last executing test programs: 3m36.310141602s ago: executing program 32 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a2284ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000740)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d46f0ffae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000440)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c", 0x25}, {0x0}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xc72}], 0x7}}], 0x1, 0x4040841) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 3m27.074024442s ago: executing program 33 (id=940): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) (fail_nth: 2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m47.816501609s ago: executing program 34 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) 2m40.728142797s ago: executing program 35 (id=1753): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 2m21.00608865s ago: executing program 0 (id=2107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x3, &(0x7f0000000040)={0xfffffffffffffffc, 0x618b81e8}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r7, 0x25, 0x0, @void}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(r8, r9, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x3, 0x2, 0xa0, 0x80, 0x3b, r7, r8}, {0x8001, 0x6, 0x3, 0xde, 0x2, 0x990c422, 0x81, 0x6}, {0x5, 0x0, 0x6, 0x81}, 0x1, 0x6e6bb8, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x1, 0x7, 0x2, 0x8001, 0x8}}, 0xe8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) fdatasync(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m20.112362178s ago: executing program 0 (id=2134): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m20.069947092s ago: executing program 0 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 2m20.035957856s ago: executing program 0 (id=2141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) 2m19.982495771s ago: executing program 0 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x3, &(0x7f0000000040)={0xfffffffffffffffc, 0x618b81e8}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r6, 0x25, 0x0, @void}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(r7, r8, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x3, 0x2, 0xa0, 0x80, 0x3b, r6, r7}, {0x8001, 0x6, 0x3, 0xde, 0x2, 0x990c422, 0x81, 0x6}, {0x5, 0x0, 0x6, 0x81}, 0x1, 0x6e6bb8, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x1, 0x7, 0x2, 0x8001, 0x8}}, 0xe8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) fdatasync(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.093972658s ago: executing program 0 (id=2166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00000c8000/0x4000)=nil, 0x4000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 2m12.88515224s ago: executing program 6 (id=2315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x28, r3, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x28}}, 0x40000) 2m12.846618294s ago: executing program 6 (id=2316): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$msr(r3, &(0x7f0000001580)=""/4096, 0x1000) 2m12.728372086s ago: executing program 6 (id=2317): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x4100, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) 2m11.801892927s ago: executing program 6 (id=2324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@noblock_validity}, {@prjquota}, {@block_validity}, {@minixdf}, {@grpjquota}, {@norecovery}]}, 0x1, 0x463, &(0x7f00000014c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000ff07ffec8500000050000000850000000f00000095471ff3903f3612f4d293cf5dc1d9724e"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x40, 0x6}, 0x0, 0x10000, 0x6, 0x6, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0xe8b5, 0x10}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_ext={0x1c, 0x13, &(0x7f0000000640)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x0, 0x1, 0xb, 0x7, 0x50, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x78}, @call={0x85, 0x0, 0x0, 0x1f}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000440)='GPL\x00', 0x9b, 0x0, &(0x7f0000000480), 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xe, 0x9, 0xbd}, 0x10, 0x40de, r2, 0x2, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000f00)=[{0x5, 0x2, 0xd, 0x4}, {0x4, 0x3, 0xc, 0x6}], 0x10, 0x7fff}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r6, &(0x7f0000000380)="3f571116d512e1e0da62703aa7f3b201658f76e01032cacab297630d47aedca5487aa7f16f02b9be1477cda0dc17c0aa50bbfef36baa31ec1eb9cadb044d823357e832ab082bffffffe659e6ecf04aa21083b831e195b9d9dfc4116feb0815434718aa0fb7461a1f3672abe7d69df18d3ae79d833fb448ed4220efbcae", 0x7d) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000240)={0x3ff, 0xffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket(0x29, 0x0, 0xa0) mount(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000480)='sockfs\x00', 0x60, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790030000000000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) 2m11.16231005s ago: executing program 6 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, 0x0, &(0x7f0000000300)) listen(r0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x80}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000480)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x90) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x72, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r9, &(0x7f0000000340), 0x12) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000001080045000068006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000130dcc3438886c3354a45e5e280204feff030308051200000004000000050000002a00000a9cfe06e2d4c3d9481346870b4c83b92284a75e1b0512000100000000a12300000003000000010000"], 0x0) 2m10.982508587s ago: executing program 6 (id=2335): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xc615, 0x101, 0x0) (fail_nth: 4) 2m10.982292477s ago: executing program 36 (id=2335): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)=0xc615, 0x101, 0x0) (fail_nth: 4) 2m4.060305289s ago: executing program 37 (id=2166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00000c8000/0x4000)=nil, 0x4000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000040)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m58.966975931s ago: executing program 7 (id=2526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m58.070484829s ago: executing program 7 (id=2539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 1m57.991523287s ago: executing program 7 (id=2540): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_create_resource$binfmt(0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffd, 0xe58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) unshare(0x64000600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r5, 0x0, 0x0, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 1m56.988478936s ago: executing program 7 (id=2548): r0 = socket$inet(0x2, 0x6, 0x5) recvfrom$inet(r0, &(0x7f00000006c0)=""/4096, 0x1000, 0x180, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfeffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f00000003c0)={0x12, {{0x29, 0x0, 0x4000000, @mcast1, 0x3}}}, 0x88) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x7ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20020855}, 0x880) 1m54.063353584s ago: executing program 7 (id=2578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x4100, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) unshare(0x2c060000) unshare(0x2c020400) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) 1m52.941198465s ago: executing program 7 (id=2599): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m52.861586122s ago: executing program 38 (id=2599): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 47.285009942s ago: executing program 9 (id=3709): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000aa40)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) 47.20141158s ago: executing program 9 (id=3712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 47.115833539s ago: executing program 9 (id=3716): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x387, &(0x7f0000001440)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 46.935327426s ago: executing program 9 (id=3721): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0xffff, 0xffffffe5, 0x40}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6694380b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e7a338ed5079"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ce2709649d2b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000060000000000000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0), 0x6, 0x603, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747+zJvZvbtBFBa49mfNGJHxK0TScRYy7LRaCwcz9e7+ceVk9mURK325u9JJHlec/0kf9yaJ4Yj4vvDEY9XVpe7cOny6elqreGDiL2LZ87vXbh0ec/8melTs6dmz07te2n/gcmXp/ZPrUucW/PHI0ffePrTD999ce6H6p4kDsbxwfdnYkUc62U8xuNWHmJr/kBEHMhm2rwvD5tNEEKpVfLP42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDmsX13x8HHe9wr6Z8bhxoHQKvjH2icG4nh+rHRlptJy5FR49zGtnUoPyvjvys7v8ymWHYe4u/bW2dgHcrpZOlqRDzVLv6kXrdt9Uiz+NNl9UgiYjIihvL6vfYAdUha5ntxHmYt9xt/GhEH88cs//B9lj++It3v+AEop+uH8h35Upa6s//L+h7N/k+06f+Mttl33Y+i93+d+3/N/f1w/Rx5uqIflvVZjrV/ycGVGb98fOTzTuW39v+yKSu/2RfshxtXI3auiP+jLNi8/5PFn7TZ/tkqJw52V8brP/52pNOyouOvXYvY1fb4506vNJtb4/rk3rn56uxk42/bMr797p2vO5VfdPzZ9t/SIf6W7Z+ufF72npzvsoxvjl0702nZ6F3jT38dShrHm0N5znvTi4sXpiKGkqP5Ki35+9auS3Od5mtk8e9+rn37X/b5v7r8dUaa/zK7cP6t0zfbL2m2qHvb/i0Xk2/VuqxDJ1n8M3ff/qvaf5b3WZdl/PX2xWc6LVvr8z/yIIEBAAAAAABACaX1a7BJOnF7Pk0nJhrjZZ+ILWn13MLi83PnLp6didhd/z7kYNq80j3WSCdZeir/PmwzvW9F+oWI2B4RX1RG6umJk+eqM0UHDwAAAAAAAAAAAAAAAAAAABvE1nz8f/M+1X9WGuP/gZLo5Q3mgI1N+4fyqrf/Vbd4AsrA/h/KS/uH8tL+oby0fygv7R/KS/uH8tL+oby0fwAAAADYlLY/e/3nJCKWXhmpT5mhfJkRQbC5DRZdAaAwlaIrABTm9qV/nX0ona76///kPw7Y++oABUjaZdY7B7W1G//1ts8EAAAAAAAAAAAAAHpg147O4/+NDYbNbe1hfyN9qwfQfw8w/t9PB8BDzk//Q3k5xgfuNop/uNMC4/8BAAAAAAAAAAAAoG9G61OSTuRjgUcjTScmIh6NiG0xmMzNV2cnI+KxiPipMvhIlp4qutIAAAAAAAAAAAAAAAAAAACwySxcunx6ulqdvdA68++qnM0907wLah/KejXu8VmR9P9tGYmIwjdKz2YGWnKSiKVsy2+Iil1YiI1RjfpMwf+YAAAAAAAAAAAAAAAAAACghFrGHre386s+1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+u/O/f97N1N0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw+n/AAAA///mWT6h") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) socket(0xf, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x500000000000000}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) 46.338428545s ago: executing program 9 (id=3732): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) msgctl$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) 46.139937115s ago: executing program 9 (id=3737): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7f7c0002}, {0x7ff, 0x80, 0x12}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 46.114357668s ago: executing program 39 (id=3737): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7f7c0002}, {0x7ff, 0x80, 0x12}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 43.561114429s ago: executing program 8 (id=3772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r6, r7, 0x25, 0x0, @void}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(r8, r9, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in=@multicast1, 0x4e20, 0x0, 0x4e20, 0x3, 0x2, 0xa0, 0x80, 0x3b, r7, r8}, {0x8001, 0x6, 0x3, 0xde, 0x2, 0x990c422, 0x81, 0x6}, {0x5, 0x0, 0x6, 0x81}, 0x1, 0x6e6bb8, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d3, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x1, 0x7, 0x2, 0x8001, 0x8}}, 0xe8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) fdatasync(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 42.53872819s ago: executing program 8 (id=3782): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x588, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 42.246120289s ago: executing program 8 (id=3785): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='w\xde\xa3\x05\xa3\x91\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xaek\xbd\x87W\x1d\x1b(\x8e\xf8\\2\x98\xf7P\x1b8\xcf\xf5\xdc0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e7a338ed5079"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ce2709649d2b"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000060000000000000000001000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000005c0), 0x6, 0x603, &(0x7f0000000680)="$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") r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) socket(0xf, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='mm_page_alloc\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x500000000000000}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) 41.259880635s ago: executing program 8 (id=3796): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_create_resource$binfmt(0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffd, 0xe58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) unshare(0x64000600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r5, 0x0, 0x0, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 40.495641871s ago: executing program 8 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 40.448122215s ago: executing program 40 (id=3810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000200000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 2.807750553s ago: executing program 2 (id=4381): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x88000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100200, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000002000000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000340)="8fcb000000000000", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$UHID_INPUT2(r5, &(0x7f0000003200)={0xc, {0x602, "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"}}, 0x608) openat(r5, &(0x7f0000000280)='./bus\x00', 0x280, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x88000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100200, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000002000000000000000002000000", @ANYRES32=r1, @ANYRES32=r1], 0x0, 0x10, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r2, &(0x7f0000000340)="8fcb000000000000", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) write$UHID_INPUT2(r5, &(0x7f0000003200)={0xc, {0x602, "6c2450060f84cfce0059f92be3fbc44cce81cf6db39945ebd08f18764adae66029e17e29738c85b051ced2b488f35ca681091dd3c8976415c191cb459856d4f44c95eee27664361e1e7cb726c60b07771e33d8d861946edf3c02e56f4622bd1eef3ec8d76667bb3eeacf1df11e3f912a62e47754f3e5f33f261501be67cc5388e0816ed128d69e9832110dec826f33e982f7398469e5ec2af5fea0edf172ffd2a2efa4821b50c66112ceb28eed43431b4706268e86fcb42d1774f0244b05c3a2f23ec06136d3f5afd4c893c70b73c6a7295c263752ecbc2310c0f9d63018c13771c21a3e4682b6717dff9d936359fb7b994abfc9b781633884074d367da59a7873dcc769e65283267e02578c43b25073476fd8aa28957b6c18409f5fddef1f7bb7a2fac25e6aa5b35ee2c36086559296318b3c6834dc0f59a055514faf0228ad1e955f8ece3f1914dc41e87b8cb4c87e89def224d043d93c491612a227c517d3a5ccdb9907981a3694f58848a0b80b860a0fa2668b23257238f6a39725712e97ca85726cc6fa4b201caa13c3d9d744b85347003b72bbd2312774ab810a4af368c59b3da94eb210f8d9123b7083570dd7b66f184e069d3d83567acd75a2e0759f706b6d821f16f6e10b067dcddb523ed01e8b62a1b6e4696ef09458a55517cf2c6582da5b919702cfaa9cb760f38ac6a73fe50fabb43bf09e401643fb9407f0b2f76ec8d6b9c4c9d54dff40aaac78eec68c219b7d19a6ddabccbd55947e98762203d9f352057c0d206ae0361ef040e518c2893990639268ee8a6a8a544b0e3729022a3410f30e009f20c796a5ad6dd1424676fd6bd492ad9dbb616578d6e66c34a3dae501a9a011da954242f69deb11e65474398f334c83eac6ad6bd22287193568883915f311d477400bab2b8b8117b0a1e8583b032b0f0cb1e8f0ab1aadc6904e4229779fa8d9f1addf9a728c12c1129b9d749f3dbc924cfabf8182924075fd167e467eb6c2dc2852736cecb4330ad884e8bf616812561df60cc5e5992fda1e518d5d8b77547c9c7ffe81db14890152249e0743407dc2f7ce4a89a8d3f35d6996e4682bfb7a9c026df3a4313ed72238b91dfc4ed36df2e1493d248caf6f1be0044d82d1510e56b2745f84610845409f7e2911453ec19f1de063b76737b10e56daddc77f121a03e6ee27fdeeae4789d073c1f3ec92574784a66dfe134b47e5451e0ee0e4bd58b92ba013eea92b2659b4a47b840e97250c2a1a34a21fe5bd67c9884f3797f9d8ffe2cd890ef128b51e4ac1a5f16df2036a75cd915a5a2eb32e36450077277b1d3fec4e99637c60e22c506f4067faba79e42307bf81c137a4e667df76367b3757f327418307223b9ec77f0cb8e5d2a2dc34141ef60b915de3cad45df654865cb33272c80ad09ebddee72e6552c8d0474a85a4102b808c2508f1c6ed614755f650759c0a09bb0dffe0cb13d8ae336ec939fdf37c3b684611b47793a327a01b65c94ffde7c70b00deed3f3a6c67ee38b5ba7c4746cd05d978d871a5225885a2dc409149ba98c4abf1fe58b73cea887bba02b843fc322291f59ef9803f3c97acb05b2c9484e717aa8c390d7166b98bf98a9a0485e9f6a76d42a1485d8d97cd8a8aa445770b5053925fcbd52a52c1df9b2962c7894c58dd5aff5fde2074f5b5e47cf2a28b3c633707c7fff675ac426b4cb928bbfb4eb4123a62cc17cf2a5442109acc537a6549b51fad488a3bdb180569c8bb42b9d4ad552aa954d3300846ced9e37653751fca21961375936bbdb63258b16cc0e45bb8b6ea4c836e35708ec96878213b3383aa9d0d9ee61a8c6361008512889d705b8b8b4e4e74dde2921f2de930a5625066e9271d791b8cfb7b6288082ebce7460aadaca42fb90b91c7c9f3668d3257fc45c8a81962792b9544299cc51f9e385f944440979f4e67ef9ca41584f657052636a163616918d6b29e3b8b6a1aa33c76d2a973c71aa71912bee98bdd08e04d78e56d57b0b28241c7869fdd0c4b2ac226dac3b88b43d721b0071a41f1b52d48b5b149478ca1893051e168e2473bc37749f83a77824fad4515838d2728a472545b0e3c5d3e61bc80bb4baf63d935a7f76dae08699add1512128a13b0ff42c89e1042e39f7ddfc79e94d5f9b3c0dc4eeb20077a25504a42abd86b34"}}, 0x608) (async) openat(r5, &(0x7f0000000280)='./bus\x00', 