalid block [ 210.133395][T17427] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3294: invalid indirect mapped block 4294967295 (level 1) [ 210.236927][T17427] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3294: invalid indirect mapped block 4294967295 (level 1) [ 210.257131][T17427] EXT4-fs (loop5): 2 truncates cleaned up [ 210.263371][T17427] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.368494][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.435637][T17459] FAULT_INJECTION: forcing a failure. [ 210.435637][T17459] name failslab, interval 1, probability 0, space 0, times 0 [ 210.448310][T17459] CPU: 1 UID: 0 PID: 17459 Comm: syz.3.3299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.448349][T17459] Tainted: [W]=WARN [ 210.448358][T17459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.448373][T17459] Call Trace: [ 210.448381][T17459] [ 210.448390][T17459] __dump_stack+0x1d/0x30 [ 210.448451][T17459] dump_stack_lvl+0x95/0xd0 [ 210.448536][T17459] dump_stack+0x15/0x1b [ 210.448557][T17459] should_fail_ex+0x265/0x280 [ 210.448581][T17459] should_failslab+0x8c/0xb0 [ 210.448607][T17459] __kmalloc_cache_noprof+0x65/0x4c0 [ 210.448694][T17459] ? tcf_block_get_ext+0x19e/0xb20 [ 210.448721][T17459] tcf_block_get_ext+0x19e/0xb20 [ 210.448744][T17459] ? tc_modify_qdisc+0xf9c/0x1480 [ 210.448842][T17459] ? rtnetlink_rcv+0x1c/0x30 [ 210.448880][T17459] ? netlink_unicast+0x5c0/0x690 [ 210.448918][T17459] ? __sock_sendmsg+0x145/0x180 [ 210.448940][T17459] ? __pfx_multiq_init+0x10/0x10 [ 210.448975][T17459] tcf_block_get+0x67/0xa0 [ 210.449000][T17459] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 210.449038][T17459] multiq_init+0x58/0x1a0 [ 210.449120][T17459] ? nla_strcmp+0xc3/0xe0 [ 210.449230][T17459] ? __pfx_multiq_init+0x10/0x10 [ 210.449269][T17459] qdisc_create+0x591/0x9e0 [ 210.449299][T17459] tc_modify_qdisc+0xf9c/0x1480 [ 210.449336][T17459] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 210.449440][T17459] rtnetlink_rcv_msg+0x65a/0x6d0 [ 210.449542][T17459] netlink_rcv_skb+0x123/0x220 [ 210.449576][T17459] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.449607][T17459] rtnetlink_rcv+0x1c/0x30 [ 210.449658][T17459] netlink_unicast+0x5c0/0x690 [ 210.449693][T17459] netlink_sendmsg+0x58b/0x6b0 [ 210.449735][T17459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.449854][T17459] __sock_sendmsg+0x145/0x180 [ 210.449948][T17459] ____sys_sendmsg+0x31e/0x4a0 [ 210.449985][T17459] ___sys_sendmsg+0x17b/0x1d0 [ 210.450083][T17459] __x64_sys_sendmsg+0xd4/0x160 [ 210.450163][T17459] x64_sys_call+0x17ba/0x3000 [ 210.450192][T17459] do_syscall_64+0xca/0x2b0 [ 210.450227][T17459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.450281][T17459] RIP: 0033:0x7fb3763cf749 [ 210.450302][T17459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.450326][T17459] RSP: 002b:00007fb374e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.450352][T17459] RAX: ffffffffffffffda RBX: 00007fb376625fa0 RCX: 00007fb3763cf749 [ 210.450366][T17459] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 000000000000000a [ 210.450458][T17459] RBP: 00007fb374e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.450474][T17459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.450488][T17459] R13: 00007fb376626038 R14: 00007fb376625fa0 R15: 00007ffd74541b78 [ 210.450506][T17459] [ 210.820977][T17469] __nla_validate_parse: 20 callbacks suppressed [ 210.820993][T17469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3301'. [ 210.842862][T17469] loop5: detected capacity change from 0 to 512 [ 210.870080][T17469] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3301: invalid indirect mapped block 4294967295 (level 1) [ 210.893705][T17469] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3301: invalid indirect mapped block 4294967295 (level 1) [ 210.927745][T17473] Invalid ELF header len 8 [ 210.937934][T17469] EXT4-fs (loop5): 2 truncates cleaned up [ 210.944112][T17469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.991351][T17479] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3303: error while reading EA inode 32 err=-116 [ 211.021030][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3304'. [ 211.036537][T17479] EXT4-fs (loop2): Remounting filesystem read-only [ 211.049066][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.060118][T17479] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 211.070925][T17479] EXT4-fs (loop2): 1 orphan inode deleted [ 211.077602][T17479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.198298][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.221821][T17492] SELinux: failed to load policy [ 211.279867][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3309'. [ 211.303509][T17516] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3309: invalid indirect mapped block 4294967295 (level 1) [ 211.328168][T17516] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3309: invalid indirect mapped block 4294967295 (level 1) [ 211.343507][T17516] EXT4-fs (loop2): 2 truncates cleaned up [ 211.350032][T17516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.431482][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3309'. [ 211.454491][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3314'. [ 211.506452][T17520] SELinux: failed to load policy [ 211.519082][T17532] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3314: invalid block [ 211.560169][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 211.654189][T17532] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3314: invalid indirect mapped block 4294967295 (level 1) [ 211.689972][T17532] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3314: invalid indirect mapped block 4294967295 (level 1) [ 211.714564][T17532] EXT4-fs (loop5): 2 truncates cleaned up [ 211.720899][T17547] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3315: invalid block [ 211.735931][T17547] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3315: invalid indirect mapped block 4294967295 (level 1) [ 211.773058][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3316'. [ 211.793447][T17547] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3315: invalid indirect mapped block 4294967295 (level 1) [ 211.815021][T17547] EXT4-fs (loop2): 2 truncates cleaned up [ 211.820632][T17560] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 211.868618][T17562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3318'. [ 211.882998][T17560] SELinux: failed to load policy [ 211.918369][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3320'. [ 211.938643][T17573] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3320: invalid block [ 211.965062][T17573] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3320: invalid indirect mapped block 4294967295 (level 1) [ 212.013293][T17573] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3320: invalid indirect mapped block 4294967295 (level 1) [ 212.027930][T17573] EXT4-fs (loop5): 2 truncates cleaned up [ 212.074191][T17600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3323'. [ 212.137007][T17601] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 212.147542][T17601] SELinux: failed to load policy [ 212.391809][T17653] set_capacity_and_notify: 5 callbacks suppressed [ 212.391829][T17653] loop2: detected capacity change from 0 to 512 [ 212.407982][T17653] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3336: invalid block [ 212.421093][T17653] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3336: invalid indirect mapped block 4294967295 (level 1) [ 212.436365][T17653] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3336: invalid indirect mapped block 4294967295 (level 1) [ 212.453981][T17653] EXT4-fs (loop2): 2 truncates cleaned up [ 212.581614][T17673] Cannot find set identified by id 65534 to match [ 212.622388][T17678] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 212.648613][T17678] SELinux: failed to load policy [ 212.785524][T17692] serio: Serial port ttyS3 [ 212.899201][T17712] loop2: detected capacity change from 0 to 512 [ 212.910134][T17714] sch_fq: defrate 0 ignored. [ 212.929279][T17712] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3348: invalid indirect mapped block 4294967295 (level 1) [ 212.943507][T17712] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3348: