last executing test programs: 3m11.577747679s ago: executing program 32 (id=1096): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m19.396142147s ago: executing program 0 (id=2858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x82, &(0x7f00000005c0)=0x0) io_pgetevents(r1, 0x10d, 0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x8]}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x18) get_robust_list(0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) close(0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100001, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1m18.814926345s ago: executing program 0 (id=2865): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d6163736563000004000380080005", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020100f8ffffffb70300000801000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) 1m18.351435101s ago: executing program 1 (id=2870): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xffffffffffffff84) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(0x0, 0x0, r7) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r3, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r5, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r6, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x5, r0}, {0x2, 0x1}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x7}, {0x2, 0x1, r1}, {0x2, 0x6, r2}, {0x2, 0x4, r6}, {0x2, 0x4, 0xee00}], {0x4, 0x4}, [{0x8, 0x2, r11}]}, 0x6c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) inotify_add_watch(r12, &(0x7f00000005c0)='./file0\x00', 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r13, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/24, 0x18, 0x0, 0x6e}) 1m18.322549302s ago: executing program 1 (id=2871): semop(0x0, &(0x7f0000000000)=[{0x2, 0x8, 0x1000}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) semctl$IPC_RMID(0x0, 0x0, 0x0) 1m18.281399232s ago: executing program 1 (id=2872): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m18.253206103s ago: executing program 1 (id=2873): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(0x0) r0 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}}, &(0x7f00000005c0)) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x103}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1m17.72130714s ago: executing program 33 (id=2877): pause() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0x4f, &(0x7f0000000280)=""/79, 0x41000, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x3, 0x4}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0x9, 0xa}, {0x5, 0x1, 0x0, 0x7}, {0x3, 0x4, 0x5}, {0x4, 0x4, 0x9, 0x5}, {0x2, 0x2, 0x1, 0x6}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0xfff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES64=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}}, &(0x7f00000005c0)) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x103}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1m14.420509386s ago: executing program 0 (id=2866): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38) 1m14.253861658s ago: executing program 0 (id=2903): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") chdir(0x0) r0 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x128, 0x0, 0x802, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0xe8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 1m13.046511355s ago: executing program 6 (id=2912): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38) 1m12.994274096s ago: executing program 6 (id=2913): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ptrace(0x10, 0x0) ptrace(0x8, 0x0) waitid(0x1, 0x0, 0x0, 0x4, 0x0) gettid() timer_create(0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x10000001, 0x5, 0xfffffffd, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x1000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b4, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x1300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 1m12.975518306s ago: executing program 6 (id=2914): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(0x0) r0 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01a663350018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3fad5b8f50a779a3522cb5c2cab2e4a671ab8a9304aff2fad31cc5c18c8316c76f"], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES64=r5], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) 1m11.858245962s ago: executing program 0 (id=2926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x80, 0xe, {{0x12, 0x4, 0x0, 0x12, 0x48, 0x66, 0x0, 0xd, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xb, 0x88, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @end, @noop, @timestamp={0x44, 0x20, 0x5, 0x0, 0x4, [0x9d, 0x3, 0x0, 0x4, 0x40, 0x10, 0x9956]}, @generic={0x83, 0x5, "6eaaf6"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x4, 0x810, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x65, 0x0, 0xf, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, {[@noop, @generic={0x6a10060d53e83044, 0x6, "1053e768"}, @rr={0x7, 0x13, 0x7b, [@remote, @local, @multicast1, @remote]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x1, 0x10, 0x4, 0xa0, {{0xa, 0x4, 0x0, 0x27, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop, @ssrr={0x89, 0x13, 0x90, [@loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2]}]}}}}}) r14 = socket(0x10, 0x3, 0x6) r15 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c00)=ANY=[@ANYBLOB='8\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010400003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024040000006374697665706f727475bf944d950000000000000000000000000000000000000000000005000300030000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000080000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000100000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ac01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400dc00000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c00000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="840002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000a00080eff010000040000080603000008000100", @ANYRES32=r6, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f026ca79080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f10800003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001edb000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800070000000000"], 0x938}, 0x1, 0x0, 0x0, 0x20000010}, 0x480c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r17 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r17, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r17, 0x5, 0x4) 1m11.857282712s ago: executing program 34 (id=2926): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @dev}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x80, 0xe, {{0x12, 0x4, 0x0, 0x12, 0x48, 0x66, 0x0, 0xd, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xb, 0x88, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @end, @noop, @timestamp={0x44, 0x20, 0x5, 0x0, 0x4, [0x9d, 0x3, 0x0, 0x4, 0x40, 0x10, 0x9956]}, @generic={0x83, 0x5, "6eaaf6"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x10, 0x10, 0x4, 0x810, {{0xc, 0x4, 0x1, 0x3, 0x30, 0x65, 0x0, 0xf, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}, {[@noop, @generic={0x6a10060d53e83044, 0x6, "1053e768"}, @rr={0x7, 0x13, 0x7b, [@remote, @local, @multicast1, @remote]}]}}}}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'sit0\x00', 0x0, 0x1, 0x10, 0x4, 0xa0, {{0xa, 0x4, 0x0, 0x27, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@noop, @ssrr={0x89, 0x13, 0x90, [@loopback, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2]}]}}}}}) r14 = socket(0x10, 0x3, 0x6) r15 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r14, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20000000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c00)=ANY=[@ANYBLOB='8\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010400003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3001028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024040000006374697665706f727475bf944d950000000000000000000000000000000000000000000005000300030000", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000080000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c4000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004008100000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007f00000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040000100000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="ac01028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400dc00000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040006000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c00000044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b7570000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="840002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000a00080eff010000040000080603000008000100", @ANYRES32=r6, @ANYBLOB="fc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="34010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=r8, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400f026ca79080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff0f000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="a801028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400f10800003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040000000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004001edb000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800070000000000"], 0x938}, 0x1, 0x0, 0x0, 0x20000010}, 0x480c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r17 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r17, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r17, 0x5, 0x4) 1m9.530572774s ago: executing program 6 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x82, &(0x7f00000005c0)=0x0) io_pgetevents(r1, 0x10d, 0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x8]}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x18) get_robust_list(0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) close(0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100001, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1m9.463030965s ago: executing program 35 (id=2953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x82, &(0x7f00000005c0)=0x0) io_pgetevents(r1, 0x10d, 0x5, &(0x7f0000000680)=[{}, {}, {}, {}, {}], &(0x7f0000000740)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000780)={[0x8]}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='sys_enter\x00', r3}, 0x18) get_robust_list(0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) close(0x3) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100001, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 11.451368751s ago: executing program 4 (id=3975): r0 = io_uring_setup(0x4a85, &(0x7f00000004c0)={0x0, 0x4176, 0x1, 0x8001003, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xa00, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="b01f73a5621d3942d2016c6cfd1630555e4bf380eaabf694843c17936532f6647a5bde11f6b458c6e33b4f64e241859208de61266a129d539dac61e183f89c205c03c2475e3d558c504c9be39120cf9fe7b31607e55345e3869fcbc02808e2a63e9af5bf846a4a090bc61556a9a12df08fdff81c5e05f8f041ffff7b3f5f4016b6f9188ad5f39a2e240151061b", 0x8d, r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000005c00000000de181100005bf41e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90ef}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 10.573818203s ago: executing program 4 (id=3984): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc5c0}, 0x94) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getxattr(0x0, 0x0, 0x0, 0x0) r3 = inotify_init() r4 = creat(&(0x7f0000000140)='./file0\x00', 0xd931d3864d39dcca) r5 = inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x8c7) r6 = socket(0x2, 0x3, 0xff) r7 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)=',-\x10*\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r7) close(r7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") write$binfmt_elf32(r6, &(0x7f0000000180)=ANY=[], 0x58) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) close(r4) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r8, &(0x7f0000000240), 0xfffffecc) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x0, 0x21e}, &(0x7f0000000100), &(0x7f0000000080)) 9.665387825s ago: executing program 4 (id=3989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffe5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @remote}, 0x10) close(r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r5}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x40047452, &(0x7f0000000180)) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000003c0)={0x9cd, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x80}, {}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x9}, {0x9}, {}, {0x3}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {}, {0x0, 0x8}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xeb4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000580)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x4, 0x7c, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x5584, 0x4}}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000be7000005c00000050020000", @ANYRES32, @ANYBLOB="0000ece5ffffffffffffff000000000000000000", @ANYRES32=r13, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) 