0x280, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@nogrpid}, {@lazytime}, {@bh}, {@errors_continue}, {@noblock_validity}, {}, {@mblk_io_submit}, {@nodioread_nolock}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000010c0)="$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") (async) 2.514136972s ago: executing program 2 (id=4385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') writev(r2, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r3, 0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x20000000) 2.409199582s ago: executing program 2 (id=4386): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_create_resource$binfmt(0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffd, 0xe58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) unshare(0x64000600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r5, 0x0, 0x0, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 2.152757658s ago: executing program 5 (id=4393): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x87b, 0x5, 0x1, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r0], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2}, 0x18) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000080)}], 0x1) gettid() syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08230001080006040001000000000000000000000180c200000e00000000"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) preadv2(r4, &(0x7f0000000a40)=[{&(0x7f0000000180)=""/40, 0x28}, {&(0x7f0000000440)=""/45, 0x2d}, {0x0}, {&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f0000000740)}], 0x6, 0x61, 0x2, 0x18) splice(r3, 0x0, r6, 0x0, 0x6, 0x0) setpriority(0x0, 0x0, 0xacf0165) read(r5, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r6, &(0x7f0000000a00)={0x14, 0x67, 0x2, {0x4}}, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x8844) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x13, 0x4004, @fd_index=0x1, 0x9, &(0x7f0000000380), 0x0, 0x2, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x7e, 0xa000000}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) 1.951078727s ago: executing program 1 (id=4394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, 0xffffffffffffffff, 0xf3a, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x18c6) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, &(0x7f0000000000)={0x400038, 0x9, 0x8}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) 1.463064416s ago: executing program 2 (id=4398): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="88f5020000000000"], 0x8) (async) sendto$inet6(r0, 0x0, 0x0, 0x1, &(0x7f0000000000)={0xa, 0x4e23, 0xb, @remote, 0x5}, 0x1c) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000700)={0x53, 0xfffffffffffffffd, 0x56, 0x8, @scatter={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000001a00)=""/4096, 0x1000}]}, &(0x7f0000000400)="3c37d6fd5bc94eecae7ce7fca423fa0b6cbedc32de73a5cd7a84777b4f1e40144e7bf8ac67b9d168e46e52f03ed9f9ee9ca15e7c82b0cda0906c7bdc2ddbd88d57d952dd06775863eb68171fa20f9ec298bdca6cd871", &(0x7f00000005c0)=""/85, 0x9, 0x0, 0x3, &(0x7f0000000140)}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x39000, 0x0) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x8c48, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0x1, 0x5bd, &(0x7f0000000900)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (async) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={&(0x7f00000010c0)="f128bb4aeef8d472ba94dec42ae944c2589c6813bb12aedaf039b9080e32bece14cf44faea71ea53c415321ecd73f0073c5d984cf5bb6868de7a9337dd5032d50903b547218ab734920b56e741385f9e4398ead27e45942db7bc31aa64b10d6428f47a23c1ea89a53b244790f7ec012447b34b4aa2769c36444fa64ff40e68feb566f8f618d7ae122f404530d55f1d0961223c11dfe1a4777e8f46dea6904f0b7180716a4817689c90f9004a4a1f28cfc635d38b62b5f496f79b3b39c3d4639062f8f2564fb0c5375244ff75b15b2c720f9de843d15338d93d55a4", &(0x7f0000000fc0)="c34b2c166f2473c974edd8bc12b55e5bad93a4929ed4061a6b1650e8964e601860394ebc4cedc2b17fc11a5742ac324d0239790dd8e850bb3415615ac67d0d8229dffd850a28a291f2c8682d439682b94f3a3c5831346ea5579694bae52d397971725e5777684fc51a4668966ce416686fc538071ea7420c32cd94744f319a7b01b2bb0b3a5f86038063d6f85026d5b186860687ac8c010c72a9d65c36353902c9fc0621146ae4cfea427043683bc40a236dd636c13c1d02b65639509979d82ec9249ca1a7c5d6a2a44ec7f3defceb1cd32b0e62f16701c7bb7f5bd520"}}, &(0x7f0000bbdffc)=0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) (async) timer_settime(r9, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r11 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r11, &(0x7f0000000480)=[{&(0x7f0000000840)=""/189, 0xbd}], 0x1, 0xfffffffe, 0x4, 0x1) (async) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x5, 0x9a38, 0x0, 0x8, 0x3, 0x0, 0x1e3, 0xf900}, 0x20) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ec0)=@gettfilter={0x4c, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8}, {0xffe0, 0x7}, {0x0, 0x9}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRESOCT=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES8=r10, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20044955) 1.391381283s ago: executing program 4 (id=4402): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc1400"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xe000) 1.342088678s ago: executing program 2 (id=4404): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="181100000000000000000000fdffffff181100004b9a6d210773fa09db866d19f4f83212f515a138fd579c3312b6010d63a0ffc3880bf7fccbed44e988414a9914d2562d19887d988253bcae943a45ed9c381e607442bd908129e0c456f0e54c510efd00833aed0be6e4b5d3bffdd90c86de52f114c705655ede5afbe912e92a2d152fc7ca24ff1518c14bfcef71f457d7ef1729af53621b1cda6a2bf3772cf2ef55ae5276d8384b2f0ecc892cb20058da9a6efad167da55b523fc8274ea99f4fac309acca42012696d2f142ab8005b2f97471624053a22d1d530c71a1fdac3c6ad4c80e28ef880e3db8032d880e63696e097e0e4d517488966e7361f5ceaba99477ecb9e48f90c13bbc21546ed6004d6191421cdb636d35fab130f82ee276915946700094b9646f184bfaec077433a4960b00cd0d993525b75f911e9b07942a2f1b99", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0xd4d, &(0x7f0000001500)={0x0, 0xdb60, 0x40, 0x3, 0x211}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 1.242250027s ago: executing program 4 (id=4409): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_create_resource$binfmt(0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffd, 0xe58}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x66002) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) unshare(0x64000600) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite64(r5, 0x0, 0x0, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 1.241692827s ago: executing program 5 (id=4410): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r6}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8}, 0x10) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01030000000000000000010000000800010014000000080003"], 0x30}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r9 = io_uring_setup(0xd4d, &(0x7f0000001500)={0x0, 0xdb60, 0x40, 0x3, 0x211}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1) 1.156309886s ago: executing program 3 (id=4414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000023d5cb2c8ca3d9ac14d501fe8146132d3ff252341932dbd1add95d32ef032a1a8a18e67dae93df7576fc83952c6b7b306651d36842001e9692fcd3649c08cfa61e259958eaaf1aee1271e93c0ac881e2bd0d16c433a5d272f06b60949bf9e084a74c23be5cdba241b463e71b629214043defc93edfc7917298439fc419b4a5dcfbdf6f591de263e3222e8c5cfb99d9de6677ea4b601907c4b9ef8e20f0daa367cbe66fea98f60d1dd2cc7436b33b3a3e0da68a91a0f4a91caa63ba8f01e9171e3b0b64a23d40b1b0bd5a928604d332b9", @ANYRES16=r2, @ANYBLOB="ad432bbd7000000000000d000000", @ANYRES32=r0], 0x14}}, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xab, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x4a4e86db, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='veth0\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @private1, 0xf}, 0x1c) listen(r4, 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18f6a2b53a8b14917d0000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) close(r3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x2}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0400080000000000363e8ff200"/44], &(0x7f0000001140)=""/34, 0x26, 0x22, 0x1, 0x7ffffffd, 0x10000, @value=r9}, 0x28) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000f80), 0x705000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r10, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[@ANYBLOB="280000000108000000008f5359f7fa9bfb390900010073f97a300000000005000300010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x810) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") 1.088104833s ago: executing program 1 (id=4415): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @generic={0x6, "0001c1a5e624310a7c501bb9f3fc"}, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x4, 0x2}}, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x63b2, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000200)='rpcb_setport\x00', r3, 0x0, 0x3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x6}, 0x18) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r11, &(0x7f0000001440)=""/107, 0x6b, 0x41) 1.087339933s ago: executing program 3 (id=4416): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r2, r2, 0x0) statx(r2, 0x0, 0x1000, 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x22c01) readv(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000007000000000000000000"], 0x0, 0x4}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x40}, 0x1, 0x200000000000000, 0x0, 0x40000}, 0x0) 1.00898618s ago: executing program 4 (id=4417): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x804) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000003c0)=0xd660882) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xfce1) 974.983923ms ago: executing program 1 (id=4418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x19000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd700004dbdf253d0000000c009900040000004f00000008005d000000000008005d0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850010000e000000650000005000000095ca0a3ccf88eebe881aeccd11cf78d97064429a96a9dce8e2d4eee0298b0ceb684b4ff2c55c4ff2"], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x18) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 974.459524ms ago: executing program 3 (id=4419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 967.272114ms ago: executing program 4 (id=4420): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) (async) setrlimit(0x40000000000008, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000008c0)='task\x00') getdents(r2, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) (async) setrlimit(0x0, 0x0) 962.912105ms ago: executing program 3 (id=4421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0xaa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 951.180346ms ago: executing program 1 (id=4422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'us\\jquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 775.841693ms ago: executing program 4 (id=4423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000fb53d901ad8ad18f53c717a291f30a3b135859b24d25e0a6f424900dd5b81ed5b7d7466b605a32a702f74c58f870fd0a2fe0a906ba5352cf1572242aff6157b5fb08d2da948211bd9ae7bf47fb2e76cb162264ae1e31f2d7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/436], 0x1fc}}, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x3ff, 0x0, 0x1}, &(0x7f0000000040)=[{}]) (async) ptrace$setopts(0x4206, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x18311, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x5}, 0x1, 0x10000, 0x8, 0x3, 0x8, 0x20005, 0xd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) (async) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000240)={[{@minixdf}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@block_validity}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000400, &(0x7f0000003600)={[], [{@smackfshat={'smackfshat', 0x3d, 'sched_switch\x00'}}, {@fowner_lt}, {@fowner_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x33, 0x62, 0x30, 0x31, 0x35, 0x30], 0x2d, [0x39, 0x30, 0x34, 0x65], 0x2d, [0x61, 0x33, 0x31, 0x62], 0x2d, [0x38, 0x64, 0x38, 0x31], 0x2d, [0x65, 0x66, 0x63, 0x38, 0x63, 0x37, 0x31, 0x62]}}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'minixdf'}}, {@fowner_eq}, {@flag='rw'}]}, 0x7, 0x44f, &(0x7f0000000600)="$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") (async) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC=r1, @ANYRES8=r1, @ANYBLOB="9bad34fb833f36354e773eef73e47cac344471036a51e213bd3a5d7b2cb2d12fe28372c6456e6447415db24b06c6ef1f51b2ddb7c3f1e81db7bc58157b15020b03f6f02bb39754573195411c06552bcba9", @ANYRES32=r1], 0x128}, 0x4004001) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="640100001000130726bd70000000000064010101000000000000000000000000ac1414130000000000000000000000004e2200004e230003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000580)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f00100001000010028bd700000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000001ffd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/424], 0x1f0}, 0x1, 0x0, 0x0, 0x4004841}, 0x0) (async, rerun: 32) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (rerun: 32) 752.129056ms ago: executing program 1 (id=4424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001200), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) close(r1) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 661.649234ms ago: executing program 4 (id=4425): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$igmp(0x2, 0x3, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(0x0, 0x0, 0x800) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r6, 0x0, 0x3ffff) sendfile(r8, r6, 0x0, 0x7ffff000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000000), &(0x7f0000000040)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r11}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r11, &(0x7f0000001500)="389b640e5e634f41", &(0x7f0000000000), 0x2}, 0x20) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 442.104456ms ago: executing program 2 (id=4426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, 0xffffffffffffffff, 0xf3a, 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x18c6) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, &(0x7f0000000000)={0x400038, 0x9, 0x8}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) 423.737758ms ago: executing program 3 (id=4427): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x2, 0x22, 0xf8}, @phonet={0x23, 0x6, 0x9, 0x3d}, @sco={0x1f, @none}, 0x9, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000140)='sit0\x00', 0x4, 0x9, 0x2}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket$packet(0x11, 0x2, 0x300) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x1d6}, 0x18) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', r4, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880081004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) 377.997763ms ago: executing program 5 (id=4428): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001180)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000000)={[{@norecovery}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") (fail_nth: 2) 362.758274ms ago: executing program 3 (id=4429): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c00000010000105ff1f0000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20240200000000003c0012800b00010067656e65766500002c00028005000a000100000005000a0000000000060005004e20000005000d0084"], 0x5c}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040020) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x5c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0xb, 0xfff3}, {0x9, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffffffff}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x91) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r9, 0x1, 0x0, @val=@perf_event={0xa04}}, 0x18) r10 = dup(r8) write$UHID_INPUT(r10, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 83.496291ms ago: executing program 5 (id=4430): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x804) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/131, 0x83}], 0x1, 0x12e, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000003c0)=0xd660882) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xfce1) 70.716273ms ago: executing program 1 (id=4431): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) getsockname$packet(r0, 0x0, &(0x7f0000001180)) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x800) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000000)={[{@norecovery}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") 36.694506ms ago: executing program 5 (id=4432): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=4433): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x16, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES64=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xd6, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = openat2(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x2c241, 0xa2feee1ae9206638, 0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0x2, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000c80)=""/4096, 0x41100, 0x4c, '\x00', r4, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0xe, 0xc18a, 0x7f}, 0x10, r5, r6, 0x1, 0x0, &(0x7f0000000880)=[{0x5, 0x5, 0xe}], 0x10, 