invalid indirect mapped block 4294967295 (level 1) [ 212.960911][T17712] EXT4-fs (loop2): 2 truncates cleaned up [ 212.985303][T17725] loop5: detected capacity change from 0 to 512 [ 212.998683][T17725] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3353: invalid block [ 213.012599][T17725] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3353: invalid indirect mapped block 4294967295 (level 1) [ 213.028830][T17725] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3353: invalid indirect mapped block 4294967295 (level 1) [ 213.059452][T17725] EXT4-fs (loop5): 2 truncates cleaned up [ 213.148718][T17740] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 213.161116][T17740] SELinux: failed to load policy [ 213.257884][T17761] serio: Serial port ttyS3 [ 213.382883][T17785] loop2: detected capacity change from 0 to 512 [ 213.394029][ T29] kauditd_printk_skb: 920 callbacks suppressed [ 213.394047][ T29] audit: type=1326 audit(1766925569.350:35373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.394112][T17781] loop5: detected capacity change from 0 to 512 [ 213.401360][ T29] audit: type=1326 audit(1766925569.359:35374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.463832][T17781] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3366: invalid indirect mapped block 4294967295 (level 1) [ 213.479812][T17788] sch_fq: defrate 0 ignored. [ 213.488848][ T29] audit: type=1326 audit(1766925569.406:35375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.493059][T17781] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3366: invalid indirect mapped block 4294967295 (level 1) [ 213.512543][ T29] audit: type=1326 audit(1766925569.406:35376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.527723][T17785] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3377: invalid indirect mapped block 4294967295 (level 1) [ 213.550234][ T29] audit: type=1326 audit(1766925569.406:35377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.550271][ T29] audit: type=1326 audit(1766925569.406:35378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.579727][T17785] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3377: invalid indirect mapped block 4294967295 (level 1) [ 213.587862][ T29] audit: type=1326 audit(1766925569.406:35380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.612883][T17785] EXT4-fs (loop2): 2 truncates cleaned up [ 213.625633][ T29] audit: type=1326 audit(1766925569.406:35379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.665493][T17781] EXT4-fs (loop5): 2 truncates cleaned up [ 213.678858][ T29] audit: type=1326 audit(1766925569.415:35381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.678896][ T29] audit: type=1326 audit(1766925569.415:35382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17776 comm="syz.1.3365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 213.894176][T17832] serio: Serial port ttyS3 [ 213.922851][T17836] loop5: detected capacity change from 0 to 512 [ 213.935027][T17836] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3379: invalid indirect mapped block 4294967295 (level 1) [ 213.951176][T17836] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3379: invalid indirect mapped block 4294967295 (level 1) [ 213.976766][T17836] EXT4-fs (loop5): 2 truncates cleaned up [ 214.068175][T17857] sch_fq: defrate 0 ignored. [ 214.251191][T17889] serio: Serial port ttyS3 [ 214.401446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.451660][T17923] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 214.462399][T17923] SELinux: failed to load policy [ 214.520064][T17930] serio: Serial port ttyS3 [ 214.556544][T17934] IPv6: Can't replace route, no match found [ 214.595810][T17940] loop2: detected capacity change from 0 to 512 [ 214.614810][T17940] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3404: invalid indirect mapped block 4294967295 (level 1) [ 214.630230][T17940] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3404: invalid indirect mapped block 4294967295 (level 1) [ 214.645351][T17940] EXT4-fs (loop2): 2 truncates cleaned up [ 214.710924][T17955] lo speed is unknown, defaulting to 1000 [ 214.816550][T17955] lo speed is unknown, defaulting to 1000 [ 214.930132][T18032] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 214.946916][T18032] SELinux: failed to load policy [ 214.964279][T18041] serio: Serial port ttyS3 [ 215.166607][T18071] loop5: detected capacity change from 0 to 512 [ 215.189440][T18071] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3421: invalid indirect mapped block 4294967295 (level 1) [ 215.229344][T18071] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3421: invalid indirect mapped block 4294967295 (level 1) [ 215.279621][T18071] EXT4-fs (loop5): 2 truncates cleaned up [ 215.287565][T18091] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 215.313056][T18091] SELinux: failed to load policy [ 215.326460][T18095] loop2: detected capacity change from 0 to 512 [ 215.339467][T18102] IPv6: Can't replace route, no match found [ 215.347149][T18095] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3426: invalid indirect mapped block 4294967295 (level 1) [ 215.381943][T18109] serio: Serial port ttyS3 [ 215.388772][T18095] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3426: invalid indirect mapped block 4294967295 (level 1) [ 215.414668][T18095] EXT4-fs (loop2): 2 truncates cleaned up [ 215.538633][T18132] loop2: detected capacity change from 0 to 512 [ 215.581011][T18132] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3433: invalid indirect mapped block 4294967295 (level 1) [ 215.632620][T18132] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3433: invalid indirect mapped block 4294967295 (level 1) [ 215.697764][T18132] EXT4-fs (loop2): 2 truncates cleaned up [ 215.708275][T18148] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3436: error while reading EA inode 32 err=-116 [ 215.748945][T18148] EXT4-fs (loop5): Remounting filesystem read-only [ 215.773109][T18148] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 215.789667][T18148] EXT4-fs (loop5): 1 orphan inode deleted [ 215.922158][T18181] serio: Serial port ttyS3 [ 215.936921][T18174] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3440: invalid block [ 215.971620][T18174] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3440: invalid indirect mapped block 4294967295 (level 1) [ 216.038765][T18174] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3440: invalid indirect mapped block 4294967295 (level 1) [ 216.056481][T18174] EXT4-fs (loop2): 2 truncates cleaned up [ 216.079535][T18202] FAULT_INJECTION: forcing a failure. [ 216.079535][T18202] name failslab, interval 1, probability 0, space 0, times 0 [ 216.092357][T18202] CPU: 0 UID: 0 PID: 18202 Comm: syz.3.3445 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.092405][T18202] Tainted: [W]=WARN [ 216.092414][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.092430][T18202] Call Trace: [ 216.092439][T18202] [ 216.092450][T18202] __dump_stack+0x1d/0x30 [ 216.092499][T18202] dump_stack_lvl+0x95/0xd0 [ 216.092521][T18202] dump_stack+0x15/0x1b [ 216.092547][T18202] should_fail_ex+0x265/0x280 [ 216.092643][T18202] should_failslab+0x8c/0xb0 [ 216.092671][T18202] __kmalloc_noprof+0xb9/0x5a0 [ 216.092748][T18202] ? bitmap_zalloc+0x29/0x40 [ 216.092772][T18202] bitmap_zalloc+0x29/0x40 [ 216.092791][T18202] dev_prep_valid_name+0x13a/0x550 [ 216.092886][T18202] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 216.092926][T18202] register_netdevice+0x169/0xdd0 [ 216.093019][T18202] ? ip6_tnl_locate+0x338/0x4a0 [ 216.093086][T18202] ip6_tnl_create2+0x8a/0x290 [ 216.093118][T18202] ip6_tnl_newlink+0x1b4/0x340 [ 216.093220][T18202] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 216.093249][T18202] rtnl_newlink_create+0x1bc/0x620 [ 216.093272][T18202] ? security_capable+0x83/0x90 [ 216.093317][T18202] ? netlink_ns_capable+0x86/0xa0 [ 216.093399][T18202] rtnl_newlink+0xf5b/0x1360 [ 216.093478][T18202] ? xas_load+0x413/0x430 [ 216.093547][T18202] ? xas_load+0x413/0x430 [ 216.093596][T18202] ? __memcg_slab_free_hook+0x135/0x230 [ 216.093619][T18202] ? __rcu_read_unlock+0x4f/0x70 [ 216.093635][T18202] ? avc_has_perm_noaudit+0xab/0x130 [ 