9.519413367s ago: executing program 4 (id=3993): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(0x0) r0 = memfd_create(&(0x7f0000001880)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e", 0x45, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000700)={@dev, @local, @broadcast}, &(0x7f0000000440)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) 9.170543322s ago: executing program 4 (id=3997): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff0200000000000000"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.147770762s ago: executing program 36 (id=3997): r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff0200000000000000"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.111180955s ago: executing program 5 (id=4031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e000000010000800100000097d6000080000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000020000000a00"/28], 0x50) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) pwritev(r3, &(0x7f0000000c80)=[{&(0x7f0000000b80)="40d9a468b4e9e98b8929b41d4482e60ae7d63ba19ec3e171abf5c3ce29d0f10d62e87094bb8a6dc30f4677321452431100259c2b677957e7239932f4b76f6f4e855fe62524e0f1e8c7a2f8d06486f12ee35c3b159bd96aaf9c5a8bf15e5162e309b27a63d0b856d747ec04cde53b1b83", 0x70}], 0x1, 0x7, 0xff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000008c0)='./file1\x00', 0x1810000, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="b4c8bd320367d11c6c9cd44cbbe785b2fde90eeb779cb995d8f16ffff6d01e44eb6e488d14b6d8ac663d97c8b5321b2c84c48c81d5ea835fbab2ddcdf551d08823f981ce2f5ef96069413fe1fcd3ebfcf8790b0395cebcd1cd1c4fff8a55b36287c9d2a09dd0b221ac822e0dd087beb05329c097025e12001bd7949d5062d6733f85e53fc2755a3287293452d9231852d731d6fac1d49f2472d9a7a33bc08f702b8dd618f54ab2b601342fc02833b3fb4f2b", @ANYRESHEX=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x0, 0x7d1, &(0x7f0000000080)="$eJzs3U1oHPfZAPBnFNmWFV4T8r74NcZxJk4KNjjKSk4URA7JZjWSJ1ntLrurYFNKYmo5GMtJiBuofajjS0tLS+mpxzSHXtpT6aWl0EIPbU+F9tpbINBD0tJCDw0BlZ3ZtfW1kuLIURp+P6Gdr2fm/8x/V/PsSNqZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiqc1WKpNJ1PPG4rl0uNpsu7mwxfLB9n6zZrBFuxFJ7zvGxuJIOevI/91ZfLj3cCKOlVPHYqw3GIsb9x9+4Jn/HR0ZrL9FQrttdLOZ167fuHJheXnpzc8wkXvgO79aM/nj8dhhz85njbzTzBeq81mad5rpzPR05Ymzc510Lq9nnfOdbraQ1tpZtdtspydrp9LJmZkzaTZxvrnYmJ+t1rN0tJz59ONTlcp0+sJEK6u2O83GEy9MdGpn83o9b8wXK/YW92Ke7r0QX8y7aTerLqTppcvLS2fWpnRwQ5K9oMk1cz5eWT117LEH3n/rvX9eXprabnenKlNTk5NTU5PTT8089XSlMrphRmWd2BDxmb5o+Rza5SM43L1B/Y965NGIxTgX6aZftZiNdjRjYcjyvkH9/9ITf/vjlu2uqv9llR85duTO4qNR1P/j5dTxYfW/bHv/gSE53auvgTSuxfW4EVfiQizHcizFm/ekvWT3tjWyu5nNRxaNyKMTzchjIarFnLQ/J42ZmI7pqMTLcTbmohNpzEUe9ciiE+ejE93IildULdqRRTW60Yx2pHEyanEq0piMmZiJM5FGFhNxPpqxGI2Yj9moFlu5FJeLfj+zLq/D33jll6/+6f13imdrEDS5VRe/HVEE/WOLIPWfT293D+DwKawM6v96xQERAAAA+CJIit++987/98VDxdhcXs++vM1ao70HvyAAAACA/xLFX/6P9Qb7emMPRdI7/6+sDfrpvr1JDgAAANgVSfEZuyQixuPhcmzwcanKXucGAAAA7I7i7//He4PxiJvFDOf/AAAA8AXz0s/7I+uvsf/e4Bq7ndaB5Nd/j3Z7X3Krde6x5Gq1F1e9el+5Xn+wUjgQEd25o0n0LyhYbGt69Mb9venRWnYsGVz98uMD5fDD4vHo6O2E1ubx3MFybpIk2yRwRy+BQ/29uJ1AMRXfjUfKmEculsOLgyXl3o7P5fVsotasPzMZ1eqhkW52rvvWa5e/HsXuf7uxcCiJS5eXlya++vryxSKXW72t3Lra398N11HcIpeVfg/EQ5tf3Xhf8UGMfrvjZbuV1fs/cu1Qb2TkE7T5zThRxpwYL4fja/d/rNfm5MSwvR8v929yw56PbnxhbZnFo2XMoycfLQebZDG1VRa9vpj6aFUW/U7YvC8Gz8uOsogHIuKdR26e+9fvmkl2ZrsszrR2msXmfQGwVy4VV/1ZX4U+Ksv5Sq/+t9v79seaulOusNOjXFK0ss2dfHZe3f+9skVdOVnGnCzfT4we3aSuVDY5or9x+Y3f94/oT/7khz/6yvE//Oyu6/rYIORg/zse/O39I1FkcbCfxY1+SHtf8r3blaSsqu/25r87tN1OfSrpdeF9X7v6Rhy+dv3G45evXnh16dWl16amzkxXnqxUnkqS/pO3UrxjUHsA2MSJOF4W8qH32BlyF57iDUBZu5/c6qz6vkgevP0vBb16+Hosx8U4XXzaICIe3rzd8WKd4j1IkWWZ7OZnreOr7vByeptzy/3FhQ56sVPbxo6vur3MHf//g3v4dADAZ+LENnV4aP1fde5+epvz7vFV/1J4Ok6VsacGGQyv5QDAvZG1P0zGu99K2u289fLkzMxktXs2S9vN2otpO5+dz9K80c3aMVptzGdpq93sNmvNem/kpXw266SdxVar2e6mc8122mp28nPFnd/T/q3fO9lCtdHNa51WPat2srTWbHSrtW46m3dqaWvx+XreOZu1i5U7rayWz+W1ajdvNtJOc7FdyybStJNlqwLz2azRzefy3mgjbbXzhWr7VkTUFxeydDbr1Np5q9ssNzhoK2/MNdsLxWb/emivexsAPh+uXb9x5cLy8tKbdzfyl50ED299zIWFAWAP3KnSH/zP+mXP7k1KAAAAAAAAAAAAAADAOp/y838bRw7u7gbHtopZuRmxcVGysrLyCZo4GNvE7O931S531O6MDJIbEnNrV9oaic36+fMzkgxf9Mqzz14ZtvrzN4+c3VkT2/6kjPafgoh4+4P9v/h+uei5u9qdkU++1p8j4i7aWkm2iNm7YxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPOfAAAA//+xOG2I") 5.206650437s ago: executing program 5 (id=4039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) (fail_nth: 2) 4.904909001s ago: executing program 5 (id=4042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 4.823303823s ago: executing program 5 (id=4045): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r0, 0xffffeffffffffffe, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000005c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f00000001c0)=0x13) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x104, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd4, 0x2, {{0x560, 0x0, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x8, 0x7}}, @TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0xfffffffb, 0x4, 0x4, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x8, 0x3, 0x1000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x5, 0x400, 0xa, 0x2}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0xde7, 0x8000003e, 0x1ff, 0x401}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1c93, 0x5, 0x2, 0xffffff80}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x7, 0xfffff9ca}}]}]}}}]}, 0x104}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x0) 4.457982938s ago: executing program 5 (id=4050): r0 = socket$kcm(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x671}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 4.398884319s ago: executing program 5 (id=4052): r0 = io_uring_setup(0x4a85, &(0x7f00000004c0)={0x0, 0x4176, 0x1, 0x8001003, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xa00, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="b01f73a5621d3942d2016c6cfd1630555e4bf380eaabf694843c17936532f6647a5bde11f6b458c6e33b4f64e241859208de61266a129d539dac61e183f89c205c03c2475e3d558c504c9be39120cf9fe7b31607e55345e3869fcbc02808e2a63e9af5bf846a4a090bc61556a9a12df08fdff81c5e05f8f041ffff7b3f5f4016b6f9188ad5f39a2e240151061b63a56d2215f178ebccde22035a189c0b05e4c3637e43eef0", 0xa5, r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000005c00000000de181100005bf41e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90ef}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 4.373481689s ago: executing program 37 (id=4052): r0 = io_uring_setup(0x4a85, &(0x7f00000004c0)={0x0, 0x4176, 0x1, 0x8001003, 0x3d7}) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xa00, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000006c0)="b01f73a5621d3942d2016c6cfd1630555e4bf380eaabf694843c17936532f6647a5bde11f6b458c6e33b4f64e241859208de61266a129d539dac61e183f89c205c03c2475e3d558c504c9be39120cf9fe7b31607e55345e3869fcbc02808e2a63e9af5bf846a4a090bc61556a9a12df08fdff81c5e05f8f041ffff7b3f5f4016b6f9188ad5f39a2e240151061b63a56d2215f178ebccde22035a189c0b05e4c3637e43eef0", 0xa5, r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002680), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000005c00000000de181100005bf41e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x90ef}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.817969981s ago: executing program 2 (id=4070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe88, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe74, 0x1, [@m_pedit={0xe70, 0x16, 0x0, 0x0, {{0xa}, {0xe44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x20, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x24, 0x9, 0x4, 0x200, 0x8}, 0x1, 0x8}, [{0x6, 0x80000000, 0x5, 0x6495, 0xef1, 0x400}, {0x6, 0x6, 0x7fff, 0x7fffffff, 0x1, 0xffffdb16}, {0x9, 0x2, 0x5d, 0xb, 0x8001, 0x8}, {0x80000000, 0x3, 0x7, 0x7ff, 0x6, 0x48000000}, {0x440e, 0x1ff, 0x2, 0x0, 0x40, 0x5}, {0x5, 0x7, 0x1, 0x6, 0x401, 0x401}, {0xcf, 0x2, 0x5, 0xb037, 0x7, 0x101}, {0xa933, 0x80000000, 0x4, 0x58cc, 0x1ff, 0x1}, {0x7, 0x7, 0x7, 0xfdaecfe, 0x8, 0x44}, {0x7, 0x8, 0x800, 0x5, 0x9, 0x5}, {0x4, 0x5, 0x3ff, 0xff, 0x2, 0x7f}, {0x21d6, 0xd7, 0xffffffff, 0x1, 0x6, 0xffffff80}, {0x5, 0x6, 0x7fff, 0x7, 0x3, 0xe00}, {0x10, 0x7eb9, 0x8, 0x7fff, 0x9}, {0x80000001, 0x5, 0x4, 0x8, 0x1b7, 0x1}, {0x1, 0xc0, 0x6, 0x73, 0x9, 0x400}, {0x6, 0x1, 0x3ff, 0x2, 0x2, 0xfffffff8}, {0xd, 0x4, 0x827a, 0x2e7f, 0xfd9, 0xff}, {0x2, 0xffff7f0a, 0x6, 0x400, 0x3683, 0x3}, {0x8, 0x9, 0x78, 0x2, 0x705cdee5, 0xff}, {0x7ff, 0x7, 0x4, 0x400, 0x3, 0x9}, {0x0, 0x10000, 0xd, 0x2, 0x4, 0x94d0}, {0x100, 0x9, 0x9, 0x609, 0xc, 0x1ff}, {0x45, 0x7, 0x7f, 0x4576, 0x7, 0x81}, {0x2, 0xb, 0x9, 0x2, 0x10, 0x1000}, {0x0, 0x10000, 0x1, 0x0, 0x2, 0x9}, {0xfef4, 0xd13, 0x3, 0x2, 0x9, 0x4}, {0x9, 0xb0, 0x9, 0x1, 0x4, 0x9}, {0x0, 0x140000, 0x4, 0x81, 0x4, 0x7f}, {0x6, 0x8, 0x8, 0x1, 0x10000, 0x3c97}, {0xe00, 0x8001, 0x7ff, 0x7fffffff, 0x4, 0x9}, {0xc1df, 0x7, 0x499, 0x1080, 0x8, 0x100}, {0x100, 0x3, 0x1ff, 0x6, 0x1, 0x6}, {0x3262, 0x474a, 0x10, 0x1b, 0x8, 0x7fff}, {0xffffffff, 0xe6, 0x0, 0xfff, 0x2, 0x8}, {0xfffffffe, 0xae7d, 0xbd15, 0x10, 0x5, 0x8}, {0x9, 0x8001, 0x6, 0x1ff, 0x2, 0x1000}, {0x9, 0x1, 0x9, 0x5, 0x75, 0x4}, {0x5, 0x10200000, 0x1, 0x10001, 0x3fb4, 0xb5e}, {0x9, 0xbca9, 0x10001, 0x9, 0x8000, 0x8}, {0x200, 0x5, 0x8, 0x0, 0x4}, {0x8, 0x8, 0x4, 0x3, 0x7, 0x681e96f2}, {0x414, 0x5, 0x401, 0x3, 0xe, 0x37}, {0xb1e, 0x5, 0xfffffff6, 0x7, 0xd, 0x8}, {0x4, 0x929, 0x6b3d, 0x27e020c9, 0x3, 0x800000}, {0x8, 0x700, 0x2, 0x4, 0x4, 0x4}, {0x3, 0x6, 0x9d, 0x4, 0xd, 0x56d0}, {0x9, 0x77eb, 0x5, 0x6, 0x7fffffff, 0x35}, {0xecea, 0x80000001, 0x2, 0x4, 0x3fb, 0x7}, {0xcb9, 0x3, 0x41f8, 0x8, 0x7, 0x7}, {0xc, 0x3d7b, 0x6, 0x8, 0x3, 0x2}, {0x2, 0x800, 0xe04, 0x10001, 0x10, 0x3}, {0x7, 0x6, 0x7fff, 0x9, 0x3, 0xc217}, {0x6, 0x38a8, 0x7, 0x9, 0xd, 0x4}, {0x9, 0x8, 0x2, 0x5, 0x95, 0x7}, {0x200, 0x5, 0x1, 0x3}, {0x401, 0x8000, 0x2522, 0x8, 0x9, 0x1}, {0x9, 0x6, 0x7ff, 0xfffffffb, 0x8, 0x3}, {0x1, 0x2, 0x8f, 0xf3800000, 0x80000000, 0x9}, {0x1, 0x4, 0x9, 0x8, 0x1, 0x2}, {0x10, 0x8, 0xfed, 0x1, 0xcd9, 0xff}, {0x2, 0x6, 0x7, 0x7f, 0xffff, 0xd}, {0xa9f, 0x7, 0x8, 0x8, 0x0, 0x5}, {0x8, 0x2, 0x9, 0x4, 0x2000, 0x9}, {0x100, 0x2, 0x6, 0x40}, {0x0, 0x6, 0x5, 0x1, 0x40, 0x5}, {0x2, 0x1, 0x6, 0x7, 0x1, 0xffffffff}, {0x7, 0x81, 0x8, 0x8, 0xfff, 0x81}, {0x8, 0xf, 0xb, 0x80000000, 0x5, 0x2}, {0x5, 0x0, 0x0, 0x6, 0xa, 0x2}, {0x8, 0x101, 0x400, 0x5, 0x2, 0xf67d}, {0x8, 0x0, 0x6, 0x200000, 0x5, 0x9c66}, {0x800, 0x0, 0x9, 0x7, 0x6, 0x62}, {0x4, 0x7, 0x4, 0xb, 0x8, 0x8}, {0x9, 0x9, 0x1, 0xfff, 0xfffffffa, 0x5}, {0x5, 0x1000, 0x81, 0x80000001, 0x0, 0x80000000}, {0xe, 0x4, 0xff, 0xb757, 0x6, 0x669}, {0x2b, 0x5, 0x6, 0x0, 0x8, 0xe0000}, {0x6, 0xa, 0x8, 0xdc, 0x5, 0xe}, {0xfffffffc, 0x101, 0x6, 0x2, 0xcea3, 0x7fffffff}, {0x816, 0x80, 0xfffff37a, 0x8, 0x2, 0x7}, {0xe7a, 0x9, 0x52, 0x7, 0x100, 0x6}, {0x2, 0x845, 0x76fe, 0x1000, 0x7, 0x4}, {0x7, 0x6, 0x9, 0xfffffff8, 0x1, 0xa479}, {0x738, 0x36, 0x400, 0xd, 0x400}, {0x7, 0x767c, 0x0, 0x81, 0x4, 0x65ec}, {0x6, 0x62d5ed5b, 0xffff, 0x4, 0x6, 0x3ff}, {0x4, 0x7, 0x5, 0xc5c, 0x6, 0x9}, {0x0, 0xbbb, 0xe0d, 0x2, 0x2, 0x3}, {0x3, 0x0, 0x1, 0x1a3, 0x1, 0x6}, {0x7, 0x3, 0x5, 0x7, 0x4, 0x2}, {0x7f, 0x1, 0x4, 0x0, 0xffffffff, 0x6}, {0x7, 0x5d, 0x9, 0x2f1bd1fc, 0x3, 0x2}, {0x1, 0x1, 0x8, 0x4bf, 0xfffffffc, 0xfffffffe}, {0x4, 0x40, 0x2, 0x7f, 0x1, 0xffff}, {0x2, 0x8, 0x1, 0x0, 0x2, 0x3}, {0x0, 0x80000001, 0x6, 0x701, 0x3, 0x5}, {0x9, 0x0, 0x0, 0x3c1, 0xf, 0x2}, {0x4, 0x10, 0x1, 0x1, 0x452, 0x800}, {0x5308, 0x8, 0x9, 0x6, 0xf, 0x4}, {0xb9, 0x0, 0xcde4, 0x9be4, 0x80, 0x8}, {0x7, 0xa, 0x0, 0x7, 0x2, 0x7fffffff}, {0xd6d4, 0x1549, 0xffffffff, 0x0, 0xffffffc0, 0x2}, {0x7, 0x72f0, 0x10, 0x4, 0x1}, {0x5, 0x1, 0x4, 0x58cd, 0x2, 0x9a}, {0x6, 0x8000, 0x6, 0x7, 0x3f1, 0x2}, {0x2, 0xff1, 0x6441, 0x2, 0xb7f, 0xc3}, {0xfffffffc, 0x90, 0x0, 0x0, 0x31b1, 0x8}, {0x800, 0x5, 0x100, 0x0, 0xa, 0x5}, {0x4, 0xac, 0x1, 0x8001, 0x1000, 0x5}, {0x33a9, 0x0, 0xfffffff8, 0x39, 0x400, 0x6}, {0x7, 0x480000, 0x800, 0x1, 0x1, 0x400}, {0x1, 0x7, 0xf, 0xfffffffa, 0x4, 0x6}, {0x101, 0x3, 0x7, 0x47fb, 0x7ffffff7, 0x18b7}, {0xffff7fff, 0x1, 0x3, 0x75bd, 0x7f, 0x36a5}, {0x4, 0x600000, 0x4, 0x9, 0x5c5, 0xe98}, {0x6, 0xc, 0xfff, 0x5, 0x8000}, {0x6, 0xfffffffd, 0x9, 0x3c80, 0xe7, 0x10}, {0x5, 0x6, 0x5f, 0x8, 0xe, 0x2}, {0x7, 0x1, 0x5, 0x6, 0x7f}, {0x7, 0xb5cb, 0xffffffff, 0x0, 0x1ff, 0x180}, {0x8, 0x401, 0x31, 0x6, 0x4, 0x4}, {0xbe1, 0x4d1, 0x7, 0x7f, 0x7, 0xfffffff8}, {0x0, 0x3, 0x8, 0x4, 0x9014, 0x800}, {0x83, 0x7, 0x9, 0xc6, 0xfffffff7, 0x6}, {0x7f, 0x1, 0x380, 0x3, 0x0, 0x8}, {0x80000001, 0x5, 0x5, 0x9, 0x5, 0x3}, {0x4, 0x78, 0x1, 0x68, 0x5d6a, 0x3}], [{}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x7}, {}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x473fa55f353b9f8f, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {0x5, 0x1}, {0x5, 0xdfb49ec46723bfa7}, {0x5, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1}, {0x7}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x6}, {0x5}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1, 