0x5f}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="513f22327013ec0b6a98b22b56b4c605992d7ad02bb38513491decf680c26ed47d6a8500bb6349172d3b86d62534bb4dc93941af1ab9a73308399dccd9515957aa55c87f0327d3d84c531337763399e29fc5f2e6ee74df0c8bf31ad2a53b9677166e47a60c64b1773ed4b33b75a3c1513cd40815f5b162aa7c93582985e4ee5ff1bc6776a5a4207a82bac32e0422dfe3f4d617c6eedfa644bc7c8777f86d403a8ed763811c1e4382a968c66809ba336a86613f83c32de4d4f0f20466935fcfcc4c7b4c759713e0571bdf90a304c16c056b725515d3fe9b6c7e4b4a876a6a2b348bb39d", 0xe3}], 0x1, 0x1, 0xfffffffe) kernel console output (not intermixed with test programs): t_to_user_mode+0x7b/0xa0 [ 265.586268][T17400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.586337][T17400] RIP: 0033:0x7efe14daeec9 [ 265.586357][T17400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.586458][T17400] RSP: 002b:00007efe13817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.586482][T17400] RAX: ffffffffffffffda RBX: 00007efe15005fa0 RCX: 00007efe14daeec9 [ 265.586496][T17400] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 265.586508][T17400] RBP: 00007efe13817090 R08: 0000000000000000 R09: 0000000000000000 [ 265.586521][T17400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.586587][T17400] R13: 00007efe15006038 R14: 00007efe15005fa0 R15: 00007ffc619cfd48 [ 265.586606][T17400] [ 265.850574][T17405] lo speed is unknown, defaulting to 1000 [ 265.859097][T17397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17397 comm=syz.3.3827 [ 265.859411][T17307] chnl_net:caif_netlink_parms(): no params data found [ 265.925831][T17406] lo speed is unknown, defaulting to 1000 [ 265.978375][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.985562][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.994652][T17307] bridge_slave_0: entered allmulticast mode [ 266.002152][T17307] bridge_slave_0: entered promiscuous mode [ 266.012335][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.019461][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.026955][T17307] bridge_slave_1: entered allmulticast mode [ 266.033619][T17307] bridge_slave_1: entered promiscuous mode [ 266.113210][T17426] xt_hashlimit: max too large, truncated to 1048576 [ 266.128937][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.155781][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.177774][T17432] loop3: detected capacity change from 0 to 512 [ 266.194364][T17307] team0: Port device team_slave_0 added [ 266.202933][T17307] team0: Port device team_slave_1 added [ 266.208793][T17432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 266.216016][T17434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3838'. [ 266.240787][T17432] EXT4-fs mount: 12 callbacks suppressed [ 266.240811][T17432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 266.259293][T17432] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.272031][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.272047][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.272105][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.273082][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.273097][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 266.273145][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.481248][T17307] hsr_slave_0: entered promiscuous mode [ 266.481796][T17307] hsr_slave_1: entered promiscuous mode [ 266.482299][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 266.482316][T17307] Cannot create hsr debugfs directory [ 266.505084][T17452] loop5: detected capacity change from 0 to 512 [ 266.514814][T17452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.514962][T17452] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.586497][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 266.675687][T17467] loop3: detected capacity change from 0 to 512 [ 266.729462][T17467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.729534][T17467] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.732981][T17465] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 266.750779][T17465] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3842'. [ 266.813907][T17465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17465 comm=syz.4.3842 [ 266.821495][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.839614][T17307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.908306][T17307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.927138][T17483] lo speed is unknown, defaulting to 1000 [ 267.003338][T17307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.060959][T17307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.120479][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.238911][T17512] loop5: detected capacity change from 0 to 512 [ 267.239377][T17512] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.256846][T17512] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 267.256996][T17512] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 267.257028][T17512] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 267.418538][T17531] lo speed is unknown, defaulting to 1000 [ 267.447735][T17307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.450147][T17307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.454176][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3852'. [ 267.458597][T17307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 267.463316][T17307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 267.482562][T17542] loop5: detected capacity change from 0 to 512 [ 267.484871][T17542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.571939][T17542] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.607059][T17307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.638034][T17307] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.677829][T12852] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.684983][T12852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.702781][T12852] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.709914][T12852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.771338][T17556] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.801334][T17556] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3855'. [ 267.818896][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.891780][T17553] lo speed is unknown, defaulting to 1000 [ 267.895675][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.116308][T17307] veth0_vlan: entered promiscuous mode [ 268.125398][T17307] veth1_vlan: entered promiscuous mode [ 268.133374][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 268.133393][ T29] audit: type=1326 audit(1760687744.298:14030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f289ce95d67 code=0x7ffc0000 [ 268.178660][T17574] xt_hashlimit: max too large, truncated to 1048576 [ 268.187525][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3862'. [ 268.202046][T17307] veth0_macvtap: entered promiscuous mode [ 268.205662][ T29] audit: type=1326 audit(1760687744.298:14031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f289ce3af79 code=0x7ffc0000 [ 268.231646][ T29] audit: type=1326 audit(1760687744.298:14032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f289ce9eec9 code=0x7ffc0000 [ 268.255506][ T29] audit: type=1326 audit(1760687744.318:14033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f289ce95d67 code=0x7ffc0000 [ 268.279103][ T29] audit: type=1326 audit(1760687744.318:14034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f289ce3af79 code=0x7ffc0000 [ 268.302784][ T29] audit: type=1326 audit(1760687744.318:14035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f289ce9eec9 code=0x7ffc0000 [ 268.321941][T17307] veth1_macvtap: entered promiscuous mode [ 268.326841][ T29] audit: type=1326 audit(1760687744.318:14036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f289ce95d67 code=0x7ffc0000 [ 268.355763][ T29] audit: type=1326 audit(1760687744.318:14037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f289ce3af79 code=0x7ffc0000 [ 268.358437][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.379310][ T29] audit: type=1326 audit(1760687744.318:14038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f289ce9eec9 code=0x7ffc0000 [ 268.391581][T17591] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 268.410363][ T29] audit: type=1326 audit(1760687744.328:14039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17583 comm="syz.4.3862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f289ce95d67 code=0x7ffc0000 [ 268.418405][T17591] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 268.439335][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3865'. [ 268.459445][T17595] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3865'. [ 268.471053][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3865'. [ 268.481340][T17595] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3865'. [ 268.494188][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.509449][ T3745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.518817][ T3745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.529481][ T3745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.553150][ T3745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.569817][T17598] lo speed is unknown, defaulting to 1000 [ 268.775988][T17622] lo speed is unknown, defaulting to 1000 [ 268.895848][T17626] lo speed is unknown, defaulting to 1000 [ 268.982160][T17633] loop4: detected capacity change from 0 to 512 [ 268.986944][T17632] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 268.996769][T17632] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 268.997760][T17633] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.020496][T17633] EXT4-fs (loop4): 1 truncate cleaned up [ 269.028050][T17633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.080822][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.139163][T17645] tipc: Started in network mode [ 269.144118][T17645] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 269.153522][T17645] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 269.162216][T17645] tipc: Enabled bearer , priority 10 [ 269.498807][T17648] loop1: detected capacity change from 0 to 512 [ 269.506185][T17648] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.3884: inode #1792: comm syz.1.3884: iget: illegal inode # [ 269.520787][T17648] EXT4-fs (loop1): Remounting filesystem read-only [ 269.527638][T17648] EXT4-fs (loop1): no journal found [ 269.532848][T17648] EXT4-fs (loop1): can't get journal size [ 269.539329][T17648] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 269.549210][T17648] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 269.557414][T17648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.628629][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.660083][T17651] lo speed is unknown, defaulting to 1000 [ 270.089120][T17685] lo speed is unknown, defaulting to 1000 [ 270.156796][ T36] tipc: Node number set to 1 [ 270.164986][T17690] loop4: detected capacity change from 0 to 512 [ 270.309133][T17699] xt_hashlimit: max too large, truncated to 1048576 [ 270.360141][T17703] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.444593][T17707] loop4: detected capacity change from 0 to 512 [ 270.451983][T17707] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.472372][T17707] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 270.483271][T17707] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 270.491820][T17707] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 270.523878][T17713] FAULT_INJECTION: forcing a failure. [ 270.523878][T17713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.537310][T17713] CPU: 0 UID: 0 PID: 17713 Comm: syz.4.3909 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.537397][T17713] Tainted: [W]=WARN [ 270.537407][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.537424][T17713] Call Trace: [ 270.537481][T17713] [ 270.537493][T17713] __dump_stack+0x1d/0x30 [ 270.537535][T17713] dump_stack_lvl+0xe8/0x140 [ 270.537560][T17713] dump_stack+0x15/0x1b [ 270.537581][T17713] should_fail_ex+0x265/0x280 [ 270.537623][T17713] should_fail+0xb/0x20 [ 270.537686][T17713] should_fail_usercopy+0x1a/0x20 [ 270.537715][T17713] strncpy_from_user+0x25/0x230 [ 270.537748][T17713] ? kmem_cache_alloc_noprof+0x242/0x480 [ 270.537793][T17713] ? getname_flags+0x80/0x3b0 [ 270.537831][T17713] getname_flags+0xae/0x3b0 [ 270.537868][T17713] start_creating_user_path+0x27/0x130 [ 270.537897][T17713] bpf_obj_pin_user+0xe0/0x230 [ 270.537964][T17713] bpf_obj_pin+0xac/0xd0 [ 270.537990][T17713] __sys_bpf+0x6d6/0x7c0 [ 270.538081][T17713] __x64_sys_bpf+0x41/0x50 [ 270.538136][T17713] x64_sys_call+0x2aee/0x3000 [ 270.538161][T17713] do_syscall_64+0xd2/0x200 [ 270.538186][T17713] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.538285][T17713] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.538309][T17713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.538331][T17713] RIP: 0033:0x7f289ce9eec9 [ 270.538351][T17713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.538376][T17713] RSP: 002b:00007f289b907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 270.538477][T17713] RAX: ffffffffffffffda RBX: 00007f289d0f5fa0 RCX: 00007f289ce9eec9 [ 270.538495][T17713] RDX: 0000000000000018 RSI: 0000200000000140 RDI: 0000000000000006 [ 270.538512][T17713] RBP: 00007f289b907090 R08: 0000000000000000 R09: 0000000000000000 [ 270.538529][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.538593][T17713] R13: 00007f289d0f6038 R14: 00007f289d0f5fa0 R15: 00007ffe26f059b8 [ 270.538620][T17713] [ 270.782609][T17719] FAULT_INJECTION: forcing a failure. [ 270.782609][T17719] name failslab, interval 1, probability 0, space 0, times 0 [ 270.795303][T17719] CPU: 1 UID: 0 PID: 17719 Comm: syz.3.3911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 270.795347][T17719] Tainted: [W]=WARN [ 270.795354][T17719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.795370][T17719] Call Trace: [ 270.795378][T17719] [ 270.795388][T17719] __dump_stack+0x1d/0x30 [ 270.795414][T17719] dump_stack_lvl+0xe8/0x140 [ 270.795508][T17719] dump_stack+0x15/0x1b [ 270.795524][T17719] should_fail_ex+0x265/0x280 [ 270.795583][T17719] should_failslab+0x8c/0xb0 [ 270.795615][T17719] __kmalloc_noprof+0xa5/0x570 [ 270.795645][T17719] ? hash_netnet4_add+0x728/0x1cc0 [ 270.795681][T17719] hash_netnet4_add+0x728/0x1cc0 [ 270.795731][T17719] ? hash_netnet4_add+0x5a/0x1cc0 [ 270.795829][T17719] ? ip_set_range_to_cidr+0xe6/0x100 [ 270.795871][T17719] hash_netnet4_uadt+0x7e2/0x8e0 [ 270.795903][T17719] ? __pfx_hash_netnet4_add+0x10/0x10 [ 270.796024][T17719] call_ad+0xdc/0x630 [ 270.796069][T17719] ? __nla_parse+0x40/0x60 [ 270.796091][T17719] ip_set_ad+0x5c0/0x690 [ 270.796189][T17719] ip_set_uadd+0x41/0x50 [ 270.796304][T17719] nfnetlink_rcv_msg+0x4c6/0x590 [ 270.796359][T17719] netlink_rcv_skb+0x123/0x220 [ 270.796386][T17719] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 270.796482][T17719] nfnetlink_rcv+0x167/0x16c0 [ 270.796510][T17719] ? kmem_cache_free+0xe4/0x3d0 [ 270.796546][T17719] ? __kfree_skb+0x109/0x150 [ 270.796571][T17719] ? nlmon_xmit+0x4f/0x60 [ 270.796600][T17719] ? consume_skb+0x49/0x150 [ 270.796676][T17719] ? nlmon_xmit+0x4f/0x60 [ 270.796698][T17719] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 270.796737][T17719] ? __dev_queue_xmit+0x1200/0x2000 [ 270.796775][T17719] ? __dev_queue_xmit+0x182/0x2000 [ 270.796864][T17719] ? ref_tracker_free+0x37d/0x3e0 [ 270.796984][T17719] ? __netlink_deliver_tap+0x4dc/0x500 [ 270.797028][T17719] netlink_unicast+0x5c0/0x690 [ 270.797056][T17719] netlink_sendmsg+0x58b/0x6b0 [ 270.797137][T17719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.797276][T17719] __sock_sendmsg+0x145/0x180 [ 270.797298][T17719] ____sys_sendmsg+0x31e/0x4e0 [ 270.797339][T17719] ___sys_sendmsg+0x17b/0x1d0 [ 270.797449][T17719] __x64_sys_sendmsg+0xd4/0x160 [ 270.797495][T17719] x64_sys_call+0x191e/0x3000 [ 270.797580][T17719] do_syscall_64+0xd2/0x200 [ 270.797612][T17719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 270.797677][T17719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 270.797727][T17719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.797757][T17719] RIP: 0033:0x7fae2f02eec9 [ 270.797778][T17719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.797855][T17719] RSP: 002b:00007fae2da8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.797877][T17719] RAX: ffffffffffffffda RBX: 00007fae2f285fa0 RCX: 00007fae2f02eec9 [ 270.797941][T17719] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 270.797953][T17719] RBP: 00007fae2da8f090 R08: 0000000000000000 R09: 0000000000000000 [ 270.797968][T17719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.797980][T17719] R13: 00007fae2f286038 R14: 00007fae2f285fa0 R15: 00007ffc411f7698 [ 270.798000][T17719] [ 271.137591][T17720] __nla_validate_parse: 11 callbacks suppressed [ 271.137630][T17720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3912'. [ 271.195312][T17731] lo speed is unknown, defaulting to 1000 [ 271.274961][T17738] loop3: detected capacity change from 0 to 512 [ 271.282413][T17738] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.303242][T17738] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 271.318091][T17738] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 271.326883][T17738] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 271.352212][T17742] loop1: detected