216.093661][T18202] ? cred_has_capability+0x210/0x280 [ 216.093686][T18202] ? selinux_capable+0x31/0x40 [ 216.093702][T18202] ? security_capable+0x83/0x90 [ 216.093725][T18202] ? ns_capable+0x7d/0xb0 [ 216.093754][T18202] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.093769][T18202] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 216.093786][T18202] netlink_rcv_skb+0x123/0x220 [ 216.093816][T18202] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.093849][T18202] rtnetlink_rcv+0x1c/0x30 [ 216.093885][T18202] netlink_unicast+0x5c0/0x690 [ 216.093907][T18202] netlink_sendmsg+0x58b/0x6b0 [ 216.093964][T18202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.093987][T18202] __sock_sendmsg+0x145/0x180 [ 216.094003][T18202] ____sys_sendmsg+0x31e/0x4a0 [ 216.094101][T18202] ___sys_sendmsg+0x17b/0x1d0 [ 216.094132][T18202] __x64_sys_sendmsg+0xd4/0x160 [ 216.094230][T18202] x64_sys_call+0x17ba/0x3000 [ 216.094249][T18202] do_syscall_64+0xca/0x2b0 [ 216.094273][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.094361][T18202] RIP: 0033:0x7fb3763cf749 [ 216.094374][T18202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.094393][T18202] RSP: 002b:00007fb374e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.094417][T18202] RAX: ffffffffffffffda RBX: 00007fb376625fa0 RCX: 00007fb3763cf749 [ 216.094433][T18202] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 216.094465][T18202] RBP: 00007fb374e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.094474][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.094483][T18202] R13: 00007fb376626038 R14: 00007fb376625fa0 R15: 00007ffd74541b78 [ 216.094497][T18202] [ 216.519110][T18218] __nla_validate_parse: 32 callbacks suppressed [ 216.519130][T18218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 216.573076][T18218] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3449: invalid block [ 216.601025][T18218] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3449: invalid indirect mapped block 4294967295 (level 1) [ 216.625435][T18218] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3449: invalid indirect mapped block 4294967295 (level 1) [ 216.655113][T18226] EXT4-fs: Ignoring removed orlov option [ 216.664655][T18240] serio: Serial port ttyS3 [ 216.670771][T18218] EXT4-fs (loop2): 2 truncates cleaned up [ 216.710429][T18244] sch_fq: defrate 0 ignored. [ 216.849325][T18261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3458'. [ 216.859922][T18262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3459'. [ 216.871941][T18261] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3458: invalid block [ 216.884640][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3459'. [ 216.913953][T18261] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3458: invalid indirect mapped block 4294967295 (level 1) [ 216.929779][T18261] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3458: invalid indirect mapped block 4294967295 (level 1) [ 216.944373][T18261] EXT4-fs (loop2): 2 truncates cleaned up [ 216.972636][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3461'. [ 217.284056][T18311] serio: Serial port ttyS3 [ 217.299561][T18309] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3464: error while reading EA inode 32 err=-116 [ 217.321950][T18309] EXT4-fs (loop2): Remounting filesystem read-only [ 217.328865][T18309] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 217.396682][T18309] EXT4-fs (loop2): 1 orphan inode deleted [ 217.503852][T18323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3468'. [ 217.519707][T18328] sch_fq: defrate 0 ignored. [ 217.520889][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 217.644615][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3473'. [ 217.673909][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 217.727053][T18358] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3473: invalid block [ 217.747767][T18358] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3473: invalid indirect mapped block 4294967295 (level 1) [ 217.770023][T18358] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3473: invalid indirect mapped block 4294967295 (level 1) [ 217.803984][T18366] serio: Serial port ttyS3 [ 217.809703][T18358] EXT4-fs (loop2): 2 truncates cleaned up [ 217.899990][T18382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3481'. [ 217.916187][T18382] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.926144][T18382] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.948164][T18388] FAULT_INJECTION: forcing a failure. [ 217.948164][T18388] name failslab, interval 1, probability 0, space 0, times 0 [ 217.961052][T18388] CPU: 0 UID: 0 PID: 18388 Comm: syz.1.3482 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.961150][T18388] Tainted: [W]=WARN [ 217.961159][T18388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.961183][T18388] Call Trace: [ 217.961189][T18388] [ 217.961198][T18388] __dump_stack+0x1d/0x30 [ 217.961226][T18388] dump_stack_lvl+0x95/0xd0 [ 217.961249][T18388] dump_stack+0x15/0x1b [ 217.961286][T18388] should_fail_ex+0x265/0x280 [ 217.961315][T18388] should_failslab+0x8c/0xb0 [ 217.961343][T18388] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 217.961382][T18388] ? sidtab_sid2str_get+0xa0/0x130 [ 217.961413][T18388] ? skb_put+0xa9/0xf0 [ 217.961439][T18388] kmemdup_noprof+0x2b/0x70 [ 217.961463][T18388] sidtab_sid2str_get+0xa0/0x130 [ 217.961514][T18388] security_sid_to_context_core+0x1eb/0x2e0 [ 217.961548][T18388] security_sid_to_context+0x27/0x40 [ 217.961579][T18388] avc_audit_post_callback+0x9d/0x520 [ 217.961673][T18388] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 217.961721][T18388] common_lsm_audit+0x1bb/0x230 [ 217.961751][T18388] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 217.961795][T18388] slow_avc_audit+0x104/0x140 [ 217.961880][T18388] avc_has_perm+0x13a/0x180 [ 217.961905][T18388] selinux_socket_sendmsg+0x175/0x1b0 [ 217.961943][T18388] security_socket_sendmsg+0x48/0x80 [ 217.962015][T18388] __sock_sendmsg+0x30/0x180 [ 217.962041][T18388] ____sys_sendmsg+0x31e/0x4a0 [ 217.962075][T18388] ___sys_sendmsg+0x17b/0x1d0 [ 217.962116][T18388] __x64_sys_sendmsg+0xd4/0x160 [ 217.962155][T18388] x64_sys_call+0x17ba/0x3000 [ 217.962224][T18388] do_syscall_64+0xca/0x2b0 [ 217.962261][T18388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.962286][T18388] RIP: 0033:0x7fa12e46f749 [ 217.962418][T18388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.962439][T18388] RSP: 002b:00007fa12ceb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.962461][T18388] RAX: ffffffffffffffda RBX: 00007fa12e6c6090 RCX: 00007fa12e46f749 [ 217.962501][T18388] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 217.962515][T18388] RBP: 00007fa12ceb6090 R08: 0000000000000000 R09: 0000000000000000 [ 217.962530][T18388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.962544][T18388] R13: 00007fa12e6c6128 R14: 00007fa12e6c6090 R15: 00007fffc390a958 [ 217.962564][T18388] [ 218.218241][T18372] program syz.3.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.275292][T18382] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.285335][T18382] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.301958][T18397] set_capacity_and_notify: 8 callbacks suppressed [ 218.301977][T18397] loop2: detected capacity change from 0 to 512 [ 218.352467][T18397] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3485: invalid indirect mapped block 4294967295 (level 1) [ 218.370566][T18397] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3485: invalid indirect mapped block 4294967295 (level 1) [ 218.385270][T18397] EXT4-fs (loop2): 2 truncates cleaned up [ 218.392713][T18404] SELinux: failed to load policy [ 218.446204][T18382] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.456163][T18382] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.513949][T18439] serio: Serial port ttyS3 [ 218.524133][T18382] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.534334][T18382] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.612647][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.620952][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.633312][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.641707][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.655834][T18447] IPv6: Can't replace route, no match found [ 218.707956][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.716339][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.725639][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.733867][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.754763][ T29] kauditd_printk_skb: 1239 callbacks suppressed [ 218.754799][ T29] audit: type=1326 audit(1766925574.363:36622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.789800][T18471] SELinux: failed to load policy [ 218.811264][ T29] audit: type=1326 audit(1766925574.363:36623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.834955][ T29] audit: type=1326 audit(1766925574.363:36624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.858791][ T29] audit: type=1326 audit(1766925574.363:36625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.860670][T18481] loop5: detected capacity change from 0 to 512 [ 218.882438][ T29] audit: type=1326 audit(1766925574.363:36626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.912624][ T29] audit: type=1326 audit(1766925574.363:36627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.936341][ T29] audit: type=1326 audit(1766925574.363:36628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.960167][ T29] audit: type=1326 audit(1766925574.363:36629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.983755][ T29] audit: type=1326 audit(1766925574.363:36630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 218.984762][T18486] loop2: detected capacity change from 0 to 512 [ 219.007711][ T29] audit: type=1326 audit(1766925574.373:36631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18470 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 219.048783][T18481] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3503: invalid indirect mapped block 4294967295 (level 1) [ 219.079258][T18497] serio: Serial port ttyS3 [ 219.090918][T18481] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3503: invalid indirect mapped block 4294967295 (level 1) [ 219.101304][T18486] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3502: invalid block [ 219.117749][T18486] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3502: invalid indirect mapped block 4294967295 (level 1) [ 219.119498][T18481] EXT4-fs (loop5): 2 truncates cleaned up [ 219.132517][T18486] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3502: invalid indirect mapped block 4294967295 (level 1) [ 219.153118][T18486] EXT4-fs (loop2): 2 truncates cleaned up [ 219.183510][T18509] wireguard0: entered promiscuous mode [ 219.189138][T18509] wireguard0: entered allmulticast mode [ 219.219488][T18520] IPv6: Can't replace route, no match found [ 219.255504][T18528] tmpfs: Unsupported parameter 'huge' [ 219.264018][T18528] veth1_to_bond: entered promiscuous mode [ 219.281204][T18527] veth1_to_bond: left promiscuous mode [ 219.336917][T18547] loop5: detected capacity change from 0 to 128 [ 219.392269][T18554] serio: Serial port ttyS3 [ 219.431309][ T53] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.441846][ T53] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.453959][ T53] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.463457][ T53] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.500443][T18579] IPv6: Can't replace route, no match found [ 219.558120][T18582] sch_fq: defrate 0 ignored. [ 219.578571][T18592] loop5: detected capacity change from 0 to 512 [ 219.594835][T18592] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3524: invalid indirect mapped block 4294967295 (level 1) [ 219.616688][T18592] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3524: invalid indirect mapped block 4294967295 (level 1) [ 219.640580][T18598] lo speed is unknown, defaulting to 1000 [ 219.647336][T18592] EXT4-fs (loop5): 2 truncates cleaned up [ 219.749183][T18627] netdevsim netdevsim3: Direct firmware load for ./file1 failed with error -2 [ 219.852629][T18638] loop5: detected capacity change from 0 to 256 [ 220.052911][T18665] IPv6: Can't replace route, no match found [ 220.156507][T18667] SELinux: failed to load policy [ 220.216178][T18673] sch_fq: defrate 0 ignored. [ 220.334529][T18689] FAULT_INJECTION: forcing a failure. [ 220.334529][T18689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.348022][T18689] CPU: 1 UID: 0 PID: 18689 Comm: syz.5.3539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.348072][T18689] Tainted: [W]=WARN [ 220.348082][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.348098][T18689] Call Trace: [ 220.348107][T18689] [ 220.348119][T18689] __dump_stack+0x1d/0x30 [ 220.348147][T18689] dump_stack_lvl+0x95/0xd0 [ 220.348183][T18689] dump_stack+0x15/0x1b [ 220.348209][T18689] should_fail_ex+0x265/0x280 [ 220.348236][T18689] should_fail+0xb/0x20 [ 220.348295][T18689] should_fail_usercopy+0x1a/0x20 [ 220.348327][T18689] _copy_to_user+0x20/0xa0 [ 220.348360][T18689] simple_read_from_buffer+0xb5/0x130 [ 220.348388][T18689] proc_fail_nth_read+0x10e/0x150 [ 220.348468][T18689] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 220.348497][T18689] vfs_read+0x1a8/0x770 [ 220.348518][T18689] ? __rcu_read_unlock+0x4f/0x70 [ 220.348591][T18689] ? __fget_files+0x184/0x1c0 [ 220.348688][T18689] ? mutex_lock+0x58/0x90 [ 220.348723][T18689] ksys_read+0xda/0x1a0 [ 220.348749][T18689] __x64_sys_read+0x40/0x50 [ 220.348773][T18689] x64_sys_call+0x2889/0x3000 [ 220.348863][T18689] do_syscall_64+0xca/0x2b0 [ 220.348897][T18689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.348923][T18689] RIP: 0033:0x7f7b502de15c [ 220.348945][T18689] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 220.348969][T18689] RSP: 002b:00007f7b4ed47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 220.349061][T18689] RAX: ffffffffffffffda RBX: 00007f7b50535fa0 RCX: 00007f7b502de15c [ 220.349080][T18689] RDX: 000000000000000f RSI: 00007f7b4ed470a0 RDI: 0000000000000008 [ 220.349168][T18689] RBP: 00007f7b4ed47090 R08: 0000000000000000 R09: 0000000000000000 [ 220.349185][T18689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.349263][T18689] R13: 00007f7b50536038 R14: 00007f7b50535fa0 R15: 00007ffdfcd9ef28 [ 220.349283][T18689] [ 220.603829][T18695] loop5: detected capacity change from 0 to 512 [ 220.640373][T18695] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3541: invalid block [ 220.664581][T18695] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3541: invalid indirect mapped block 4294967295 (level 1) [ 220.679834][T18695] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3541: invalid indirect mapped block 4294967295 (level 1) [ 220.703097][T18695] EXT4-fs (loop5): 2 truncates cleaned up [ 220.737181][T18695] netlink: 'syz.5.3541': attribute type 32 has an invalid length. [ 220.893442][T18730] SELinux: failed to load policy [ 220.975452][T18745] sch_fq: defrate 0 ignored. [ 221.095591][T18768] IPv6: Can't replace route, no match found [ 221.196383][T18774] netlink: 'syz.1.3560': attribute type 32 has an invalid length. [ 221.307597][T18782] SELinux: policydb magic number 0x40 does not match expected magic number 0xf97cff8c [ 221.329101][T18782] SELinux: failed to load policy [ 221.494026][T18809] sch_fq: defrate 0 ignored. [ 221.495683][T18807] infiniband syz0: set down [ 221.503650][T18807] infiniband syz0: added bond_slave_0 [ 221.528272][T18807] RDS/IB: syz0: added [ 221.538693][T18807] smc: adding ib device syz0 with port count 1 [ 221.538973][T18804] SELinux: failed to load policy [ 221.564481][T18807] smc: ib device syz0 port 1 has no pnetid [ 221.599763][T18816] IPv6: Can't replace route, no match found [ 221.672324][T18818] netlink: 'syz.1.3572': attribute type 32 has an invalid length. [ 221.833417][T18847] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 221.866789][T18849] loop2: detected capacity change from 0 to 512 [ 221.878512][T18857] IPv6: Can't replace route, no match found [ 221.892306][T18849] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3581: invalid indirect mapped block 4294967295 (level 1) [ 221.918005][T18855] sch_fq: defrate 0 ignored. [ 221.928857][T18863] netlink: 'syz.4.3585': attribute type 1 has an invalid length. [ 221.936705][T18863] __nla_validate_parse: 28 callbacks suppressed [ 221.936723][T18863] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3585'. [ 