0x2}, {0x3}, {0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3}, {}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x3}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe88}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/174) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4b9, &(0x7f00000013c0)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzLRpkmkHTTM19/OB2zn3R+d7TobvyZ1zz80NILOOJ//kIgYj4ouI2N9YvfOA442XtZuXp5IlF/X62e9z6XHJeuvQ1v/bFxGrEdEXEc89FfFybnPc6vLK7GS5XFpsrhdrcwvF6vLKqQtzkzOlmdL8yPjpiYnx4bHRiW1r69U3X7165uNnej/6+Y0b19/69JOkWoPNfevbsZ0aTe+Jg+u27YmIx+9HsC4oNNvT3+2K8Ickn98/IuJEmv/7o5B+mkAW1Ov1+m/1ve12r9aBXSufngPn8kMR0Sjn80NDjXP4f8ZAvlyp1h4+X1man26cKx+Invz5C+XScPO7woHoySXrI2n59vrohvWxiPQc+O1Cf7o+NFUpT+9sVwdssG9D/v9UaOQ/kBG+8kN2yX/ILvkP2SX/IbvkP2TXpvzfYsIesDv5/Q/ZJf8hu+Q/ZJf8h+yS/5BJz545kyz11v3v0xeXl2YrF09Nl6qzQ3NLU0NTlcWFoZlKZSa9Z2fuXu9XrlQWRh6JpUvFWqlaK1aXV87NVZbma+fS+/rPlXp2pFVAJw4eu/ZVLiJWH+1Pl0Rvc59chd2tXs9Ft+9BBrqj0O0OCOgaQ3+QXb7jA/ea8d/XbsfC9tcF2Bn5blcA6JqTR1z/g6wy/g/ZZfwfsss5PmD8H7LH+D9k12Cb53/9bd2zu4Yj4u8R8WWhZ2/rWV/AbpD/Ntc8/z+5/7+DG/f25n5JLxH0RsRr759999JkrbY4kmz/4db22nvN7aPdqD/QqVaetvIYAMiutZuXp1rLTsb97snGJITN8fc0xyb70muUA2u5O+Yq5LZp7sLqlYg4vFX8XPN5540rHwNrhU3xDzVfc423SOu7J31u+s7EP7Iu/n/WxT/6p38qkA3Xkv5neKv8y6c5Hbfy787+Z3Cb5k607//yt/q/Qpv+71iHMV754PVv2sa/EnF0y/iteH1prI3xk7qd7DD+jRef/1e7ffUPG++zVfyWpFSszS0Uq8srp9K/IzdTmh8ZPz0xMT48NjpRTMeoi62R6s0eO/z59bu1f6BN/Hbtf6JZp/932P5f//3ZC8fvEv9/J7b+/A+1iZ/oj4iHOoz/4+jXL7Xbl8SfbtP+/F3iJ9vGOoxffefpvR0eCgDsgOryyuxkuVxaVGhTiAMPRDUUOi+0bmB9UOrzlyx0uWMC7rvbSd/tmgAAAAAAAAAAAACd2onpxN1uIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAbvB7AAAA//+NOdJN") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x9) 1.974855202s ago: executing program 7 (id=4077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/stat\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0xe, 0xf7, 0xb, 0x5}, {0x2, 0x6, 0x6, 0x2}, {0x0, 0x3, 0x8, 0x6}]}) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fba85b08e90f71db3e530102030109021200010400200009049c070000000000f87f06235e0053418dec393b74"], 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0xf) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x4, [0x0, 0x3, 0xbaf, 0x7fffffffffffffff]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000d5e7341e6ac7308457deebc2958b56024b6257fb79989e26db8809f7bb"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)={0x168, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x229}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45a51d3c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1e9d}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1de}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a00000005000400020000000900020073797a32000000001400078008001340ffffffff0800060000000000050005000200000005000100060000000d000300686173683a6e6574"], 0x5c}}, 0x80) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x23, 0xaa, &(0x7f00000004c0)="bf46b47d923535cd600dc873b0730f7a5d3f7f9ada64aa8feaffcce411c9b62f716055", &(0x7f0000000500)=""/170, 0x0, 0x0, 0xb7, 0xf4, &(0x7f00000005c0)="684e845270cd917c3067e24cc1b127b407c831b938cf9edf66c0e43473edfde1ac857fb0ef901068979b954a853326bc86272eec929eec5f69e2a160085001f8c077a07609231699dbdf4b8b708155a38dbd5f892d67ac83de6949e92923c123f7acedeaaaced865d5eded3d86db46fd082423832f83714ca82233b027d3f18ec1ea57d8f7f7afcc61fed3456ae075ab93d12b6829aefe1d6629a3eba0f2f46f027e34966ec298c85c67bb2aba935a515ae1c547c7a485", &(0x7f0000000680)="372e869f4670c64d81aa0795c14fc9639a7e281515bc271dfe089d9b1bf5237caf945da0567d3d4124fc495f978e3cc5c790c02310a36cf736ba771810824a821e5bb3cddd6496575cfb7e46c4a0cde1cc8847f87112e7ee0e23ed77e3c53ad8df18b96278bef772500bb14203dcb504c4d6e43cdc631b29bdfb7503514778022d3f91e23df37b5b20efcdee6a41910118eec3a14746d86244746ad68aed246073c9f5609bf57f69be3c77977c16f96d857d6e62fcefdd7398d9d54b903595fc478eb2a3a707f6f1d2613000e69dc2cdc6da0b7702e6c3e36fbb48cecef8b27620b34e366b1306270662a6d4fc3e78645fbc126f", 0x2}, 0x50) 1.850443394s ago: executing program 2 (id=4078): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000180)='system_u:object_r:dhcpd_exec_t:s0\x00', 0x22, 0x0) (fail_nth: 1) 1.523304589s ago: executing program 2 (id=4082): pause() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x17, 0xd, &(0x7f0000000100)=@raw=[@ringbuf_query, @cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x1, 0x1, 0x2, 0x6, 0x9, 0x10, 0xffffffffffffffff}, @exit, @alu={0x7, 0x1, 0x7, 0x3, 0x2, 0x0, 0x8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000200)='GPL\x00', 0x5, 0x4f, &(0x7f0000000280)=""/79, 0x41000, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x3, 0x4}, 0x10, 0x0, r1, 0x6, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0x9, 0xa}, {0x5, 0x1, 0x0, 0x7}, {0x3, 0x4, 0x5}, {0x4, 0x4, 0x9, 0x5}, {0x2, 0x2, 0x1, 0x6}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0xfff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_delete(r6) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r6, 0x1, &(0x7f0000000300)={{0x0, 0x3938700}, {r7, r8+60000000}}, &(0x7f00000005c0)) fcntl$setlease(r5, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x103}, @initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.522805849s ago: executing program 3 (id=4083): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r2}, 0x38) 1.522312809s ago: executing program 3 (id=4084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setregid(0xffffffffffffffff, 0x0) 1.499925679s ago: executing program 3 (id=4087): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg2\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="080003"], 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01a663350018000000000000003400000034000000050000400b000000000000110200000001000000030000000000000904000000ffffffff000000120100000009000000000000080200000000305f6100f3a862f5dbb04d4a19489b450d6f4acb2b5d6ec3d433e1a60f6054e466e4a643a838b73a7176c7b2202ac4e8e46b82183b282427b6fd094ba1763b89ba074749281c30b1024b853ba7bcca18dcc85501ffe7d49135c7c425d11f7f53e067ed3fad5b8f50a779a3522cb5c2cab2e4a671ab8a9304aff2fad31cc5c18c8316c76f"], &(0x7f0000000480)=""/162, 0x51, 0xa2, 0x0, 0xfffffffd, 0x10000}, 0x28) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000700000000000000000007020100f8ffffffb70300000801000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r3, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r3, @ANYRES64=r6], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x802) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = timerfd_create(0x0, 0x0) readv(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6185}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) 1.070938515s ago: executing program 7 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setregid(0xffffffffffffffff, 0x0) 1.042449565s ago: executing program 7 (id=4100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000098230000", @ANYRES64=r1, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r3, 0x0, 0x2) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$search(0xa, 0x0, &(0x7f00000002c0)='.request_key_auth\x00', 0x0, 0xfffffffffffffffb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) stat(0x0, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x0) 953.359376ms ago: executing program 7 (id=4103): ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f00000003c0)={&(0x7f0000000380)=""/12, 0xc}) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet={0x23, 0x10}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1}], 0x1, 0x0, 0x0, 0xeaff}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x200080d0) bpf$MAP_CREATE(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ptrace$setregs(0xf, 0x0, 0x6, &(0x7f0000001cc0)="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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0xffffffffffffff74) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004080400"], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000100)=0xfffffff8, 0x4) 747.490269ms ago: executing program 9 (id=4106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21) 664.963ms ago: executing program 9 (id=4107): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r2}, 0x38) 625.271901ms ago: executing program 3 (id=4108): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4083, 0xff3}], 0x1) 624.586711ms ago: executing program 2 (id=4109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x1, @local}, 0x4a, {0x2, 0x3, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) geteuid() socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) 553.091542ms ago: executing program 7 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) setregid(0xffffffffffffffff, 0x0) 552.178362ms ago: executing program 9 (id=4111): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40000000, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = syz_io_uring_setup(0x7f, &(0x7f0000000540)={0x0, 0xb06d, 0x100fe, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x21a3, 0x0, {0x3}}) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (async) io_uring_enter(r4, 0x46f3, 0x1000003, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000051100006fde71a4b43a6341b158516cc1ebb4639c1309c4c630ca3e772c9fd90918b7187f4f9afce7da86879c024efb8aaa9d5b87995cdfbcc50df8353eb5f6f03e7c6e", @ANYRES32=r3, @ANYBLOB="0000000000000000b7fbffffffffe6057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x10, &(0x7f00000002c0)=@raw=[@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x68e8cece}}, @jmp={0x5, 0x1, 0x0, 0x2, 0x6, 0xffffffffffffffc0, 0x1}, @jmp={0x5, 0x1, 0x3, 0x7, 0x0, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x3, 0x1, 0x3, 0x2, 0x1, 0xfffffffffffffffb}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x1, 0x800}, 0x10, 0x0, r7, 0x6, &(0x7f0000000400)=[r3], &(0x7f00000004c0)=[{0x4, 0x4, 0x7}, {0x3, 0x2, 0x0, 0x4}, {0x0, 0x4, 0x9, 0xb}, {0x5, 0x3, 0x6, 0xb}, {0x5, 0x3, 0xc, 0x9}, {0x3, 0x4, 0x4}], 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000004fcff", 0x58}], 0x1) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r12, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000230040000000000000004d02000000000000f6ffffff000038000100fdff7f000800030000000400000007000000000000b1f200000000000000010100000000000006"], 0x78) (async) close(r12) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x13) (async) fcntl$setlease(r0, 0x400, 0x0) (async) lgetxattr(&(0x7f00000000c0)='\x00', &(0x7f0000000100)=@random={'trusted.', ':}!*--\x00'}, 0x0, 0x0) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 535.262172ms ago: executing program 3 (id=4112): syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c200000386dd8100000000000000000000000000000086620b12e7457cb9ff02000000000000000000000000000100000e22000c907861690001de82d6df2cd99d69d421cbf145f4a1fd8f7fe80b28d383674868cb20cc95fcf0fce5e9dcf3e76cc4cb9ce95a0ce74b58fe392c9a027e3645e4f567fe427f4f289f45209b939782faf0b4967c"], 0x0) 516.238013ms ago: executing program 3 (id=4114): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d302c00000000722c726f6469722c756e695f786c6174653d312c696f636861727365743d63703835372c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d392c75746696383d312c756e695f786c6174653d312c696f636861727365743d63703836312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c00"], 0x27, 0x361, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) read$rfkill(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xa5d4}, 0x5df8, 0x5, 0x0, 0x1, 0x7, 0x20002, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000)) 515.647272ms ago: executing program 7 (id=4115): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1e000000010000800100000097d6000080000000", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000020000000a00"/28], 0x50) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000180)='./bus\x00', 0x2239c23, 0x0, 0x1, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) pwritev(r2, &(0x7f0000000c80)=[{&(0x7f0000000b80)="40d9a468b4e9e98b8929b41d4482e60ae7d63ba19ec3e171abf5c3ce29d0f10d62e87094bb8a6dc30f4677321452431100259c2b677957e7239932f4b76f6f4e855fe62524e0f1e8c7a2f8d06486f12ee35c3b159bd96aaf9c5a8bf15e5162e309b27a63d0b856d747ec04cde53b1b83", 0x70}], 0x1, 0x7, 0xff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000008c0)='./file1\x00', 0x1810000, &(0x7f0000000900)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="b4c8bd320367d11c6c9cd44cbbe785b2fde90eeb779cb995d8f16ffff6d01e44eb6e488d14b6d8ac663d97c8b5321b2c84c48c81d5ea835fbab2ddcdf551d08823f981ce2f5ef96069413fe1fcd3ebfcf8790b0395cebcd1cd1c4fff8a55b36287c9d2a09dd0b221ac822e0dd087beb05329c097025e12001bd7949d5062d6733f85e53fc2755a3287293452d9231852d731d6fac1d49f2472d9a7a33bc08f702b8dd618f54ab2b601342fc02833b3fb4f2b", @ANYRESHEX=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x0, 0x7d1, &(0x7f0000000080)="$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") 437.806884ms ago: executing program 2 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea4, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xc5bf) rt_sigsuspend(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000740)) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x21, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000100)=[@ioring_restriction_register_op={0x0, 0x4d}], 0x1) 437.179354ms ago: executing program 9 (id=4117): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) open(&(0x7f0000000640)='./file1\x00', 0x203, 0x21) 357.013915ms ago: executing program 8 (id=4118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 100.736598ms ago: executing program 2 (id=4119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000000)={{r1}, "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"}) r2 = syz_open_dev$mouse(&(0x7f0000001000), 0x6, 