capacity change from 0 to 512 [ 271.416193][T12852] Bluetooth: hci0: Frame reassembly failed (-84) [ 271.417052][T17730] lo speed is unknown, defaulting to 1000 [ 271.659935][T17752] lo speed is unknown, defaulting to 1000 [ 272.115123][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3931'. [ 272.124261][T17766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3931'. [ 272.133303][T17766] netlink: 'syz.2.3931': attribute type 4 has an invalid length. [ 272.162968][T17768] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 272.173190][T17768] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3932'. [ 272.232297][T17773] x_tables: ip_tables: ah match: only valid for protocol 51 [ 272.356318][T17785] lo speed is unknown, defaulting to 1000 [ 272.377185][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3937'. [ 272.456006][T17794] loop5: detected capacity change from 0 to 512 [ 272.523581][T17800] loop5: detected capacity change from 0 to 128 [ 272.523787][T17798] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 272.530551][T17800] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.542871][T17798] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3945'. [ 272.551402][T17800] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.602002][T17804] loop5: detected capacity change from 0 to 512 [ 272.618472][T17804] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3946: couldn't read orphan inode 26 (err -116) [ 272.631521][T17804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.644881][T17804] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.661510][T17809] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 272.670576][T17804] lo speed is unknown, defaulting to 1000 [ 272.702173][T17804] wireguard0: entered promiscuous mode [ 272.707731][T17804] wireguard0: entered allmulticast mode [ 272.751178][T17812] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3946'. [ 272.798439][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.136456][ T29] kauditd_printk_skb: 821 callbacks suppressed [ 273.136471][ T29] audit: type=1326 audit(1760687749.298:14861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fae2f02eec9 code=0x7ffc0000 [ 273.166603][ T29] audit: type=1326 audit(1760687749.308:14862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae2f025d67 code=0x7ffc0000 [ 273.190212][ T29] audit: type=1326 audit(1760687749.308:14863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2efcaf79 code=0x7ffc0000 [ 273.214117][ T29] audit: type=1326 audit(1760687749.308:14864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fae2f02eec9 code=0x7ffc0000 [ 273.258843][ T29] audit: type=1326 audit(1760687749.338:14865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae2f025d67 code=0x7ffc0000 [ 273.282527][ T29] audit: type=1326 audit(1760687749.338:14866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2efcaf79 code=0x7ffc0000 [ 273.306369][ T29] audit: type=1326 audit(1760687749.338:14867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fae2f02eec9 code=0x7ffc0000 [ 273.330230][ T29] audit: type=1326 audit(1760687749.358:14868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae2f025d67 code=0x7ffc0000 [ 273.353913][ T29] audit: type=1326 audit(1760687749.358:14869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae2efcaf79 code=0x7ffc0000 [ 273.366717][T17835] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.377778][ T29] audit: type=1326 audit(1760687749.358:14870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17780 comm="syz.3.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fae2f02eec9 code=0x7ffc0000 [ 273.411853][T17835] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3957'. [ 273.437562][ T5940] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.441340][ T9492] Bluetooth: hci0: command 0x1003 tx timeout [ 273.449927][T17839] loop2: detected capacity change from 0 to 512 [ 273.457687][T17839] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.476254][T17839] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 273.485296][T17839] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 273.493534][T17839] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 273.559108][T17846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3962'. [ 273.612730][T17849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3963'. [ 273.670028][T17854] loop4: detected capacity change from 0 to 128 [ 273.686654][T17854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 273.696661][T17857] xt_hashlimit: max too large, truncated to 1048576 [ 273.705230][T17854] System zones: 1-3, 19-19, 35-36 [ 273.717186][T17854] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.755413][T17854] ext4 filesystem being mounted at /221/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.968504][T17883] loop5: detected capacity change from 0 to 512 [ 274.001490][T13954] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.011375][T17883] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.064995][T17883] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 274.094479][T17883] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 274.122530][T17883] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 274.214493][T17900] IPVS: set_ctl: invalid protocol: 22 172.30.0.2:20004 [ 274.214757][T17903] loop5: detected capacity change from 0 to 512 [ 274.232054][T17903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.245057][T17903] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.553334][T17923] loop2: detected capacity change from 0 to 512 [ 274.680859][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.723629][T17908] lo speed is unknown, defaulting to 1000 [ 274.732472][T17963] loop2: detected capacity change from 0 to 512 [ 274.770570][T17967] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 274.788471][T17969] FAULT_INJECTION: forcing a failure. [ 274.788471][T17969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.801763][T17969] CPU: 1 UID: 0 PID: 17969 Comm: syz.2.3987 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 274.801912][T17969] Tainted: [W]=WARN [ 274.801921][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.801938][T17969] Call Trace: [ 274.801964][T17969] [ 274.801975][T17969] __dump_stack+0x1d/0x30 [ 274.802004][T17969] dump_stack_lvl+0xe8/0x140 [ 274.802030][T17969] dump_stack+0x15/0x1b [ 274.802055][T17969] should_fail_ex+0x265/0x280 [ 274.802145][T17969] should_fail+0xb/0x20 [ 274.802199][T17969] should_fail_usercopy+0x1a/0x20 [ 274.802220][T17969] _copy_to_user+0x20/0xa0 [ 274.802271][T17969] simple_read_from_buffer+0xb5/0x130 [ 274.802295][T17969] proc_fail_nth_read+0x10e/0x150 [ 274.802334][T17969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.802451][T17969] vfs_read+0x1a8/0x770 [ 274.802480][T17969] ? __rcu_read_unlock+0x4f/0x70 [ 274.802513][T17969] ? __fget_files+0x184/0x1c0 [ 274.802551][T17969] ksys_read+0xda/0x1a0 [ 274.802617][T17969] __x64_sys_read+0x40/0x50 [ 274.802806][T17969] x64_sys_call+0x27c0/0x3000 [ 274.802835][T17969] do_syscall_64+0xd2/0x200 [ 274.802868][T17969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 274.802939][T17969] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 274.802969][T17969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.802996][T17969] RIP: 0033:0x7f10c2c7d8dc [ 274.803015][T17969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.803040][T17969] RSP: 002b:00007f10c16e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.803102][T17969] RAX: ffffffffffffffda RBX: 00007f10c2ed5fa0 RCX: 00007f10c2c7d8dc [ 274.803192][T17969] RDX: 000000000000000f RSI: 00007f10c16e70a0 RDI: 0000000000000008 [ 274.803205][T17969] RBP: 00007f10c16e7090 R08: 0000000000000000 R09: 0000000000000000 [ 274.803217][T17969] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 274.803230][T17969] R13: 00007f10c2ed6038 R14: 00007f10c2ed5fa0 R15: 00007ffefa9f3988 [ 274.803250][T17969] [ 275.013506][T17970] xt_hashlimit: max too large, truncated to 1048576 [ 275.083968][T17976] loop4: detected capacity change from 0 to 512 [ 275.124907][T17978] loop2: detected capacity change from 0 to 512 [ 275.132866][T17976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 275.143124][T17976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 275.151082][T17978] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.3990: inode #0: comm syz.2.3990: iget: illegal inode # [ 275.151167][T17976] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.3989: corrupted inode contents [ 275.176326][T17978] EXT4-fs (loop2): get orphan inode failed [ 275.192017][T17978] EXT4-fs (loop2): mount failed [ 275.197835][T17976] EXT4-fs (loop4): Remounting filesystem read-only [ 275.208830][T17976] EXT4-fs (loop4): 1 truncate cleaned up [ 275.214625][T12862] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 275.225218][T12862] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 275.238343][T12862] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 275.250897][T17976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.265694][T17988] loop3: detected capacity change from 0 to 512 [ 275.355144][T18000] loop2: detected capacity change from 0 to 2048 [ 275.373898][T18000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.387364][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.441978][T18007] FAULT_INJECTION: forcing a failure. [ 275.441978][T18007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.455153][T18007] CPU: 1 UID: 0 PID: 18007 Comm: syz.4.4001 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 275.455254][T18007] Tainted: [W]=WARN [ 275.455263][T18007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.455277][T18007] Call Trace: [ 275.455284][T18007] [ 275.455333][T18007] __dump_stack+0x1d/0x30 [ 275.455355][T18007] dump_stack_lvl+0xe8/0x140 [ 275.455376][T18007] dump_stack+0x15/0x1b [ 275.455394][T18007] should_fail_ex+0x265/0x280 [ 275.455437][T18007] should_fail+0xb/0x20 [ 275.455469][T18007] should_fail_usercopy+0x1a/0x20 [ 275.455559][T18007] strncpy_from_user+0x25/0x230 [ 275.455655][T18007] ? kmem_cache_alloc_noprof+0x242/0x480 [ 275.455683][T18007] ? getname_flags+0x80/0x3b0 [ 275.455721][T18007] getname_flags+0xae/0x3b0 [ 275.455832][T18007] user_path_at+0x28/0x130 [ 275.455867][T18007] __se_sys_mount+0x25b/0x2e0 [ 275.455970][T18007] ? fput+0x8f/0xc0 [ 275.456005][T18007] __x64_sys_mount+0x67/0x80 [ 275.456030][T18007] x64_sys_call+0x2b51/0x3000 [ 275.456113][T18007] do_syscall_64+0xd2/0x200 [ 275.456138][T18007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 275.456167][T18007] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 275.456191][T18007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.456264][T18007] RIP: 0033:0x7f289ce9eec9 [ 275.456284][T18007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.456363][T18007] RSP: 002b:00007f289b907038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.456383][T18007] RAX: ffffffffffffffda RBX: 00007f289d0f5fa0 RCX: 00007f289ce9eec9 [ 275.456396][T18007] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 275.456448][T18007] RBP: 00007f289b907090 R08: 0000200000000840 R09: 0000000000000000 [ 275.456461][T18007] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 275.456474][T18007] R13: 00007f289d0f6038 R14: 00007f289d0f5fa0 R15: 00007ffe26f059b8 [ 275.456547][T18007] [ 275.812059][T18018] lo speed is unknown, defaulting to 1000 [ 275.938784][T18021] loop4: detected capacity change from 0 to 512 [ 275.948825][T18021] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.4006: inode #0: comm syz.4.4006: iget: illegal inode # [ 275.962781][T18021] EXT4-fs (loop4): get orphan inode failed [ 275.968860][T18021] EXT4-fs (loop4): mount failed [ 276.073971][T18032] loop1: detected capacity change from 0 to 512 [ 276.109920][T18033] xt_hashlimit: max too large, truncated to 1048576 [ 276.137040][T12129] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 276.154337][T12129] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 276.168146][T18035] loop1: detected capacity change from 0 to 512 [ 276.177702][T18035] EXT4-fs: Ignoring removed nobh option [ 276.190611][T18035] EXT4-fs (loop1): #clusters per group too big: 360448 [ 276.191037][T12129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.202641][T18035] loop1: detected capacity change from 0 to 512 [ 276.214663][T18035] EXT4-fs (loop1): Invalid default hash set in the superblock [ 276.274627][T18039] FAULT_INJECTION: forcing a failure. [ 276.274627][T18039] name failslab, interval 1, probability 0, space 0, times 0 [ 276.287364][T18039] CPU: 1 UID: 0 PID: 18039 Comm: syz.2.4012 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 276.287420][T18039] Tainted: [W]=WARN [ 276.287428][T18039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.287458][T18039] Call Trace: [ 276.287467][T18039] [ 276.287479][T18039] __dump_stack+0x1d/0x30 [ 276.287506][T18039] dump_stack_lvl+0xe8/0x140 [ 276.287532][T18039] dump_stack+0x15/0x1b [ 276.287631][T18039] should_fail_ex+0x265/0x280 [ 276.287703][T18039] should_failslab+0x8c/0xb0 [ 276.287737][T18039] kmem_cache_alloc_noprof+0x50/0x480 [ 276.287772][T18039] ? security_inode_alloc+0x37/0x100 [ 276.287824][T18039] security_inode_alloc+0x37/0x100 [ 276.287849][T18039] inode_init_always_gfp+0x4b7/0x500 [ 276.287890][T18039] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 276.287919][T18039] alloc_inode+0x58/0x170 [ 276.287940][T18039] new_inode+0x1d/0xe0 [ 276.287970][T18039] __debugfs_create_file+0x109/0x330 [ 276.288012][T18039] debugfs_create_file_full+0x3f/0x60 [ 276.288075][T18039] ? __pfx_reg_vif_setup+0x10/0x10 [ 276.288187][T18039] ref_tracker_dir_debugfs+0x100/0x1e0 [ 276.288244][T18039] alloc_netdev_mqs+0x1a7/0xa50 [ 276.288278][T18039] mif6_add+0x2bd/0x6e0 [ 276.288367][T18039] ip6_mroute_setsockopt+0x97f/0xa70 [ 276.288410][T18039] do_ipv6_setsockopt+0x21d/0x2160 [ 276.288455][T18039] ? _parse_integer+0x27/0x40 [ 276.288556][T18039] ? kstrtoull+0x111/0x140 [ 276.288590][T18039] ? __rcu_read_unlock+0x4f/0x70 [ 276.288618][T18039] ? avc_has_perm_noaudit+0x1b1/0x200 [ 276.288688][T18039] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 276.288719][T18039] ipv6_setsockopt+0x59/0x130 [ 276.288809][T18039] rawv6_setsockopt+0x1d2/0x420 [ 276.288842][T18039] sock_common_setsockopt+0x69/0x80 [ 276.288877][T18039] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 276.288900][T18039] __sys_setsockopt+0x184/0x200 [ 276.288974][T18039] __x64_sys_setsockopt+0x64/0x80 [ 276.289097][T18039] x64_sys_call+0x20ec/0x3000 [ 276.289122][T18039] do_syscall_64+0xd2/0x200 [ 276.289147][T18039] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.289197][T18039] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 276.289290][T18039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.289320][T18039] RIP: 0033:0x7f10c2c7eec9 [ 276.289341][T18039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.289366][T18039] RSP: 002b:00007f10c16e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.289404][T18039] RAX: ffffffffffffffda RBX: 00007f10c2ed5fa0 RCX: 00007f10c2c7eec9 [ 276.289422][T18039] RDX: 00000000000000ca RSI: 0000000000000029 RDI: 0000000000000003 [ 276.289450][T18039] RBP: 00007f10c16e7090 R08: 000000000000000c R09: 0000000000000000 [ 276.289466][T18039] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 276.289483][T18039] R13: 00007f10c2ed6038 R14: 00007f10c2ed5fa0 R15: 00007ffefa9f3988 [ 276.289521][T18039] [ 276.289545][T18039] debugfs: out of free dentries, can not create file 'netdev@ffff88811a3bc550' [ 276.326217][T18044] loop1: detected capacity change from 0 to 164 [ 276.363738][T18039] pim6reg: entered allmulticast mode [ 276.410266][T18044] Unable to read rock-ridge attributes [ 276.474217][T18050] loop5: detected capacity change from 0 to 512 [ 276.497069][T18044] Unable to read rock-ridge attributes [ 276.505538][T18050] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.4019: inode #0: comm syz.5.4019: iget: illegal inode # [ 276.631904][T18050] EXT4-fs (loop5): get orphan inode failed [ 276.646824][T18050] EXT4-fs (loop5): mount failed [ 276.701055][T18060] loop2: detected capacity change from 0 to 256 [ 276.715187][T18060] FAT-fs (loop2): Directory bread(block 64) failed [ 276.723352][T18060] FAT-fs (loop2): Directory bread(block 65) failed [ 276.730053][T18060] FAT-fs (loop2): Directory bread(block 66) failed [ 276.737017][T18060] FAT-fs (loop2): Directory bread(block 67) failed [ 276.743795][T18060] FAT-fs (loop2): Directory bread(block 68) failed [ 276.750925][T18060] FAT-fs (loop2): Directory bread(block 69) failed [ 276.757650][T18060] FAT-fs (loop2): Directory bread(block 70) failed [ 276.764342][T18060] FAT-fs (loop2): Directory bread(block 71) failed [ 276.770921][T18060] FAT-fs (loop2): Directory bread(block 72) failed [ 276.778591][T18060] FAT-fs (loop2): Directory bread(block 73) failed [ 276.792527][T18060] syz.2.4023: attempt to access beyond end of device [ 276.792527][T18060] loop2: rw=0, sector=1816, nr_sectors = 4 limit=256 [ 276.806142][T18060] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 326) [ 276.814396][T18060] FAT-fs (loop2): Filesystem has been set read-only [ 276.949512][T18064] lo speed is unknown, defaulting to 1000 [ 277.442576][T18078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.470653][T18080] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 277.486077][T18078] __nla_validate_parse: 4 callbacks suppressed [ 277.486092][T18078] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4030'. [ 277.563243][T18080] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4031'. [ 277.711304][T18092] loop2: detected capacity change from 0 to 512 [ 277.723938][T18092] EXT4-fs error (device loop2): ext4_init_orphan_info:581: comm syz.2.4033: inode #0: comm syz.2.4033: iget: illegal inode # [ 277.748477][T18092] EXT4-fs (loop2): get orphan inode failed [ 277.754515][T18092] EXT4-fs (loop2): mount failed [ 277.980643][T18122] loop3: detected capacity change from 0 to 512 [ 278.061845][T18125] lo speed is unknown, defaulting to 1000 [ 278.145827][T18124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4048'. [ 278.155878][ T29] kauditd_printk_skb: 607 callbacks suppressed [ 278.155894][ T29] audit: type=1326 audit(1760687754.328:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 278.187730][ T29] audit: type=1326 audit(1760687754.358:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 278.211363][ T29] audit: type=1326 audit(1760687754.358:15474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 278.234896][ T29] audit: type=1326 audit(1760687754.358:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 278.258449][ T29] audit: type=1326 audit(1760687754.358:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7facea33eec9 code=0x7ffc0000 [ 278.291409][ T29] audit: type=1326 audit(1760687754.448:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 278.315156][ T29] audit: type=1326 audit(1760687754.448:15478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 278.338732][ T29] audit: type=1326 audit(1760687754.448:15479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7facea33eec9 code=0x7ffc0000 [ 278.379580][ T29] audit: type=1326 audit(1760687754.538:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 278.403280][ T29] audit: type=1326 audit(1760687754.538:15481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18121 comm="syz.1.