221.948589][T18849] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3581: invalid indirect mapped block 4294967295 (level 1) [ 221.975985][T18849] EXT4-fs (loop2): 2 truncates cleaned up [ 222.035821][T18881] syzkaller0: entered allmulticast mode [ 222.043599][T18881] syzkaller0 (unregistering): left allmulticast mode [ 222.128318][T18898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'. [ 222.147028][T18889] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3592'. [ 222.181713][T18911] IPv6: Can't replace route, no match found [ 222.259842][T18918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'. [ 222.269964][T18917] sch_fq: defrate 0 ignored. [ 222.287352][T18918] loop2: detected capacity change from 0 to 512 [ 222.310817][T18927] netlink: 19 bytes leftover after parsing attributes in process `syz.4.3601'. [ 222.328250][T18918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3599: invalid indirect mapped block 4294967295 (level 1) [ 222.342686][T18918] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3599: invalid indirect mapped block 4294967295 (level 1) [ 222.357652][T18918] EXT4-fs (loop2): 2 truncates cleaned up [ 222.446090][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3606'. [ 222.498224][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3608'. [ 222.510545][T18946] SELinux: failed to load policy [ 222.519532][T18951] loop2: detected capacity change from 0 to 512 [ 222.537847][T18951] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3608: invalid indirect mapped block 4294967295 (level 1) [ 222.584740][T18951] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3608: invalid indirect mapped block 4294967295 (level 1) [ 222.626074][T18951] EXT4-fs (loop2): 2 truncates cleaned up [ 222.689279][T18951] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3608'. [ 222.848630][T18996] IPv6: Can't replace route, no match found [ 222.871566][T18998] IPv6: Can't replace route, no match found [ 222.886214][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 222.906692][T19001] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3621: invalid indirect mapped block 4294967295 (level 1) [ 222.925488][T19006] program syz.3.3622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.969207][T19001] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3621: invalid indirect mapped block 4294967295 (level 1) [ 223.029256][T19001] EXT4-fs (loop2): 2 truncates cleaned up [ 223.137576][T19025] FAULT_INJECTION: forcing a failure. [ 223.137576][T19025] name failslab, interval 1, probability 0, space 0, times 0 [ 223.150365][T19025] CPU: 0 UID: 0 PID: 19025 Comm: syz.4.3627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.150404][T19025] Tainted: [W]=WARN [ 223.150413][T19025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.150426][T19025] Call Trace: [ 223.150484][T19025] [ 223.150495][T19025] __dump_stack+0x1d/0x30 [ 223.150525][T19025] dump_stack_lvl+0x95/0xd0 [ 223.150573][T19025] dump_stack+0x15/0x1b [ 223.150595][T19025] should_fail_ex+0x265/0x280 [ 223.150625][T19025] should_failslab+0x8c/0xb0 [ 223.150652][T19025] __kmalloc_noprof+0xb9/0x5a0 [ 223.150679][T19025] ? alloc_pipe_info+0x1c9/0x340 [ 223.150765][T19025] ? alloc_pipe_info+0xae/0x340 [ 223.150786][T19025] alloc_pipe_info+0x1c9/0x340 [ 223.150809][T19025] splice_direct_to_actor+0x592/0x680 [ 223.150886][T19025] ? __pfx_direct_splice_actor+0x10/0x10 [ 223.150916][T19025] ? selinux_file_permission+0x2ee/0x320 [ 223.150948][T19025] do_splice_direct+0xda/0x150 [ 223.150968][T19025] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 223.151073][T19025] do_sendfile+0x380/0x650 [ 223.151106][T19025] __x64_sys_sendfile64+0x105/0x150 [ 223.151137][T19025] x64_sys_call+0x2db1/0x3000 [ 223.151164][T19025] do_syscall_64+0xca/0x2b0 [ 223.151208][T19025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.151275][T19025] RIP: 0033:0x7f116b70f749 [ 223.151292][T19025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.151310][T19025] RSP: 002b:00007f116a177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.151334][T19025] RAX: ffffffffffffffda RBX: 00007f116b965fa0 RCX: 00007f116b70f749 [ 223.151384][T19025] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 223.151400][T19025] RBP: 00007f116a177090 R08: 0000000000000000 R09: 0000000000000000 [ 223.151416][T19025] R10: 000000007ffff088 R11: 0000000000000246 R12: 0000000000000001 [ 223.151489][T19025] R13: 00007f116b966038 R14: 00007f116b965fa0 R15: 00007ffe82dc0b08 [ 223.151511][T19025] [ 223.360702][T19029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 223.382012][T19029] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3628: invalid indirect mapped block 4294967295 (level 1) [ 223.402958][T19029] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3628: invalid indirect mapped block 4294967295 (level 1) [ 223.422048][T19029] EXT4-fs (loop2): 2 truncates cleaned up [ 223.492351][T19052] IPv6: Can't replace route, no match found [ 223.741942][T19086] IPv6: Can't replace route, no match found [ 224.180232][T19134] IPv6: Can't replace route, no match found [ 224.263473][T19140] set_capacity_and_notify: 2 callbacks suppressed [ 224.263488][T19140] loop5: detected capacity change from 0 to 512 [ 224.278441][T19140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 224.289371][T19140] EXT4-fs (loop5): 1 truncate cleaned up [ 224.374765][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 224.374795][ T29] audit: type=1326 audit(1766925579.620:37569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.404767][ T29] audit: type=1326 audit(1766925579.630:37570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.428752][ T29] audit: type=1326 audit(1766925579.648:37571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.452809][ T29] audit: type=1326 audit(1766925579.648:37572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.476613][ T29] audit: type=1326 audit(1766925579.658:37573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.500483][ T29] audit: type=1326 audit(1766925579.658:37574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.532515][ T29] audit: type=1326 audit(1766925579.658:37575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.556288][ T29] audit: type=1326 audit(1766925579.658:37576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.579981][ T29] audit: type=1326 audit(1766925579.658:37577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.603594][ T29] audit: type=1326 audit(1766925579.658:37578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19149 comm="syz.5.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 224.652811][T19158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19158 comm=syz.2.3657 [ 224.675793][T19162] ip6gre1: entered promiscuous mode [ 224.681152][T19162] ip6gre1: entered allmulticast mode [ 224.688903][ T6967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.694823][T19162] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.697052][ T6967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.718142][ T2969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.725935][T19159] netlink: 'syz.2.3657': attribute type 1 has an invalid length. [ 224.787999][T19158] bond0: (slave bridge1): making interface the new active one [ 224.796282][T19158] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 224.818630][T19210] loop5: detected capacity change from 0 to 512 [ 224.841186][T19210] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3660: invalid indirect mapped block 4294967295 (level 1) [ 224.893610][T19210] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3660: invalid indirect mapped block 4294967295 (level 1) [ 224.909532][T19210] EXT4-fs (loop5): 2 truncates cleaned up [ 225.092376][T19235] IPv6: Can't replace route, no match found [ 225.340425][T19241] sch_fq: defrate 0 ignored. [ 225.421335][T19258] pimreg: entered allmulticast mode [ 225.493956][T19259] SELinux: failed to load policy [ 225.503198][T19268] pimreg: left allmulticast mode [ 225.605403][ T2969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.653808][T19299] IPv6: Can't replace route, no match found [ 225.691076][ T2969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 225.756806][T19311] SELinux: failed to load policy [ 225.758874][T19308] vhci_hcd vhci_hcd.4: invalid port number 253 [ 225.768148][T19308] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 225.800577][T19323] FAULT_INJECTION: forcing a failure. [ 225.800577][T19323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.813736][T19323] CPU: 0 UID: 0 PID: 19323 Comm: syz.5.3690 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.813775][T19323] Tainted: [W]=WARN [ 225.813783][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.813798][T19323] Call Trace: [ 225.813806][T19323] [ 225.813815][T19323] __dump_stack+0x1d/0x30 [ 225.813856][T19323] dump_stack_lvl+0x95/0xd0 [ 225.813878][T19323] dump_stack+0x15/0x1b [ 225.813901][T19323] should_fail_ex+0x265/0x280 [ 225.813989][T19323] should_fail+0xb/0x20 [ 225.814013][T19323] should_fail_usercopy+0x1a/0x20 [ 225.814038][T19323] _copy_from_user+0x1c/0xb0 [ 225.814083][T19323] __copy_msghdr+0x244/0x300 [ 225.814118][T19323] ___sys_sendmsg+0x109/0x1d0 [ 225.814167][T19323] __sys_sendmmsg+0x178/0x300 [ 225.814281][T19323] __x64_sys_sendmmsg+0x57/0x70 [ 225.814314][T19323] x64_sys_call+0x1e28/0x3000 [ 225.814340][T19323] do_syscall_64+0xca/0x2b0 [ 225.814385][T19323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.814410][T19323] RIP: 0033:0x7f7b502df749 [ 225.814430][T19323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.814517][T19323] RSP: 002b:00007f7b4ed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 225.814595][T19323] RAX: ffffffffffffffda RBX: 00007f7b50535fa0 RCX: 00007f7b502df749 [ 225.814629][T19323] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000007 [ 225.814642][T19323] RBP: 00007f7b4ed47090 R08: 0000000000000000 R09: 0000000000000000 [ 225.814655][T19323] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 225.814668][T19323] R13: 00007f7b50536038 R14: 00007f7b50535fa0 R15: 00007ffdfcd9ef28 [ 225.814691][T19323] [ 226.087254][T19335] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 226.224937][T19375] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.238636][T19373] SELinux: failed to load policy [ 226.280848][T19382] loop2: detected capacity change from 0 to 512 [ 226.289708][T19382] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3705: invalid block [ 226.310036][T19375] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.315745][T19382] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3705: invalid indirect mapped block 4294967295 (level 1) [ 226.335300][T19382] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3705: invalid indirect mapped block 4294967295 (level 1) [ 226.351178][T19382] EXT4-fs (loop2): 2 truncates cleaned up [ 226.378589][T19375] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.435360][T19395] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 226.451811][T19395] bond1 (unregistering): Released all slaves [ 226.464570][T19446] bridge_slave_1: left allmulticast mode [ 226.470376][T19446] bridge_slave_1: left promiscuous mode [ 226.476232][T19446] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.486146][T19446] bridge_slave_0: left allmulticast mode [ 226.492059][T19446] bridge_slave_0: left promiscuous mode [ 226.498194][T19446] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.551405][T19375] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.689187][ T6253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.707073][ T1597] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.717405][ T1597] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.730832][ T1597] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.741616][T19498] SELinux: failed to load policy [ 226.764512][T19516] IPv6: Can't replace route, no match found [ 227.154974][T19577] IPv6: Can't replace route, no match found [ 227.156270][T19579] loop5: detected capacity change from 0 to 512 [ 227.185383][T19579] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.207773][T19587] vhci_hcd vhci_hcd.3: invalid port number 9 [ 227.293471][T19603] FAULT_INJECTION: forcing a failure. [ 227.293471][T19603] name failslab, interval 1, probability 0, space 0, times 0 [ 227.306195][T19603] CPU: 1 UID: 0 PID: 19603 Comm: syz.5.3738 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.306288][T19603] Tainted: [W]=WARN [ 227.306297][T19603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.306310][T19603] Call Trace: [ 227.306318][T19603] [ 227.306328][T19603] __dump_stack+0x1d/0x30 [ 227.306436][T19603] dump_stack_lvl+0x95/0xd0 [ 227.306460][T19603] dump_stack+0x15/0x1b [ 227.306483][T19603] should_fail_ex+0x265/0x280 [ 227.306513][T19603] should_failslab+0x8c/0xb0 [ 227.306545][T19603] ? __pfx_free_modprobe_argv+0x10/0x10 [ 227.306618][T19603] __kmalloc_cache_noprof+0x65/0x4c0 [ 227.306710][T19603] ? call_usermodehelper_setup+0x72/0x190 [ 227.306745][T19603] ? __pfx_free_modprobe_argv+0x10/0x10 [ 227.306774][T19603] call_usermodehelper_setup+0x72/0x190 [ 227.306807][T19603] __request_module+0x264/0x3e0 [ 227.306830][T19603] ? __rcu_read_unlock+0x4f/0x70 [ 227.306868][T19603] ? mutex_unlock+0x4f/0x90 [ 227.306902][T19603] blk_request_module+0xdf/0x1e0 [ 227.307008][T19603] blkdev_get_no_open+0x4b/0x100 [ 227.307036][T19603] bdev_file_open_by_dev+0xa5/0x250 [ 227.307061][T19603] swsusp_check+0x3f/0x290 [ 227.307084][T19603] software_resume+0x41/0x2f0 [ 227.307154][T19603] resume_store+0x2d9/0x3d0 [ 227.307175][T19603] ? __pfx_resume_store+0x10/0x10 [ 227.307195][T19603] kobj_attr_store+0x4a/0x70 [ 227.307218][T19603] ? __pfx_kobj_attr_store+0x10/0x10 [ 227.307269][T19603] sysfs_kf_write+0xfe/0x120 [ 227.307298][T19603] ? __pfx_sysfs_kf_write+0x10/0x10 [ 227.307369][T19603] kernfs_fop_write_iter+0x1eb/0x300 [ 227.307405][T19603] iter_file_splice_write+0x66b/0xa20 [ 227.307443][T19603] ? __pfx_iter_file_splice_write+0x10/0x10 [ 227.307531][T19603] direct_splice_actor+0x156/0x2a0 [ 227.307556][T19603] ? shmem_file_write_iter+0xd1/0xf0 [ 227.307595][T19603] splice_direct_to_actor+0x312/0x680 [ 227.307621][T19603] ? __pfx_direct_splice_actor+0x10/0x10 [ 227.307695][T19603] do_splice_direct+0xda/0x150 [ 227.307756][T19603] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 227.307784][T19603] do_sendfile+0x380/0x650 [ 227.307816][T19603] __x64_sys_sendfile64+0x105/0x150 [ 227.307842][T19603] x64_sys_call+0x2db1/0x3000 [ 227.307915][T19603] do_syscall_64+0xca/0x2b0 [ 227.308001][T19603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.308028][T19603] RIP: 0033:0x7f7b502df749 [ 227.308048][T19603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.308072][T19603] RSP: 002b:00007f7b4ed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 227.308177][T19603] RAX: ffffffffffffffda RBX: 00007f7b50535fa0 RCX: 00007f7b502df749 [ 227.308191][T19603] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007 [ 227.308269][T19603] RBP: 00007f7b4ed47090 R08: 0000000000000000 R09: 0000000000000000 [ 227.308285][T19603] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000002 [ 227.308304][T19603] R13: 00007f7b50536038 R14: 00007f7b50535fa0 R15: 00007ffdfcd9ef28 [ 227.308353][T19603] [ 227.765048][T19626] __nla_validate_parse: 9 callbacks suppressed [ 227.765067][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3740'. [ 227.785436][T19626] loop5: detected capacity change from 0 to 512 [ 227.803662][T19626] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3740: invalid indirect mapped block 4294967295 (level 1) [ 227.823451][T19626] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3740: invalid indirect mapped block 4294967295 (level 1) [ 227.838243][T19626] EXT4-fs (loop5): 2 truncates cleaned up [ 227.852370][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3742'. [ 227.945870][T19657] IPv6: Can't replace route, no match found [ 227.975703][T19661] loop2: detected capacity change from 0 to 512 [ 227.998416][T19661] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.182567][T19691] loop5: detected capacity change from 0 to 512 [ 228.193540][T19691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 228.223178][T19691] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.3753: corrupted in-inode xattr: invalid ea_ino [ 228.237132][T19691] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3753: couldn't read orphan inode 15 (err -117) [ 228.272148][ T12] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 228.294548][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 