0x8000) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000001040), &(0x7f0000001080)=0x4) mknodat$null(r2, &(0x7f00000010c0)='./file0\x00', 0x200, 0x103) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001140), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001380)={&(0x7f0000001100), 0xc, &(0x7f0000001340)={&(0x7f0000001180)={0x188, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xaf}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xc}, {0x8, 0x13, 0x80000001}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x80}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x42}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0x38}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9c}, {0x6, 0x11, 0xf5}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x188}, 0x1, 0x0, 0x0, 0x40000}, 0x840) sendto$inet6(r0, &(0x7f00000013c0)="7c0f99d182c83450126f55d13700e210097f20f6259a62bccbe0194f2e8dbe6787356c02227bf4452fb4292c6c343dcd2e10be6a11a79809469745c722577c997c224b4bfe2125046a988d36b6fbfdb9a1d4ef5568ad60d0723bfa15dac93c9364f5b90ef466bf3778b6a2b0581e7c74dd641fa9beea72124e6f6579f4c423c4da8ebf0a44224ed4795de95f0acb1aa895133ff9b19e4df6fca8f3a27cbf786909a094b39159532c9ea7401f957948fca448c536d82f10f27dd55e2e392b28a65768e8f85b3e0bc31e903a1debd96c05a420934e96d4a69f68bad214d4e3f580d8010ff79055eff062459290bd57740c59dbcc09539532", 0xf7, 0x80, &(0x7f00000014c0)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001500)='/sys/kernel/rcu_stall_count', 0x40, 0x21) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001680)={&(0x7f00000015c0)={0x8c, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x7}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x8, 0x25, &(0x7f0000001800)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe24}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @ldst={0x0, 0x1, 0x2, 0x818d81712bbe3dca, 0x6, 0xfffffffffffffffe, 0x1}], &(0x7f0000001940)='GPL\x00', 0xff, 0xae, &(0x7f0000001980)=""/174, 0x40f00, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001a80)={0x1, 0x9, 0xffffffff, 0x1}, 0x10, 0xffffffffffffffff, r4, 0x8, &(0x7f0000001ac0)=[r4, r4, r4, r2, r2, r4, r2], &(0x7f0000001b00)=[{0x2, 0x5, 0x8, 0x8}, {0x3, 0x4, 0x8, 0x5}, {0x5, 0x3, 0x7, 0x4}, {0x5, 0x2, 0x5}, {0x5, 0x2, 0x4, 0xf}, {0x0, 0x4, 0x0, 0xb}, {0x0, 0x4, 0x0, 0x6}, {0x0, 0x1, 0x4, 0x6}], 0x10, 0x1000}, 0x94) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000001c80)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0x1010) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000002cc0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x2, 0x2, 0xa, 0x2, 0x4}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002d40)=@raw={'raw\x00', 0x9, 0x3, 0x278, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000002d00), {[{{@ip={@multicast1, @local, 0xffffffff, 0xffffff00, 'caif0\x00', 'syz_tun\x00', {}, {0xff}, 0x6, 0x0, 0x69}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xdf5f, 0x0, 0x10001, 'snmp_trap\x00', {0x1}}}}, {{@ip={@remote, @empty, 0xffffff00, 0xff, '\x00', 'macvlan0\x00', {}, {}, 0x0, 0x1, 0x30}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x3, 0x2, 0xffff0000, 'syz0\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r8 = syz_open_dev$usbmon(&(0x7f0000003040), 0x10, 0x6943) ioctl$MON_IOCQ_RING_SIZE(r8, 0x9205) dup2(r8, r8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f0000003080)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000030c0)={0x0, 0xf, 0x7fff}, &(0x7f0000003100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000003140)={r9, 0x5, 0xf6, "0da3469b663753af69a0fd81826bc2f057b55bf279e4b1cde05832c339d4e8f6c1fa7a98d1439e3b070a96c05c03ee9acc6a572e4c5130b64bb8b5eaab0f90e6ef7809bc28a6758570046a231ed5292cc49fd31c3ee0b33c0a996e4eb39bcaf0d10e0650cde326a9b560a833c2832871d1d039346261294a3f2dc135f5129b8561ff8bcb8a8f9f3bdefb2b405b2b20716fac74fa1d4bfb96a536a1c53a6f0026ebbb25bff7fd08a009aa6311df502f8d49c8df537b93445523bc5ec508435f8480f278212d9295d6029c64d436f925f7f2e54e20878aaadfcb4a5b4b247735087cfcf0a82ca085486d9f6d9120679d7d344327d9aa26"}, 0xfe) write$UHID_CREATE(r4, &(0x7f0000003340)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000003240)=""/211, 0xd3, 0x10, 0x5, 0x61, 0x4, 0xffff}}, 0x120) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000034c0)={&(0x7f0000003480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000003500)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) fcntl$setflags(r10, 0x2, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r10, 0x84, 0xf, &(0x7f0000003540)={r9, @in={{0x2, 0x4e21, @local}}, 0xffff, 0x9, 0x2f00, 0x6, 0xffffffff}, &(0x7f0000003600)=0x98) 89.921738ms ago: executing program 8 (id=4120): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x14, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 81.960519ms ago: executing program 9 (id=4121): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', 0x0, 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r2}, 0x38) 51.057819ms ago: executing program 8 (id=4122): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xffffffffffffff84) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=r4, @ANYRESDEC=r3, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r7) r10 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r3, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r5, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0xee00, @ANYRES8=r8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC=r6, @ANYRESDEC=r9, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x5, r0}, {0x2, 0x1}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x7}, {0x2, 0x1, r1}, {0x2, 0x6, r2}, {0x2, 0x4, r6}, {0x2, 0x4, 0xee00}], {0x4, 0x4}, [{0x8, 0x2, r11}]}, 0x6c, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) inotify_add_watch(r12, &(0x7f00000005c0)='./file0\x00', 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r13, 0x80286722, &(0x7f0000000040)={&(0x7f0000000000)=""/24, 0x18, 0x0, 0x6e}) 50.410649ms ago: executing program 8 (id=4123): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000440)=""/4083, 0xff3}], 0x1) 2.37272ms ago: executing program 8 (id=4124): syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c20000000180c200000386dd8100000000000000000000000000000086620b12e7457cb9ff02000000000000000000000000000100000e22000c907861690001de82d6df2cd99d69d421cbf145f4a1fd8f7fe80b28d383674868cb20cc95fcf0fce5e9dcf3e76cc4cb9ce95a0ce74b58fe392c9a027e3645e4f567fe427f4f289f45209b939782faf0b4967c"], 0x0) 1.24192ms ago: executing program 8 (id=4125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) (async, rerun: 32) io_uring_setup(0x69ce, &(0x7f0000000000)={0x0, 0x6357, 0x2, 0x2, 0x25b}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2503feffffff00000000160000d4dc15ea14d22d1047ba11dd9800140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1a00000000000000ffffffff0080000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcff00"/17], 0x7f) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$inet6(0x10, 0x3, 0x0) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x8, 0x0, 0x4401}, 0xc) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000020601010000000000000000000000070500040000000000050005000a0000002fecc6dfc58a836219a81886cb496b70bcc7176c"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x45) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 0s ago: executing program 9 (id=4126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r0}, 0x20) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x48}], 0x1, 0x0, 0x0, 0x0) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000000300)={'system_u:object_r:crypt_device_t:s0', 0x20, 'system_u:object_r:xserver_misc_device_t:s0', 0x20, 0xffffffffffffff4f, 0x20, '/sbin/dhclient\x00'}, 0x73) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="040000007f00676228cdd483586718000000775ee6d1d9958f9a4c25a75d22ecce219b522bd2768a72b9cbd811e5df0f0fc738968d7d746eec0e03a4e4ca126f4a254beff8dc4384e9be8a834b134f1c2b4c4a708f07aa6ead827a8e3d14d278c6e9ba5d7e626254d89c1be522c393272a9f10f2cca44473322324c17697fa49064d05"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000780)={0x128, 0x0, 0x802, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xe4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xac, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000001c0)='./file0\x00', 0x1, 0xe8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) kernel console output (not intermixed with test programs): 5/07/2025 [ 264.701399][T17614] Call Trace: [ 264.701405][T17614] [ 264.701411][T17614] __dump_stack+0x1d/0x30 [ 264.701429][T17614] dump_stack_lvl+0xe8/0x140 [ 264.701491][T17614] dump_stack+0x15/0x1b [ 264.701504][T17614] should_fail_ex+0x265/0x280 [ 264.701530][T17614] should_fail+0xb/0x20 [ 264.701627][T17614] should_fail_usercopy+0x1a/0x20 [ 264.701653][T17614] strncpy_from_user+0x25/0x230 [ 264.701672][T17614] ? __kmalloc_cache_noprof+0x189/0x320 [ 264.701695][T17614] __se_sys_memfd_create+0x1ff/0x590 [ 264.701747][T17614] __x64_sys_memfd_create+0x31/0x40 [ 264.701771][T17614] x64_sys_call+0x122f/0x2fb0 [ 264.701788][T17614] do_syscall_64+0xd2/0x200 [ 264.701856][T17614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 264.701877][T17614] ? clear_bhb_loop+0x40/0x90 [ 264.701900][T17614] ? clear_bhb_loop+0x40/0x90 [ 264.701917][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.701948][T17614] RIP: 0033:0x7f88858be929 [ 264.701986][T17614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.702004][T17614] RSP: 002b:00007f8883f26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 264.702070][T17614] RAX: ffffffffffffffda RBX: 00000000000002c0 RCX: 00007f88858be929 [ 264.702080][T17614] RDX: 00007f8883f26ef0 RSI: 0000000000000000 RDI: 00007f88859414cc [ 264.702090][T17614] RBP: 0000200000000900 R08: 00007f8883f26bb7 R09: 00007f8883f26e40 [ 264.702106][T17614] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 264.702116][T17614] R13: 00007f8883f26ef0 R14: 00007f8883f26eb0 R15: 0000200000000400 [ 264.702164][T17614] [ 264.908045][T17616] loop7: detected capacity change from 0 to 736 [ 264.922321][T17616] rock: directory entry would overflow storage [ 264.928565][T17616] rock: sig=0x3b10, size=4, remaining=3 [ 264.936229][T17616] syz_tun: entered allmulticast mode [ 264.942644][T17615] syz_tun: left allmulticast mode [ 265.000914][T17622] loop7: detected capacity change from 0 to 2048 [ 265.055155][T17622] loop7: p1 < > p4 [ 265.060041][T17622] loop7: p4 size 8388608 extends beyond EOD, truncated [ 265.096632][T17635] loop7: detected capacity change from 0 to 164 [ 265.121402][T17635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3638'. [ 265.130681][T17635] bridge_slave_1: left allmulticast mode [ 265.136635][T17635] bridge_slave_1: left promiscuous mode [ 265.142388][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.149664][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3637'. [ 265.158853][T17635] bridge_slave_0: left allmulticast mode [ 265.164561][T17635] bridge_slave_0: left promiscuous mode [ 265.170445][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.257104][T15341] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.280387][T17646] loop4: detected capacity change from 0 to 736 [ 265.294464][T17646] rock: directory entry would overflow storage [ 265.300778][T17646] rock: sig=0x3b10, size=4, remaining=3 [ 265.311664][T17646] syz_tun: entered allmulticast mode [ 265.319629][T17644] syz_tun: left allmulticast mode [ 265.348135][T17650] hub 6-0:1.0: USB hub found [ 265.352962][T17650] hub 6-0:1.0: 8 ports detected [ 265.399730][T17654] loop4: detected capacity change from 0 to 512 [ 265.408808][T17662] loop5: detected capacity change from 0 to 128 [ 265.427510][T17654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.447172][T17662] bio_check_eod: 85 callbacks suppressed [ 265.447190][T17662] syz.5.3648: attempt to access beyond end of device [ 265.447190][T17662] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 265.467345][T17654] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.487383][T17662] syz.5.3648: attempt to access beyond end of device [ 265.487383][T17662] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 265.500933][T17662] buffer_io_error: 80 callbacks suppressed [ 265.500948][T17662] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 265.515447][T17662] syz.5.3648: attempt to access beyond end of device [ 265.515447][T17662] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 265.528874][T17662] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 265.537473][T17662] syz.5.3648: attempt to access beyond end of device [ 265.537473][T17662] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 265.550905][T17662] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 265.564283][T17662] syz.5.3648: attempt to access beyond end of device [ 265.564283][T17662] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 265.577728][T17662] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 265.586314][T17662] syz.5.3648: attempt to access beyond end of device [ 265.586314][T17662] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 265.599736][T17662] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 265.609274][T17662] syz.5.3648: attempt to access beyond end of device [ 265.609274][T17662] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 265.622761][T17662] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 