last executing test programs: 18.108247945s ago: executing program 1 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000400080003"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c881d2540000000000010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000500), 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), &(0x7f00000007c0)=ANY=[@ANYBLOB="00fb640407e1564dbea8ca5f5ac2462600d28d47f6f16128cb80c4b2104afc095ba9908e3836023026406827d1701943d6da3ddbf1dbdf3d47c06bc4d79fb30659dca230b99b06196527a0cad26e6d24021000000000efc9a9b82c8098631fe355c6a5c18576788b9abd05de1ae91aaba11c990a3c931bf3fec60078f0043d09227c433535bafbe4fe22626787c0f2f6de00162e6b54317138972c89583611eb51fdcb443efbf5e70d1ceae55a480ed8f4a406edc22b087c12aa9dc94127c5b8bd7974ceb37a1c9e5fb1"], 0x64, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 17.432097697s ago: executing program 1 (id=58): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/96, 0x60) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r3, 0x2, {0x2, 0xf0, 0x2}, 0x2}, 0x18) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x97}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000002010101000000000000000002f7ff07040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRESDEC, @ANYBLOB="5067c22175807b5430b15a721e3b47976ddcefa9f43734713401a8704104f7940262033377dca6a8ac", @ANYRES64], 0x6, 0x306, &(0x7f0000000a80)="$eJzs3M9LI2cYwPEnmSQmSo2H0tJC8aG9tJdB055bQ1FaGqhYU/oDCqNO2pBpIplgSSm1PfVa9o/Yg3j0Juz6D3jZ2+5lL3vzsrAL62HZWZzMmJiMZtWY7Or3AzKP877PO++bifK8gczBD///Xim5ZslqSDytEhMRORSZkriEYsEx7scp6fSPfDLx5P4H3/340zf5QmF+SXUhv/xpTlUnp+/88Vcm6LY7JvtTvxw8zj3af2f/vYMXy7+VXS27Wq011NKV2sOGteLYulZ2K6bqomNbrq3lqmvXG5rVlVqt1V5yauvrTU0Go7quWtWmVuymNmraqDfV+NUqV9U0TX1rXNBPcWtpycpfMHl1wJPBFanX85YhIpmeluLWSCYEAABGqrv+j4sOsv7f/nCvMfH9zmRQ/++mour/zx60xjpR/6dFpFX/Wyfr//D663W7t/63zlf/91ZEN8ul6n+8HqZTPadi7fCosZ63xoO/X9+/P2/P+AH1PwAAAAAAAAAAAAAAAAAAAAAAb4JDz8t6npcNj+HPmIikRST8PSLVEJEvRjBlDNAl7j+ugfYX9xKTIs5/G8WNYusYdNgTEUdsmZGsPPffD4GjOHX8nSJVnZK7zmaQv7lRNPzz+ZKU/fxZySalO9/zFr4uzM9qy8n8pIx35uckK29H5+ci81Py8Ucd+aZk5d6q1MSRNX8e7fy/Z1W//LbQlZ/x+wEAAAAAcB2Yeixy/26ap7W38o/3192fDxjt/fVM5P48Ie8nRrt2AAAAAABuCrf5Z8VyHLt+RpCR/n0uHiSuaORwha+aFT5F9epWekYQXtzobEoHJwf+ssTO8bKcEsTlIlnTR6vRy64i/Nioq+mp53l+IItzw7+DfvDurdvP+vUJb3X/AT/fSUevdACBcfYbIDmUfz4AAAAAhqpd9Idn5sLgKx3ZrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFmG8XS0yAsbQ18qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHIvAwAA///J6gEe") 16.876101398s ago: executing program 1 (id=62): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'veth1\x00'}}, 0x1e) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) (rerun: 32) fcntl$getownex(r1, 0x10, &(0x7f0000000400)={0x0, 0x0}) (async, rerun: 64) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) syz_pidfd_open(r4, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@iter={&(0x7f0000000280)=@task={r3, r4, r5}, 0x10}}, 0x20) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000002c0)=""/185, 0xb9, 0x0, &(0x7f0000000500)=""/238, 0xee}}, 0x10) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000a80)='kfree\x00'}, 0x18) (async, rerun: 64) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async, rerun: 64) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) close(r8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000de6cb27a207bc1a60fef36e676b4e2978429723883cc9740cbe71ce92564e7298abd3d99421d3b80598f3cc391", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r12, @ANYRES32=r11, @ANYBLOB="260011003c8075ea1e93ff7dc2404998f990200000000000f0ff", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r12}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) (rerun: 32) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) recvmsg$unix(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x52}, 0x0) (async, rerun: 64) sendmsg$inet(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 16.750879379s ago: executing program 1 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000000)=0x1003, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRESOCT=r3], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYRES32=r4], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x4}, 0xfffffffffffffc69) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1819800000e2c6f9ad19c4794b28bb073f7db018e154829c427c8ea3198412b70330c250170e2b3a00"/54], 0x18}, 0x1, 0x0, 0x0, 0x4008010}, 0x20008010) r9 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r9, &(0x7f00000000c0)=ANY=[], 0x56) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000b00000c0200000000005f61"], 0x0, 0x29}, 0x28) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1200005, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r10, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r11 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r11, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r12, 0x0, 0xfffffffffffffffe}, 0x18) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 15.931778504s ago: executing program 1 (id=74): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 15.129968848s ago: executing program 32 (id=80): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 1.846008621s ago: executing program 3 (id=244): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x44004000) r2 = socket$kcm(0x10, 0x2, 0x0) pause() sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240000d1}, 0x0) 1.700093134s ago: executing program 4 (id=246): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="aa536d2cb03b45a1dfb953f1edf5b75800a401355063d95d2ef85b9228538604a2ce11411cabe9804d4401b9d3e6d0ef4feacdce17728c93e6708607600e02cdbfa85dfda2d0ebc6630ebdf77a0dde38f1b3f072d6", 0x55}], 0x1, 0x0, 0x0, 0x44000}, 0x4000) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/84, 0x54}], 0x1}, 0xa2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$caif_stream(0x25, 0x1, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f00000003c0)="e5", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000d20000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in6={0xa, 0x4e23, 0x9, @local, 0xfffffffb}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, @in6={0xa, 0x4e23, 0xa8, @private2, 0x1}], 0x88) r8 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [{0x2, 0x4, 0xee01}, {0x2, 0x7}, {}, {0x2, 0x5}, {}], {0x4, 0x1}, [{0x8, 0x2}, {0x8, 0x2}], {}, {0x20, 0x3}}, 0x5c, 0x2) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008809c"], 0xd0}}, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r11) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) 1.42213948s ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000340)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f288476d2610054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) capset(&(0x7f0000000a00)={0x20080522}, &(0x7f0000000280)={0x0, 0xd, 0xf, 0x5, 0xffff7fff, 0xfffffffd}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x126) r6 = socket$netlink(0x10, 0x3, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0x6, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$security_capability(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) unlink(&(0x7f0000000000)='./file2\x00') ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000300)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, 0x0, &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r9, &(0x7f0000000240)='./mnt\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="03925fd5757e7c175a0200000009000000070000007f0000000200000034acc4665bb987589e9e3d2b7b0c725d67476ee9f0d9e4935bf7bb99f2365c936b8594069ebde3ef793eb8f6e788dd21cb0747a95727ae98266f1d4a363e623ed0b9d3b8a560b6d5b01c7adc122e55a8c851dde1cb598bb59a06abe3a55dee7b1b399c9e3539f1fd84b8e1292b7410a81626456f2209ec4b9bec9e"], &(0x7f00000002c0), 0x400) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) getitimer(0x2, &(0x7f0000000200)) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.320305139s ago: executing program 4 (id=248): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00b7"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 1.175844222s ago: executing program 4 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x80000000, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) r9 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r14}, 0x18) sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700800000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000560000000000000000b40000000000000200000000000000030000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a0000feffffff000000000a000200700000000000000014000e"], 0x104}}, 0x0) r15 = syz_clone(0x800, &(0x7f0000001040)="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", 0xfd, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="38017d355c78e133a22e751b277117a3f97a5b85f6f9d2a4128f40ee9e6ee257e741785fd72a1dae78dbb398b57c0e468fd20cdd656ba85e216e4dbbd9f7e9bed7337a729b6eeb2445c5f92185c9f051767dafe467c8636be77e4d0e456b9101d9e97b5dabd299811052e9c09c0d61eb6d34e52c5bf2863efe741459826d539ab764051037aa3d81ffbe64f28ef8b092adcd76f1505c05a1be220d37762c550e504731a926232b9d06abefaa643af2c5c7a960911c22c6e5c5f70cc50e3bec1f9cab8707b839f60a1067d8adac0afbcd085ac91bb9f4a39e1e50eff843b48a9d8198ebc47c5b913c5e6ac010d81ab039e6") newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r4, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="537d889162fd4039b4127b5d91cc14c0ec2ead0157e297ffa9db5e21e515f67ee27ddf564a3ec7c27941ac8fd24cd67ad5be64616c2c553d9934fd95d98b2b3fcdf3534d25e6cc7f87aab6a56241da2ddf6a3527a349aa535bb5ebd34c06ec60751b9281c9ad365fd925ec69bc16ef59a4fb185a82ad1d90fcc9171f31e38a4650667581983d9288091d3e5f21d621b9b0c8", 0x92}, {&(0x7f0000000800)="474f6511f9dfd4ddfd4ec44d8bda47a3a18c254756a124259157a4b6dbb6f29ee33db0c02cd7b7a3500d7564cac703323a2368a31af02d5a0e348083c37ca7ac672d92cf4c8f3cca4c154d106918bd0089992bf06866a24e690a7035eee5f05a22f245c56dfb2f420dde9f44ee9607e33a4adc74a4a038e174d7b1313f60f6610fed93b7a0a00256cb670452e135db166986c03dce3b5f83d3306710198b870b8b437eb033d9a6b701caa2d4ea5a32f4b55d426a563abddc569d2638283d235d50bf70f7cf3220119d83f014f0c17b8a519bff67fa68aa180295dea66d42d48c", 0xe0}, {&(0x7f0000000ac0)="ba97bfb87f96123758ddce4ebe6dba417fb009146fd046587336f8b56dec1e4b384d39f8e4a4bae389e23e589f0e9f850655e5b74e625f5e44ebcf737681e5bdb4387e2386bfb31846437ce723ed68d029d0c066e20c3570d644f15511922d6c6627858324d817af0094bc647f747bcd100fa62dfb8fa7c8688ce476aaba58629d4ded86c27b62ca5271e69fcf622e04dec05e5f91e6dcc894b1b362bf742917df39d493", 0xa4}, {&(0x7f0000000900)="a30f16667baaa223b67471d956cb7aa283d9cfb918015c55a6312a529b84f35999862be15184f3772146fd8075849262b0e08121dcbdbd1c01504f9c2b", 0x3d}, {&(0x7f0000000c00)="f0a4c1b9a0209d897483732dc3ed265e6f1ec2f1195e225144dac51b4dbf0f81775b86c38c1253efa4e6672692045610e7f5bd3f3a7a14ab53767c46e2a09b0f144cc7831e9c396ca6f6eef39c39bfd19a4ebf09e2a14962fb3af12931be3ac2d479d66c9821ade0bfe3a0a23a39761858135e9dff95417d649941eff24a6d5385d74bc68993a41a3789a586a6594692c778ba949caccfda8cc7efe3832a4953f45343d4881836df9fb93e7112181a2019a5096384830d12ef31b57802b09f5b41935bb4e59ce3dccd31cf672ea2e897c0678cbe13e3d834f20204ada3a2e1c8b3edf28dbaa29b88", 0xe8}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x80, 0x4000014}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x40800}}], 0x2, 0x4004000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02c52ff384"], 0x9) 1.001844838s ago: executing program 4 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') close_range(r3, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 938.552744ms ago: executing program 3 (id=255): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000200)={0xc023}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x8c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0) 920.966146ms ago: executing program 4 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000007c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@nojournal_checksum}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4442, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffe000001}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000180)={[{@quota}, {@discard}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000001980)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = inotify_init() r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) unshare(0x6020480) inotify_add_watch(r5, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='bic', 0x3) connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r11, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 920.431326ms ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000400080003"], 0x38}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000c881d2540000000000010000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) ioctl$USBDEVFS_BULK(r7, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r7, 0x5521) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040), &(0x7f00000007c0)=ANY=[@ANYBLOB="00fb640407e1564dbea8ca5f5ac2462600d28d47f6f16128cb80c4b2104afc095ba9908e3836023026406827d1701943d6da3ddbf1dbdf3d47c06bc4d79fb30659dca230b99b06196527a0cad26e6d24021000000000efc9a9b82c8098631fe355c6a5c18576788b9abd05de1ae91aaba11c990a3c931bf3fec60078f0043d09227c433535bafbe4fe22626787c0f2f6de00162e6b54317138972c89583611eb51fdcb443efbf5e70d1ceae55a480ed8f4a406edc22b087c12aa9dc94127c5b8bd7974ceb37a1c9e5fb1"], 0x64, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) listxattr(&(0x7f0000006440)='./file0\x00', 0x0, 0x0) 803.209456ms ago: executing program 0 (id=259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) utime(&(0x7f0000000200)='./bus\x00', &(0x7f00000014c0)={0x6}) 802.845756ms ago: executing program 0 (id=260): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) r3 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4a050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r6, @ANYBLOB="010000000000ffffffff0c000000180001801400020076657468315f746f5f62617461647600d0000380"], 0xfc}}, 0x804) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x18) fcntl$notify(r7, 0x402, 0x300) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(r3, &(0x7f0000000100)='./file1/file3\x00', 0x17b) r9 = open(&(0x7f00000001c0)='./bus\x00', 0x500000, 0x61) fcntl$notify(r9, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', r8, &(0x7f0000000600)='./file0\x00', 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) write$binfmt_misc(r8, &(0x7f0000000340)="be", 0x1) 710.601644ms ago: executing program 5 (id=263): preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='mr_alloc\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x27, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[], 0x2c}}, 0xc019) 650.280251ms ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x80000000, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) r9 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r14}, 0x18) sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700800000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000560000000000000000b40000000000000200000000000000030000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a0000feffffff000000000a000200700000000000000014000e"], 0x104}}, 0x0) r15 = syz_clone(0x800, &(0x7f0000001040)="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", 0xfd, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="38017d355c78e133a22e751b277117a3f97a5b85f6f9d2a4128f40ee9e6ee257e741785fd72a1dae78dbb398b57c0e468fd20cdd656ba85e216e4dbbd9f7e9bed7337a729b6eeb2445c5f92185c9f051767dafe467c8636be77e4d0e456b9101d9e97b5dabd299811052e9c09c0d61eb6d34e52c5bf2863efe741459826d539ab764051037aa3d81ffbe64f28ef8b092adcd76f1505c05a1be220d37762c550e504731a926232b9d06abefaa643af2c5c7a960911c22c6e5c5f70cc50e3bec1f9cab8707b839f60a1067d8adac0afbcd085ac91bb9f4a39e1e50eff843b48a9d8198ebc47c5b913c5e6ac010d81ab039e6") newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r4, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="537d889162fd4039b4127b5d91cc14c0ec2ead0157e297ffa9db5e21e515f67ee27ddf564a3ec7c27941ac8fd24cd67ad5be64616c2c553d9934fd95d98b2b3fcdf3534d25e6cc7f87aab6a56241da2ddf6a3527a349aa535bb5ebd34c06ec60751b9281c9ad365fd925ec69bc16ef59a4fb185a82ad1d90fcc9171f31e38a4650667581983d9288091d3e5f21d621b9b0c8", 0x92}, {&(0x7f0000000800)="474f6511f9dfd4ddfd4ec44d8bda47a3a18c254756a124259157a4b6dbb6f29ee33db0c02cd7b7a3500d7564cac703323a2368a31af02d5a0e348083c37ca7ac672d92cf4c8f3cca4c154d106918bd0089992bf06866a24e690a7035eee5f05a22f245c56dfb2f420dde9f44ee9607e33a4adc74a4a038e174d7b1313f60f6610fed93b7a0a00256cb670452e135db166986c03dce3b5f83d3306710198b870b8b437eb033d9a6b701caa2d4ea5a32f4b55d426a563abddc569d2638283d235d50bf70f7cf3220119d83f014f0c17b8a519bff67fa68aa180295dea66d42d48c", 