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 278.433684][T18122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.446504][T18122] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.616457][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.653435][T18133] loop3: detected capacity change from 0 to 512 [ 278.663927][T18133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.682011][T18133] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.837967][T18148] lo speed is unknown, defaulting to 1000 [ 278.847342][T18150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 278.877737][T18150] tipc: Disabling bearer [ 279.048807][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.081709][T18167] xt_hashlimit: max too large, truncated to 1048576 [ 279.238850][T18171] lo speed is unknown, defaulting to 1000 [ 279.664647][T18178] loop4: detected capacity change from 0 to 4096 [ 279.695385][T18178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.702124][T18178] EXT4-fs: Ignoring removed i_version option [ 279.753929][T18178] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.4068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 256(256) [ 279.778796][T18178] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.4068: Bad quota inode: 4, type: 1 [ 279.792618][T18178] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 279.809500][T18178] EXT4-fs (loop4): mount failed [ 279.846001][T18190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4071'. [ 279.867032][T18178] loop4: detected capacity change from 0 to 1764 [ 279.976346][T18201] xt_nat: multiple ranges no longer supported [ 280.009227][T18204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4077'. [ 280.018461][T18204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4077'. [ 280.027660][T18204] netlink: 'syz.4.4077': attribute type 4 has an invalid length. [ 280.124957][T18210] loop1: detected capacity change from 0 to 512 [ 280.139643][T18209] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4080'. [ 280.158904][T18210] EXT4-fs (loop1): 1 orphan inode deleted [ 280.175314][T18209] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4080'. [ 280.186877][T18210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.201711][T12877] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:51: Failed to release dquot type 1 [ 280.206963][T18210] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.293723][T18198] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 280.369914][T18227] loop4: detected capacity change from 0 to 512 [ 280.372493][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.404759][T18229] loop1: detected capacity change from 0 to 512 [ 280.411864][T18229] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 280.433931][T18229] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 280.443671][T18229] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 280.452041][T18229] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 280.506183][T18235] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 280.708798][T18243] loop5: detected capacity change from 0 to 512 [ 280.731927][T18243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.744981][T18243] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.756465][T18246] xt_hashlimit: max too large, truncated to 1048576 [ 280.902845][T18252] FAULT_INJECTION: forcing a failure. [ 280.902845][T18252] name failslab, interval 1, probability 0, space 0, times 0 [ 280.915720][T18252] CPU: 0 UID: 0 PID: 18252 Comm: syz.3.4096 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 280.915763][T18252] Tainted: [W]=WARN [ 280.915773][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.915790][T18252] Call Trace: [ 280.915879][T18252] [ 280.915890][T18252] __dump_stack+0x1d/0x30 [ 280.915951][T18252] dump_stack_lvl+0xe8/0x140 [ 280.916007][T18252] dump_stack+0x15/0x1b [ 280.916031][T18252] should_fail_ex+0x265/0x280 [ 280.916077][T18252] should_failslab+0x8c/0xb0 [ 280.916122][T18252] kmem_cache_alloc_noprof+0x50/0x480 [ 280.916158][T18252] ? audit_log_start+0x342/0x720 [ 280.916185][T18252] audit_log_start+0x342/0x720 [ 280.916210][T18252] ? kstrtouint+0x76/0xc0 [ 280.916299][T18252] audit_seccomp+0x48/0x100 [ 280.916340][T18252] ? __seccomp_filter+0x82d/0x1250 [ 280.916447][T18252] __seccomp_filter+0x83e/0x1250 [ 280.916491][T18252] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 280.916533][T18252] ? vfs_write+0x7e8/0x960 [ 280.916569][T18252] ? __rcu_read_unlock+0x4f/0x70 [ 280.916605][T18252] ? __fget_files+0x184/0x1c0 [ 280.916642][T18252] __secure_computing+0x82/0x150 [ 280.916675][T18252] syscall_trace_enter+0xcf/0x1e0 [ 280.916714][T18252] do_syscall_64+0xac/0x200 [ 280.916746][T18252] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.916782][T18252] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.916812][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.916841][T18252] RIP: 0033:0x7fae2f02eec9 [ 280.916894][T18252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.916984][T18252] RSP: 002b:00007fae2da8efe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 280.917010][T18252] RAX: ffffffffffffffda RBX: 00007fae2f285fa0 RCX: 00007fae2f02eec9 [ 280.917088][T18252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000b44040 [ 280.917105][T18252] RBP: 00007fae2da8f090 R08: 0000000000000000 R09: 0000000000000000 [ 280.917122][T18252] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 280.917164][T18252] R13: 00007fae2f286038 R14: 00007fae2f285fa0 R15: 00007ffc411f7698 [ 280.917188][T18252] [ 280.930358][T18255] loop2: detected capacity change from 0 to 512 [ 281.003743][ T9] IPVS: starting estimator thread 0... [ 281.170057][T18268] IPv6: sit1: Disabled Multicast RS [ 281.208252][T18270] loop2: detected capacity change from 0 to 512 [ 281.215367][T18270] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.236668][T18270] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 281.245676][T18270] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 281.246387][T18263] IPVS: using max 2064 ests per chain, 103200 per kthread [ 281.253892][T18270] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 281.314526][T18276] FAULT_INJECTION: forcing a failure. [ 281.314526][T18276] name failslab, interval 1, probability 0, space 0, times 0 [ 281.327301][T18276] CPU: 0 UID: 0 PID: 18276 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.327341][T18276] Tainted: [W]=WARN [ 281.327348][T18276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.327361][T18276] Call Trace: [ 281.327369][T18276] [ 281.327379][T18276] __dump_stack+0x1d/0x30 [ 281.327525][T18276] dump_stack_lvl+0xe8/0x140 [ 281.327548][T18276] dump_stack+0x15/0x1b [ 281.327565][T18276] should_fail_ex+0x265/0x280 [ 281.327603][T18276] ? tcf_police_init+0x634/0xc70 [ 281.327650][T18276] should_failslab+0x8c/0xb0 [ 281.327682][T18276] __kmalloc_cache_noprof+0x4c/0x4a0 [ 281.327724][T18276] tcf_police_init+0x634/0xc70 [ 281.327761][T18276] tcf_action_init_1+0x36a/0x4a0 [ 281.327863][T18276] tcf_action_init+0x267/0x6d0 [ 281.327913][T18276] tc_ctl_action+0x291/0x830 [ 281.327960][T18276] ? __pfx_tc_ctl_action+0x10/0x10 [ 281.327995][T18276] rtnetlink_rcv_msg+0x65a/0x6d0 [ 281.328030][T18276] ? avc_has_perm_noaudit+0x1b1/0x200 [ 281.328091][T18276] netlink_rcv_skb+0x123/0x220 [ 281.328128][T18276] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.328247][T18276] rtnetlink_rcv+0x1c/0x30 [ 281.328357][T18276] netlink_unicast+0x5c0/0x690 [ 281.328392][T18276] netlink_sendmsg+0x58b/0x6b0 [ 281.328425][T18276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.328484][T18276] __sock_sendmsg+0x145/0x180 [ 281.328535][T18276] ____sys_sendmsg+0x31e/0x4e0 [ 281.328574][T18276] ___sys_sendmsg+0x17b/0x1d0 [ 281.328625][T18276] __x64_sys_sendmsg+0xd4/0x160 [ 281.328715][T18276] x64_sys_call+0x191e/0x3000 [ 281.328873][T18276] do_syscall_64+0xd2/0x200 [ 281.328905][T18276] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.328938][T18276] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.328961][T18276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.329033][T18276] RIP: 0033:0x7f10c2c7eec9 [ 281.329049][T18276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.329069][T18276] RSP: 002b:00007f10c16e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.329094][T18276] RAX: ffffffffffffffda RBX: 00007f10c2ed5fa0 RCX: 00007f10c2c7eec9 [ 281.329112][T18276] RDX: 0000000000048844 RSI: 0000200000000300 RDI: 0000000000000004 [ 281.329168][T18276] RBP: 00007f10c16e7090 R08: 0000000000000000 R09: 0000000000000000 [ 281.329180][T18276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.329192][T18276] R13: 00007f10c2ed6038 R14: 00007f10c2ed5fa0 R15: 00007ffefa9f3988 [ 281.329219][T18276] [ 281.346728][T18278] tipc: New replicast peer: 255.255.255.255 [ 281.594289][T18278] tipc: Enabled bearer , priority 10 [ 281.602346][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.650300][T18287] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.779787][T18292] lo speed is unknown, defaulting to 1000 [ 281.945976][T18295] xt_hashlimit: max too large, truncated to 1048576 [ 282.074134][T18309] loop4: detected capacity change from 0 to 256 [ 282.081321][T18309] vfat: Unknown parameter 'ÃokïÖT†Ä a0Ê<æÛ©!rž ¹Zê´S!ÇPW}Cñ•rèp~ùµô²ŸÑT' [ 282.185623][T18319] FAULT_INJECTION: forcing a failure. [ 282.185623][T18319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.199182][T18319] CPU: 0 UID: 0 PID: 18319 Comm: syz.4.4120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.199219][T18319] Tainted: [W]=WARN [ 282.199226][T18319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.199297][T18319] Call Trace: [ 282.199304][T18319] [ 282.199313][T18319] __dump_stack+0x1d/0x30 [ 282.199335][T18319] dump_stack_lvl+0xe8/0x140 [ 282.199356][T18319] dump_stack+0x15/0x1b [ 282.199377][T18319] should_fail_ex+0x265/0x280 [ 282.199457][T18319] should_fail+0xb/0x20 [ 282.199492][T18319] should_fail_usercopy+0x1a/0x20 [ 282.199536][T18319] _copy_from_user+0x1c/0xb0 [ 282.199568][T18319] ip_set_mcast_msfilter+0x11c/0x2a0 [ 282.199605][T18319] do_ip_setsockopt+0x16ca/0x2240 [ 282.199701][T18319] ip_setsockopt+0x58/0x110 [ 282.199726][T18319] udp_setsockopt+0x99/0xb0 [ 282.199821][T18319] sock_common_setsockopt+0x69/0x80 [ 282.199906][T18319] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 282.199928][T18319] __sys_setsockopt+0x184/0x200 [ 282.200005][T18319] __x64_sys_setsockopt+0x64/0x80 [ 282.200098][T18319] x64_sys_call+0x20ec/0x3000 [ 282.200128][T18319] do_syscall_64+0xd2/0x200 [ 282.200153][T18319] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.200180][T18319] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 282.200248][T18319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.200342][T18319] RIP: 0033:0x7f289ce9eec9 [ 282.200358][T18319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.200379][T18319] RSP: 002b:00007f289b907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.200406][T18319] RAX: ffffffffffffffda RBX: 00007f289d0f5fa0 RCX: 00007f289ce9eec9 [ 282.200423][T18319] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 282.200480][T18319] RBP: 00007f289b907090 R08: 0000000000000290 R09: 0000000000000000 [ 282.200498][T18319] R10: 00002000000012c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.200518][T18319] R13: 00007f289d0f6038 R14: 00007f289d0f5fa0 R15: 00007ffe26f059b8 [ 282.200546][T18319] [ 282.333592][T18325] loop1: detected capacity change from 0 to 512 [ 282.349008][T18327] loop4: detected capacity change from 0 to 512 [ 282.368585][T18325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.375430][T18327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.392462][T18325] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.400410][T18327] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.521282][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.592765][T18338] loop1: detected capacity change from 0 to 512 [ 282.623685][T18338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.659417][T18338] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.680219][T18341] xt_hashlimit: max too large, truncated to 1048576 [ 282.966316][T18349] lo speed is unknown, defaulting to 1000 [ 283.200227][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 283.200294][ T29] audit: type=1326 audit(1760687759.368:16392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.268788][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.384213][ T29] audit: type=1326 audit(1760687759.398:16393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.407879][ T29] audit: type=1326 audit(1760687759.398:16394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.431478][ T29] audit: type=1326 audit(1760687759.398:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.455191][ T29] audit: type=1326 audit(1760687759.408:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.478878][ T29] audit: type=1326 audit(1760687759.408:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.502783][ T29] audit: type=1326 audit(1760687759.408:16398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.526403][ T29] audit: type=1326 audit(1760687759.408:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.550135][ T29] audit: type=1326 audit(1760687759.408:16400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.573814][ T29] audit: type=1326 audit(1760687759.408:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18348 comm="syz.2.