265.634687][T17683] loop7: detected capacity change from 0 to 512 [ 265.644128][T17683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.670728][T15341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.685252][T17662] syz.5.3648: attempt to access beyond end of device [ 265.685252][T17662] loop5: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 265.685988][T17683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.698699][T17662] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 265.721412][T17683] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.733683][T17662] syz.5.3648: attempt to access beyond end of device [ 265.733683][T17662] loop5: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 265.747169][T17662] Buffer I/O error on dev loop5, logical block 133, lost async page write [ 265.759868][T17662] syz.5.3648: attempt to access beyond end of device [ 265.759868][T17662] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 265.773380][T17662] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 265.783063][T17662] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 265.850439][T17711] SELinux: syz.5.3655 (17711) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.917814][T17724] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 265.987727][T17735] loop4: detected capacity change from 0 to 2048 [ 265.995002][T17739] loop5: detected capacity change from 0 to 512 [ 266.003956][T17724] infiniband syz!: set down [ 266.008565][T17724] infiniband syz!: added team_slave_0 [ 266.021226][T17724] RDS/IB: syz!: added [ 266.026555][T17724] smc: adding ib device syz! with port count 1 [ 266.032891][T17724] smc: ib device syz! port 1 has pnetid [ 266.039823][T17735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.059118][T17739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.071855][T17739] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.204970][T15341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.227477][T17763] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 266.267500][ T6945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.341292][T14878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.377517][T17784] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 266.392990][T17788] loop7: detected capacity change from 0 to 1024 [ 266.402391][T17788] EXT4-fs: Ignoring removed orlov option [ 266.444675][T17788] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.507075][T17812] SELinux: syz.5.3669 (17812) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 266.596095][T14878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.659166][T17841] hub 6-0:1.0: USB hub found [ 266.663820][T17841] hub 6-0:1.0: 8 ports detected [ 266.734128][T17847] tipc: Enabled bearer , priority 0 [ 266.772954][T17865] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 266.863124][T17883] 9pnet_fd: Insufficient options for proto=fd [ 266.880433][T17885] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 266.889883][T17887] loop2: detected capacity change from 0 to 256 [ 266.897747][T17887] FAULT_INJECTION: forcing a failure. [ 266.897747][T17887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.910835][T17887] CPU: 0 UID: 0 PID: 17887 Comm: syz.2.3685 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 266.910875][T17887] Tainted: [W]=WARN [ 266.910883][T17887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.910906][T17887] Call Trace: [ 266.910914][T17887] [ 266.910921][T17887] __dump_stack+0x1d/0x30 [ 266.910942][T17887] dump_stack_lvl+0xe8/0x140 [ 266.911007][T17887] dump_stack+0x15/0x1b [ 266.911024][T17887] should_fail_ex+0x265/0x280 [ 266.911053][T17887] should_fail+0xb/0x20 [ 266.911099][T17887] should_fail_usercopy+0x1a/0x20 [ 266.911130][T17887] _copy_to_user+0x20/0xa0 [ 266.911149][T17887] simple_read_from_buffer+0xb5/0x130 [ 266.911206][T17887] proc_fail_nth_read+0x100/0x140 [ 266.911324][T17887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.911356][T17887] vfs_read+0x1a0/0x6f0 [ 266.911385][T17887] ? __rcu_read_unlock+0x4f/0x70 [ 266.911482][T17887] ? __fget_files+0x184/0x1c0 [ 266.911532][T17887] ksys_read+0xda/0x1a0 [ 266.911569][T17887] __x64_sys_read+0x40/0x50 [ 266.911597][T17887] x64_sys_call+0x2d77/0x2fb0 [ 266.911616][T17887] do_syscall_64+0xd2/0x200 [ 266.911659][T17887] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.911703][T17887] ? clear_bhb_loop+0x40/0x90 [ 266.911727][T17887] ? clear_bhb_loop+0x40/0x90 [ 266.911748][T17887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.911768][T17887] RIP: 0033:0x7f01dcddd33c [ 266.911782][T17887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.911809][T17887] RSP: 002b:00007f01db447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.911826][T17887] RAX: ffffffffffffffda RBX: 00007f01dd005fa0 RCX: 00007f01dcddd33c [ 266.911838][T17887] RDX: 000000000000000f RSI: 00007f01db4470a0 RDI: 0000000000000008 [ 266.911849][T17887] RBP: 00007f01db447090 R08: 0000000000000000 R09: 0000000000000000 [ 266.911861][T17887] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000001 [ 266.911872][T17887] R13: 0000000000000000 R14: 00007f01dd005fa0 R15: 00007ffdba979438 [ 266.911890][T17887] [ 267.155152][T17890] loop2: detected capacity change from 0 to 4096 [ 267.163837][T17890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.322432][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.403133][T17896] loop2: detected capacity change from 0 to 512 [ 267.426899][T17896] EXT4-fs (loop2): 1 orphan inode deleted [ 267.436738][T17896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.450956][T17896] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.461705][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 267.465120][T17833] tipc: Resetting bearer [ 267.504341][T17833] tipc: Disabling bearer [ 267.510145][T17896] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 267.520896][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3694'. [ 267.537799][T17909] loop8: detected capacity change from 0 to 8192 [ 267.590951][T17922] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 267.611419][T17924] loop5: detected capacity change from 0 to 2048 [ 267.631491][T17926] loop8: detected capacity change from 0 to 2048 [ 267.640220][T17924] loop5: p1 < > p4 [ 267.644492][T17924] loop5: p4 size 8388608 extends beyond EOD, truncated [ 267.665666][T17926] loop8: p1 < > p4 [ 267.684667][T17926] loop8: p4 size 8388608 extends beyond EOD, truncated [ 267.937003][T17957] lo speed is unknown, defaulting to 1000 [ 267.981181][T17963] tipc: Enabled bearer , priority 0 [ 268.000146][T17962] tipc: Resetting bearer [ 268.017418][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 268.017432][ T29] audit: type=1326 audit(1752133873.171:20785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 268.020121][T17962] tipc: Disabling bearer [ 268.031902][ T29] audit: type=1326 audit(1752133873.181:20786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 268.100712][ T29] audit: type=1326 audit(1752133873.231:20787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 268.124448][ T29] audit: type=1326 audit(1752133873.231:20788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 268.148219][ T29] audit: type=1326 audit(1752133873.231:20789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17971 comm="syz.7.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 268.153226][T17979] FAULT_INJECTION: forcing a failure. [ 268.153226][T17979] name failslab, interval 1, probability 0, space 0, times 0 [ 268.174903][ T29] audit: type=1326 audit(1752133873.301:20790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.8.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 268.184591][T17979] CPU: 1 UID: 0 PID: 17979 Comm: syz.8.3724 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 268.184725][T17979] Tainted: [W]=WARN [ 268.184734][T17979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.184751][T17979] Call Trace: [ 268.184760][T17979] [ 268.184770][T17979] __dump_stack+0x1d/0x30 [ 268.184805][T17979] dump_stack_lvl+0xe8/0x140 [ 268.184910][T17979] dump_stack+0x15/0x1b [ 268.184934][T17979] should_fail_ex+0x265/0x280 [ 268.184973][T17979] should_failslab+0x8c/0xb0 [ 268.185003][T17979] kmem_cache_alloc_noprof+0x50/0x310 [ 268.185090][T17979] ? audit_log_start+0x365/0x6c0 [ 268.185132][T17979] audit_log_start+0x365/0x6c0 [ 268.185237][T17979] audit_seccomp+0x48/0x100 [ 268.185269][T17979] ? __seccomp_filter+0x68c/0x10d0 [ 268.185299][T17979] __seccomp_filter+0x69d/0x10d0 [ 268.185330][T17979] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.185414][T17979] ? vfs_write+0x75e/0x8e0 [ 268.185453][T17979] ? __rcu_read_unlock+0x4f/0x70 [ 268.185483][T17979] ? __fget_files+0x184/0x1c0 [ 268.185557][T17979] __secure_computing+0x82/0x150 [ 268.185628][T17979] syscall_trace_enter+0xcf/0x1e0 [ 268.185662][T17979] do_syscall_64+0xac/0x200 [ 268.185761][T17979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 268.185796][T17979] ? clear_bhb_loop+0x40/0x90 [ 268.185824][T17979] ? clear_bhb_loop+0x40/0x90 [ 268.185885][T17979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.185913][T17979] RIP: 0033:0x7f28276ee929 [ 268.185935][T17979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.185958][T17979] RSP: 002b:00007f2825d36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000115 [ 268.186037][T17979] RAX: ffffffffffffffda RBX: 00007f2827916080 RCX: 00007f28276ee929 [ 268.186056][T17979] RDX: 0010000000000000 RSI: 0000000000000006 RDI: ffffffffffffffff [ 268.186074][T17979] RBP: 00007f2825d36090 R08: 0000000000000000 R09: 0000000000000000 [ 268.186091][T17979] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 268.186108][T17979] R13: 0000000000000000 R14: 00007f2827916080 R15: 00007ffea41946d8 [ 268.186135][T17979] [ 268.186162][T17979] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 268.208204][ T29] audit: type=1326 audit(1752133873.301:20791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.8.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f28276ed290 code=0x7ffc0000 [ 268.222261][T17979] audit: out of memory in audit_log_start [ 268.226088][ T29] audit: type=1326 audit(1752133873.301:20792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17975 comm="syz.8.3724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f28276ed3df code=0x7ffc0000 [ 268.488021][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.587256][T17996] loop8: detected capacity change from 0 to 512 [ 268.609091][T17996] EXT4-fs: Ignoring removed oldalloc option [ 268.610393][T17998] loop2: detected capacity change from 0 to 128 [ 268.629368][T17996] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.3731: Parent and EA inode have the same ino 15 [ 268.648571][T17996] EXT4-fs (loop8): 1 orphan inode deleted [ 268.686178][T17996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.783065][T18006] EXT4-fs (loop8): shut down requested (1) [ 268.804302][T17993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3730'. [ 269.096472][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 269.270114][T18050] loop2: detected capacity change from 0 to 2048 [ 269.278169][T18051] loop5: detected capacity change from 0 to 512 [ 269.292586][T18051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.375803][T18050] loop2: p1 < > p4 [ 269.386908][T18050] loop2: p4 size 8388608 extends beyond EOD, truncated [ 269.422397][T18051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.494008][T18059] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 269.575061][T18051] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.633216][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3749'. [ 269.817814][T18085] loop8: detected capacity change from 0 to 2048 [ 269.895537][T18085] loop8: p1 < > p4 [ 269.904405][T18085] loop8: p4 size 8388608 extends beyond EOD, truncated [ 269.927782][T18093] loop2: detected capacity change from 0 to 512 [ 269.978569][T18093] EXT4-fs (loop2): 1 orphan inode deleted [ 269.996221][ T266] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 270.007970][T18093] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.043132][T18093] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 270.056508][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3756'. [ 270.221616][T18124] loop8: detected capacity change from 0 to 512 [ 270.238494][T18124] ext4: Unknown parameter 'noacl' [ 270.299530][T18133] SELinux: syz.7.3761 (18133) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 270.401839][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.409412][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.418871][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.426353][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.433940][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.441520][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.449047][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.456570][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.464034][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.471597][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.479128][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.486598][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.494224][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.501704][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.509132][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.516586][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.523977][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.531482][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.538971][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.546463][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.554001][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.561552][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.568990][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.576413][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.583906][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.591339][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.598850][ T3762] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 270.607770][ T3762] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 270.652939][T18172] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3767'. [ 270.751859][T18193] loop5: detected capacity change from 0 to 2048 [ 270.803068][T18190] tipc: Enabled bearer , priority 0 [ 270.811188][T18193] loop5: p1 < > p4 [ 270.815825][T18193] loop5: p4 size 8388608 extends beyond EOD, truncated [ 270.822940][T18189] tipc: Resetting bearer [ 270.837032][T18189] tipc: Disabling bearer [ 270.906077][T18219] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 270.959078][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.966638][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.975066][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.982567][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.990184][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 270.997617][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.005033][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.012602][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.020073][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.027562][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.034997][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.042795][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.052874][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.060340][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.067845][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.075278][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.082771][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.090370][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.097774][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.105295][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.112687][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.120171][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.127564][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.134990][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.142417][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.149822][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.157300][ T3762] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 271.165133][ T3762] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.230097][T18247] loop8: detected capacity change from 0 to 8192 [ 271.305390][T18253] loop8: detected capacity change from 0 to 128 [ 271.336626][T18253] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 271.406395][T18264] loop8: detected capacity change from 0 to 512 [ 271.413064][T18264] EXT4-fs: Ignoring removed nobh option [ 271.423945][T18264] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 271.432609][T18264] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3788: invalid indirect mapped block 2683928664 (level 1) [ 271.446864][T18264] EXT4-fs (loop8): 1 truncate cleaned up [ 271.455450][T18264] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3788: invalid indirect mapped block 65536 (level 1) [ 271.483745][T18264] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3788: invalid indirect mapped block 480848489 (level 1) [ 271.550308][T18274] lo speed is unknown, defaulting to 1000 [ 271.608269][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.615768][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.643663][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.651183][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.658648][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.666105][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.673551][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.680994][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.688418][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.695859][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.703285][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.710899][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.710892][T18278] loop8: detected capacity change from 0 to 8192 [ 271.731834][T18278] netlink: 'syz.8.3791': attribute type 8 has an invalid length. [ 271.818336][T18284] loop4: detected capacity change from 0 to 8192 [ 271.839072][T18284] netlink: 'syz.4.3793': attribute type 8 has an invalid length. [ 271.884881][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.892316][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.899761][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.907258][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.914671][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.922194][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.929621][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.937049][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.944437][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.951932][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.959367][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.966818][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.974281][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.981762][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.989274][ T3796] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 271.998812][ T3796] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 272.034251][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3795'. [ 272.050700][T18291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=18291 comm=syz.7.3795 [ 272.067718][T18293] syz.2.3796 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 272.136476][T18301] loop7: detected capacity change from 0 to 128 [ 272.158149][T18299] hub 6-0:1.0: USB hub found [ 272.164120][T18299] hub 6-0:1.0: 8 ports detected [ 272.171228][T18301] bio_check_eod: 28 callbacks suppressed [ 272.171246][T18301] syz.7.3800: attempt to access beyond end of device [ 272.171246][T18301] loop7: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 272.190557][T18305] loop5: detected capacity change from 0 to 128 [ 272.191895][T18301] syz.7.3800: attempt to access beyond end of device [ 272.191895][T18301] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 272.210352][T18301] buffer_io_error: 26 callbacks suppressed [ 272.210365][T18301] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 272.223932][T18305] syz.5.3802: attempt to access beyond end of device [ 272.223932][T18305] loop5: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 272.234171][T18301] syz.7.3800: attempt to access beyond end of device [ 272.234171][T18301] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 272.251552][T18301] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 272.260511][T18301] syz.7.3800: attempt to access beyond end of device [ 272.260511][T18301] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 272.260577][T18305] syz.5.3802: attempt to access beyond end of device [ 272.260577][T18305] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 272.273952][T18301] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 272.284606][T18301] syz.7.3800: attempt to access beyond end of device [ 272.284606][T18301] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 272.287368][T18305] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 272.295921][T18301] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 272.327792][T18301] syz.7.3800: attempt to access beyond end of device [ 272.327792][T18301] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 272.333777][T18305] syz.5.3802: attempt to access beyond end of device [ 272.333777][T18305] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 272.341372][T18301] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 272.354770][T18305] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 272.356337][T18305] syz.5.3802: attempt to access beyond end of device [ 272.356337][T18305] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 272.363753][T18301] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 272.371910][T18305] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 272.422255][T18301] Buffer I/O error on dev loop7, logical block 132, lost async page write [ 272.442049][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3803'. [ 272.494007][T18324] loop7: detected capacity change from 0 to 736 [ 272.509834][T18324] rock: directory entry would overflow storage [ 272.516088][T18324] rock: sig=0x3b10, size=4, remaining=3 [ 272.523462][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3804'. [ 272.534038][T18324] syz_tun: entered allmulticast mode [ 272.540719][T18323] syz_tun: left allmulticast mode [ 272.572889][T18334] loop5: detected capacity change from 0 to 512 [ 272.579467][T18338] SELinux: syz.7.3807 (18338) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 272.617069][T18334] EXT4-fs (loop5): 1 orphan inode deleted [ 272.625119][T18334] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.635691][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 272.653033][T18346] 9pnet_fd: Insufficient options for proto=fd [ 272.677666][T18326] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.765212][T18370] siw: device registration error -23 [ 272.780098][T18371] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 272.816535][T18374] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 273.250641][T18449] loop7: detected capacity change from 0 to 1024 [ 273.263016][T18448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3829'. [ 273.271703][T18449] EXT4-fs: Ignoring removed orlov option [ 273.292665][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 273.292682][ T29] audit: type=1326 audit(1752133878.441:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.8.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.324560][ T29] audit: type=1326 audit(1752133878.441:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.8.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.348255][ T29] audit: type=1326 audit(1752133878.441:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.8.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.371892][ T29] audit: type=1326 audit(1752133878.441:21092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18453 comm="syz.8.3830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.413260][ T29] audit: type=1326 audit(1752133878.561:21093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.438284][ T29] audit: type=1326 audit(1752133878.591:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.439311][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3832'. [ 273.462016][ T29] audit: type=1326 audit(1752133878.591:21095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.495146][ T29] audit: type=1326 audit(1752133878.591:21096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.518696][ T29] audit: type=1326 audit(1752133878.591:21097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.542335][ T29] audit: type=1326 audit(1752133878.591:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18461 comm="syz.8.