0xe0}, {&(0x7f0000000ac0)="ba97bfb87f96123758ddce4ebe6dba417fb009146fd046587336f8b56dec1e4b384d39f8e4a4bae389e23e589f0e9f850655e5b74e625f5e44ebcf737681e5bdb4387e2386bfb31846437ce723ed68d029d0c066e20c3570d644f15511922d6c6627858324d817af0094bc647f747bcd100fa62dfb8fa7c8688ce476aaba58629d4ded86c27b62ca5271e69fcf622e04dec05e5f91e6dcc894b1b362bf742917df39d493", 0xa4}, {&(0x7f0000000900)="a30f16667baaa223b67471d956cb7aa283d9cfb918015c55a6312a529b84f35999862be15184f3772146fd8075849262b0e08121dcbdbd1c01504f9c2b", 0x3d}, {&(0x7f0000000c00)="f0a4c1b9a0209d897483732dc3ed265e6f1ec2f1195e225144dac51b4dbf0f81775b86c38c1253efa4e6672692045610e7f5bd3f3a7a14ab53767c46e2a09b0f144cc7831e9c396ca6f6eef39c39bfd19a4ebf09e2a14962fb3af12931be3ac2d479d66c9821ade0bfe3a0a23a39761858135e9dff95417d649941eff24a6d5385d74bc68993a41a3789a586a6594692c778ba949caccfda8cc7efe3832a4953f45343d4881836df9fb93e7112181a2019a5096384830d12ef31b57802b09f5b41935bb4e59ce3dccd31cf672ea2e897c0678cbe13e3d834f20204ada3a2e1c8b3edf28dbaa29b88", 0xe8}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x80, 0x4000014}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x40800}}], 0x2, 0x4004000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02c52ff384"], 0x9) 644.022091ms ago: executing program 2 (id=265): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) (async) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x17, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xac, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x73}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x87}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r9, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r12, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x9, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24068091}, 0x1004) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) 593.201836ms ago: executing program 2 (id=266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x30, 0x3, 0x8}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e24, @multicast2}}, 0x5, 0x202, 0x2, 0x1, 0x80, 0x8000, 0x1}, &(0x7f0000000080)=0x9c) 540.30648ms ago: executing program 2 (id=267): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x800, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000140)={0x2, 0x4, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x6358, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3}, 0x5b28, 0xb5, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$RTC_ALM_READ(r2, 0x40187013, &(0x7f0000000180)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0099bb53523e1e150008170000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@bloom_filter={0x1e, 0x6, 0x40, 0x800, 0x202, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xe}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x98, 0x0, 0x0, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ef000000102b00fc010000000000000000000000000000fe8000000000000000000000000000aa000000"], 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800488, &(0x7f0000002200), 0x65, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") 539.98122ms ago: executing program 0 (id=268): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x62}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x68, &(0x7f0000000200)=""/104, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x4, 0x88, 0x100}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xd, 0xa}, {0x0, 0x5, 0x2, 0x8}, {0x4, 0x5, 0xc, 0x7}, {0x4, 0x4, 0xe, 0x1}, {0x1, 0x3, 0x7, 0x7}], 0x10, 0xfffffffb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 537.767841ms ago: executing program 5 (id=269): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000200)={0xc023}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3a, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000880)={0x8c, r2, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0) 507.639113ms ago: executing program 5 (id=270): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000640), 0x4) unshare(0xe000480) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = getpid() getrlimit(0x8, &(0x7f0000000000)) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000440)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 454.167468ms ago: executing program 0 (id=271): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) truncate(&(0x7f0000000080)='./file1\x00', 0x10000) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x80000) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x4) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f{\xaav\xe1\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_w\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) timer_settime(r10, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) 453.659588ms ago: executing program 5 (id=272): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x200000d1, 0x1f94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008804) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioperm(0x8, 0xc, 0x10000) write$selinux_validatetrans(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB='system_u:object_r:usb_device_t:s0 system_u:t_t:s0 00000000000000000005 /'], 0x78) rmdir(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0xffff, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 452.898818ms ago: executing program 3 (id=273): eventfd(0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x6c}}, 0x4000081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x54, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001980)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r7, @ANYBLOB="08002b000800000005002f00"], 0x4c}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', r7, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x47}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socket$packet(0x11, 0x3, 0x300) r10 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r11, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r11], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040084) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x3c}}, 0x0) 383.178495ms ago: executing program 2 (id=274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x41ee, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r0, 0x0, 0x2a00, 0x2101, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000400), 0x12) syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) read(r4, &(0x7f0000000040)=""/150, 0x96) 290.490503ms ago: executing program 2 (id=275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@errors_remount}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="a405000000000000050000000000000007"]) 290.129783ms ago: executing program 5 (id=276): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f00000000c0)='netfs_rreq\x00', r0, 0x0, 0x7}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) (fail_nth: 4) 62.104804ms ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) r2 = syz_io_uring_setup(0xa82, &(0x7f0000000400)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0xfffffffa) io_uring_enter(r2, 0x5535, 0x3acd, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) unlink(0x0) 44.263246ms ago: executing program 2 (id=278): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x5c5240, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r1, 0x0, 0xb0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="f000000010000700000000000000000000000000000000000000ffff64010100ac1e00010000000000000000000000004e200004000000000a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffff7f000001fffffffc2b000000fe880000000000000000000000000001000000000000000000000000000000007616713c00000000fa030000000000000100001000000000adb09755f9ed0d1b037b0000000000000000010000000000000020a80300000000000000000000000000002000000000000004000000000000000000000000000000000400fdffffffe80a000000000000000004000a0004"], 0xf0}}, 0x2008015) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRESDEC=r2, @ANYRES64, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000009508b771a8c45e8f9f99814dcb083b1e5e7df7aef7e89bbfe8a5fa7f36e83180040cae6f83579e425ebdccd5abcf1bf5fb32b27ae05c08dc980d149238b9d4eaa476c1013b1671d542b330fe6ae578527372952fa7327986bcead722a874a140d13da6b7933a990c17aa71e085d04cec48bc0704b06c8463c8ddd63bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911089000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) openat$incfs(r7, &(0x7f00000005c0)='.log\x00', 0x80100, 0x2) (async) connect$unix(r7, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) utime(&(0x7f00000003c0)='./file1\x00', 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) (rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b708ecffdcffffff7b8af8ff3e000000e8deb4956e705b1a021f9c4d25"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) (async) io_setup(0x1, &(0x7f0000000240)) (async) socket(0x2, 0x80805, 0x0) socket$kcm(0x10, 0x2, 0x10) 32.354657ms ago: executing program 4 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x80000000, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r2, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000980)=0xe8) r9 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000b80)={0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) stat(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r15}, 0x18) sendmsg$nl_xfrm(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007002abd700800000000fe80000000000000000000000000001be0000001000000000000000000000000ffff00004e2200000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000560000000000000000b40000000000000200000000000000030000007ffffffe0000000000000000000006000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a0000feffffff000000000a000200700000000000000014000e"], 0x104}}, 0x0) r16 = syz_clone(0x800, &(0x7f0000001040)="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", 0xfd, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="38017d355c78e133a22e751b277117a3f97a5b85f6f9d2a4128f40ee9e6ee257e741785fd72a1dae78dbb398b57c0e468fd20cdd656ba85e216e4dbbd9f7e9bed7337a729b6eeb2445c5f92185c9f051767dafe467c8636be77e4d0e456b9101d9e97b5dabd299811052e9c09c0d61eb6d34e52c5bf2863efe741459826d539ab764051037aa3d81ffbe64f28ef8b092adcd76f1505c05a1be220d37762c550e504731a926232b9d06abefaa643af2c5c7a960911c22c6e5c5f70cc50e3bec1f9cab8707b839f60a1067d8adac0afbcd085ac91bb9f4a39e1e50eff843b48a9d8198ebc47c5b913c5e6ac010d81ab039e6") newfstatat(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) newfstatat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r4, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="537d889162fd4039b4127b5d91cc14c0ec2ead0157e297ffa9db5e21e515f67ee27ddf564a3ec7c27941ac8fd24cd67ad5be64616c2c553d9934fd95d98b2b3fcdf3534d25e6cc7f87aab6a56241da2ddf6a3527a349aa535bb5ebd34c06ec60751b9281c9ad365fd925ec69bc16ef59a4fb185a82ad1d90fcc9171f31e38a4650667581983d9288091d3e5f21d621b9b0c8", 0x92}, {&(0x7f0000000800)="474f6511f9dfd4ddfd4ec44d8bda47a3a18c254756a124259157a4b6dbb6f29ee33db0c02cd7b7a3500d7564cac703323a2368a31af02d5a0e348083c37ca7ac672d92cf4c8f3cca4c154d106918bd0089992bf06866a24e690a7035eee5f05a22f245c56dfb2f420dde9f44ee9607e33a4adc74a4a038e174d7b1313f60f6610fed93b7a0a00256cb670452e135db166986c03dce3b5f83d3306710198b870b8b437eb033d9a6b701caa2d4ea5a32f4b55d426a563abddc569d2638283d235d50bf70f7cf3220119d83f014f0c17b8a519bff67fa68aa180295dea66d42d48c", 0xe0}, {&(0x7f0000000ac0)="ba97bfb87f96123758ddce4ebe6dba417fb009146fd046587336f8b56dec1e4b384d39f8e4a4bae389e23e589f0e9f850655e5b74e625f5e44ebcf737681e5bdb4387e2386bfb31846437ce723ed68d029d0c066e20c3570d644f15511922d6c6627858324d817af0094bc647f747bcd100fa62dfb8fa7c8688ce476aaba58629d4ded86c27b62ca5271e69fcf622e04dec05e5f91e6dcc894b1b362bf742917df39d493", 0xa4}, {&(0x7f0000000900)="a30f16667baaa223b67471d956cb7aa283d9cfb918015c55a6312a529b84f35999862be15184f3772146fd8075849262b0e08121dcbdbd1c01504f9c2b", 0x3d}, {&(0x7f0000000c00)="f0a4c1b9a0209d897483732dc3ed265e6f1ec2f1195e225144dac51b4dbf0f81775b86c38c1253efa4e6672692045610e7f5bd3f3a7a14ab53767c46e2a09b0f144cc7831e9c396ca6f6eef39c39bfd19a4ebf09e2a14962fb3af12931be3ac2d479d66c9821ade0bfe3a0a23a39761858135e9dff95417d649941eff24a6d5385d74bc68993a41a3789a586a6594692c778ba949caccfda8cc7efe3832a4953f45343d4881836df9fb93e7112181a2019a5096384830d12ef31b57802b09f5b41935bb4e59ce3dccd31cf672ea2e897c0678cbe13e3d834f20204ada3a2e1c8b3edf28dbaa29b88", 0xe8}], 0x5, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r7]}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}], 0x80, 0x4000014}}, {{&(0x7f00000014c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001540), 0x0, 0x0, 0x0, 0x40800}}], 0x2, 0x4004000) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02c52ff384"], 0x9) 387.44µs ago: executing program 3 (id=280): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5b9, &(0x7f0000000f40)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200"], 0xa0}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x800) 0s ago: executing program 5 (id=281): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRESHEX, @ANYBLOB="92208f8dd2478c4248608a57ea023ef8845944fce569f274772ca5201b4d19c9435b225c2703c4693641c3dab414ccfaa1ac12e42d3a51a9fd90dbb8dfe62fb80628dedad9cd7198cb4a3151acd3756581ae75ee414b0456b64ef7cc12f7f5a3fc858a533068bf99853d8609541e6b600f496ce1dfa65b139a86732db5e92567e310c4de67464d7250876ff8485fc19836a302e2d02a707c1a4324c8624df0f5f22dcebd53ffd3d6cd01d6d0d6ae9e8c05db3db0e1ac10e46b5cda59dfe7ab7cffd6bf7efd4d1b7068ef0b878aff95af9e3c3cdf815921a9ffe2c0f97cdeaba5e6a40289c27f3b0339b98f8cd7f6684801e60f7b"], 0x4, 0x7dc, &(0x7f0000002a00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="a301f48af370d300dafeff0085000000000000000000000000a9359c8f3a4b1c9ba13e8b1a3307909272df700d1b04a43dc27612a5d2a9cdcf3d57dc1b07620f1e6113b62d5094df96a4628c0be5cbae4690bba6d090b0ff0143289e5653f1d5bd438d8767f55524466c7b95b7ce41e4d9c076a133e1dcf473006c78c163605dcec1d4f09408d1e9f3060343902a23f20d5ac317f2426d543663c95a75a56a68050e63d11422ce4b1a28d876f95b1b60c7b28fa6a232eec4596f3bf2a705f0167e"], &(0x7f0000000500)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000940)='host1x_channel_submitted\x00', r0}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd5, 0x7, 0xdf, 0x8, 0x10c4, 0x8244, 0xdc00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x3, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50000000210001000000000000000000e0000001000000000000000000000000e000000100000000000000000000000000006d1b615b3f0aaaccc43f660000007ffecba7d2e430fdc24f2dbcfe8fd40f9587b05c4e3b87a8fae23fae628032c1a782799b250bf57e51a6fb86ad0ad30059814858a3c0a2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) getsockname$packet(r3, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r9, &(0x7f0000000180)=ANY=[], 0x78) unshare(0x22020600) sendfile(r8, r9, &(0x7f00000001c0), 0x8) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r12, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) kernel console output (not intermixed with test programs): d_slave_0): Enslaving as an active interface with an up link [ 25.889690][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.896784][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.903956][ T3316] bridge_slave_0: entered allmulticast mode [ 25.910337][ T3316] bridge_slave_0: entered promiscuous mode [ 25.917954][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.933279][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.947177][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.954250][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.961516][ T3316] bridge_slave_1: entered allmulticast mode [ 25.967957][ T3316] bridge_slave_1: entered promiscuous mode [ 25.975239][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.993914][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.001022][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.008195][ T3318] bridge_slave_0: entered allmulticast mode [ 26.014625][ T3318] bridge_slave_0: entered promiscuous mode [ 26.029558][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.036646][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.043900][ T3321] bridge_slave_0: entered allmulticast mode [ 26.050090][ T3321] bridge_slave_0: entered promiscuous mode [ 26.060934][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.068065][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.075181][ T3318] bridge_slave_1: entered allmulticast mode [ 26.081602][ T3318] bridge_slave_1: entered promiscuous mode [ 26.097080][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.104161][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.111324][ T3321] bridge_slave_1: entered allmulticast mode [ 26.117810][ T3321] bridge_slave_1: entered promiscuous mode [ 26.124928][ T3317] team0: Port device team_slave_0 added [ 26.135611][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.145473][ T3315] team0: Port device team_slave_0 added [ 26.156045][ T3317] team0: Port device team_slave_1 added [ 26.166652][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.176386][ T3315] team0: Port device team_slave_1 added [ 26.191707][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.211010][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.225426][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.244642][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.253996][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.260920][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.286888][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.302837][ T3316] team0: Port device team_slave_0 added [ 26.308767][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.315797][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.341776][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.356984][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.363991][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.389906][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.405856][ T3316] team0: Port device team_slave_1 added [ 26.412270][ T3318] team0: Port device team_slave_0 added [ 26.418119][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.425099][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.450981][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.473525][ T3318] team0: Port device team_slave_1 added [ 26.482010][ T3321] team0: Port device team_slave_0 added [ 26.488279][ T3321] team0: Port device team_slave_1 added [ 26.510381][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.517458][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.543355][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.578992][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.585992][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.612093][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.623151][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.630115][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.656143][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.676222][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.683187][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.709252][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.723227][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.730346][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.756328][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.768811][ T3315] hsr_slave_0: entered promiscuous mode [ 26.774846][ T3315] hsr_slave_1: entered promiscuous mode [ 26.782880][ T3317] hsr_slave_0: entered promiscuous mode [ 26.788838][ T3317] hsr_slave_1: entered promiscuous mode [ 26.794779][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 26.800481][ T3317] Cannot create hsr debugfs directory [ 26.806272][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.813260][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.839229][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.885420][ T3316] hsr_slave_0: entered promiscuous mode [ 26.891427][ T3316] hsr_slave_1: entered promiscuous mode [ 26.897307][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 26.903083][ T3316] Cannot create hsr debugfs directory [ 26.932646][ T3318] hsr_slave_0: entered promiscuous mode [ 26.938613][ T3318] hsr_slave_1: entered promiscuous mode [ 26.944493][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 26.950284][ T3318] Cannot create hsr debugfs directory [ 26.960201][ T3321] hsr_slave_0: entered promiscuous mode [ 26.966269][ T3321] hsr_slave_1: entered promiscuous mode [ 26.972236][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 26.977943][ T3321] Cannot create hsr debugfs directory [ 27.154692][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.163848][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.172479][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.183482][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.206082][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.214683][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.227394][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.236784][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.262576][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.273175][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.286024][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.295460][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.326512][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.337936][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.350187][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.364441][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.388578][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.404147][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.414099][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.422929][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.435738][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.453394][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.467327][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.474459][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.491171][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.504624][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.511724][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.531495][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.541436][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.559995][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.567080][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.585532][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.595558][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.602661][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.617376][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.624627][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.641210][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.648274][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.685693][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.731146][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.753377][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.775928][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.785909][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.793018][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.804745][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.811804][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.826391][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.833471][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.846157][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.855983][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.863045][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.876115][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.898133][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.003964][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.056377][ T3315] veth0_vlan: entered promiscuous mode [ 28.078274][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.088200][ T3315] veth1_vlan: entered promiscuous mode [ 28.110390][ T3318] veth0_vlan: entered promiscuous mode [ 28.129504][ T3318] veth1_vlan: entered promiscuous mode [ 28.142830][ T3318] veth0_macvtap: entered promiscuous mode [ 28.167961][ T3318] veth1_macvtap: entered promiscuous mode [ 28.182772][ T3315] veth0_macvtap: entered promiscuous mode [ 28.189823][ T3317] veth0_vlan: entered promiscuous mode [ 28.210625][ T3315] veth1_macvtap: entered promiscuous mode [ 28.218882][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.228104][ T3317] veth1_vlan: entered promiscuous mode [ 28.239415][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.249946][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.270426][ T1644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.281986][ T1644] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.291362][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.300594][ T3316] veth0_vlan: entered promiscuous mode [ 28.306440][ T1644] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.323248][ T1644] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.340721][ T1644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.353321][ T3321] veth0_vlan: entered promiscuous mode [ 28.359348][ T3316] veth1_vlan: entered promiscuous mode [ 28.365423][ T1644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.378812][ T3317] veth0_macvtap: entered promiscuous mode [ 28.391757][ T1644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.407754][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.417330][ T3316] veth0_macvtap: entered promiscuous mode [ 28.429888][ T3316] veth1_macvtap: entered promiscuous mode [ 28.437347][ T1644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.455858][ T3317] veth1_macvtap: entered promiscuous mode [ 28.473709][ T3321] veth1_vlan: entered promiscuous mode [ 28.489086][ T3486] loop2: detected capacity change from 0 to 1024 [ 28.497216][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.518080][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.518412][ T3486] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 28.528788][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.536229][ T3486] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 28.566568][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.574796][ T3486] JBD2: no valid journal superblock found [ 28.580551][ T3486] EXT4-fs (loop2): Could not load journal inode [ 28.595390][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.618456][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.653350][ T3321] veth0_macvtap: entered promiscuous mode [ 28.660826][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.669553][ T3498] netlink: 'syz.3.6': attribute type 4 has an invalid length. [ 28.682891][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693508][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693706][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693744][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.693783][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.694516][ T3321] veth1_macvtap: entered promiscuous mode [ 28.695846][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 28.713627][ T3486] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 28.797245][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.833380][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.846040][ T3497] C: renamed from team_slave_0 (while UP) [ 28.866455][ T3507] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 28.877731][ T3497] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.892736][ T3505] netlink: 'syz.0.1': attribute type 13 has an invalid length. [ 28.903087][ T3500] infiniband !yz!: set active [ 28.907801][ T3500] infiniband !yz!: added C [ 28.912316][ T3507] team0: Failed to send options change via netlink (err -105) [ 28.919791][ T3507] team0: Port device dummy0 added [ 28.927669][ T3509] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 28.935735][ T3500] RDS/IB: !yz!: added [ 28.939854][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.941901][ T3500] smc: adding ib device !yz! with port count 1 [ 28.959412][ T3500] smc: ib device !yz! port 1 has no pnetid [ 29.007266][ T3502] loop2: detected capacity change from 0 to 512 [ 29.014274][ T3502] EXT4-fs: dax option not supported [ 29.018731][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 29.018820][ T29] audit: type=1400 audit(1766920837.919:139): avc: denied { setopt } for pid=3501 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.027593][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.055115][ T29] audit: type=1400 audit(1766920837.959:140): avc: denied { create } for pid=3506 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.057940][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.079617][ T29] audit: type=1400 audit(1766920837.989:141): avc: denied { connect } for pid=3506 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 29.120286][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.129946][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.178510][ T3509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 29.189726][ T3509] team0: Failed to send options change via netlink (err -105) [ 29.197525][ T3509] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 29.207601][ T3509] team0: Port device dummy0 removed [ 29.215871][ T3509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 29.225154][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.237312][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.260714][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.272503][ T41] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.288992][ T29] audit: type=1400 audit(1766920838.189:142): avc: denied { write } for pid=3512 comm="syz.4.5" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.328528][ T41] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.350127][ T41] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.373899][ T29] audit: type=1400 audit(1766920838.219:143): avc: denied { map } for pid=3512 comm="syz.4.5" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 29.397676][ T29] audit: type=1400 audit(1766920838.219:144): avc: denied { ioctl } for pid=3512 comm="syz.4.5" path="socket:[4826]" dev="sockfs" ino=4826 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.422919][ T29] audit: type=1400 audit(1766920838.219:145): avc: denied { firmware_load } for pid=3512 comm="syz.4.5" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 29.453359][ T41] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.463359][ T29] audit: type=1400 audit(1766920838.279:146): avc: denied { read } for pid=3512 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.488480][ T29] audit: type=1400 audit(1766920838.389:147): avc: denied { read write } for pid=3519 comm="syz.2.9" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.560732][ T29] audit: type=1400 audit(1766920838.389:148): avc: denied { open } for pid=3519 comm="syz.2.9" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.697436][ T3529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 29.725103][ T3528] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 29.794484][ T3526] loop2: detected capacity change from 0 to 128 [ 29.804274][ T3526] ======================================================= [ 29.804274][ T3526] WARNING: The mand mount option has been deprecated and [ 29.804274][ T3526] and is ignored by this kernel. Remove the mand [ 29.804274][ T3526] option from the mount to silence this warning. [ 29.804274][ T3526] ======================================================= [ 29.932314][ T3544] FAULT_INJECTION: forcing a failure. [ 29.932314][ T3544] name failslab, interval 1, probability 0, space 0, times 1 [ 29.945053][ T3544] CPU: 1 UID: 0 PID: 3544 Comm: syz.1.16 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.945143][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.945161][ T3544] Call Trace: [ 29.945178][ T3544] [ 29.945187][ T3544] __dump_stack+0x1d/0x30 [ 29.945214][ T3544] dump_stack_lvl+0x95/0xd0 [ 29.945299][ T3544] dump_stack+0x15/0x1b [ 29.945329][ T3544] should_fail_ex+0x265/0x280 [ 29.945357][ T3544] should_failslab+0x8c/0xb0 [ 29.945409][ T3544] __kmalloc_cache_noprof+0x65/0x4c0 [ 29.945479][ T3544] ? alloc_tty_struct+0x4c/0x3c0 [ 29.945503][ T3544] alloc_tty_struct+0x4c/0x3c0 [ 29.945522][ T3544] ? pty_unix98_install+0x8f/0x390 [ 29.945627][ T3544] pty_unix98_install+0x105/0x390 [ 29.945660][ T3544] tty_init_dev+0x7c/0x320 [ 29.945678][ T3544] ptmx_open+0x10b/0x2b0 [ 29.945783][ T3544] chrdev_open+0x2eb/0x3a0 [ 29.945856][ T3544] ? __pfx_chrdev_open+0x10/0x10 [ 29.945878][ T3544] do_dentry_open+0x54b/0xa60 [ 29.945976][ T3544] vfs_open+0x37/0x1e0 [ 29.946007][ T3544] path_openat+0x1ddd/0x23b0 [ 29.946050][ T3544] ? _parse_integer_limit+0x170/0x190 [ 29.946079][ T3544] do_filp_open+0x109/0x230 [ 29.946138][ T3544] do_sys_openat2+0xa6/0x150 [ 29.946168][ T3544] __x64_sys_openat+0xf2/0x120 [ 29.946213][ T3544] x64_sys_call+0x2b07/0x3000 [ 29.946243][ T3544] do_syscall_64+0xca/0x2b0 [ 29.946355][ T3544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.946376][ T3544] RIP: 0033:0x7f61e734f749 [ 29.946393][ T3544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.946412][ T3544] RSP: 002b:00007f61e5daf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 29.946437][ T3544] RAX: ffffffffffffffda RBX: 00007f61e75a5fa0 RCX: 00007f61e734f749 [ 29.946452][ T3544] RDX: 0000000000000041 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 29.946503][ T3544] RBP: 00007f61e5daf090 R08: 0000000000000000 R09: 0000000000000000 [ 29.946516][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.946528][ T3544] R13: 00007f61e75a6038 R14: 00007f61e75a5fa0 R15: 00007ffc55281e78 [ 29.946549][ T3544] [ 29.947441][ T3526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.177295][ T3526] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.226285][ T3513] syz.4.5 (3513) used greatest stack depth: 10112 bytes left [ 30.270660][ T3591] loop1: detected capacity change from 0 to 128 [ 30.272823][ T3595] loop3: detected capacity change from 0 to 2048 [ 30.287403][ T3591] EXT4-fs: Ignoring removed nobh option [ 30.298529][ T3599] loop4: detected capacity change from 0 to 512 [ 30.298763][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.323462][ T3591] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.346489][ T3591] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.353812][ T3595] Alternate GPT is invalid, using primary GPT. [ 30.363160][ T3595] loop3: p2 p3 p7 [ 30.368920][ T3599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.371857][ T3601] loop0: detected capacity change from 0 to 512 [ 30.397683][ T3599] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.479420][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.498444][ T3601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.501433][ T3007] Alternate GPT is invalid, using primary GPT. [ 30.517422][ T3007] loop3: p2 p3 p7 [ 30.534258][ T3601] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.756186][ T3623] pim6reg9: entered allmulticast mode [ 30.795092][ T3601] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.881833][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 30.914511][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 30.980562][ T3633] udevd[3633]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 31.035701][ T3632] loop4: detected capacity change from 0 to 512 [ 31.043121][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.180681][ T3622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 31.189889][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.193311][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 31.215076][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 31.229031][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 31.258139][ T3632] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.271450][ T3632] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024) [ 31.299190][ T3622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 31.338289][ T3640] loop2: detected capacity change from 0 to 764 [ 31.383992][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.471152][ T3622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 31.495268][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.517625][ T3642] loop3: detected capacity change from 0 to 512 [ 31.529757][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.570712][ T3644] FAULT_INJECTION: forcing a failure. [ 31.570712][ T3644] name failslab, interval 1, probability 0, space 0, times 0 [ 31.583388][ T3644] CPU: 1 UID: 0 PID: 3644 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.583420][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 31.583435][ T3644] Call Trace: [ 31.583442][ T3644] [ 31.583449][ T3644] __dump_stack+0x1d/0x30 [ 31.583474][ T3644] dump_stack_lvl+0x95/0xd0 [ 31.583565][ T3644] dump_stack+0x15/0x1b [ 31.583590][ T3644] should_fail_ex+0x265/0x280 [ 31.583614][ T3644] should_failslab+0x8c/0xb0 [ 31.583641][ T3644] kmem_cache_alloc_noprof+0x69/0x4b0 [ 31.583733][ T3644] ? __inet_hash_connect+0x7a0/0x1370 [ 31.583755][ T3644] __inet_hash_connect+0x7a0/0x1370 [ 31.583779][ T3644] ? __pfx___inet_check_established+0x10/0x10 [ 31.583812][ T3644] inet_hash_connect+0xd1/0xf0 [ 31.583888][ T3644] tcp_v4_connect+0x7a2/0xaf0 [ 31.583991][ T3644] tcp_v6_connect+0x848/0xc40 [ 31.584043][ T3644] ? __schedule+0x85f/0xcd0 [ 31.584075][ T3644] __inet_stream_connect+0x169/0x7d0 [ 31.584101][ T3644] ? _raw_spin_lock_bh+0x56/0xb0 [ 31.584131][ T3644] ? _raw_spin_unlock_bh+0x36/0x40 [ 31.584156][ T3644] ? lock_sock_nested+0x112/0x140 [ 31.584180][ T3644] ? selinux_netlbl_socket_connect+0x114/0x130 [ 31.584235][ T3644] inet_stream_connect+0x44/0x70 [ 31.584263][ T3644] ? __pfx_inet_stream_connect+0x10/0x10 [ 31.584287][ T3644] __sys_connect+0x1f2/0x2b0 [ 31.584319][ T3644] __x64_sys_connect+0x3f/0x50 [ 31.584396][ T3644] x64_sys_call+0x2e09/0x3000 [ 31.584424][ T3644] do_syscall_64+0xca/0x2b0 [ 31.584465][ T3644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.584526][ T3644] RIP: 0033:0x7efebf29f749 [ 31.584544][ T3644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.584566][ T3644] RSP: 002b:00007efebdcff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 31.584593][ T3644] RAX: ffffffffffffffda RBX: 00007efebf4f5fa0 RCX: 00007efebf29f749 [ 31.584606][ T3644] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000003 [ 31.584635][ T3644] RBP: 00007efebdcff090 R08: 0000000000000000 R09: 0000000000000000 [ 31.584647][ T3644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.584660][ T3644] R13: 00007efebf4f6038 R14: 00007efebf4f5fa0 R15: 00007ffd30dd0668 [ 31.584681][ T3644] [ 31.819524][ T3622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 31.840551][ T3642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.848276][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.849360][ T3642] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.891727][ T3622] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 31.917837][ T3642] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 44 vs 41 free clusters [ 31.939843][ T3622] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.21: corrupted xattr block 6: invalid header [ 31.963894][ T3650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 31.982272][ T3642] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.29: Failed to acquire dquot type 1 [ 32.001758][ T3650] Zero length message leads to an empty skb [ 32.021878][ T3642] EXT4-fs (loop3): 1 truncate cleaned up [ 32.027939][ T3642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.041441][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.053199][ T3652] FAULT_INJECTION: forcing a failure. [ 32.053199][ T3652] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.066827][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: syz.2.33 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.066870][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.066885][ T3652] Call Trace: [ 32.066892][ T3652] [ 32.066900][ T3652] __dump_stack+0x1d/0x30 [ 32.066926][ T3652] dump_stack_lvl+0x95/0xd0 [ 32.066948][ T3652] dump_stack+0x15/0x1b [ 32.066987][ T3652] should_fail_ex+0x265/0x280 [ 32.067015][ T3652] should_fail+0xb/0x20 [ 32.067035][ T3652] should_fail_usercopy+0x1a/0x20 [ 32.067060][ T3652] _copy_from_user+0x1c/0xb0 [ 32.067090][ T3652] ___sys_sendmsg+0xc1/0x1d0 [ 32.067224][ T3652] __sys_sendmmsg+0x178/0x300 [ 32.067327][ T3652] __x64_sys_sendmmsg+0x57/0x70 [ 32.067357][ T3652] x64_sys_call+0x1e28/0x3000 [ 32.067383][ T3652] do_syscall_64+0xca/0x2b0 [ 32.067423][ T3652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.067455][ T3652] RIP: 0033:0x7efebf29f749 [ 32.067541][ T3652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.067595][ T3652] RSP: 002b:00007efebdcff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 32.067614][ T3652] RAX: ffffffffffffffda RBX: 00007efebf4f5fa0 RCX: 00007efebf29f749 [ 32.067627][ T3652] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 32.067645][ T3652] RBP: 00007efebdcff090 R08: 0000000000000000 R09: 0000000000000000 [ 32.067693][ T3652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.067705][ T3652] R13: 00007efebf4f6038 R14: 00007efebf4f5fa0 R15: 00007ffd30dd0668 [ 32.067724][ T3652] [ 32.105276][ T3642] syz.3.29 (3642) used greatest stack depth: 9560 bytes left [ 32.243598][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.264057][ C0] hrtimer: interrupt took 37789 ns [ 32.280935][ T3659] lo speed is unknown, defaulting to 1000 [ 32.292269][ T3659] lo speed is unknown, defaulting to 1000 [ 32.318893][ T3657] EXT4-fs: Ignoring removed i_version option [ 32.326350][ T3657] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 32.326378][ T3657] EXT4-fs: failed to create workqueue [ 32.341279][ T3657] EXT4-fs (loop1): mount failed [ 32.378581][ T3659] lo speed is unknown, defaulting to 1000 [ 32.405728][ T3666] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.437698][ T3659] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.451848][ T3666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 32.458496][ T3668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.34'. [ 32.470480][ T3666] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 32.485084][ T3666] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 32.491724][ T3666] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.39: bad orphan inode 768 [ 32.517076][ T3659] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.582364][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.613469][ T3668] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.659517][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.692500][ T3659] lo speed is unknown, defaulting to 1000 [ 32.699348][ T3668] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 32.741549][ T3659] lo speed is unknown, defaulting to 1000 [ 32.756563][ T3659] lo speed is unknown, defaulting to 1000 [ 32.777990][ T3659] lo speed is unknown, defaulting to 1000 [ 32.800294][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.814537][ T3659] lo speed is unknown, defaulting to 1000 [ 33.111061][ T3673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42'. [ 33.210613][ T3672] Alternate GPT is invalid, using primary GPT. [ 33.217050][ T3672] loop4: p2 p3 p7 [ 33.262618][ T3678] Symlink component flag not implemented [ 33.312609][ T3678] Symlink component flag not implemented (129) [ 33.352397][ T3678] rock: directory entry would overflow storage [ 33.358585][ T3678] rock: sig=0x4f50, size=4, remaining=3 [ 33.360603][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 33.364164][ T3678] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 33.374422][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.392689][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.420493][ T3687] random: crng reseeded on system resumption [ 33.435762][ T3687] 9p: Bad value for 'rfdno' [ 33.457254][ T3687] vlan2: entered allmulticast mode [ 33.462470][ T3687] hsr0: entered allmulticast mode [ 33.467487][ T3687] hsr_slave_0: entered allmulticast mode [ 33.473210][ T3687] hsr_slave_1: entered allmulticast mode [ 33.510728][ T3691] netlink: 256 bytes leftover after parsing attributes in process `syz.4.43'. [ 33.568472][ T3687] set_capacity_and_notify: 5 callbacks suppressed [ 33.568487][ T3687] loop4: detected capacity change from 0 to 512 [ 33.597769][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.47'. [ 33.627011][ T3687] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.647294][ T3697] netem: change failed [ 33.651402][ T3697] FAULT_INJECTION: forcing a failure. [ 33.651402][ T3697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.664630][ T3697] CPU: 0 UID: 0 PID: 3697 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.664657][ T3697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.664704][ T3697] Call Trace: [ 33.664710][ T3697] [ 33.664718][ T3697] __dump_stack+0x1d/0x30 [ 33.664746][ T3697] dump_stack_lvl+0x95/0xd0 [ 33.664769][ T3697] dump_stack+0x15/0x1b [ 33.664830][ T3697] should_fail_ex+0x265/0x280 [ 33.664912][ T3697] should_fail+0xb/0x20 [ 33.664935][ T3697] should_fail_usercopy+0x1a/0x20 [ 33.664966][ T3697] strncpy_from_user+0x27/0x260 [ 33.665008][ T3697] strncpy_from_user_nofault+0x68/0xf0 [ 33.665092][ T3697] bpf_probe_read_compat_str+0xb4/0x130 [ 33.665126][ T3697] bpf_prog_8d8929f39ab9475d+0x40/0x6c [ 33.665149][ T3697] bpf_trace_run2+0x107/0x1d0 [ 33.665232][ T3697] ? netem_destroy+0x5f/0x80 [ 33.665318][ T3697] ? __pfx_netem_destroy+0x10/0x10 [ 33.665337][ T3697] ? netem_destroy+0x5f/0x80 [ 33.665355][ T3697] __traceiter_kfree+0x2e/0x50 [ 33.665396][ T3697] ? netem_destroy+0x5f/0x80 [ 33.665417][ T3697] kfree+0x353/0x3c0 [ 33.665505][ T3697] ? __pfx_netem_destroy+0x10/0x10 [ 33.665528][ T3697] netem_destroy+0x5f/0x80 [ 33.665551][ T3697] qdisc_create+0x8b1/0x9e0 [ 33.665580][ T3697] tc_modify_qdisc+0xf9c/0x1480 [ 33.665627][ T3697] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 33.665650][ T3697] rtnetlink_rcv_msg+0x65a/0x6d0 [ 33.665685][ T3697] ? avc_has_perm_noaudit+0xab/0x130 [ 33.665718][ T3697] netlink_rcv_skb+0x123/0x220 [ 33.665758][ T3697] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 33.665841][ T3697] rtnetlink_rcv+0x1c/0x30 [ 33.665879][ T3697] netlink_unicast+0x5c0/0x690 [ 33.665917][ T3697] netlink_sendmsg+0x58b/0x6b0 [ 33.665959][ T3697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.666031][ T3697] __sock_sendmsg+0x145/0x180 [ 33.666055][ T3697] ____sys_sendmsg+0x31e/0x4a0 [ 33.666095][ T3697] ___sys_sendmsg+0x17b/0x1d0 [ 33.666171][ T3697] __x64_sys_sendmsg+0xd4/0x160 [ 33.666273][ T3697] x64_sys_call+0x17ba/0x3000 [ 33.666303][ T3697] do_syscall_64+0xca/0x2b0 [ 33.666387][ T3697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.666413][ T3697] RIP: 0033:0x7fe35d5bf749 [ 33.666431][ T3697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.666450][ T3697] RSP: 002b:00007fe35c01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.666515][ T3697] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5bf749 [ 33.666531][ T3697] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000004 [ 33.666546][ T3697] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 33.666562][ T3697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.666576][ T3697] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 33.666599][ T3697] [ 34.033349][ T3687] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.43: inode has both inline data and extents flags [ 34.034657][ T3705] loop3: detected capacity change from 0 to 1024 [ 34.058675][ T3705] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.069798][ T3705] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.083246][ T3687] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.43: couldn't read orphan inode 15 (err -117) [ 34.089447][ T3705] JBD2: no valid journal superblock found [ 34.100807][ T3705] EXT4-fs (loop3): Could not load journal inode [ 34.114044][ T3705] FAULT_INJECTION: forcing a failure. [ 34.114044][ T3705] name failslab, interval 1, probability 0, space 0, times 0 [ 34.126743][ T3705] CPU: 1 UID: 0 PID: 3705 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.126796][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.126812][ T3705] Call Trace: [ 34.126818][ T3705] [ 34.126826][ T3705] __dump_stack+0x1d/0x30 [ 34.126851][ T3705] dump_stack_lvl+0x95/0xd0 [ 34.126943][ T3705] dump_stack+0x15/0x1b [ 34.126968][ T3705] should_fail_ex+0x265/0x280 [ 34.127029][ T3705] should_failslab+0x8c/0xb0 [ 34.127053][ T3705] __kmalloc_cache_noprof+0x65/0x4c0 [ 34.127143][ T3705] ? __se_sys_mount+0xef/0x2e0 [ 34.127166][ T3705] ? memdup_user+0x99/0xd0 [ 34.127189][ T3705] __se_sys_mount+0xef/0x2e0 [ 34.127289][ T3705] ? fput+0x8f/0xc0 [ 34.127315][ T3705] ? ksys_write+0x192/0x1a0 [ 34.127334][ T3705] __x64_sys_mount+0x67/0x80 [ 34.127441][ T3705] x64_sys_call+0x2cca/0x3000 [ 34.127541][ T3705] do_syscall_64+0xca/0x2b0 [ 34.127634][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.127657][ T3705] RIP: 0033:0x7fb74085f749 [ 34.127742][ T3705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.127763][ T3705] RSP: 002b:00007fb73f2bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.127782][ T3705] RAX: ffffffffffffffda RBX: 00007fb740ab5fa0 RCX: 00007fb74085f749 [ 34.127829][ T3705] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 34.127842][ T3705] RBP: 00007fb73f2bf090 R08: 0000200000000000 R09: 0000000000000000 [ 34.127854][ T3705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.127883][ T3705] R13: 00007fb740ab6038 R14: 00007fb740ab5fa0 R15: 00007ffd99d53838 [ 34.127906][ T3705] [ 34.306682][ T3687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.323100][ T3709] loop1: detected capacity change from 0 to 128 [ 34.329427][ T3712] FAULT_INJECTION: forcing a failure. [ 34.329427][ T3712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.342587][ T3712] CPU: 0 UID: 0 PID: 3712 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.342620][ T3712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.342633][ T3712] Call Trace: [ 34.342638][ T3712] [ 34.342646][ T3712] __dump_stack+0x1d/0x30 [ 34.342717][ T3712] dump_stack_lvl+0x95/0xd0 [ 34.342740][ T3712] dump_stack+0x15/0x1b [ 34.342759][ T3712] should_fail_ex+0x265/0x280 [ 34.342784][ T3712] should_fail+0xb/0x20 [ 34.342806][ T3712] should_fail_usercopy+0x1a/0x20 [ 34.342906][ T3712] _copy_to_user+0x20/0xa0 [ 34.342936][ T3712] simple_read_from_buffer+0xb5/0x130 [ 34.342959][ T3712] proc_fail_nth_read+0x10e/0x150 [ 34.342990][ T3712] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 34.343049][ T3712] vfs_read+0x1a8/0x770 [ 34.343068][ T3712] ? __rcu_read_unlock+0x4f/0x70 [ 34.343089][ T3712] ? __fget_files+0x184/0x1c0 [ 34.343114][ T3712] ? mutex_lock+0x58/0x90 [ 34.343209][ T3712] ksys_read+0xda/0x1a0 [ 34.343228][ T3712] __x64_sys_read+0x40/0x50 [ 34.343248][ T3712] x64_sys_call+0x2889/0x3000 [ 34.343275][ T3712] do_syscall_64+0xca/0x2b0 [ 34.343335][ T3712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.343359][ T3712] RIP: 0033:0x7fe35d5be15c [ 34.343376][ T3712] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 34.343395][ T3712] RSP: 002b:00007fe35c01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.343413][ T3712] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5be15c [ 34.343427][ T3712] RDX: 000000000000000f RSI: 00007fe35c01f0a0 RDI: 0000000000000003 [ 34.343440][ T3712] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.343468][ T3712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.343480][ T3712] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 34.343498][ T3712] [ 34.550004][ T3715] netlink: 'syz.3.53': attribute type 1 has an invalid length. [ 34.575553][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.586920][ T3709] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.593141][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 34.593234][ T29] audit: type=1400 audit(1766920843.499:469): avc: denied { create } for pid=3716 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 34.625954][ T3709] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.666615][ T3717] netlink: 'syz.0.54': attribute type 4 has an invalid length. [ 34.690400][ T3721] loop4: detected capacity change from 0 to 128 [ 34.710328][ T29] audit: type=1400 audit(1766920843.609:470): avc: denied { perfmon } for pid=3722 comm="syz.3.57" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.732106][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.741110][ T29] audit: type=1400 audit(1766920843.609:471): avc: denied { bpf } for pid=3722 comm="syz.3.57" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.761435][ T29] audit: type=1400 audit(1766920843.639:472): avc: denied { write } for pid=3716 comm="syz.0.54" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 34.784472][ T29] audit: type=1400 audit(1766920843.639:473): avc: denied { name_bind } for pid=3716 comm="syz.0.54" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 34.792041][ T29] audit: type=1400 audit(1766920843.699:474): avc: denied { module_request } for pid=3722 comm="syz.3.57" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 34.824816][ T29] audit: type=1400 audit(1766920843.729:475): avc: denied { bind } for pid=3726 comm="syz.1.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 34.920358][ T3516] IPVS: starting estimator thread 0... [ 34.931931][ T3731] loop1: detected capacity change from 0 to 128 [ 34.941592][ T29] audit: type=1400 audit(1766920843.819:476): avc: denied { mount } for pid=3720 comm="syz.4.56" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 34.968381][ T3721] syz.4.56: attempt to access beyond end of device [ 34.968381][ T3721] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 35.030438][ T3721] syz.4.56: attempt to access beyond end of device [ 35.030438][ T3721] loop4: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 35.044596][ T3721] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 35.061207][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.070025][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.078904][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.091760][ T29] audit: type=1400 audit(1766920843.959:477): avc: denied { read write } for pid=3728 comm="syz.2.59" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.114747][ T29] audit: type=1400 audit(1766920843.959:478): avc: denied { open } for pid=3728 comm="syz.2.59" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.152750][ T3730] IPVS: using max 2352 ests per chain, 117600 per kthread [ 35.238683][ T3721] syz.4.56: attempt to access beyond end of device [ 35.238683][ T3721] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 35.252349][ T3721] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 35.267824][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.276637][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.285949][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.356705][ T3720] syz.4.56: attempt to access beyond end of device [ 35.356705][ T3720] loop4: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 35.370458][ T3720] syz.4.56: attempt to access beyond end of device [ 35.370458][ T3720] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.391137][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.391221][ T3720] syz.4.56: attempt to access beyond end of device [ 35.391221][ T3720] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.391300][ T3720] syz.4.56: attempt to access beyond end of device [ 35.391300][ T3720] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.400079][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.400116][ T3735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.59'. [ 35.414136][ T3720] syz.4.56: attempt to access beyond end of device [ 35.414136][ T3720] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.443864][ T3749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 35.445400][ T3720] syz.4.56: attempt to access beyond end of device [ 35.445400][ T3720] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.485217][ T3721] syz.4.56: attempt to access beyond end of device [ 35.485217][ T3721] loop4: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 35.497608][ T3752] loop1: detected capacity change from 0 to 4096 [ 35.549340][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.562487][ T3764] loop3: detected capacity change from 0 to 128 [ 35.586829][ T3752] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.64: Failed to acquire dquot type 1 [ 35.609639][ T3752] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 35.796940][ T3771] infiniband syz!: set active [ 35.801750][ T3771] infiniband syz!: added team_slave_0 [ 35.846502][ T3773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.872817][ T3773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.928250][ T3771] RDS/IB: syz!: added [ 35.947283][ T3771] smc: adding ib device syz! with port count 1 [ 35.947354][ T3771] smc: ib device syz! port 1 has no pnetid [ 36.157761][ T3772] loop3: detected capacity change from 0 to 128 [ 36.285028][ T3317] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 36.315682][ T3317] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 36.347974][ T3772] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.360310][ T3772] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.548736][ T3766] Set syz1 is full, maxelem 65536 reached [ 36.555140][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.587750][ T3792] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 36.603168][ T3792] loop3: detected capacity change from 0 to 1024 [ 36.642132][ T3792] EXT4-fs: Ignoring removed bh option [ 36.669113][ T3792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.701321][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.734885][ T3573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.748027][ T3797] FAULT_INJECTION: forcing a failure. [ 36.748027][ T3797] name failslab, interval 1, probability 0, space 0, times 0 [ 36.760993][ T3797] CPU: 1 UID: 0 PID: 3797 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.761061][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.761073][ T3797] Call Trace: [ 36.761079][ T3797] [ 36.761086][ T3797] __dump_stack+0x1d/0x30 [ 36.761154][ T3797] dump_stack_lvl+0x95/0xd0 [ 36.761183][ T3797] dump_stack+0x15/0x1b [ 36.761208][ T3797] should_fail_ex+0x265/0x280 [ 36.761236][ T3797] should_failslab+0x8c/0xb0 [ 36.761327][ T3797] __kmalloc_noprof+0xb9/0x5a0 [ 36.761355][ T3797] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 36.761413][ T3797] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 36.761442][ T3797] genl_start+0xe0/0x390 [ 36.761533][ T3797] __netlink_dump_start+0x334/0x520 [ 36.761569][ T3797] genl_family_rcv_msg_dumpit+0x115/0x180 [ 36.761600][ T3797] ? __pfx_genl_start+0x10/0x10 [ 36.761698][ T3797] ? __pfx_genl_dumpit+0x10/0x10 [ 36.761780][ T3797] ? __pfx_genl_done+0x10/0x10 [ 36.761843][ T3797] genl_rcv_msg+0x3f0/0x460 [ 36.761907][ T3797] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 36.761942][ T3797] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 36.762109][ T3797] netlink_rcv_skb+0x123/0x220 [ 36.762139][ T3797] ? __pfx_genl_rcv_msg+0x10/0x10 [ 36.762167][ T3797] genl_rcv+0x28/0x40 [ 36.762190][ T3797] netlink_unicast+0x5c0/0x690 [ 36.762301][ T3797] netlink_sendmsg+0x58b/0x6b0 [ 36.762342][ T3797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.762384][ T3797] __sock_sendmsg+0x145/0x180 [ 36.762449][ T3797] ____sys_sendmsg+0x31e/0x4a0 [ 36.762480][ T3797] ___sys_sendmsg+0x17b/0x1d0 [ 36.762518][ T3797] __x64_sys_sendmsg+0xd4/0x160 [ 36.762562][ T3797] x64_sys_call+0x17ba/0x3000 [ 36.762592][ T3797] do_syscall_64+0xca/0x2b0 [ 36.762635][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.762657][ T3797] RIP: 0033:0x7fe35d5bf749 [ 36.762672][ T3797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.762693][ T3797] RSP: 002b:00007fe35bffe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.762717][ T3797] RAX: ffffffffffffffda RBX: 00007fe35d816090 RCX: 00007fe35d5bf749 [ 36.762786][ T3797] RDX: 0000000000048850 RSI: 0000200000000300 RDI: 0000000000000008 [ 36.762801][ T3797] RBP: 00007fe35bffe090 R08: 0000000000000000 R09: 0000000000000000 [ 36.762817][ T3797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.762830][ T3797] R13: 00007fe35d816128 R14: 00007fe35d816090 R15: 00007ffc74c936b8 [ 36.762847][ T3797] [ 37.058487][ T3807] netlink: 'syz.2.82': attribute type 30 has an invalid length. [ 37.134172][ T3812] syzkaller0: entered promiscuous mode [ 37.139688][ T3812] syzkaller0: entered allmulticast mode [ 37.153216][ T3573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.201070][ T3824] loop2: detected capacity change from 0 to 128 [ 37.224810][ T3573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.300265][ T3833] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.314950][ T3833] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.370578][ T3808] lo speed is unknown, defaulting to 1000 [ 37.386317][ T3573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.399918][ T3837] EXT4-fs: Ignoring removed orlov option [ 37.430472][ T3837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.490200][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.529767][ T3808] chnl_net:caif_netlink_parms(): no params data found [ 37.620301][ T3573] bridge_slave_1: left allmulticast mode [ 37.626029][ T3573] bridge_slave_1: left promiscuous mode [ 37.631765][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.653607][ T3573] bridge_slave_0: left allmulticast mode [ 37.659289][ T3573] bridge_slave_0: left promiscuous mode [ 37.665527][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.695050][ T3867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.771748][ T3867] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.783321][ T3867] FAULT_INJECTION: forcing a failure. [ 37.783321][ T3867] name failslab, interval 1, probability 0, space 0, times 0 [ 37.796002][ T3867] CPU: 1 UID: 0 PID: 3867 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.796125][ T3867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.796140][ T3867] Call Trace: [ 37.796147][ T3867] [ 37.796156][ T3867] __dump_stack+0x1d/0x30 [ 37.796243][ T3867] dump_stack_lvl+0x95/0xd0 [ 37.796269][ T3867] dump_stack+0x15/0x1b [ 37.796293][ T3867] should_fail_ex+0x265/0x280 [ 37.796329][ T3867] should_failslab+0x8c/0xb0 [ 37.796428][ T3867] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 37.796458][ T3867] ? __d_alloc+0x37/0x340 [ 37.796486][ T3867] __d_alloc+0x37/0x340 [ 37.796519][ T3867] d_alloc_parallel+0x54/0xcd0 [ 37.796611][ T3867] ? handle_dots+0x55/0x8a0 [ 37.796641][ T3867] ? lockref_get_not_dead+0x120/0x1c0 [ 37.796750][ T3867] ? __rcu_read_unlock+0x4f/0x70 [ 37.796775][ T3867] __lookup_slow+0x8c/0x250 [ 37.796810][ T3867] lookup_slow+0x3c/0x60 [ 37.796842][ T3867] path_lookupat+0x2f7/0x500 [ 37.796962][ T3867] ? path_openat+0x1d88/0x23b0 [ 37.796997][ T3867] filename_lookup+0x147/0x340 [ 37.797088][ T3867] filename_getxattr+0x54/0x180 [ 37.797118][ T3867] __x64_sys_getxattr+0x112/0x140 [ 37.797158][ T3867] x64_sys_call+0x27d9/0x3000 [ 37.797269][ T3867] do_syscall_64+0xca/0x2b0 [ 37.797316][ T3867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.797342][ T3867] RIP: 0033:0x7fb74085f749 [ 37.797360][ T3867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.797428][ T3867] RSP: 002b:00007fb73f2bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 37.797450][ T3867] RAX: ffffffffffffffda RBX: 00007fb740ab5fa0 RCX: 00007fb74085f749 [ 37.797464][ T3867] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000003040 [ 37.797540][ T3867] RBP: 00007fb73f2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 37.797554][ T3867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.797569][ T3867] R13: 00007fb740ab6038 R14: 00007fb740ab5fa0 R15: 00007ffd99d53838 [ 37.797589][ T3867] [ 38.024044][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.036329][ T3573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.046949][ T3573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.047227][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.071911][ T3573] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 38.097085][ T3573] bond0 (unregistering): Released all slaves [ 38.305502][ T3898] FAULT_INJECTION: forcing a failure. [ 38.305502][ T3898] name failslab, interval 1, probability 0, space 0, times 0 [ 38.318368][ T3898] CPU: 1 UID: 0 PID: 3898 Comm: syz.4.102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.318468][ T3898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.318481][ T3898] Call Trace: [ 38.318486][ T3898] [ 38.318493][ T3898] __dump_stack+0x1d/0x30 [ 38.318517][ T3898] dump_stack_lvl+0x95/0xd0 [ 38.318544][ T3898] dump_stack+0x15/0x1b [ 38.318613][ T3898] should_fail_ex+0x265/0x280 [ 38.318636][ T3898] should_failslab+0x8c/0xb0 [ 38.318682][ T3898] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 38.318706][ T3898] ? __alloc_skb+0x2ff/0x4b0 [ 38.318732][ T3898] __alloc_skb+0x2ff/0x4b0 [ 38.318801][ T3898] ? __alloc_skb+0x228/0x4b0 [ 38.318827][ T3898] audit_log_start+0x3a0/0x720 [ 38.318848][ T3898] ? __rcu_read_unlock+0x4f/0x70 [ 38.318939][ T3898] audit_seccomp+0x48/0x100 [ 38.318972][ T3898] ? __seccomp_filter+0x832/0x1260 [ 38.319058][ T3898] __seccomp_filter+0x843/0x1260 [ 38.319095][ T3898] ? __schedule+0x85f/0xcd0 [ 38.319157][ T3898] __secure_computing+0x82/0x150 [ 38.319191][ T3898] syscall_trace_enter+0xcf/0x1e0 [ 38.319270][ T3898] do_syscall_64+0xa4/0x2b0 [ 38.319309][ T3898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.319410][ T3898] RIP: 0033:0x7f33c5aee15c [ 38.319425][ T3898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 38.319443][ T3898] RSP: 002b:00007f33c4557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 38.319480][ T3898] RAX: ffffffffffffffda RBX: 00007f33c5d45fa0 RCX: 00007f33c5aee15c [ 38.319493][ T3898] RDX: 000000000000000f RSI: 00007f33c45570a0 RDI: 0000000000000006 [ 38.319505][ T3898] RBP: 00007f33c4557090 R08: 0000000000000000 R09: 0000000000000000 [ 38.319517][ T3898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.319530][ T3898] R13: 00007f33c5d46038 R14: 00007f33c5d45fa0 R15: 00007fff1cbcf6c8 [ 38.319553][ T3898] [ 38.552227][ T3808] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.559425][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.574202][ T3808] bridge_slave_0: entered allmulticast mode [ 38.583104][ T3899] set_capacity_and_notify: 3 callbacks suppressed [ 38.583120][ T3899] loop2: detected capacity change from 0 to 128 [ 38.597064][ T3808] bridge_slave_0: entered promiscuous mode [ 38.607998][ T3573] hsr_slave_0: left promiscuous mode [ 38.610351][ T3899] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.626532][ T3906] syz.4.103 uses obsolete (PF_INET,SOCK_PACKET) [ 38.636436][ T3573] hsr_slave_1: left promiscuous mode [ 38.643329][ T3906] process 'syz.4.103' launched '/dev/fd/9' with NULL argv: empty string added [ 38.651511][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.659746][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.661714][ T3904] loop0: detected capacity change from 0 to 512 [ 38.671710][ T3899] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.705319][ T3573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.712805][ T3573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.729722][ T3573] veth1_macvtap: left promiscuous mode [ 38.735325][ T3573] veth0_macvtap: left promiscuous mode [ 38.740914][ T3573] veth1_vlan: left promiscuous mode [ 38.746301][ T3573] veth0_vlan: left promiscuous mode [ 38.752559][ T3904] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 38.771962][ T3904] EXT4-fs (loop0): mount failed [ 38.813053][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.934530][ T3924] loop2: detected capacity change from 0 to 164 [ 38.948075][ T3573] team0 (unregistering): Port device team_slave_1 removed [ 38.969567][ T3934] loop3: detected capacity change from 0 to 512 [ 38.982985][ T3573] team0 (unregistering): Port device team_slave_0 removed [ 39.039610][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.046765][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.054440][ T3808] bridge_slave_1: entered allmulticast mode [ 39.061090][ T3808] bridge_slave_1: entered promiscuous mode [ 39.155033][ T3808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.175518][ T3958] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 39.181459][ T3808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.272558][ T3808] team0: Port device team_slave_0 added [ 39.296010][ T3808] team0: Port device team_slave_1 added [ 39.305159][ T3971] loop4: detected capacity change from 0 to 1024 [ 39.321258][ T3964] Cannot find del_set index 0 as target [ 39.329301][ T3808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.336355][ T3808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.340978][ T3964] IPv6: Can't replace route, no match found [ 39.362344][ T3808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.386283][ T3808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.393448][ T3808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.419444][ T3808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.451085][ T3971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.484063][ T3808] hsr_slave_0: entered promiscuous mode [ 39.490167][ T3808] hsr_slave_1: entered promiscuous mode [ 39.497722][ T3808] debugfs: 'hsr0' already exists in 'hsr' [ 39.503501][ T3808] Cannot create hsr debugfs directory [ 39.512333][ T3971] capability: warning: `syz.4.114' uses 32-bit capabilities (legacy support in use) [ 39.546437][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.676038][ T3808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.686015][ T3991] 9pnet_fd: Insufficient options for proto=fd [ 39.694154][ T3808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.709254][ T3808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.721091][ T3808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.795499][ T3808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.803703][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 39.803718][ T29] audit: type=1400 audit(1766920848.709:703): avc: denied { sqpoll } for pid=4011 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 39.845149][ T3808] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.869706][ T29] audit: type=1400 audit(1766920848.769:704): avc: denied { getattr } for pid=4023 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.869838][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.902882][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.918773][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.925948][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.946351][ T29] audit: type=1400 audit(1766920848.849:705): avc: denied { read } for pid=4028 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.968393][ T29] audit: type=1400 audit(1766920848.849:706): avc: denied { open } for pid=4028 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.075672][ T4039] netlink: 'syz.2.119': attribute type 3 has an invalid length. [ 40.124209][ T29] audit: type=1400 audit(1766920848.879:707): avc: denied { create } for pid=4022 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.146592][ T29] audit: type=1400 audit(1766920848.879:708): avc: denied { write } for pid=4022 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth4.link" dev="tmpfs" ino=1540 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.172839][ T29] audit: type=1400 audit(1766920848.879:709): avc: denied { append } for pid=4022 comm="dhcpcd-run-hook" name="resolv.conf.eth4.link" dev="tmpfs" ino=1540 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.192818][ T3808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.197072][ T29] audit: type=1400 audit(1766920848.919:710): avc: denied { unlink } for pid=4036 comm="rm" name="resolv.conf.eth4.link" dev="tmpfs" ino=1540 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.299603][ T29] audit: type=1326 audit(1766920849.199:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35d5bf749 code=0x7ffc0000 [ 40.322889][ T29] audit: type=1326 audit(1766920849.199:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4045 comm="syz.0.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe35d5bf749 code=0x7ffc0000 [ 40.467281][ T3808] veth0_vlan: entered promiscuous mode [ 40.485761][ T3808] veth1_vlan: entered promiscuous mode [ 40.504799][ T3808] veth0_macvtap: entered promiscuous mode [ 40.514680][ T3808] veth1_macvtap: entered promiscuous mode [ 40.533181][ T3808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.555452][ T3808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.578862][ T3573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.605565][ T3573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637796][ T3573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.646974][ T4074] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 40.661750][ T3573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.883063][ T4089] netlink: 'syz.5.125': attribute type 6 has an invalid length. [ 40.890738][ T4089] __nla_validate_parse: 14 callbacks suppressed [ 40.890751][ T4089] netlink: 168 bytes leftover after parsing attributes in process `syz.5.125'. [ 41.059525][ T4018] syz.4.117 (4018) used greatest stack depth: 7256 bytes left [ 41.081889][ T4096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.127'. [ 41.170226][ T4100] FAULT_INJECTION: forcing a failure. [ 41.170226][ T4100] name failslab, interval 1, probability 0, space 0, times 0 [ 41.182986][ T4100] CPU: 0 UID: 0 PID: 4100 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.183024][ T4100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.183048][ T4100] Call Trace: [ 41.183057][ T4100] [ 41.183066][ T4100] __dump_stack+0x1d/0x30 [ 41.183092][ T4100] dump_stack_lvl+0x95/0xd0 [ 41.183119][ T4100] dump_stack+0x15/0x1b [ 41.183143][ T4100] should_fail_ex+0x265/0x280 [ 41.183171][ T4100] should_failslab+0x8c/0xb0 [ 41.183281][ T4100] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 41.183310][ T4100] ? __alloc_skb+0x2ff/0x4b0 [ 41.183340][ T4100] __alloc_skb+0x2ff/0x4b0 [ 41.183369][ T4100] ? __alloc_skb+0x228/0x4b0 [ 41.183399][ T4100] audit_log_start+0x3a0/0x720 [ 41.183468][ T4100] audit_seccomp+0x48/0x100 [ 41.183505][ T4100] ? __seccomp_filter+0x832/0x1260 [ 41.183538][ T4100] __seccomp_filter+0x843/0x1260 [ 41.183635][ T4100] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.183695][ T4100] ? vfs_write+0x7e8/0x960 [ 41.183725][ T4100] ? __rcu_read_unlock+0x4f/0x70 [ 41.183829][ T4100] ? __fget_files+0x184/0x1c0 [ 41.183856][ T4100] __secure_computing+0x82/0x150 [ 41.183913][ T4100] syscall_trace_enter+0xcf/0x1e0 [ 41.183943][ T4100] do_syscall_64+0xa4/0x2b0 [ 41.183982][ T4100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.184093][ T4100] RIP: 0033:0x7fe35d5be15c [ 41.184108][ T4100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.184134][ T4100] RSP: 002b:00007fe35c01f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.184156][ T4100] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5be15c [ 41.184172][ T4100] RDX: 000000000000000f RSI: 00007fe35c01f0a0 RDI: 0000000000000006 [ 41.184186][ T4100] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.184201][ T4100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.184216][ T4100] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 41.184239][ T4100] [ 41.561652][ T4115] tipc: Started in network mode [ 41.566563][ T4115] tipc: Node identity ac14140f, cluster identity 4711 [ 41.591721][ T4115] tipc: New replicast peer: 255.255.255.255 [ 41.597841][ T4115] tipc: Enabled bearer , priority 10 [ 41.625573][ T4123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.634496][ T4123] tipc: Disabling bearer [ 41.648084][ T4121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.656811][ T4121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.672093][ T4115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.694495][ T4115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.133'. [ 41.766917][ T4131] loop3: detected capacity change from 0 to 512 [ 41.800393][ T4131] /dev/loop3: Can't open blockdev [ 41.843656][ T4137] loop4: detected capacity change from 0 to 512 [ 41.844840][ T4130] loop3: detected capacity change from 0 to 512 [ 41.850683][ T4137] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.897525][ T4137] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.941950][ T4137] EXT4-fs (loop4): 1 truncate cleaned up [ 41.967231][ T4137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.037694][ T4143] loop3: detected capacity change from 0 to 1024 [ 42.065388][ T4143] EXT4-fs: Ignoring removed bh option [ 42.070817][ T4143] EXT4-fs: inline encryption not supported [ 42.083757][ T4143] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 42.093554][ T4143] EXT4-fs (loop3): group descriptors corrupted! [ 42.373044][ T4157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 42.888549][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.098265][ T4176] netlink: 'syz.2.154': attribute type 5 has an invalid length. [ 43.106011][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 43.203067][ T4184] loop4: detected capacity change from 0 to 512 [ 43.226997][ T4184] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.151: bg 0: block 248: padding at end of block bitmap is not set [ 43.286205][ T4184] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.151: Failed to acquire dquot type 1 [ 43.337505][ T4184] EXT4-fs (loop4): 1 truncate cleaned up [ 43.354506][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.371704][ T4194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.157'. [ 43.382945][ T4184] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.518590][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.535663][ T4196] xt_hashlimit: size too large, truncated to 1048576 [ 43.646900][ T4200] loop4: detected capacity change from 0 to 512 [ 43.658729][ T4200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.686252][ T4200] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.159: iget: bad extended attribute block 262144 [ 43.719318][ T4200] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.159: couldn't read orphan inode 15 (err -117) [ 43.746098][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.908127][ T4205] sctp: [Deprecated]: syz.2.161 (pid 4205) Use of int in max_burst socket option deprecated. [ 43.908127][ T4205] Use struct sctp_assoc_value instead [ 43.925268][ T4205] netlink: 'syz.2.161': attribute type 39 has an invalid length. [ 44.262252][ T4211] loop5: detected capacity change from 0 to 1024 [ 44.284997][ T4211] EXT4-fs: Ignoring removed bh option [ 44.353820][ T4211] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.385739][ T4221] loop3: detected capacity change from 0 to 1024 [ 44.410673][ T4221] EXT4-fs: Ignoring removed oldalloc option [ 44.416683][ T4221] EXT4-fs: Ignoring removed bh option [ 44.451011][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.462917][ T4221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.503278][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.694574][ T4233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.170'. [ 44.715973][ T4211] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.768820][ T4236] vlan0: entered allmulticast mode [ 44.780590][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 44.849549][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 44.849565][ T29] audit: type=1400 audit(1766920853.749:1080): avc: denied { read write } for pid=4245 comm="syz.0.176" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.863249][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 44.879091][ T29] audit: type=1400 audit(1766920853.749:1081): avc: denied { open } for pid=4245 comm="syz.0.176" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 44.909810][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.931820][ T29] audit: type=1400 audit(1766920853.839:1082): avc: denied { create } for pid=4251 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.951514][ T4252] rdma_op ffff888126fc9180 conn xmit_rdma 0000000000000000 [ 44.954570][ T29] audit: type=1400 audit(1766920853.839:1083): avc: denied { bind } for pid=4251 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.977968][ T29] audit: type=1400 audit(1766920853.859:1084): avc: denied { write } for pid=4251 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.022707][ T4255] loop5: detected capacity change from 0 to 128 [ 45.032664][ T4255] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 45.058649][ T29] audit: type=1400 audit(1766920853.959:1085): avc: denied { mount } for pid=4258 comm="syz.0.180" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.075587][ T4255] System zones: 1-3 [ 45.080725][ T29] audit: type=1400 audit(1766920853.959:1086): avc: denied { mounton } for pid=4258 comm="syz.0.180" path="/24/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 45.080684][ T4255] , 19-19 [ 45.084589][ T4255] , 35-36 [ 45.106538][ T29] audit: type=1400 audit(1766920853.959:1087): avc: denied { unmount } for pid=4258 comm="syz.0.180" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 45.109478][ T4255] [ 45.110889][ T4255] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.142012][ T29] audit: type=1400 audit(1766920853.959:1088): avc: denied { allowed } for pid=4260 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.156186][ T4255] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.166159][ T29] audit: type=1400 audit(1766920853.959:1089): avc: denied { sqpoll } for pid=4260 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.279748][ T4267] loop4: detected capacity change from 0 to 128 [ 45.294388][ T4271] FAULT_INJECTION: forcing a failure. [ 45.294388][ T4271] name failslab, interval 1, probability 0, space 0, times 0 [ 45.304655][ T4265] lo speed is unknown, defaulting to 1000 [ 45.307063][ T4271] CPU: 1 UID: 0 PID: 4271 Comm: syz.0.184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.307093][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.307107][ T4271] Call Trace: [ 45.307133][ T4271] [ 45.307141][ T4271] __dump_stack+0x1d/0x30 [ 45.307170][ T4271] dump_stack_lvl+0x95/0xd0 [ 45.307258][ T4271] dump_stack+0x15/0x1b [ 45.307281][ T4271] should_fail_ex+0x265/0x280 [ 45.307338][ T4271] should_failslab+0x8c/0xb0 [ 45.307363][ T4271] __kmalloc_cache_noprof+0x65/0x4c0 [ 45.307391][ T4271] ? nfnetlink_rcv+0x555/0x16c0 [ 45.307482][ T4271] nfnetlink_rcv+0x555/0x16c0 [ 45.307525][ T4271] ? trace_buffer_unlock_commit_regs+0x114/0x310 [ 45.307560][ T4271] ? xas_load+0x413/0x430 [ 45.307593][ T4271] ? xas_load+0x413/0x430 [ 45.307683][ T4271] ? __rcu_read_unlock+0x4f/0x70 [ 45.307706][ T4271] ? xa_load+0xb1/0xe0 [ 45.307747][ T4271] ? __account_obj_stock+0x211/0x350 [ 45.307770][ T4271] ? obj_cgroup_charge_account+0x122/0x1a0 [ 45.307801][ T4271] ? should_fail_ex+0x30/0x280 [ 45.307825][ T4271] ? should_fail_ex+0xdb/0x280 [ 45.307924][ T4271] netlink_unicast+0x5c0/0x690 [ 45.307959][ T4271] netlink_sendmsg+0x58b/0x6b0 [ 45.307998][ T4271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 45.308085][ T4271] __sock_sendmsg+0x145/0x180 [ 45.308108][ T4271] ____sys_sendmsg+0x31e/0x4a0 [ 45.308143][ T4271] ___sys_sendmsg+0x17b/0x1d0 [ 45.308268][ T4271] __x64_sys_sendmsg+0xd4/0x160 [ 45.308351][ T4271] x64_sys_call+0x17ba/0x3000 [ 45.308379][ T4271] do_syscall_64+0xca/0x2b0 [ 45.308418][ T4271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.308476][ T4271] RIP: 0033:0x7fe35d5bf749 [ 45.308494][ T4271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.308514][ T4271] RSP: 002b:00007fe35c01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.308578][ T4271] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5bf749 [ 45.308592][ T4271] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 45.308678][ T4271] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.308692][ T4271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.308760][ T4271] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 45.308780][ T4271] [ 45.450111][ T4267] ip6t_srh: unknown srh match flags 4000 [ 45.650130][ T4283] FAULT_INJECTION: forcing a failure. [ 45.650130][ T4283] name failslab, interval 1, probability 0, space 0, times 0 [ 45.662869][ T4283] CPU: 0 UID: 0 PID: 4283 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.662896][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.662940][ T4283] Call Trace: [ 45.662948][ T4283] [ 45.662957][ T4283] __dump_stack+0x1d/0x30 [ 45.662986][ T4283] dump_stack_lvl+0x95/0xd0 [ 45.663011][ T4283] dump_stack+0x15/0x1b [ 45.663035][ T4283] should_fail_ex+0x265/0x280 [ 45.663100][ T4283] should_failslab+0x8c/0xb0 [ 45.663154][ T4283] __kmalloc_noprof+0xb9/0x5a0 [ 45.663181][ T4283] ? hashtab_duplicate+0x55/0x360 [ 45.663211][ T4283] ? should_fail_ex+0xdb/0x280 [ 45.663234][ T4283] ? __pfx_cond_bools_destroy+0x10/0x10 [ 45.663308][ T4283] hashtab_duplicate+0x55/0x360 [ 45.663408][ T4283] ? __kmalloc_noprof+0x2b4/0x5a0 [ 45.663444][ T4283] ? cond_policydb_dup+0xa3/0x4e0 [ 45.663473][ T4283] ? __pfx_cond_bools_copy+0x10/0x10 [ 45.663498][ T4283] cond_policydb_dup+0xd2/0x4e0 [ 45.663526][ T4283] security_set_bools+0xa0/0x340 [ 45.663568][ T4283] sel_commit_bools_write+0x1ea/0x270 [ 45.663651][ T4283] vfs_writev+0x406/0x8b0 [ 45.663677][ T4283] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 45.663743][ T4283] do_writev+0xe7/0x210 [ 45.663776][ T4283] __x64_sys_writev+0x45/0x50 [ 45.663803][ T4283] x64_sys_call+0x1ba5/0x3000 [ 45.663900][ T4283] do_syscall_64+0xca/0x2b0 [ 45.664016][ T4283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.664058][ T4283] RIP: 0033:0x7fb74085f749 [ 45.664075][ T4283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.664094][ T4283] RSP: 002b:00007fb73f2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 45.664116][ T4283] RAX: ffffffffffffffda RBX: 00007fb740ab5fa0 RCX: 00007fb74085f749 [ 45.664139][ T4283] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000009 [ 45.664153][ T4283] RBP: 00007fb73f2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 45.664168][ T4283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.664210][ T4283] R13: 00007fb740ab6038 R14: 00007fb740ab5fa0 R15: 00007ffd99d53838 [ 45.664229][ T4283] [ 45.962683][ T3808] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.980991][ T4289] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.095794][ T4302] loop3: detected capacity change from 0 to 512 [ 46.104023][ T4302] EXT4-fs: dax option not supported [ 46.170574][ T4305] loop3: detected capacity change from 0 to 512 [ 46.199733][ T4296] loop5: detected capacity change from 0 to 8192 [ 46.202631][ T4309] loop4: detected capacity change from 0 to 128 [ 46.224759][ T4305] ------------[ cut here ]------------ [ 46.230239][ T4305] EA inode 11 i_nlink=2 [ 46.230255][ T4305] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.196/4305 [ 46.245080][ T4305] Modules linked in: [ 46.249007][ T4305] CPU: 0 UID: 0 PID: 4305 Comm: syz.3.196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.258705][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.268881][ T4305] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 46.275524][ T4305] Code: 71 e2 9c ff 4c 8d 2d 0a f1 20 05 49 8d 7e 40 e8 71 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 85 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 4c ad ba 03 66 66 66 2e 0f 1f 84 [ 46.295221][ T4305] RSP: 0018:ffffc9000229f5a0 EFLAGS: 00010246 [ 46.301302][ T4305] RAX: ffff88811aea1b10 RBX: ffff88811a4401a8 RCX: ffffffff81bb1cab [ 46.309411][ T4305] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0da0 [ 46.317421][ T4305] RBP: 000000000000000b R08: 000188811a44015b R09: 0000000000000000 [ 46.325438][ T4305] R10: ffffc9000229f4d0 R11: 0001c9000229f4d0 R12: ffff88811a440158 [ 46.333463][ T4305] R13: ffffffff86dc0da0 R14: ffff88811a440110 R15: 0000000000000001 [ 46.341444][ T4305] FS: 00007fb73f2bf6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 46.350418][ T4305] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.352654][ T4309] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.357031][ T4305] CR2: 0000000000000000 CR3: 000000013a74e000 CR4: 00000000003506f0 [ 46.377064][ T4305] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 46.385098][ T4305] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 46.393225][ T4305] Call Trace: [ 46.396505][ T4305] [ 46.399439][ T4305] ext4_xattr_set_entry+0x77f/0x1020 [ 46.404863][ T4305] ext4_xattr_ibody_set+0x184/0x3c0 [ 46.410112][ T4305] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 46.415993][ T4305] __ext4_expand_extra_isize+0x246/0x280 [ 46.421653][ T4305] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 46.427156][ T4305] ext4_evict_inode+0x7c4/0xd40 [ 46.432132][ T4305] ? __pfx_ext4_evict_inode+0x10/0x10 [ 46.437590][ T4305] evict+0x2af/0x510 [ 46.441509][ T4305] ? __dquot_initialize+0x146/0x7c0 [ 46.446771][ T4305] iput+0x4bd/0x650 [ 46.451048][ T4305] ext4_process_orphan+0x1a9/0x1c0 [ 46.456403][ T4305] ext4_orphan_cleanup+0x6a8/0xa00 [ 46.461640][ T4305] ext4_fill_super+0x3411/0x37a0 [ 46.466611][ T4305] ? set_blocksize+0x1a8/0x310 [ 46.471391][ T4305] ? sb_set_blocksize+0xfc/0x170 [ 46.476415][ T4305] ? setup_bdev_super+0x30e/0x370 [ 46.481492][ T4305] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.486810][ T4305] get_tree_bdev_flags+0x291/0x300 [ 46.492018][ T4305] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.496197][ T4309] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.497460][ T4305] get_tree_bdev+0x1f/0x30 [ 46.533853][ T4305] ext4_get_tree+0x1c/0x30 [ 46.538276][ T4305] vfs_get_tree+0x57/0x1d0 [ 46.542797][ T4305] do_new_mount+0x24d/0x6a0 [ 46.547455][ T4305] path_mount+0x4ab/0xb80 [ 46.551840][ T4305] ? user_path_at+0xbf/0x130 [ 46.556482][ T4305] __se_sys_mount+0x28c/0x2e0 [ 46.561168][ T4305] __x64_sys_mount+0x67/0x80 [ 46.565799][ T4305] x64_sys_call+0x2cca/0x3000 [ 46.570727][ T4305] do_syscall_64+0xca/0x2b0 [ 46.575283][ T4305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.581299][ T4305] RIP: 0033:0x7fb740860eea [ 46.585862][ T4305] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.605506][ T4305] RSP: 002b:00007fb73f2bee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 46.614053][ T4305] RAX: ffffffffffffffda RBX: 00007fb73f2beef0 RCX: 00007fb740860eea [ 46.622176][ T4305] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb73f2beeb0 [ 46.630163][ T4305] RBP: 0000200000000180 R08: 00007fb73f2beef0 R09: 0000000000800718 [ 46.638497][ T4305] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 46.646514][ T4305] R13: 00007fb73f2beeb0 R14: 000000000000046f R15: 0000200000000200 [ 46.654589][ T4305] [ 46.657676][ T4305] ---[ end trace 0000000000000000 ]--- [ 46.663449][ T4314] __nla_validate_parse: 3 callbacks suppressed [ 46.663463][ T4314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.198'. [ 46.669279][ T4305] EXT4-fs (loop3): 1 orphan inode deleted [ 46.685237][ T4305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.731360][ T4319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.199'. [ 46.751685][ T4319] netlink: 80 bytes leftover after parsing attributes in process `syz.2.199'. [ 46.783724][ T4309] FAULT_INJECTION: forcing a failure. [ 46.783724][ T4309] name failslab, interval 1, probability 0, space 0, times 0 [ 46.796367][ T4309] CPU: 0 UID: 0 PID: 4309 Comm: syz.4.197 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 46.796474][ T4309] Tainted: [W]=WARN [ 46.796480][ T4309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.796575][ T4309] Call Trace: [ 46.796582][ T4309] [ 46.796591][ T4309] __dump_stack+0x1d/0x30 [ 46.796621][ T4309] dump_stack_lvl+0x95/0xd0 [ 46.796647][ T4309] dump_stack+0x15/0x1b [ 46.796678][ T4309] should_fail_ex+0x265/0x280 [ 46.796706][ T4309] should_failslab+0x8c/0xb0 [ 46.796811][ T4309] kmem_cache_alloc_noprof+0x69/0x4b0 [ 46.796834][ T4309] ? getname_flags+0x80/0x3b0 [ 46.796860][ T4309] getname_flags+0x80/0x3b0 [ 46.796894][ T4309] __x64_sys_rename+0x33/0x70 [ 46.796922][ T4309] x64_sys_call+0x24e/0x3000 [ 46.796978][ T4309] do_syscall_64+0xca/0x2b0 [ 46.797017][ T4309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.797044][ T4309] RIP: 0033:0x7f33c5aef749 [ 46.797061][ T4309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.797081][ T4309] RSP: 002b:00007f33c4557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 46.797102][ T4309] RAX: ffffffffffffffda RBX: 00007f33c5d45fa0 RCX: 00007f33c5aef749 [ 46.797116][ T4309] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000700 [ 46.797130][ T4309] RBP: 00007f33c4557090 R08: 0000000000000000 R09: 0000000000000000 [ 46.797145][ T4309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.797182][ T4309] R13: 00007f33c5d46038 R14: 00007f33c5d45fa0 R15: 00007fff1cbcf6c8 [ 46.797203][ T4309] [ 47.003437][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.023301][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.064812][ T4321] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.084216][ T4323] loop5: detected capacity change from 0 to 512 [ 47.097424][ T4323] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.098896][ T4323] EXT4-fs (loop5): 1 truncate cleaned up [ 47.099331][ T4323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.280137][ T4321] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.322832][ T4330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.202'. [ 47.331762][ T4329] all: renamed from team_slave_0 (while UP) [ 47.391693][ T4335] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 47.402681][ T4330] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.425711][ T4330] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 47.468412][ T4321] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.552694][ T4341] netlink: 'syz.3.205': attribute type 21 has an invalid length. [ 47.560485][ T4341] netlink: 128 bytes leftover after parsing attributes in process `syz.3.205'. [ 47.569864][ T3424] IPVS: starting estimator thread 0... [ 47.576475][ T4341] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 47.584308][ T4341] netlink: 'syz.3.205': attribute type 5 has an invalid length. [ 47.592066][ T4341] netlink: 3 bytes leftover after parsing attributes in process `syz.3.205'. [ 47.634400][ T4348] FAULT_INJECTION: forcing a failure. [ 47.634400][ T4348] name failslab, interval 1, probability 0, space 0, times 0 [ 47.647170][ T4348] CPU: 0 UID: 0 PID: 4348 Comm: syz.0.207 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.647283][ T4348] Tainted: [W]=WARN [ 47.647289][ T4348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.647359][ T4348] Call Trace: [ 47.647367][ T4348] [ 47.647374][ T4348] __dump_stack+0x1d/0x30 [ 47.647399][ T4348] dump_stack_lvl+0x95/0xd0 [ 47.647424][ T4348] dump_stack+0x15/0x1b [ 47.647448][ T4348] should_fail_ex+0x265/0x280 [ 47.647503][ T4348] should_failslab+0x8c/0xb0 [ 47.647527][ T4348] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 47.647557][ T4348] ? __alloc_skb+0x2ff/0x4b0 [ 47.647608][ T4348] __alloc_skb+0x2ff/0x4b0 [ 47.647635][ T4348] ? __alloc_skb+0x228/0x4b0 [ 47.647751][ T4348] netlink_alloc_large_skb+0xbf/0xf0 [ 47.647784][ T4348] netlink_sendmsg+0x3cf/0x6b0 [ 47.647819][ T4348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.647860][ T4348] __sock_sendmsg+0x145/0x180 [ 47.647953][ T4348] sock_write_iter+0x1a7/0x1f0 [ 47.647998][ T4348] ? __pfx_sock_write_iter+0x10/0x10 [ 47.648036][ T4348] vfs_write+0x52a/0x960 [ 47.648063][ T4348] ksys_write+0xda/0x1a0 [ 47.648162][ T4348] __x64_sys_write+0x40/0x50 [ 47.648186][ T4348] x64_sys_call+0x2847/0x3000 [ 47.648280][ T4348] do_syscall_64+0xca/0x2b0 [ 47.648316][ T4348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.648365][ T4348] RIP: 0033:0x7fe35d5bf749 [ 47.648380][ T4348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.648397][ T4348] RSP: 002b:00007fe35c01f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 47.648493][ T4348] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5bf749 [ 47.648506][ T4348] RDX: 0000000000000024 RSI: 0000200000000080 RDI: 0000000000000005 [ 47.648519][ T4348] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.648534][ T4348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.648550][ T4348] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 47.648572][ T4348] [ 47.868409][ T4343] IPVS: using max 2448 ests per chain, 122400 per kthread [ 47.875600][ T4321] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.900015][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.919786][ T4350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 47.929245][ T4350] FAULT_INJECTION: forcing a failure. [ 47.929245][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 47.942103][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.0.209 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 47.942296][ T4350] Tainted: [W]=WARN [ 47.942304][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.942340][ T4350] Call Trace: [ 47.942348][ T4350] [ 47.942357][ T4350] __dump_stack+0x1d/0x30 [ 47.942387][ T4350] dump_stack_lvl+0x95/0xd0 [ 47.942414][ T4350] dump_stack+0x15/0x1b [ 47.942434][ T4350] should_fail_ex+0x265/0x280 [ 47.942503][ T4350] should_failslab+0x8c/0xb0 [ 47.942527][ T4350] __kmalloc_cache_noprof+0x65/0x4c0 [ 47.942559][ T4350] ? netdevice_event+0x2ae/0x610 [ 47.942584][ T4350] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 47.942681][ T4350] ? __pfx_netdevice_event+0x10/0x10 [ 47.942711][ T4350] netdevice_event+0x2ae/0x610 [ 47.942738][ T4350] ? __pfx_del_netdev_ips+0x10/0x10 [ 47.942762][ T4350] ? __pfx_pass_all_filter+0x10/0x10 [ 47.942822][ T4350] ? nh_netdev_event+0x104/0x3b0 [ 47.942918][ T4350] ? __pfx_netdevice_event+0x10/0x10 [ 47.942962][ T4350] raw_notifier_call_chain+0x6f/0x1b0 [ 47.943002][ T4350] ? unregister_netdevice_many_notify+0xe8c/0x16d0 [ 47.943053][ T4350] unregister_netdevice_many_notify+0xea0/0x16d0 [ 47.943097][ T4350] ? __pfx_veth_dellink+0x10/0x10 [ 47.943130][ T4350] rtnl_dellink+0x3e1/0x5c0 [ 47.943201][ T4350] ? css_rstat_updated+0xbb/0x280 [ 47.943311][ T4350] ? selinux_capable+0x31/0x40 [ 47.943334][ T4350] ? security_capable+0x83/0x90 [ 47.943370][ T4350] ? ns_capable+0x7d/0xb0 [ 47.943402][ T4350] ? __pfx_rtnl_dellink+0x10/0x10 [ 47.943437][ T4350] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 47.943460][ T4350] ? avc_has_perm_noaudit+0xab/0x130 [ 47.943494][ T4350] netlink_rcv_skb+0x123/0x220 [ 47.943525][ T4350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.943549][ T4350] rtnetlink_rcv+0x1c/0x30 [ 47.943582][ T4350] netlink_unicast+0x5c0/0x690 [ 47.943681][ T4350] netlink_sendmsg+0x58b/0x6b0 [ 47.943758][ T4350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.943818][ T4350] __sock_sendmsg+0x145/0x180 [ 47.943853][ T4350] ____sys_sendmsg+0x31e/0x4a0 [ 47.943953][ T4350] ___sys_sendmsg+0x17b/0x1d0 [ 47.944061][ T4350] __x64_sys_sendmsg+0xd4/0x160 [ 47.944093][ T4350] x64_sys_call+0x17ba/0x3000 [ 47.944122][ T4350] do_syscall_64+0xca/0x2b0 [ 47.944225][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.944252][ T4350] RIP: 0033:0x7fe35d5bf749 [ 47.944270][ T4350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.944291][ T4350] RSP: 002b:00007fe35c01f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.944313][ T4350] RAX: ffffffffffffffda RBX: 00007fe35d815fa0 RCX: 00007fe35d5bf749 [ 47.944400][ T4350] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 47.944415][ T4350] RBP: 00007fe35c01f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.944431][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.944506][ T4350] R13: 00007fe35d816038 R14: 00007fe35d815fa0 R15: 00007ffc74c936b8 [ 47.944527][ T4350] [ 48.319348][ T4352] erspan0: entered promiscuous mode [ 48.335021][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.346206][ T323] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.354444][ T4358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 48.378028][ T4358] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.211'. [ 48.425984][ T323] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.482121][ T323] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.508055][ T4370] mmap: syz.2.215 (4370) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.526970][ T323] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.535224][ T4358] lo speed is unknown, defaulting to 1000 [ 48.537669][ T4372] FAULT_INJECTION: forcing a failure. [ 48.537669][ T4372] name failslab, interval 1, probability 0, space 0, times 0 [ 48.553759][ T4372] CPU: 1 UID: 0 PID: 4372 Comm: syz.4.216 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 48.553868][ T4372] Tainted: [W]=WARN [ 48.553874][ T4372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.553887][ T4372] Call Trace: [ 48.553894][ T4372] [ 48.553902][ T4372] __dump_stack+0x1d/0x30 [ 48.553929][ T4372] dump_stack_lvl+0x95/0xd0 [ 48.553951][ T4372] dump_stack+0x15/0x1b [ 48.554048][ T4372] should_fail_ex+0x265/0x280 [ 48.554072][ T4372] should_failslab+0x8c/0xb0 [ 48.554112][ T4372] __kmalloc_noprof+0xb9/0x5a0 [ 48.554140][ T4372] ? security_key_alloc+0x50/0x140 [ 48.554231][ T4372] security_key_alloc+0x50/0x140 [ 48.554302][ T4372] key_alloc+0x458/0x9a0 [ 48.554336][ T4372] keyring_alloc+0x45/0xb0 [ 48.554375][ T4372] lookup_user_key+0x2ea/0xd10 [ 48.554407][ T4372] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 48.554473][ T4372] __se_sys_add_key+0x268/0x350 [ 48.554530][ T4372] __x64_sys_add_key+0x67/0x80 [ 48.554582][ T4372] x64_sys_call+0x2ea3/0x3000 [ 48.554608][ T4372] do_syscall_64+0xca/0x2b0 [ 48.554676][ T4372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.554698][ T4372] RIP: 0033:0x7f33c5aef749 [ 48.554713][ T4372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.554733][ T4372] RSP: 002b:00007f33c4557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 48.554756][ T4372] RAX: ffffffffffffffda RBX: 00007f33c5d45fa0 RCX: 00007f33c5aef749 [ 48.554769][ T4372] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 48.554783][ T4372] RBP: 00007f33c4557090 R08: ffffffffffffffff R09: 0000000000000000 [ 48.554871][ T4372] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 48.554883][ T4372] R13: 00007f33c5d46038 R14: 00007f33c5d45fa0 R15: 00007fff1cbcf6c8 [ 48.554901][ T4372] [ 48.561117][ T4369] loop5: p2 p3 p7 [ 48.747922][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 48.799840][ T3637] udevd[3637]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 48.801028][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 48.814858][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 48.897102][ T4385] rdma_op ffff88811af70980 conn xmit_rdma 0000000000000000 [ 48.908144][ T4384] set_capacity_and_notify: 2 callbacks suppressed [ 48.908161][ T4384] loop3: detected capacity change from 0 to 1024 [ 48.965427][ T4385] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 48.980602][ T4384] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 48.980762][ T4385] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 48.991630][ T4384] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.004294][ T4384] JBD2: no valid journal superblock found [ 49.017342][ T4384] EXT4-fs (loop3): Could not load journal inode [ 49.063268][ T4384] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 49.167692][ T4408] loop3: detected capacity change from 0 to 512 [ 49.172342][ T4401] lo speed is unknown, defaulting to 1000 [ 49.180932][ T4408] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.189205][ T4408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.228: bg 0: block 248: padding at end of block bitmap is not set [ 49.204107][ T4408] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.228: Failed to acquire dquot type 1 [ 49.222308][ T4408] EXT4-fs (loop3): 1 truncate cleaned up [ 49.228647][ T4408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.268976][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.281090][ T4411] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.353000][ T4411] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.441678][ T4411] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.527207][ T4431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4431 comm=syz.0.232 [ 49.544512][ T4428] loop3: detected capacity change from 0 to 128 [ 49.569493][ T4428] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.569976][ T4411] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.582918][ T4428] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.658170][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.667646][ T3587] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.677278][ T3587] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.705698][ T3587] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.721459][ T3587] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.735860][ T4437] rdma_op ffff8881078ed980 conn xmit_rdma 0000000000000000 [ 49.752582][ T4437] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 49.780806][ T4439] loop3: detected capacity change from 0 to 1024 [ 49.782440][ T4437] loop5: detected capacity change from 0 to 2048 [ 49.801792][ T4441] loop4: detected capacity change from 0 to 512 [ 49.809952][ T4441] EXT4-fs: Ignoring removed nobh option [ 49.813734][ T4443] bridge0: port 3(batadv1) entered blocking state [ 49.822104][ T4443] bridge0: port 3(batadv1) entered disabled state [ 49.833012][ T4443] batadv1: entered allmulticast mode [ 49.837261][ T4439] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.839313][ T4443] batadv1: entered promiscuous mode [ 49.849228][ T4439] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.870831][ T4441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.883488][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 49.883502][ T29] audit: type=1326 audit(1766920858.779:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 49.887733][ T4441] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.889756][ T29] audit: type=1326 audit(1766920858.779:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 49.936634][ T4439] JBD2: no valid journal superblock found [ 49.947055][ T29] audit: type=1326 audit(1766920858.789:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 49.952321][ T4439] EXT4-fs (loop3): Could not load journal inode [ 49.981959][ T29] audit: type=1326 audit(1766920858.789:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 49.983553][ T4437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.005447][ T29] audit: type=1326 audit(1766920858.789:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.040740][ T29] audit: type=1326 audit(1766920858.789:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.064158][ T29] audit: type=1326 audit(1766920858.819:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.087513][ T29] audit: type=1326 audit(1766920858.819:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.111039][ T29] audit: type=1326 audit(1766920858.819:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.134408][ T29] audit: type=1326 audit(1766920858.819:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4418 comm="syz.0.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe35d5f2005 code=0x7ffc0000 [ 50.159040][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.176539][ T4439] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 50.284659][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.311719][ T3587] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 50.320993][ T3587] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 50.386353][ T4461] loop5: detected capacity change from 0 to 512 [ 50.398884][ T4462] netlink: 'syz.3.244': attribute type 21 has an invalid length. [ 50.442012][ T4461] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.517361][ T4466] loop4: detected capacity change from 0 to 512 [ 50.573496][ T4461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.586582][ T4466] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.246: inode has both inline data and extents flags [ 50.625418][ T4461] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.644775][ T4466] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.246: couldn't read orphan inode 15 (err -117) [ 50.657798][ T4466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.683286][ T4461] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.242: corrupted inode contents [ 50.704582][ T4461] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #18: comm syz.5.242: mark_inode_dirty error [ 50.721377][ T4461] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #18: comm syz.5.242: corrupted inode contents [ 50.741946][ T4461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #18: comm syz.5.242: mark_inode_dirty error [ 50.754462][ T4461] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #18: comm syz.5.242: mark inode dirty (error -117) [ 50.767578][ T4461] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 50.778124][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.825703][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.913327][ T4500] loop5: detected capacity change from 0 to 512 [ 50.922395][ T4500] EXT4-fs: Ignoring removed nobh option [ 50.933278][ T4500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.958055][ T4505] loop4: detected capacity change from 0 to 1024 [ 50.974364][ T4500] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.985199][ T4505] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.996250][ T4505] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.011686][ T4505] JBD2: no valid journal superblock found [ 51.011783][ T3808] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.017551][ T4505] EXT4-fs (loop4): Could not load journal inode [ 51.037577][ T4505] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 51.098346][ T4516] rdma_op ffff88812a40bd80 conn xmit_rdma 0000000000000000 [ 51.126524][ T4516] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 51.253308][ T4535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.300027][ T4537] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 51.338845][ T4545] netlink: 'syz.5.261': attribute type 3 has an invalid length. [ 51.353512][ T4535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.406548][ T4548] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.419070][ T4535] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.458193][ T4548] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.518428][ T4565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4565 comm=syz.2.265 [ 51.556703][ T4560] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 51.602194][ T4576] rdma_op ffff8881274c8980 conn xmit_rdma 0000000000000000 [ 51.652830][ T4576] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 51.687738][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.712386][ T4597] vhci_hcd vhci_hcd.4: invalid port number 236 [ 51.719906][ T4597] __nla_validate_parse: 8 callbacks suppressed [ 51.719961][ T4597] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 51.739179][ T4597] batadv0: entered promiscuous mode [ 51.745835][ T4597] batadv0: left promiscuous mode [ 51.795190][ T4604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4604 comm=syz.3.273 [ 51.864618][ T4611] FAULT_INJECTION: forcing a failure. [ 51.864618][ T4611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.877878][ T4611] CPU: 1 UID: 0 PID: 4611 Comm: syz.5.276 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.877912][ T4611] Tainted: [W]=WARN [ 51.877918][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.877931][ T4611] Call Trace: [ 51.877943][ T4611] [ 51.877951][ T4611] __dump_stack+0x1d/0x30 [ 51.878020][ T4611] dump_stack_lvl+0x95/0xd0 [ 51.878041][ T4611] dump_stack+0x15/0x1b [ 51.878062][ T4611] should_fail_ex+0x265/0x280 [ 51.878144][ T4611] should_fail+0xb/0x20 [ 51.878167][ T4611] should_fail_usercopy+0x1a/0x20 [ 51.878215][ T4611] _copy_from_iter+0xcf/0xe70 [ 51.878240][ T4611] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 51.878277][ T4611] copy_page_from_iter+0x178/0x2a0 [ 51.878308][ T4611] ? anon_pipe_write+0x71/0xb30 [ 51.878369][ T4611] anon_pipe_write+0x541/0xb30 [ 51.878391][ T4611] ? anon_pipe_write+0x71/0xb30 [ 51.878423][ T4611] ? __pfx_anon_pipe_write+0x10/0x10 [ 51.878529][ T4611] vfs_write+0x52a/0x960 [ 51.878553][ T4611] ksys_write+0xda/0x1a0 [ 51.878587][ T4611] __x64_sys_write+0x40/0x50 [ 51.878608][ T4611] x64_sys_call+0x2847/0x3000 [ 51.878635][ T4611] do_syscall_64+0xca/0x2b0 [ 51.878733][ T4611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.878818][ T4611] RIP: 0033:0x7f712bc0f749 [ 51.878842][ T4611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.878864][ T4611] RSP: 002b:00007f712a677038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.878885][ T4611] RAX: ffffffffffffffda RBX: 00007f712be65fa0 RCX: 00007f712bc0f749 [ 51.878907][ T4611] RDX: 00000000fffffdef RSI: 00002000000001c0 RDI: 0000000000000000 [ 51.878919][ T4611] RBP: 00007f712a677090 R08: 0000000000000000 R09: 0000000000000000 [ 51.878932][ T4611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.878944][ T4611] R13: 00007f712be66038 R14: 00007f712be65fa0 R15: 00007ffe31389fe8 [ 51.878966][ T4611] [ 52.098267][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.139488][ T4619] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 52.183190][ T4621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.195109][ T4617] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 52.206227][ T4617] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 52.221729][ T4621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.230084][ T3007] ================================================================== [ 52.238182][ T3007] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 52.244799][ T3007] [ 52.247126][ T3007] read-write to 0xffff8881075c1cc0 of 4 bytes by task 3298 on cpu 0: [ 52.255195][ T3007] dont_mount+0x2a/0x40 [ 52.259345][ T3007] vfs_unlink+0x2ae/0x440 [ 52.263662][ T3007] do_unlinkat+0x1cd/0x4b0 [ 52.268080][ T3007] __x64_sys_unlink+0x2e/0x40 [ 52.272837][ T3007] x64_sys_call+0x2f48/0x3000 [ 52.277514][ T3007] do_syscall_64+0xca/0x2b0 [ 52.282020][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.287905][ T3007] [ 52.290216][ T3007] read to 0xffff8881075c1cc0 of 4 bytes by task 3007 on cpu 1: [ 52.297755][ T3007] lookup_fast+0xf0/0x320 [ 52.302083][ T3007] path_lookupat+0x15c/0x500 [ 52.306678][ T3007] filename_lookup+0x147/0x340 [ 52.311441][ T3007] do_readlinkat+0x7d/0x320 [ 52.315948][ T3007] __x64_sys_readlink+0x47/0x60 [ 52.320796][ T3007] x64_sys_call+0x2af1/0x3000 [ 52.325473][ T3007] do_syscall_64+0xca/0x2b0 [ 52.329980][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.335952][ T3007] [ 52.338261][ T3007] value changed: 0x00300080 -> 0x00004080 [ 52.343962][ T3007] [ 52.346269][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 52.352405][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.363251][ T3007] Tainted: [W]=WARN [ 52.367047][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.377093][ T3007] ================================================================== [ 52.397098][ T4617] JBD2: no valid journal superblock found [ 52.402899][ T4617] EXT4-fs (loop4): Could not load journal inode [ 52.410299][ T4617] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22