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 283.653716][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.711215][T18347] lo speed is unknown, defaulting to 1000 [ 283.795096][T18357] __nla_validate_parse: 3 callbacks suppressed [ 283.795116][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4132'. [ 283.883068][T18365] netlink: 'syz.4.4134': attribute type 1 has an invalid length. [ 283.945085][T18378] loop2: detected capacity change from 0 to 512 [ 283.945881][T18365] bond1: (slave geneve2): making interface the new active one [ 283.959826][T18365] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 283.961017][T18378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.976621][T12852] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 283.982034][T18378] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.994834][T12852] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.021716][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4139'. [ 284.038812][T12852] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.048833][T18383] xt_connbytes: Forcing CT accounting to be enabled [ 284.055500][T18383] Cannot find set identified by id 0 to match [ 284.068219][T12852] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 284.084591][T18385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.095389][T18385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.105806][T18385] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.190847][T18385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.201386][T18385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.211735][T18385] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.222748][T12129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.261511][T18385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.271916][T18385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.282292][T18385] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.299264][T18393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 284.330810][T18385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.341272][T18385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.351964][T18385] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 284.405229][ T52] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.413525][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.421947][ T52] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.434507][ T52] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.442759][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.451166][ T52] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.455417][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4147'. [ 284.465244][ T52] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.476526][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.484893][ T52] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.493990][T18395] loop2: detected capacity change from 0 to 512 [ 284.500315][T12877] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.508550][T12877] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 284.516906][T12877] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 284.526470][T18395] ext2: Unknown parameter 'smackfstransmute' [ 284.711431][T18401] lo speed is unknown, defaulting to 1000 [ 284.748424][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4153'. [ 284.800636][T18413] loop3: detected capacity change from 0 to 512 [ 284.827641][T18413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.850939][T18413] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.854576][T18412] lo speed is unknown, defaulting to 1000 [ 284.867680][T18423] loop5: detected capacity change from 0 to 128 [ 285.050737][T18432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4162'. [ 285.228600][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.254947][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'. [ 285.312275][T18436] team0: Port device team_slave_1 removed [ 285.664228][T18444] serio: Serial port ttyS3 [ 285.716614][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.733011][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.741975][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.749195][T18449] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 285.777416][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.784664][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.795083][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.801627][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.808885][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.815572][T18454] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 285.823371][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.830747][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.840407][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.847358][T18449] hsr0 speed is unknown, defaulting to 1000 [ 285.968998][T18456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4171'. [ 286.183990][T18464] loop5: detected capacity change from 0 to 512 [ 286.188347][T18465] lo speed is unknown, defaulting to 1000 [ 286.196989][T18465] hsr0 speed is unknown, defaulting to 1000 [ 286.283287][T18467] lo speed is unknown, defaulting to 1000 [ 286.289654][T18467] hsr0 speed is unknown, defaulting to 1000 [ 286.735669][T18475] lo speed is unknown, defaulting to 1000 [ 286.774176][T18475] hsr0 speed is unknown, defaulting to 1000 [ 286.872877][T18473] xt_hashlimit: max too large, truncated to 1048576 [ 286.901291][T18491] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 286.924094][T18491] FAULT_INJECTION: forcing a failure. [ 286.924094][T18491] name failslab, interval 1, probability 0, space 0, times 0 [ 286.936897][T18491] CPU: 0 UID: 0 PID: 18491 Comm: syz.3.4182 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.936936][T18491] Tainted: [W]=WARN [ 286.936943][T18491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.937043][T18491] Call Trace: [ 286.937050][T18491] [ 286.937058][T18491] __dump_stack+0x1d/0x30 [ 286.937082][T18491] dump_stack_lvl+0xe8/0x140 [ 286.937106][T18491] dump_stack+0x15/0x1b [ 286.937123][T18491] should_fail_ex+0x265/0x280 [ 286.937187][T18491] should_failslab+0x8c/0xb0 [ 286.937217][T18491] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 286.937386][T18491] ? __alloc_skb+0x101/0x320 [ 286.937413][T18491] __alloc_skb+0x101/0x320 [ 286.937489][T18491] alloc_uevent_skb+0x5c/0x120 [ 286.937557][T18491] kobject_uevent_net_broadcast+0xfb/0x410 [ 286.937606][T18491] kobject_uevent_env+0x43d/0x570 [ 286.937648][T18491] kobject_rename+0x2d6/0x350 [ 286.937758][T18491] ? sysfs_rename_link_ns+0x106/0x120 [ 286.937785][T18491] device_rename+0x11f/0x180 [ 286.937814][T18491] netif_change_name+0x1eb/0x6b0 [ 286.937887][T18491] ? __list_del_entry_valid_or_report+0x65/0x130 [ 286.937994][T18491] dev_change_name+0xc0/0x170 [ 286.938015][T18491] dev_ifsioc+0x302/0xaa0 [ 286.938074][T18491] dev_ioctl+0x4a7/0x960 [ 286.938110][T18491] sock_do_ioctl+0x197/0x220 [ 286.938138][T18491] sock_ioctl+0x41b/0x610 [ 286.938173][T18491] ? __pfx_sock_ioctl+0x10/0x10 [ 286.938208][T18491] __se_sys_ioctl+0xce/0x140 [ 286.938232][T18491] __x64_sys_ioctl+0x43/0x50 [ 286.938257][T18491] x64_sys_call+0x1816/0x3000 [ 286.938286][T18491] do_syscall_64+0xd2/0x200 [ 286.938329][T18491] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.938357][T18491] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 286.938382][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.938404][T18491] RIP: 0033:0x7fae2f02eec9 [ 286.938419][T18491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.938469][T18491] RSP: 002b:00007fae2da8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.938492][T18491] RAX: ffffffffffffffda RBX: 00007fae2f285fa0 RCX: 00007fae2f02eec9 [ 286.938505][T18491] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000008 [ 286.938518][T18491] RBP: 00007fae2da8f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.938530][T18491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.938543][T18491] R13: 00007fae2f286038 R14: 00007fae2f285fa0 R15: 00007ffc411f7698 [ 286.938569][T18491] [ 287.205344][T18489] lo speed is unknown, defaulting to 1000 [ 287.214200][T18489] hsr0 speed is unknown, defaulting to 1000 [ 287.293736][T18501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4186'. [ 287.312404][T18502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4187'. [ 287.381958][T18504] veth0_to_bridge: entered promiscuous mode [ 287.401455][T18504] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4188'. [ 287.512061][T18503] veth0_to_bridge: left promiscuous mode [ 287.538084][T18506] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 287.765702][T18547] loop3: detected capacity change from 0 to 256 [ 288.098834][T18568] loop5: detected capacity change from 0 to 512 [ 288.142492][T18568] EXT4-fs (loop5): 1 orphan inode deleted [ 288.156600][T12852] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 1 [ 288.168503][T18571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 288.176636][T18568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.206336][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 288.206354][ T29] audit: type=1326 audit(1760687764.368:16836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 288.236131][ T29] audit: type=1326 audit(1760687764.368:16837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7facea33eec9 code=0x7ffc0000 [ 288.291872][T18568] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.504136][ T29] audit: type=1326 audit(1760687764.388:16838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 288.527776][ T29] audit: type=1326 audit(1760687764.388:16839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 288.537040][T18607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=18607 comm=syz.3.4202 [ 288.551299][ T29] audit: type=1326 audit(1760687764.388:16840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7facea33eec9 code=0x7ffc0000 [ 288.551369][ T29] audit: type=1326 audit(1760687764.388:16841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 288.551402][ T29] audit: type=1326 audit(1760687764.388:16842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 288.551438][ T29] audit: type=1326 audit(1760687764.388:16843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7facea33eec9 code=0x7ffc0000 [ 288.659002][ T29] audit: type=1326 audit(1760687764.398:16844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7facea335d67 code=0x7ffc0000 [ 288.682728][ T29] audit: type=1326 audit(1760687764.398:16845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.1.4197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7facea2daf79 code=0x7ffc0000 [ 288.727816][T18610] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 288.777426][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.815262][T18616] loop5: detected capacity change from 0 to 512 [ 288.828513][T18616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.845116][T18616] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.850477][T18617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.874293][T18620] loop1: detected capacity change from 0 to 512 [ 288.904231][T18621] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.941111][T18617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.976024][T18627] loop1: detected capacity change from 0 to 512 [ 288.983727][T18624] lo speed is unknown, defaulting to 1000 [ 289.000316][T18617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.002988][T18627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.023772][T18625] loop4: detected capacity change from 0 to 4096 [ 289.031649][T18625] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.038341][T18625] EXT4-fs: Ignoring removed i_version option [ 289.044746][T18627] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.055513][T18624] hsr0 speed is unknown, defaulting to 1000 [ 289.079483][T18617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.091936][T18625] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.4209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 256(256) [ 289.120673][T18625] EXT4-fs error (device loop4): ext4_quota_enable:7139: comm syz.4.4209: Bad quota inode: 4, type: 1 [ 289.165534][T18625] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.200182][T12863] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.220894][T18625] EXT4-fs (loop4): mount failed [ 289.235504][T12863] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.276357][T12863] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.296003][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.310358][T12863] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.358044][T18641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.385742][T18643] loop4: detected capacity change from 0 to 2048 [ 289.394962][T18643] ext4: Unknown parameter 'subj_type' [ 289.428392][T18643] netlink: 'syz.4.4214': attribute type 6 has an invalid length. [ 289.449741][T18643] lo speed is unknown, defaulting to 1000 [ 289.456913][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.458658][T18645] loop3: detected capacity change from 0 to 512 [ 289.467213][T18643] hsr0 speed is unknown, defaulting to 1000 [ 289.481081][T18645] EXT4-fs (loop3): orphan cleanup on readonly fs [ 289.498689][T18645] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4215: iget: bad i_size value: 38620345925642 [ 289.516941][T18645] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4215: couldn't read orphan inode 15 (err -117) [ 289.533319][T18653] __nla_validate_parse: 1 callbacks suppressed [ 289.533344][T18653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4218'. [ 289.536822][T18651] tipc: New replicast peer: 255.255.255.255 [ 289.539836][T18653] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4218'. [ 289.549014][T18651] tipc: Enabled bearer , priority 10 [ 289.572131][T18653] macvlan0: entered allmulticast mode [ 289.577647][T18653] veth1_vlan: entered allmulticast mode [ 289.611426][T18645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.665414][T18657] FAULT_INJECTION: forcing a failure. [ 289.665414][T18657] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.678881][T18657] CPU: 1 UID: 0 PID: 18657 Comm: syz.4.4219 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.678982][T18657] Tainted: [W]=WARN [ 289.678989][T18657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.679035][T18657] Call Trace: [ 289.679103][T18657] [ 289.679111][T18657] __dump_stack+0x1d/0x30 [ 289.679212][T18657] dump_stack_lvl+0xe8/0x140 [ 289.679235][T18657] dump_stack+0x15/0x1b [ 289.679263][T18657] should_fail_ex+0x265/0x280 [ 289.679340][T18657] should_fail_alloc_page+0xf2/0x100 [ 289.679376][T18657] __alloc_frozen_pages_noprof+0xff/0x360 [ 289.679426][T18657] alloc_pages_mpol+0xb3/0x260 [ 289.679445][T18657] ? __rcu_read_lock+0x37/0x50 [ 289.679513][T18657] vma_alloc_folio_noprof+0x1aa/0x300 [ 289.679577][T18657] handle_mm_fault+0xec2/0x2be0 [ 289.679602][T18657] ? vma_start_read+0x141/0x1f0 [ 289.679647][T18657] do_user_addr_fault+0x630/0x1080 [ 289.679670][T18657] ? arch_exit_work+0x30/0x40 [ 289.679718][T18657] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 289.679838][T18657] exc_page_fault+0x62/0xa0 [ 289.679939][T18657] asm_exc_page_fault+0x26/0x30 [ 289.679966][T18657] RIP: 0033:0x7f289cd60c03 [ 289.679986][T18657] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 289.680005][T18657] RSP: 002b:00007f289b9064a0 EFLAGS: 00010206 [ 289.680021][T18657] RAX: 0000000000010000 RBX: 00007f289b906540 RCX: 00007f28934e7000 [ 289.680033][T18657] RDX: 00007f289b9066e0 RSI: 0000000000000027 RDI: 00007f289b9065e0 [ 289.680058][T18657] RBP: 00000000000000d6 R08: 0000000000000009 R09: 00000000000001a5 [ 289.680070][T18657] R10: 00000000000001be R11: 00007f289b906540 R12: 0000000000000001 [ 289.680082][T18657] R13: 00007f289cf3db80 R14: 0000000000000050 R15: 00007f289b9065e0 [ 289.680104][T18657] [ 289.680118][T18657] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 289.874956][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.884138][T18657] loop4: detected capacity change from 0 to 1024 [ 289.910184][T18655] loop1: detected capacity change from 0 to 1764 [ 289.946865][T18657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.982709][T18660] loop2: detected capacity change from 0 to 512 [ 289.995470][T18664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4220'. [ 290.061994][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.214090][T18671] loop4: detected capacity change from 0 to 512 [ 290.236615][T18671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.276359][T18671] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.292982][T18666] loop3: detected capacity change from 0 to 764 [ 290.300633][T18666] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 290.645236][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.666289][ T3387] tipc: Node number set to 4025610532 [ 290.728115][T18681] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.785369][T18686] loop2: detected capacity change from 0 to 2048 [ 290.834993][T18686] loop2: p2 p3 p7 [ 290.853143][T18689] lo speed is unknown, defaulting to 1000 [ 290.860098][T18689] hsr0 speed is unknown, defaulting to 1000 [ 291.003924][T18697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4233'. [ 291.081210][T18702] loop3: detected capacity change from 0 to 512 [ 291.092888][T18702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.115427][T18703] loop4: detected capacity change from 0 to 512 [ 291.115931][T18702] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.337983][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.446057][T18713] xt_hashlimit: max too large, truncated to 1048576 [ 291.627261][T18717] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.716980][T18715] lo speed is unknown, defaulting to 1000 [ 291.726102][T18715] hsr0 speed is unknown, defaulting to 1000 [ 291.771703][T18722] loop2: detected capacity change from 0 to 512 [ 291.787435][T18722] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 291.807902][T18722] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4243'. [ 292.012829][T18726] lo speed is unknown, defaulting to 1000 [ 292.019103][T18726] hsr0 speed is unknown, defaulting to 1000 [ 292.365032][T18742] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4248'. [ 292.575431][T18734] lo speed is unknown, defaulting to 1000 [ 292.581745][T18734] hsr0 speed is unknown, defaulting to 1000 [ 292.794564][T18745] xt_hashlimit: max too large, truncated to 1048576 [ 292.829096][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4253'. [ 292.838434][T18753] loop2: detected capacity change from 0 to 512 [ 292.852102][T18750] lo speed is unknown, defaulting to 1000 [ 292.860499][T18750] hsr0 speed is unknown, defaulting to 1000 [ 292.940516][T18759] loop2: detected capacity change from 0 to 512 [ 292.958485][T18759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 292.997571][T18759] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 293.005657][T18759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 293.040904][T18759] System zones: 0-1, 15-15, 18-18, 34-34 [ 293.058861][T18759] EXT4-fs (loop2): orphan cleanup on readonly fs [ 293.071136][T18759] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 