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 273.812866][T18519] loop7: detected capacity change from 0 to 8192 [ 273.820471][T18519] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.363616][T18527] FAULT_INJECTION: forcing a failure. [ 274.363616][T18527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.376769][T18527] CPU: 1 UID: 0 PID: 18527 Comm: syz.2.3840 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 274.376857][T18527] Tainted: [W]=WARN [ 274.376864][T18527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.376879][T18527] Call Trace: [ 274.376920][T18527] [ 274.376929][T18527] __dump_stack+0x1d/0x30 [ 274.376954][T18527] dump_stack_lvl+0xe8/0x140 [ 274.376977][T18527] dump_stack+0x15/0x1b [ 274.377059][T18527] should_fail_ex+0x265/0x280 [ 274.377095][T18527] should_fail+0xb/0x20 [ 274.377126][T18527] should_fail_usercopy+0x1a/0x20 [ 274.377174][T18527] strncpy_from_user+0x25/0x230 [ 274.377276][T18527] ? __kmalloc_cache_noprof+0x189/0x320 [ 274.377329][T18527] __se_sys_memfd_create+0x1ff/0x590 [ 274.377367][T18527] __x64_sys_memfd_create+0x31/0x40 [ 274.377500][T18527] x64_sys_call+0x122f/0x2fb0 [ 274.377527][T18527] do_syscall_64+0xd2/0x200 [ 274.377578][T18527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.377660][T18527] ? clear_bhb_loop+0x40/0x90 [ 274.377680][T18527] ? clear_bhb_loop+0x40/0x90 [ 274.377734][T18527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.377808][T18527] RIP: 0033:0x7f01dcdde929 [ 274.377825][T18527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.377845][T18527] RSP: 002b:00007f01db446e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 274.377868][T18527] RAX: ffffffffffffffda RBX: 0000000000000514 RCX: 00007f01dcdde929 [ 274.377883][T18527] RDX: 00007f01db446ef0 RSI: 0000000000000000 RDI: 00007f01dce614cc [ 274.377928][T18527] RBP: 0000200000002400 R08: 00007f01db446bb7 R09: 00007f01db446e40 [ 274.377942][T18527] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 274.377956][T18527] R13: 00007f01db446ef0 R14: 00007f01db446eb0 R15: 0000200000000540 [ 274.378035][T18527] [ 274.586128][T18531] siw: device registration error -23 [ 274.642037][T18535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3844'. [ 274.668216][T18533] hub 6-0:1.0: USB hub found [ 274.673035][T18533] hub 6-0:1.0: 8 ports detected [ 274.713673][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.721177][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.729699][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.737199][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.744643][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.752089][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.759575][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.767119][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.774793][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.782249][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.789717][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.797276][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.806808][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.814288][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.821807][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.829263][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.836735][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.844149][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.851597][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.859040][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.866860][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.874427][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.878173][T18548] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 274.882061][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.896925][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.904306][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.911728][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.919299][ T3796] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 274.927349][ T3796] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 274.960693][T18555] loop5: detected capacity change from 0 to 736 [ 274.975278][T18555] rock: directory entry would overflow storage [ 274.981493][T18555] rock: sig=0x3b10, size=4, remaining=3 [ 274.990114][T18558] loop4: detected capacity change from 0 to 512 [ 274.990303][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3852'. [ 275.009200][T18555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3851'. [ 275.020063][T18558] EXT4-fs (loop4): 1 orphan inode deleted [ 275.020776][T18555] syz_tun: entered allmulticast mode [ 275.026688][T18558] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.037796][T18553] syz_tun: left allmulticast mode [ 275.047076][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 275.062084][T18562] netlink: 'syz.7.3853': attribute type 3 has an invalid length. [ 275.088087][T18558] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 275.106396][T18564] lo speed is unknown, defaulting to 1000 [ 275.113427][T18562] loop7: detected capacity change from 0 to 512 [ 275.141855][T18562] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 275.151545][T18562] EXT4-fs (loop7): orphan cleanup on readonly fs [ 275.173134][T18562] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.3853: corrupted inode contents [ 275.188757][T18562] EXT4-fs (loop7): Remounting filesystem read-only [ 275.198877][T18562] EXT4-fs (loop7): 1 truncate cleaned up [ 275.206290][ T266] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 275.216907][ T266] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 275.234680][ T266] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 275.254138][T18571] siw: device registration error -23 [ 275.277520][T18573] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 275.326961][T18577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.337376][T18577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.397485][T18582] hub 6-0:1.0: USB hub found [ 275.400862][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.402475][T18582] hub 6-0:1.0: 8 ports detected [ 275.409637][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.423765][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.431325][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.438840][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.446314][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.453727][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.461325][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.468786][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.476206][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.483607][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.491093][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.498961][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.506469][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.513907][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.521386][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.528889][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.536324][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.543796][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.551267][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.558720][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.566140][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.572843][T18577] loop7: detected capacity change from 0 to 1764 [ 275.573625][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.587405][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.594884][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.602321][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.609780][ T3416] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.618772][ T3416] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 275.656881][T18614] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 275.692661][T18577] loop7: detected capacity change from 0 to 128 [ 275.752293][T18627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3864'. [ 275.782135][T18633] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 276.103355][T18689] SELinux: syz.8.3869 (18689) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 276.205028][T18706] loop4: detected capacity change from 0 to 128 [ 276.273548][T18711] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 276.392817][T18729] hub 6-0:1.0: USB hub found [ 276.405236][T18729] hub 6-0:1.0: 8 ports detected [ 276.549052][T18742] siw: device registration error -23 [ 276.711627][T18758] loop2: detected capacity change from 0 to 2048 [ 276.776117][T18758] loop2: p1 < > p4 [ 276.780988][T18758] loop2: p4 size 8388608 extends beyond EOD, truncated [ 276.859812][T18765] SELinux: syz.2.3883 (18765) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 276.992633][T18769] loop7: detected capacity change from 0 to 8192 [ 277.035020][T18776] SELinux: syz.2.3887 (18776) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.097810][T18780] siw: device registration error -23 [ 277.112477][T18782] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 277.138732][T18784] loop4: detected capacity change from 0 to 512 [ 277.154417][T18786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.163470][T18786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.173581][T18784] EXT4-fs (loop4): too many log groups per flexible block group [ 277.181295][T18784] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 277.189500][T18784] EXT4-fs (loop4): mount failed [ 277.238173][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3895'. [ 277.248954][T18793] loop4: detected capacity change from 0 to 4096 [ 277.303015][T18799] SELinux: syz.8.3896 (18799) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 277.361265][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3897'. [ 277.423588][T18803] raw_sendmsg: syz.8.3898 forgot to set AF_INET. Fix it! [ 277.537059][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3899'. [ 277.548953][T18811] bond0: (slave bond_slave_0): Releasing backup interface [ 277.603583][T18820] FAULT_INJECTION: forcing a failure. [ 277.603583][T18820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.616836][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.4.3902 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 277.616874][T18820] Tainted: [W]=WARN [ 277.616882][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.616950][T18820] Call Trace: [ 277.616957][T18820] [ 277.616965][T18820] __dump_stack+0x1d/0x30 [ 277.616988][T18820] dump_stack_lvl+0xe8/0x140 [ 277.617019][T18820] dump_stack+0x15/0x1b [ 277.617037][T18820] should_fail_ex+0x265/0x280 [ 277.617101][T18820] should_fail+0xb/0x20 [ 277.617174][T18820] should_fail_usercopy+0x1a/0x20 [ 277.617202][T18820] _copy_from_user+0x1c/0xb0 [ 277.617268][T18820] kstrtouint_from_user+0x69/0xf0 [ 277.617299][T18820] ? 0xffffffff81000000 [ 277.617429][T18820] ? selinux_file_permission+0x1e4/0x320 [ 277.617450][T18820] proc_fail_nth_write+0x50/0x160 [ 277.617537][T18820] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 277.617575][T18820] vfs_write+0x269/0x8e0 [ 277.617607][T18820] ? vfs_read+0x47f/0x6f0 [ 277.617672][T18820] ? __rcu_read_unlock+0x4f/0x70 [ 277.617695][T18820] ? __fget_files+0x184/0x1c0 [ 277.617720][T18820] ksys_write+0xda/0x1a0 [ 277.617794][T18820] __x64_sys_write+0x40/0x50 [ 277.617896][T18820] x64_sys_call+0x2cdd/0x2fb0 [ 277.617916][T18820] do_syscall_64+0xd2/0x200 [ 277.617946][T18820] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.618004][T18820] ? clear_bhb_loop+0x40/0x90 [ 277.618025][T18820] ? clear_bhb_loop+0x40/0x90 [ 277.618049][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.618074][T18820] RIP: 0033:0x7f3addb0d3df [ 277.618091][T18820] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 277.618109][T18820] RSP: 002b:00007f3adc177030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 277.618129][T18820] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3addb0d3df [ 277.618144][T18820] RDX: 0000000000000001 RSI: 00007f3adc1770a0 RDI: 0000000000000005 [ 277.618166][T18820] RBP: 00007f3adc177090 R08: 0000000000000000 R09: 0000000000000000 [ 277.618179][T18820] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 277.618190][T18821] netlink: 'syz.5.3901': attribute type 58 has an invalid length. [ 277.618192][T18820] R13: 0000000000000000 R14: 00007f3addd35fa0 R15: 00007ffc2fe2b8c8 [ 277.618213][T18820] [ 277.851661][T18821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3901'. [ 277.928174][T18836] FAULT_INJECTION: forcing a failure. [ 277.928174][T18836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.941303][T18836] CPU: 1 UID: 0 PID: 18836 Comm: syz.8.3908 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 277.941474][T18836] Tainted: [W]=WARN [ 277.941482][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.941495][T18836] Call Trace: [ 277.941503][T18836] [ 277.941550][T18836] __dump_stack+0x1d/0x30 [ 277.941573][T18836] dump_stack_lvl+0xe8/0x140 [ 277.941594][T18836] dump_stack+0x15/0x1b [ 277.941612][T18836] should_fail_ex+0x265/0x280 [ 277.941737][T18836] should_fail+0xb/0x20 [ 277.941761][T18836] should_fail_usercopy+0x1a/0x20 [ 277.941800][T18836] _copy_from_user+0x1c/0xb0 [ 277.941817][T18836] ___sys_sendmsg+0xc1/0x1d0 [ 277.941943][T18836] __x64_sys_sendmsg+0xd4/0x160 [ 277.941983][T18836] x64_sys_call+0x2999/0x2fb0 [ 277.942044][T18836] do_syscall_64+0xd2/0x200 [ 277.942071][T18836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.942092][T18836] ? clear_bhb_loop+0x40/0x90 [ 277.942209][T18836] ? clear_bhb_loop+0x40/0x90 [ 277.942274][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.942308][T18836] RIP: 0033:0x7f28276ee929 [ 277.942325][T18836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.942345][T18836] RSP: 002b:00007f2825d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.942462][T18836] RAX: ffffffffffffffda RBX: 00007f2827915fa0 RCX: 00007f28276ee929 [ 277.942476][T18836] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 277.942486][T18836] RBP: 00007f2825d57090 R08: 0000000000000000 R09: 0000000000000000 [ 277.942497][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.942507][T18836] R13: 0000000000000000 R14: 00007f2827915fa0 R15: 00007ffea41946d8 [ 277.942524][T18836] [ 278.135802][T18838] SELinux: syz.7.3909 (18838) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 278.399236][T18846] loop7: detected capacity change from 0 to 512 [ 278.407989][T18846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.436307][T18850] loop5: detected capacity change from 0 to 128 [ 278.462024][T18852] loop2: detected capacity change from 0 to 512 [ 278.498506][T18852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 278.499371][T18850] ext4 filesystem being mounted at /552/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.524531][T18846] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.537493][T18848] hub 6-0:1.0: USB hub found [ 278.543108][T18848] hub 6-0:1.0: 8 ports detected [ 278.570031][T18852] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.688014][T18865] loop2: detected capacity change from 0 to 8192 [ 278.741529][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 278.741561][ T29] audit: type=1326 audit(1752133883.871:21261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.771554][ T29] audit: type=1326 audit(1752133883.871:21262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.795146][ T29] audit: type=1326 audit(1752133883.871:21263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.818813][ T29] audit: type=1326 audit(1752133883.871:21264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.842338][ T29] audit: type=1326 audit(1752133883.871:21265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.865982][ T29] audit: type=1326 audit(1752133883.871:21266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.889480][ T29] audit: type=1326 audit(1752133883.871:21267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.913089][ T29] audit: type=1326 audit(1752133883.871:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.936618][ T29] audit: type=1326 audit(1752133883.871:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 278.960222][ T29] audit: type=1326 audit(1752133883.871:21270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18864 comm="syz.2.