2048 with error 28 [ 228.307594][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 228.307594][ T12] [ 228.317336][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 228.323630][ T12] EXT4-fs (loop2): Free/Dirty block details [ 228.329902][ T12] EXT4-fs (loop2): free_blocks=65280 [ 228.335271][ T12] EXT4-fs (loop2): dirty_blocks=4095 [ 228.340620][ T12] EXT4-fs (loop2): Block reservation details [ 228.346821][ T12] EXT4-fs (loop2): i_reserved_data_blocks=4095 [ 228.423893][T19710] lo speed is unknown, defaulting to 1000 [ 228.496848][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 67586 with max blocks 2046 with error 28 [ 228.509743][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 228.509743][ T12] [ 228.603725][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3757'. [ 228.632861][T19737] loop5: detected capacity change from 0 to 512 [ 228.648793][T19744] IPv6: Can't replace route, no match found [ 228.661721][T19737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3757: invalid indirect mapped block 4294967295 (level 1) [ 228.702834][T19737] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3757: invalid indirect mapped block 4294967295 (level 1) [ 228.731091][T19737] EXT4-fs (loop5): 2 truncates cleaned up [ 228.745188][T19750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3759'. [ 228.758604][T19756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3761'. [ 228.758726][T19750] loop2: detected capacity change from 0 to 512 [ 228.768341][T19757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=19757 comm=syz.1.3761 [ 228.799971][T19750] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3759: invalid indirect mapped block 4294967295 (level 1) [ 228.819904][T19750] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3759: invalid indirect mapped block 4294967295 (level 1) [ 228.835378][T19750] EXT4-fs (loop2): 2 truncates cleaned up [ 228.877631][T19767] SELinux: failed to load policy [ 228.919765][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 228.970917][T19787] loop2: detected capacity change from 0 to 1024 [ 229.056970][ T3411] Process accounting resumed [ 229.101646][T19813] IPv6: Can't replace route, no match found [ 229.111878][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.223947][T19821] sch_fq: defrate 32767 ignored. [ 229.257628][T19827] SELinux: failed to load policy [ 229.331195][T19837] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3781'. [ 229.332734][T19785] Process accounting resumed [ 229.417776][T19847] IPv6: Can't replace route, no match found [ 229.558177][T19865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3787'. [ 229.720750][T19891] SELinux: failed to load policy [ 229.727118][ T29] kauditd_printk_skb: 1213 callbacks suppressed [ 229.727134][ T29] audit: type=1326 audit(1766925584.634:38792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 229.757255][ T29] audit: type=1326 audit(1766925584.634:38793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 229.781051][ T29] audit: type=1326 audit(1766925584.634:38794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 229.805154][ T29] audit: type=1326 audit(1766925584.634:38795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 229.828839][ T29] audit: type=1326 audit(1766925584.634:38796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19890 comm="syz.5.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b502df749 code=0x7ffc0000 [ 229.852628][ T29] audit: type=1326 audit(1766925584.653:38797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 229.879772][T19908] IPv6: Can't replace route, no match found [ 229.900888][ T29] audit: type=1326 audit(1766925584.653:38798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 229.924826][ T29] audit: type=1326 audit(1766925584.653:38799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 229.948512][ T29] audit: type=1326 audit(1766925584.653:38800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 229.972106][ T29] audit: type=1326 audit(1766925584.653:38801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19836 comm="syz.1.3781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12e46f749 code=0x7ffc0000 [ 230.183973][T19927] loop2: detected capacity change from 0 to 512 [ 230.213051][T19927] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3800: error while reading EA inode 32 err=-116 [ 230.228660][T19927] EXT4-fs (loop2): Remounting filesystem read-only [ 230.237428][T19940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 230.363361][T19941] lo speed is unknown, defaulting to 1000 [ 230.540858][T19927] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 230.783209][T19927] EXT4-fs (loop2): 1 orphan inode deleted [ 231.191971][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3804'. [ 231.290992][T12959] EXT4-fs unmount: 80 callbacks suppressed [ 231.291074][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.320997][T19984] SELinux: failed to load policy [ 231.338425][T19987] IPv6: Can't replace route, no match found [ 231.426287][T20014] loop5: detected capacity change from 0 to 1024 [ 231.753697][T20044] IPv6: Can't replace route, no match found [ 231.803895][T20043] SELinux: failed to load policy [ 232.046526][T20079] loop5: detected capacity change from 0 to 512 [ 232.060726][T20079] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.3830: error while reading EA inode 32 err=-116 [ 232.074076][T20079] EXT4-fs (loop5): Remounting filesystem read-only [ 232.080662][T20079] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 232.091035][T20079] EXT4-fs (loop5): 1 orphan inode deleted [ 232.097208][T20079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.188086][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.341614][T20099] IPv6: Can't replace route, no match found [ 232.375408][T20102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3834'. [ 232.388082][T20102] loop2: detected capacity change from 0 to 512 [ 232.405576][T20102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3834: invalid indirect mapped block 4294967295 (level 1) [ 232.430120][T20102] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3834: invalid indirect mapped block 4294967295 (level 1) [ 232.444683][T20102] EXT4-fs (loop2): 2 truncates cleaned up [ 232.451638][T20102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.545960][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.619591][T20120] loop2: detected capacity change from 0 to 512 [ 232.631352][T20120] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3836: invalid indirect mapped block 4294967295 (level 1) [ 232.680751][T20120] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3836: invalid indirect mapped block 4294967295 (level 1) [ 232.700092][T20120] EXT4-fs (loop2): 2 truncates cleaned up [ 232.723328][T20120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.815837][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.138089][T20176] __nla_validate_parse: 1 callbacks suppressed [ 233.138111][T20176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3845'. [ 233.161059][T20176] loop5: detected capacity change from 0 to 512 [ 233.179642][T20181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3854'. [ 233.189896][T20176] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3845: invalid indirect mapped block 4294967295 (level 1) [ 233.221802][T20176] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3845: invalid indirect mapped block 4294967295 (level 1) [ 233.230215][T20177] SELinux: failed to load policy [ 233.237537][T20176] EXT4-fs (loop5): 2 truncates cleaned up [ 233.247343][T20176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.280909][T20176] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3845'. [ 233.336990][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.361110][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3859'. [ 233.373939][T20207] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3859'. [ 233.472279][T20237] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 233.489690][T20237] SELinux: failed to load policy [ 233.520092][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3868'. [ 233.522167][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3869'. [ 233.543052][T20242] loop5: detected