293.085857][T18759] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 293.093513][T18763] loop4: detected capacity change from 0 to 512 [ 293.103937][T18759] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4256: bg 0: block 40: padding at end of block bitmap is not set [ 293.120264][T18759] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 293.129363][T18759] EXT4-fs (loop2): 1 truncate cleaned up [ 293.135825][T18759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.159915][T18759] FAULT_INJECTION: forcing a failure. [ 293.159915][T18759] name failslab, interval 1, probability 0, space 0, times 0 [ 293.172772][T18759] CPU: 1 UID: 0 PID: 18759 Comm: syz.2.4256 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.172814][T18759] Tainted: [W]=WARN [ 293.172823][T18759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.172840][T18759] Call Trace: [ 293.172847][T18759] [ 293.172855][T18759] __dump_stack+0x1d/0x30 [ 293.172960][T18759] dump_stack_lvl+0xe8/0x140 [ 293.172985][T18759] dump_stack+0x15/0x1b [ 293.173072][T18759] should_fail_ex+0x265/0x280 [ 293.173120][T18759] should_failslab+0x8c/0xb0 [ 293.173156][T18759] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 293.173205][T18759] ? sidtab_sid2str_get+0xa0/0x130 [ 293.173319][T18759] kmemdup_noprof+0x2b/0x70 [ 293.173351][T18759] sidtab_sid2str_get+0xa0/0x130 [ 293.173407][T18759] security_sid_to_context_core+0x1eb/0x2e0 [ 293.173443][T18759] security_sid_to_context+0x27/0x40 [ 293.173527][T18759] avc_audit_post_callback+0x10f/0x520 [ 293.173656][T18759] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 293.173700][T18759] common_lsm_audit+0x1bb/0x230 [ 293.173729][T18759] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 293.173805][T18759] slow_avc_audit+0x104/0x140 [ 293.173840][T18759] avc_has_perm+0x13a/0x180 [ 293.173920][T18759] selinux_mount+0x2ba/0x310 [ 293.173949][T18759] ? user_path_at+0x109/0x130 [ 293.174043][T18759] security_sb_mount+0x5f/0xb0 [ 293.174117][T18759] ? path_mount+0x89/0xb70 [ 293.174139][T18759] path_mount+0xa9/0xb70 [ 293.174161][T18759] ? user_path_at+0x109/0x130 [ 293.174206][T18759] __se_sys_mount+0x28c/0x2e0 [ 293.174303][T18759] ? fput+0x8f/0xc0 [ 293.174341][T18759] __x64_sys_mount+0x67/0x80 [ 293.174394][T18759] x64_sys_call+0x2b51/0x3000 [ 293.174417][T18759] do_syscall_64+0xd2/0x200 [ 293.174449][T18759] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.174538][T18759] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.174581][T18759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.174636][T18759] RIP: 0033:0x7f10c2c7eec9 [ 293.174657][T18759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.174681][T18759] RSP: 002b:00007f10c16e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.174754][T18759] RAX: ffffffffffffffda RBX: 00007f10c2ed5fa0 RCX: 00007f10c2c7eec9 [ 293.174824][T18759] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 293.174836][T18759] RBP: 00007f10c16e7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.174924][T18759] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000001 [ 293.174939][T18759] R13: 00007f10c2ed6038 R14: 00007f10c2ed5fa0 R15: 00007ffefa9f3988 [ 293.174958][T18759] [ 293.219601][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 293.219621][ T29] audit: type=1326 audit(1760687769.388:17349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 293.468144][ T29] audit: type=1326 audit(1760687769.438:17350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 293.468319][T18759] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 293.491708][ T29] audit: type=1326 audit(1760687769.438:17351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 293.499683][T18759] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 293.523609][ T29] audit: type=1326 audit(1760687769.438:17352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 293.555081][ T29] audit: type=1326 audit(1760687769.438:17353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efe14daeec9 code=0x7ffc0000 [ 293.578752][ T29] audit: type=1326 audit(1760687769.448:17354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 293.602415][ T29] audit: type=1326 audit(1760687769.448:17355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 293.626305][ T29] audit: type=1326 audit(1760687769.448:17356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efe14daeec9 code=0x7ffc0000 [ 293.651016][ T29] audit: type=1326 audit(1760687769.458:17357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 293.675270][ T29] audit: type=1326 audit(1760687769.458:17358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18747 comm="syz.5.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 293.716998][T18763] EXT4-fs (loop4): 1 orphan inode deleted [ 293.723226][T18763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.761676][T12129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.764784][T12870] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 293.787029][T18763] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.895994][T18777] netlink: 'syz.5.4260': attribute type 30 has an invalid length. [ 293.921050][T18757] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 294.042966][T18779] tmpfs: Bad value for 'mpol' [ 294.053550][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.087873][T18773] lo speed is unknown, defaulting to 1000 [ 294.102217][T18773] hsr0 speed is unknown, defaulting to 1000 [ 294.108403][T18782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4262'. [ 294.165217][T18784] netlink: 'syz.5.4263': attribute type 2 has an invalid length. [ 294.179656][T18784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.254283][T18784] loop5: detected capacity change from 0 to 2048 [ 294.318140][T18784] loop5: p1 p2 p3 [ 294.395833][T18790] xt_hashlimit: max too large, truncated to 1048576 [ 294.439485][T18794] loop4: detected capacity change from 0 to 512 [ 294.470137][T18794] EXT4-fs (loop4): 1 orphan inode deleted [ 294.479729][T18794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.496624][T12870] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 294.499606][T18794] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.526571][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4268'. [ 294.556156][T18799] bond1: entered promiscuous mode [ 294.561355][T18799] bond1: entered allmulticast mode [ 294.567478][T18799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.580035][T18799] bond1 (unregistering): Released all slaves [ 294.660693][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.289779][T18815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4275'. [ 295.331075][T18817] loop5: detected capacity change from 0 to 512 [ 295.400515][T18819] loop5: detected capacity change from 0 to 512 [ 295.420768][T18819] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.450515][T18819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 295.467163][T18819] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.494620][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 295.584511][T18826] lo speed is unknown, defaulting to 1000 [ 295.604133][T18826] hsr0 speed is unknown, defaulting to 1000 [ 295.739906][T18838] loop4: detected capacity change from 0 to 512 [ 295.769839][T18840] ref_ctr_offset mismatch. inode: 0x216 offset: 0x4 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 [ 295.787416][T18840] loop3: detected capacity change from 0 to 1024 [ 295.799022][T18838] EXT4-fs (loop4): 1 orphan inode deleted [ 295.810746][T18840] EXT4-fs: Ignoring removed orlov option [ 295.817925][T18838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.831499][T18838] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.846863][T18844] netlink: 'syz.2.4285': attribute type 1 has an invalid length. [ 295.861912][T18844] bond1: entered promiscuous mode [ 295.867404][T18844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.878391][T18840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.891258][T12870] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 295.903813][T18844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.907202][T18840] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4284: bg 0: block 272: padding at end of block bitmap is not set [ 295.911307][T18844] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 295.934871][T18844] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 295.946402][T18844] bond1: (slave gre1): making interface the new active one [ 295.953707][T18844] gre1: entered promiscuous mode [ 295.961176][T18844] bond1: (slave gre1): Enslaving as an active interface with an up link [ 296.018752][T18863] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4290'. [ 296.223982][T18868] FAULT_INJECTION: forcing a failure. [ 296.223982][T18868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.237227][T18868] CPU: 0 UID: 0 PID: 18868 Comm: syz.5.4294 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.237269][T18868] Tainted: [W]=WARN [ 296.237278][T18868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.237296][T18868] Call Trace: [ 296.237305][T18868] [ 296.237315][T18868] __dump_stack+0x1d/0x30 [ 296.237339][T18868] dump_stack_lvl+0xe8/0x140 [ 296.237423][T18868] dump_stack+0x15/0x1b [ 296.237441][T18868] should_fail_ex+0x265/0x280 [ 296.237476][T18868] should_fail+0xb/0x20 [ 296.237604][T18868] should_fail_usercopy+0x1a/0x20 [ 296.237633][T18868] _copy_to_user+0x20/0xa0 [ 296.237697][T18868] simple_read_from_buffer+0xb5/0x130 [ 296.237730][T18868] proc_fail_nth_read+0x10e/0x150 [ 296.237864][T18868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.237900][T18868] vfs_read+0x1a8/0x770 [ 296.237927][T18868] ? bpf_trace_run2+0x124/0x1c0 [ 296.237962][T18868] ? __rcu_read_unlock+0x4f/0x70 [ 296.238026][T18868] ? __fget_files+0x184/0x1c0 [ 296.238056][T18868] ksys_read+0xda/0x1a0 [ 296.238230][T18868] __x64_sys_read+0x40/0x50 [ 296.238261][T18868] x64_sys_call+0x27c0/0x3000 [ 296.238300][T18868] do_syscall_64+0xd2/0x200 [ 296.238331][T18868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.238367][T18868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 296.238408][T18868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.238438][T18868] RIP: 0033:0x7efe14dad8dc [ 296.238457][T18868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.238481][T18868] RSP: 002b:00007efe13817030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.238507][T18868] RAX: ffffffffffffffda RBX: 00007efe15005fa0 RCX: 00007efe14dad8dc [ 296.238524][T18868] RDX: 000000000000000f RSI: 00007efe138170a0 RDI: 0000000000000005 [ 296.238541][T18868] RBP: 00007efe13817090 R08: 0000000000000000 R09: 0000000000000000 [ 296.238573][T18868] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 296.238585][T18868] R13: 00007efe15006038 R14: 00007efe15005fa0 R15: 00007ffc619cfd48 [ 296.238611][T18868] [ 296.244956][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4298'. [ 296.533140][T18893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4299'. [ 296.611895][T18894] loop4: detected capacity change from 0 to 512 [ 296.641965][T18896] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4304'. [ 296.647195][T18894] EXT4-fs (loop4): 1 orphan inode deleted [ 296.657239][T18894] EXT4-fs mount: 2 callbacks suppressed [ 296.657257][T18894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.657695][T12870] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:45: Failed to release dquot type 1 [ 296.663180][T18894] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.728338][T18892] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 296.738263][T18902] loop3: detected capacity change from 0 to 512 [ 296.747074][T18902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.766503][T18902] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.852065][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.900562][T18900] lo speed is unknown, defaulting to 1000 [ 296.919664][T18900] hsr0 speed is unknown, defaulting to 1000 [ 297.008450][T18913] loop4: detected capacity change from 0 to 256 [ 297.025456][T18913] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 297.044982][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.090266][T18926] loop3: detected capacity change from 0 to 512 [ 297.092759][T18926] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.114836][T18926] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.152639][T18929] FAULT_INJECTION: forcing a failure. [ 297.152639][T18929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.165818][T18929] CPU: 0 UID: 0 PID: 18929 Comm: syz.1.4315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.165985][T18929] Tainted: [W]=WARN [ 297.165992][T18929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.166009][T18929] Call Trace: [ 297.166019][T18929] [ 297.166028][T18929] __dump_stack+0x1d/0x30 [ 297.166053][T18929] dump_stack_lvl+0xe8/0x140 [ 297.166075][T18929] dump_stack+0x15/0x1b [ 297.166093][T18929] should_fail_ex+0x265/0x280 [ 297.166224][T18929] should_fail+0xb/0x20 [ 297.166265][T18929] should_fail_usercopy+0x1a/0x20 [ 297.166286][T18929] _copy_from_user+0x1c/0xb0 [ 297.166336][T18929] copy_from_sockptr_offset+0x66/0xa0 [ 297.166379][T18929] do_ipt_set_ctl+0x5c8/0x820 [ 297.166408][T18929] ? _raw_spin_unlock_bh+0x36/0x40 [ 297.166439][T18929] ? tcp_release_cb+0xf1/0x370 [ 297.166543][T18929] nf_setsockopt+0x199/0x1b0 [ 297.166583][T18929] ip_setsockopt+0x102/0x110 [ 297.166617][T18929] tcp_setsockopt+0x98/0xb0 [ 297.166681][T18929] sock_common_setsockopt+0x69/0x80 [ 297.166704][T18929] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.166726][T18929] __sys_setsockopt+0x184/0x200 [ 297.166763][T18929] __x64_sys_setsockopt+0x64/0x80 [ 297.166835][T18929] x64_sys_call+0x20ec/0x3000 [ 297.166923][T18929] do_syscall_64+0xd2/0x200 [ 297.166953][T18929] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 297.167049][T18929] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 297.167076][T18929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.167159][T18929] RIP: 0033:0x7facea33eec9 [ 297.167176][T18929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.167194][T18929] RSP: 002b:00007face8da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.167266][T18929] RAX: ffffffffffffffda RBX: 00007facea595fa0 RCX: 00007facea33eec9 [ 297.167285][T18929] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 297.167299][T18929] RBP: 00007face8da7090 R08: 0000000000000396 R09: 0000000000000000 [ 297.167364][T18929] R10: 0000200000001280 R11: 0000000000000246 R12: 0000000000000001 [ 297.167382][T18929] R13: 00007facea596038 R14: 00007facea595fa0 R15: 00007ffd1e78a1e8 [ 297.167431][T18929] [ 297.412033][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.434451][T18936] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4317'. [ 297.570450][T18946] program syz.3.4322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.772305][T18950] batadv_slave_1: entered promiscuous mode [ 297.778681][T18949] batadv_slave_1: left promiscuous mode [ 297.881761][T18958] netlink: 'syz.2.4328': attribute type 13 has an invalid length. [ 297.920648][T18958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.929334][T18958] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.941698][T18958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.993354][T18962] xt_hashlimit: max too large, truncated to 1048576 [ 298.018656][T18964] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4330'. [ 298.230548][ T29] kauditd_printk_skb: 1257 callbacks suppressed [ 298.230597][ T29] audit: type=1326 audit(1760687774.398:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10c2c75d67 code=0x7ffc0000 [ 298.260759][ T29] audit: type=1326 audit(1760687774.398:18611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10c2c1af79 code=0x7ffc0000 [ 298.284345][ T29] audit: type=1326 audit(1760687774.398:18612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 298.307975][ T29] audit: type=1326 audit(1760687774.408:18613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10c2c75d67 code=0x7ffc0000 [ 298.331621][ T29] audit: type=1326 audit(1760687774.408:18614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10c2c1af79 code=0x7ffc0000 [ 298.355461][ T29] audit: type=1326 audit(1760687774.408:18615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 298.379148][ T29] audit: type=1326 audit(1760687774.418:18616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10c2c75d67 code=0x7ffc0000 [ 298.402692][ T29] audit: type=1326 audit(1760687774.418:18617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10c2c1af79 code=0x7ffc0000 [ 298.426286][ T29] audit: type=1326 audit(1760687774.418:18618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 298.482494][ T29] audit: type=1326 audit(1760687774.428:18619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18973 comm="syz.2.