capacity change from 0 to 512 [ 233.554723][T20242] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.3869: invalid block [ 233.567541][T20242] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3869: invalid indirect mapped block 4294967295 (level 1) [ 233.581811][T20242] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3869: invalid indirect mapped block 4294967295 (level 1) [ 233.596410][T20242] EXT4-fs (loop5): 2 truncates cleaned up [ 233.602916][T20242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.619978][T20242] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3869'. [ 233.665824][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.784803][T20284] IPv6: Can't replace route, no match found [ 233.799583][T20287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'. [ 233.813386][T20287] loop2: detected capacity change from 0 to 512 [ 233.826690][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 233.834416][T20287] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3878: invalid block [ 233.848072][T20287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3878: invalid indirect mapped block 4294967295 (level 1) [ 233.862807][T20287] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3878: invalid indirect mapped block 4294967295 (level 1) [ 233.877741][T20287] EXT4-fs (loop2): 2 truncates cleaned up [ 233.884105][T20287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.005879][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.050186][T20326] bond1: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 234.062326][T20326] bond1 (unregistering): Released all slaves [ 234.088245][T20327] loop2: detected capacity change from 0 to 512 [ 234.098253][T20327] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3884: invalid indirect mapped block 4294967295 (level 1) [ 234.112670][T20327] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3884: invalid indirect mapped block 4294967295 (level 1) [ 234.127789][T20327] EXT4-fs (loop2): 2 truncates cleaned up [ 234.133957][T20327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.223701][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.243256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.265831][T20414] loop2: detected capacity change from 0 to 512 [ 234.276263][T20414] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3890: error while reading EA inode 32 err=-116 [ 234.293727][T20414] EXT4-fs (loop2): Remounting filesystem read-only [ 234.300594][T20414] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 234.310954][T20414] EXT4-fs (loop2): 1 orphan inode deleted [ 234.317289][T20414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.320147][T20419] IPv6: Can't replace route, no match found [ 234.403699][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.553756][T20456] SELinux: failed to load policy [ 234.602257][T20469] IPv6: Can't replace route, no match found [ 234.881229][T20499] SELinux: failed to load policy [ 234.923207][T20515] IPv6: Can't replace route, no match found [ 234.958174][T20526] netlink: 'syz.5.3923': attribute type 6 has an invalid length. [ 234.965985][T20526] netlink: 'syz.5.3923': attribute type 5 has an invalid length. [ 235.045510][T20526] netlink: 'syz.5.3923': attribute type 6 has an invalid length. [ 235.053305][T20526] netlink: 'syz.5.3923': attribute type 5 has an invalid length. [ 235.085694][ T29] kauditd_printk_skb: 1387 callbacks suppressed [ 235.085809][ T29] audit: type=1326 audit(1766925589.629:40189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.115781][ T29] audit: type=1326 audit(1766925589.629:40190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.139436][ T29] audit: type=1326 audit(1766925589.629:40191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.141897][T20554] SELinux: policydb magic number 0x7850006 does not match expected magic number 0xf97cff8c [ 235.163114][ T29] audit: type=1326 audit(1766925589.629:40192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.196887][ T29] audit: type=1326 audit(1766925589.629:40193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.204740][T20554] SELinux: failed to load policy [ 235.220539][ T29] audit: type=1326 audit(1766925589.629:40194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.249789][ T29] audit: type=1326 audit(1766925589.629:40195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.273473][ T29] audit: type=1326 audit(1766925589.629:40196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.298073][ T29] audit: type=1326 audit(1766925589.685:40197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116b70f749 code=0x7ffc0000 [ 235.322138][ T29] audit: type=1326 audit(1766925589.685:40198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20549 comm="syz.4.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f116b70f783 code=0x7ffc0000 [ 235.402979][T20575] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3932: invalid indirect mapped block 4294967295 (level 1) [ 235.417778][T20575] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3932: invalid indirect mapped block 4294967295 (level 1) [ 235.432320][T20575] EXT4-fs (loop5): 2 truncates cleaned up [ 235.438541][T20575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.507402][T20588] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3935: invalid indirect mapped block 4294967295 (level 1) [ 235.523282][T20588] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3935: invalid indirect mapped block 4294967295 (level 1) [ 235.542218][T20586] sch_fq: defrate 0 ignored. [ 235.547821][T20588] EXT4-fs (loop2): 2 truncates cleaned up [ 235.556536][T20588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.572501][ T7388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.661178][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.670013][T20616] IPv6: Can't replace route, no match found [ 235.762037][T20629] SELinux: failed to load policy [ 235.791141][T20642] set_capacity_and_notify: 2 callbacks suppressed [ 235.791159][T20642] loop2: detected capacity change from 0 to 512 [ 235.805285][T20642] ================================================================== [ 235.813392][T20642] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 235.822260][T20642] [ 235.824620][T20642] write to 0xffff888103c86954 of 4 bytes by task 3774 on cpu 1: [ 235.832340][T20642] fsnotify_detach_mark+0xba/0x160 [ 235.837459][T20642] fsnotify_destroy_mark+0x70/0x150 [ 235.842661][T20642] __se_sys_inotify_rm_watch+0xe8/0x170 [ 235.848217][T20642] __x64_sys_inotify_rm_watch+0x31/0x40 [ 235.853775][T20642] x64_sys_call+0x2a15/0x3000 [ 235.858466][T20642] do_syscall_64+0xca/0x2b0 [ 235.862985][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.868882][T20642] [ 235.871212][T20642] read to 0xffff888103c86954 of 4 bytes by task 20642 on cpu 0: [ 235.878844][T20642] fsnotify_handle_inode_event+0x125/0x220 [ 235.884657][T20642] fsnotify+0x13cf/0x14b0 [ 235.889013][T20642] __fsnotify_parent+0x2f8/0x3a0 [ 235.893970][T20642] __fput+0x1de/0x650 [ 235.897967][T20642] fput_close_sync+0xad/0x190 [ 235.902656][T20642] __x64_sys_close+0x56/0xf0 [ 235.907260][T20642] x64_sys_call+0x2c25/0x3000 [ 235.911988][T20642] do_syscall_64+0xca/0x2b0 [ 235.916509][T20642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.922410][T20642] [ 235.924738][T20642] value changed: 0x00000003 -> 0x00000000 [ 235.930716][T20642] [ 235.933044][T20642] Reported by Kernel Concurrency Sanitizer on: [ 235.939205][T20642] CPU: 0 UID: 0 PID: 20642 Comm: syz.2.3944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.950668][T20642] Tainted: [W]=WARN [ 235.954471][T20642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.964529][T20642] ================================================================== [ 235.984902][T20642] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.3944: error while reading EA inode 32 err=-116 [ 236.000034][T20642] EXT4-fs (loop2): Remounting filesystem read-only [ 236.006837][T20642] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 236.017404][T20642] EXT4-fs (loop2): 1 orphan inode deleted [ 236.023747][T20642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.091154][T12959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.348459][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!