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10c2c75d67 code=0x7ffc0000 [ 298.514813][T18985] loop5: detected capacity change from 0 to 512 [ 298.523433][T18985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.536216][T18985] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.681295][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.698521][T18991] xt_hashlimit: max too large, truncated to 1048576 [ 298.741613][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4343'. [ 299.344607][T19013] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4348'. [ 299.376760][T19017] loop1: detected capacity change from 0 to 128 [ 299.405691][T19019] loop3: detected capacity change from 0 to 512 [ 299.414295][T19019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.427265][T19019] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.559878][T19026] loop1: detected capacity change from 0 to 128 [ 299.579605][T16937] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.597897][T19028] xt_hashlimit: max too large, truncated to 1048576 [ 299.692919][T19034] 9pnet: Could not find request transport: 0xffffffffffffffff [ 299.977281][T19045] lo speed is unknown, defaulting to 1000 [ 299.983516][T19045] hsr0 speed is unknown, defaulting to 1000 [ 300.328567][T19054] loop4: detected capacity change from 0 to 512 [ 300.372634][T19054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.420154][T19054] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.525172][T19068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4367'. [ 300.620718][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.664000][T19073] lo speed is unknown, defaulting to 1000 [ 300.670278][T19073] hsr0 speed is unknown, defaulting to 1000 [ 300.705376][T19077] loop5: detected capacity change from 0 to 512 [ 300.758833][T19083] FAULT_INJECTION: forcing a failure. [ 300.758833][T19083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.772166][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.5.4374 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.772209][T19083] Tainted: [W]=WARN [ 300.772219][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.772234][T19083] Call Trace: [ 300.772242][T19083] [ 300.772253][T19083] __dump_stack+0x1d/0x30 [ 300.772325][T19083] dump_stack_lvl+0xe8/0x140 [ 300.772345][T19083] dump_stack+0x15/0x1b [ 300.772362][T19083] should_fail_ex+0x265/0x280 [ 300.772404][T19083] should_fail+0xb/0x20 [ 300.772472][T19083] should_fail_usercopy+0x1a/0x20 [ 300.772500][T19083] _copy_to_user+0x20/0xa0 [ 300.772534][T19083] simple_read_from_buffer+0xb5/0x130 [ 300.772566][T19083] proc_fail_nth_read+0x10e/0x150 [ 300.772601][T19083] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.772632][T19083] vfs_read+0x1a8/0x770 [ 300.772657][T19083] ? __rcu_read_unlock+0x4f/0x70 [ 300.772698][T19083] ? __fget_files+0x184/0x1c0 [ 300.772797][T19083] ksys_read+0xda/0x1a0 [ 300.772822][T19083] __x64_sys_read+0x40/0x50 [ 300.772904][T19083] x64_sys_call+0x27c0/0x3000 [ 300.772926][T19083] do_syscall_64+0xd2/0x200 [ 300.772951][T19083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.772987][T19083] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 300.773030][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.773053][T19083] RIP: 0033:0x7efe14dad8dc [ 300.773068][T19083] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.773087][T19083] RSP: 002b:00007efe13817030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.773109][T19083] RAX: ffffffffffffffda RBX: 00007efe15005fa0 RCX: 00007efe14dad8dc [ 300.773193][T19083] RDX: 000000000000000f RSI: 00007efe138170a0 RDI: 0000000000000004 [ 300.773210][T19083] RBP: 00007efe13817090 R08: 0000000000000000 R09: 0000000000000000 [ 300.773270][T19083] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 300.773282][T19083] R13: 00007efe15006038 R14: 00007efe15005fa0 R15: 00007ffc619cfd48 [ 300.773304][T19083] [ 301.088695][T19085] lo speed is unknown, defaulting to 1000 [ 301.094805][T19085] hsr0 speed is unknown, defaulting to 1000 [ 301.230135][T19092] loop5: detected capacity change from 0 to 512 [ 301.238527][T19092] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.4378: ea_inode with extended attributes [ 301.251890][T19092] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4378: error while reading EA inode 11 err=-117 [ 301.264915][T19092] EXT4-fs (loop5): 1 orphan inode deleted [ 301.271319][T19092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.387413][T19099] loop2: detected capacity change from 0 to 512 [ 301.394552][T19099] EXT4-fs: Ignoring removed bh option [ 301.400375][T19099] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.409289][T19099] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 301.428730][T19099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 301.449034][T19099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 301.456398][T19099] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4381: Failed to acquire dquot type 1 [ 301.456769][T19099] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4381: Invalid block bitmap block 0 in block_group 0 [ 301.457116][T19099] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4381: Invalid block bitmap block 0 in block_group 0 [ 301.457446][T19099] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4381: Invalid block bitmap block 0 in block_group 0 [ 301.457669][T19099] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4381: Failed to acquire dquot type 1 [ 301.458109][T19099] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4381: Failed to acquire dquot type 1 [ 301.458394][T19099] EXT4-fs (loop2): 1 orphan inode deleted [ 301.458971][T19099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.460638][T19104] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.4381: deleted inode referenced: 12 [ 301.606328][T19112] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 301.627750][T12129] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.663144][T19112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 301.694883][T19112] vlan2: entered allmulticast mode [ 301.700159][T19112] bridge_slave_0: entered allmulticast mode [ 301.716745][T12916] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.808918][T19132] loop5: detected capacity change from 0 to 512 [ 301.913402][T19144] netlink: 'syz.5.4389': attribute type 29 has an invalid length. [ 302.017701][T19153] loop4: detected capacity change from 0 to 512 [ 302.036474][T19153] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 302.056848][T19153] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 302.086868][T19153] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.4392: inode #15: comm syz.4.4392: iget: illegal inode # [ 302.112214][T19153] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4392: couldn't read orphan inode 15 (err -117) [ 302.135462][T19153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.151022][T19153] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4392: bg 0: block 19: invalid block bitmap [ 302.187155][T19153] loop8: detected capacity change from 1024 to 1023 [ 302.221070][T19134] lo speed is unknown, defaulting to 1000 [ 302.242775][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.249259][T19134] hsr0 speed is unknown, defaulting to 1000 [ 302.345277][T19172] lo speed is unknown, defaulting to 1000 [ 302.410243][T19208] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4396'. [ 302.412401][T19172] hsr0 speed is unknown, defaulting to 1000 [ 302.484804][T19208] netlink: 'syz.4.4396': attribute type 4 has an invalid length. [ 302.524132][T19211] FAULT_INJECTION: forcing a failure. [ 302.524132][T19211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.537394][T19211] CPU: 1 UID: 0 PID: 19211 Comm: syz.3.4397 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.537439][T19211] Tainted: [W]=WARN [ 302.537448][T19211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.537466][T19211] Call Trace: [ 302.537475][T19211] [ 302.537484][T19211] __dump_stack+0x1d/0x30 [ 302.537506][T19211] dump_stack_lvl+0xe8/0x140 [ 302.537612][T19211] dump_stack+0x15/0x1b [ 302.537708][T19211] should_fail_ex+0x265/0x280 [ 302.537754][T19211] should_fail+0xb/0x20 [ 302.537789][T19211] should_fail_usercopy+0x1a/0x20 [ 302.537814][T19211] _copy_from_user+0x1c/0xb0 [ 302.537845][T19211] ___sys_sendmsg+0xc1/0x1d0 [ 302.537894][T19211] __x64_sys_sendmsg+0xd4/0x160 [ 302.537973][T19211] x64_sys_call+0x191e/0x3000 [ 302.538003][T19211] do_syscall_64+0xd2/0x200 [ 302.538036][T19211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.538097][T19211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 302.538128][T19211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.538158][T19211] RIP: 0033:0x7fae2f02eec9 [ 302.538179][T19211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.538202][T19211] RSP: 002b:00007fae2da8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.538222][T19211] RAX: ffffffffffffffda RBX: 00007fae2f285fa0 RCX: 00007fae2f02eec9 [ 302.538234][T19211] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 302.538262][T19211] RBP: 00007fae2da8f090 R08: 0000000000000000 R09: 0000000000000000 [ 302.538292][T19211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.538309][T19211] R13: 00007fae2f286038 R14: 00007fae2f285fa0 R15: 00007ffc411f7698 [ 302.538335][T19211] [ 302.744287][T19215] loop2: detected capacity change from 0 to 736 [ 302.757700][T19219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4399'. [ 302.768465][T19221] loop3: detected capacity change from 0 to 1024 [ 302.810708][T19224] netlink: 'syz.4.4402': attribute type 30 has an invalid length. [ 302.904385][T19237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4408'. [ 302.992027][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4410'. [ 303.052385][T19239] lo speed is unknown, defaulting to 1000 [ 303.059557][T19239] hsr0 speed is unknown, defaulting to 1000 [ 303.114553][T19258] macvtap0: entered promiscuous mode [ 303.123535][T19258] macvtap0: left promiscuous mode [ 303.242015][ T29] kauditd_printk_skb: 1438 callbacks suppressed [ 303.242067][ T29] audit: type=1326 audit(1760687779.408:20052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.2.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10c2c75d67 code=0x7ffc0000 [ 303.273540][ T29] audit: type=1326 audit(1760687779.418:20053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 303.276105][T19275] binfmt_misc: register: failed to install interpreter file ./file2 [ 303.297462][ T29] audit: type=1326 audit(1760687779.418:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 303.328836][ T29] audit: type=1326 audit(1760687779.418:20055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efe14daeec9 code=0x7ffc0000 [ 303.352513][ T29] audit: type=1326 audit(1760687779.418:20056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 303.376042][ T29] audit: type=1326 audit(1760687779.418:20057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe14d4af79 code=0x7ffc0000 [ 303.379365][T19277] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4423'. [ 303.399981][ T29] audit: type=1326 audit(1760687779.418:20058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efe14daeec9 code=0x7ffc0000 [ 303.432723][ T29] audit: type=1326 audit(1760687779.418:20059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.2.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10c2c1af79 code=0x7ffc0000 [ 303.456527][ T29] audit: type=1326 audit(1760687779.418:20060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19227 comm="syz.2.4404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f10c2c7eec9 code=0x7ffc0000 [ 303.480181][ T29] audit: type=1326 audit(1760687779.448:20061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19240 comm="syz.5.4410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe14da5d67 code=0x7ffc0000 [ 303.489758][T19273] lo speed is unknown, defaulting to 1000 [ 303.526726][T19273] hsr0 speed is unknown, defaulting to 1000 [ 303.557023][T19285] loop4: detected capacity change from 0 to 1024 [ 303.582562][T19285] EXT4-fs: Ignoring removed orlov option [ 303.610043][T19285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.633439][T19288] loop1: detected capacity change from 0 to 512 [ 303.654343][T19288] EXT4-fs (loop1): 1 orphan inode deleted [ 303.667025][T12892] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:62: Failed to release dquot type 1 [ 303.667273][T19288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.691535][T19288] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.777030][T19293] lo speed is unknown, defaulting to 1000 [ 303.783392][T19283] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 303.784389][T19293] hsr0 speed is unknown, defaulting to 1000 [ 303.827391][T19299] FAULT_INJECTION: forcing a failure. [ 303.827391][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.840528][T19299] CPU: 1 UID: 0 PID: 19299 Comm: syz.5.4428 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.840565][T19299] Tainted: [W]=WARN [ 303.840572][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.840650][T19299] Call Trace: [ 303.840658][T19299] [ 303.840667][T19299] __dump_stack+0x1d/0x30 [ 303.840690][T19299] dump_stack_lvl+0xe8/0x140 [ 303.840775][T19299] dump_stack+0x15/0x1b [ 303.840808][T19299] should_fail_ex+0x265/0x280 [ 303.840850][T19299] should_fail+0xb/0x20 [ 303.840883][T19299] should_fail_usercopy+0x1a/0x20 [ 303.840955][T19299] strncpy_from_user+0x25/0x230 [ 303.841046][T19299] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 303.841077][T19299] __se_sys_memfd_create+0x1ff/0x590 [ 303.841180][T19299] __x64_sys_memfd_create+0x31/0x40 [ 303.841207][T19299] x64_sys_call+0x2ac2/0x3000 [ 303.841235][T19299] do_syscall_64+0xd2/0x200 [ 303.841262][T19299] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 303.841289][T19299] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 303.841333][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.841361][T19299] RIP: 0033:0x7efe14daeec9 [ 303.841376][T19299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.841396][T19299] RSP: 002b:00007efe13816e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 303.841456][T19299] RAX: ffffffffffffffda RBX: 0000000000000bac RCX: 00007efe14daeec9 [ 303.841473][T19299] RDX: 00007efe13816ef0 RSI: 0000000000000000 RDI: 00007efe14e32960 [ 303.841488][T19299] RBP: 00002000000017c0 R08: 00007efe13816bb7 R09: 00007efe13816e40 [ 303.841518][T19299] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000bc0 [ 303.841531][T19299] R13: 00007efe13816ef0 R14: 00007efe13816eb0 R15: 0000200000000000 [ 303.841554][T19299] [ 304.049891][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 304.074169][T19301] netlink: 'syz.3.4429': attribute type 10 has an invalid length. [ 304.097198][T19301] macvlan1: entered promiscuous mode [ 304.118669][T17307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.118707][T19301] macvlan1: entered allmulticast mode [ 304.132259][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4429'. [ 304.213008][T19310] loop1: detected capacity change from 0 to 4096 [ 304.216048][T19301] veth1_vlan: entered allmulticast mode [ 304.219900][T19310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 304.238289][T19310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.251338][T19291] ================================================================== [ 304.259459][T19291] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 304.268708][T19291] [ 304.271060][T19291] write to 0xffff88811a71e460 of 4 bytes by task 19285 on cpu 0: [ 304.278798][T19291] writeback_single_inode+0x150/0x3f0 [ 304.284219][T19291] sync_inode_metadata+0x5b/0x90 [ 304.289218][T19291] generic_buffers_fsync_noflush+0xd9/0x120 [ 304.295203][T19291] ext4_sync_file+0x1ab/0x690 [ 304.299917][T19291] vfs_fsync_range+0x10d/0x130 [ 304.304726][T19291] ext4_buffered_write_iter+0x34f/0x3c0 [ 304.310302][T19291] ext4_file_write_iter+0x387/0xf60 [ 304.315538][T19291] iter_file_splice_write+0x666/0xa60 [ 304.320939][T19291] direct_splice_actor+0x156/0x2a0 [ 304.326082][T19291] splice_direct_to_actor+0x312/0x680 [ 304.329482][T19310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.331480][T19291] do_splice_direct+0xda/0x150 [ 304.331511][T19291] do_sendfile+0x380/0x650 [ 304.349661][T19291] __x64_sys_sendfile64+0x105/0x150 [ 304.354913][T19291] x64_sys_call+0x2bb4/0x3000 [ 304.359619][T19291] do_syscall_64+0xd2/0x200 [ 304.364161][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.370084][T19291] [ 304.372429][T19291] read to 0xffff88811a71e460 of 4 bytes by task 19291 on cpu 1: [ 304.372926][T19301] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 304.380075][T19291] generic_buffers_fsync_noflush+0x80/0x120 [ 304.380114][T19291] ext4_sync_file+0x1ab/0x690 [ 304.380140][T19291] vfs_fsync_range+0x10d/0x130 [ 304.380168][T19291] ext4_buffered_write_iter+0x34f/0x3c0 [ 304.380193][T19291] ext4_file_write_iter+0x387/0xf60 [ 304.380235][T19291] iter_file_splice_write+0x666/0xa60 [ 304.380262][T19291] direct_splice_actor+0x156/0x2a0 [ 304.380289][T19291] splice_direct_to_actor+0x312/0x680 [ 304.380315][T19291] do_splice_direct+0xda/0x150 [ 304.380338][T19291] do_sendfile+0x380/0x650 [ 304.380378][T19291] __x64_sys_sendfile64+0x105/0x150 [ 304.380418][T19291] x64_sys_call+0x2bb4/0x3000 [ 304.380449][T19291] do_syscall_64+0xd2/0x200 [ 304.380481][T19291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.380509][T19291] [ 304.380515][T19291] value changed: 0x00000070 -> 0x00000002 [ 304.380537][T19291] [ 304.380543][T19291] Reported by Kernel Concurrency Sanitizer on: [ 304.380562][T19291] CPU: 1 UID: 0 PID: 19291 Comm: syz.4.4425 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.380605][T19291] Tainted: [W]=WARN [ 304.380615][T19291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 304.380633][T19291] ================================================================== [ 304.658717][T13954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.