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f01dcdde929 code=0x7ffc0000 [ 279.338243][T18884] loop5: detected capacity change from 0 to 512 [ 279.368269][T18884] EXT4-fs (loop5): 1 orphan inode deleted [ 279.374588][T18884] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.385651][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 279.399821][T18884] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 279.471464][T18895] loop2: detected capacity change from 0 to 128 [ 279.491990][T18891] loop7: detected capacity change from 0 to 1024 [ 279.500447][T18891] EXT4-fs: Ignoring removed orlov option [ 279.509154][T18894] netlink: 'syz.4.3926': attribute type 6 has an invalid length. [ 279.578626][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 279.696226][T18908] loop4: detected capacity change from 0 to 128 [ 279.715977][T18908] bio_check_eod: 67 callbacks suppressed [ 279.716037][T18908] syz.4.3931: attempt to access beyond end of device [ 279.716037][T18908] loop4: rw=2049, sector=140, nr_sectors = 8 limit=128 [ 279.736021][T18908] syz.4.3931: attempt to access beyond end of device [ 279.736021][T18908] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 279.749531][T18908] buffer_io_error: 62 callbacks suppressed [ 279.749544][T18908] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 279.765137][T18908] syz.4.3931: attempt to access beyond end of device [ 279.765137][T18908] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 279.778651][T18908] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 279.788347][T18908] syz.4.3931: attempt to access beyond end of device [ 279.788347][T18908] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 279.801795][T18908] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 279.811289][T18908] syz.4.3931: attempt to access beyond end of device [ 279.811289][T18908] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 279.824725][T18908] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 279.834522][T18908] syz.4.3931: attempt to access beyond end of device [ 279.834522][T18908] loop4: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 279.848110][T18908] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 279.857562][T18908] syz.4.3931: attempt to access beyond end of device [ 279.857562][T18908] loop4: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 279.870999][T18908] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 279.880750][T18908] syz.4.3931: attempt to access beyond end of device [ 279.880750][T18908] loop4: rw=2049, sector=132, nr_sectors = 1 limit=128 [ 279.894181][T18908] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 279.903666][T18908] syz.4.3931: attempt to access beyond end of device [ 279.903666][T18908] loop4: rw=2049, sector=133, nr_sectors = 1 limit=128 [ 279.917159][T18908] Buffer I/O error on dev loop4, logical block 133, lost async page write [ 279.926553][T18908] syz.4.3931: attempt to access beyond end of device [ 279.926553][T18908] loop4: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 279.940059][T18908] Buffer I/O error on dev loop4, logical block 150, lost async page write [ 279.949626][T18908] Buffer I/O error on dev loop4, logical block 151, lost async page write [ 280.059953][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 280.069639][T18920] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 280.156298][T18930] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3935'. [ 280.173399][T18931] loop4: detected capacity change from 0 to 4096 [ 280.232007][T18940] FAULT_INJECTION: forcing a failure. [ 280.232007][T18940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.245143][T18940] CPU: 0 UID: 0 PID: 18940 Comm: syz.8.3938 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 280.245189][T18940] Tainted: [W]=WARN [ 280.245195][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.245208][T18940] Call Trace: [ 280.245215][T18940] [ 280.245225][T18940] __dump_stack+0x1d/0x30 [ 280.245290][T18940] dump_stack_lvl+0xe8/0x140 [ 280.245308][T18940] dump_stack+0x15/0x1b [ 280.245334][T18940] should_fail_ex+0x265/0x280 [ 280.245368][T18940] should_fail+0xb/0x20 [ 280.245394][T18940] should_fail_usercopy+0x1a/0x20 [ 280.245499][T18940] _copy_from_user+0x1c/0xb0 [ 280.245522][T18940] ___sys_sendmsg+0xc1/0x1d0 [ 280.245572][T18940] __x64_sys_sendmsg+0xd4/0x160 [ 280.245603][T18940] x64_sys_call+0x2999/0x2fb0 [ 280.245627][T18940] do_syscall_64+0xd2/0x200 [ 280.245715][T18940] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.245741][T18940] ? clear_bhb_loop+0x40/0x90 [ 280.245760][T18940] ? clear_bhb_loop+0x40/0x90 [ 280.245800][T18940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.245823][T18940] RIP: 0033:0x7f28276ee929 [ 280.245841][T18940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.245862][T18940] RSP: 002b:00007f2825d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.245920][T18940] RAX: ffffffffffffffda RBX: 00007f2827915fa0 RCX: 00007f28276ee929 [ 280.245935][T18940] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 280.245950][T18940] RBP: 00007f2825d57090 R08: 0000000000000000 R09: 0000000000000000 [ 280.245964][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.245978][T18940] R13: 0000000000000000 R14: 00007f2827915fa0 R15: 00007ffea41946d8 [ 280.245999][T18940] [ 280.494317][T18948] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 280.504244][T18949] SELinux: syz.2.3941 (18949) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 280.522436][T18951] hub 6-0:1.0: USB hub found [ 280.528438][T18951] hub 6-0:1.0: 8 ports detected [ 281.172445][T19009] lo speed is unknown, defaulting to 1000 [ 281.183621][T19018] loop5: detected capacity change from 0 to 512 [ 281.197840][T19018] EXT4-fs (loop5): 1 orphan inode deleted [ 281.214092][T19018] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.224963][ T3444] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 281.248373][T19018] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 281.379447][T19044] loop8: detected capacity change from 0 to 736 [ 281.421942][T19044] rock: directory entry would overflow storage [ 281.428217][T19044] rock: sig=0x3b10, size=4, remaining=3 [ 281.435966][T19044] netlink: 'syz.8.3948': attribute type 27 has an invalid length. [ 281.463770][T19056] loop2: detected capacity change from 0 to 2048 [ 281.495277][T19056] loop2: p1 < > p4 [ 281.501788][T19056] loop2: p4 size 8388608 extends beyond EOD, truncated [ 281.615013][T19080] FAULT_INJECTION: forcing a failure. [ 281.615013][T19080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.628236][T19080] CPU: 0 UID: 0 PID: 19080 Comm: syz.2.3955 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 281.628277][T19080] Tainted: [W]=WARN [ 281.628284][T19080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.628299][T19080] Call Trace: [ 281.628305][T19080] [ 281.628311][T19080] __dump_stack+0x1d/0x30 [ 281.628414][T19080] dump_stack_lvl+0xe8/0x140 [ 281.628432][T19080] dump_stack+0x15/0x1b [ 281.628449][T19080] should_fail_ex+0x265/0x280 [ 281.628482][T19080] ? __pfx_ppp_ioctl+0x10/0x10 [ 281.628535][T19080] should_fail+0xb/0x20 [ 281.628569][T19080] should_fail_usercopy+0x1a/0x20 [ 281.628657][T19080] _copy_from_user+0x1c/0xb0 [ 281.628682][T19080] memdup_user+0x5e/0xd0 [ 281.628711][T19080] ppp_get_filter+0xdb/0x160 [ 281.628753][T19080] ppp_ioctl+0xb93/0x11c0 [ 281.628780][T19080] ? __fget_files+0x184/0x1c0 [ 281.628804][T19080] ? __pfx_ppp_ioctl+0x10/0x10 [ 281.628848][T19080] __se_sys_ioctl+0xce/0x140 [ 281.628883][T19080] __x64_sys_ioctl+0x43/0x50 [ 281.628962][T19080] x64_sys_call+0x19a8/0x2fb0 [ 281.628982][T19080] do_syscall_64+0xd2/0x200 [ 281.629099][T19080] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.629132][T19080] ? clear_bhb_loop+0x40/0x90 [ 281.629159][T19080] ? clear_bhb_loop+0x40/0x90 [ 281.629186][T19080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.629280][T19080] RIP: 0033:0x7f01dcdde929 [ 281.629295][T19080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.629314][T19080] RSP: 002b:00007f01db447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.629345][T19080] RAX: ffffffffffffffda RBX: 00007f01dd005fa0 RCX: 00007f01dcdde929 [ 281.629388][T19080] RDX: 0000200000000080 RSI: 0000000040107446 RDI: 0000000000000007 [ 281.629402][T19080] RBP: 00007f01db447090 R08: 0000000000000000 R09: 0000000000000000 [ 281.629418][T19080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.629433][T19080] R13: 0000000000000000 R14: 00007f01dd005fa0 R15: 00007ffdba979438 [ 281.629457][T19080] [ 281.918035][T19060] FAULT_INJECTION: forcing a failure. [ 281.918035][T19060] name failslab, interval 1, probability 0, space 0, times 0 [ 281.930754][T19060] CPU: 1 UID: 0 PID: 19060 Comm: syz.7.3952 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 281.930890][T19060] Tainted: [W]=WARN [ 281.930899][T19060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.930918][T19060] Call Trace: [ 281.930927][T19060] [ 281.930936][T19060] __dump_stack+0x1d/0x30 [ 281.931021][T19060] dump_stack_lvl+0xe8/0x140 [ 281.931048][T19060] dump_stack+0x15/0x1b [ 281.931178][T19060] should_fail_ex+0x265/0x280 [ 281.931210][T19060] should_failslab+0x8c/0xb0 [ 281.931232][T19060] kmem_cache_alloc_noprof+0x50/0x310 [ 281.931339][T19060] ? dup_fd+0x3a/0x540 [ 281.931416][T19060] dup_fd+0x3a/0x540 [ 281.931444][T19060] ? _raw_spin_unlock+0x26/0x50 [ 281.931466][T19060] ksys_unshare+0x346/0x6d0 [ 281.931498][T19060] ? ksys_write+0x192/0x1a0 [ 281.931600][T19060] __x64_sys_unshare+0x1f/0x30 [ 281.931635][T19060] x64_sys_call+0x2d4b/0x2fb0 [ 281.931695][T19060] do_syscall_64+0xd2/0x200 [ 281.931782][T19060] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.931815][T19060] ? clear_bhb_loop+0x40/0x90 [ 281.931841][T19060] ? clear_bhb_loop+0x40/0x90 [ 281.931945][T19060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.932055][T19060] RIP: 0033:0x7f88858be929 [ 281.932072][T19060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.932093][T19060] RSP: 002b:00007f8883f27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 281.932111][T19060] RAX: ffffffffffffffda RBX: 00007f8885ae5fa0 RCX: 00007f88858be929 [ 281.932122][T19060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 281.932133][T19060] RBP: 00007f8883f27090 R08: 0000000000000000 R09: 0000000000000000 [ 281.932143][T19060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.932153][T19060] R13: 0000000000000000 R14: 00007f8885ae5fa0 R15: 00007ffd22e72ad8 [ 281.932200][T19060] [ 282.134753][T19131] loop2: detected capacity change from 0 to 512 [ 282.142430][T19116] hub 6-0:1.0: USB hub found [ 282.147941][T19116] hub 6-0:1.0: 8 ports detected [ 282.156366][T19131] ext4 filesystem being mounted at /243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 282.175079][T19131] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.3959: corrupted inode contents [ 282.196324][T19131] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.3959: mark_inode_dirty error [ 282.209959][T19131] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.3959: corrupted inode contents [ 282.224400][T19131] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.3959: mark_inode_dirty error [ 282.242995][T19143] FAULT_INJECTION: forcing a failure. [ 282.242995][T19143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.250810][T19144] netlink: 'syz.2.3959': attribute type 10 has an invalid length. [ 282.256095][T19143] CPU: 1 UID: 0 PID: 19143 Comm: syz.7.3962 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 282.256167][T19143] Tainted: [W]=WARN [ 282.256175][T19143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 282.256190][T19143] Call Trace: [ 282.256198][T19143] [ 282.256207][T19143] __dump_stack+0x1d/0x30 [ 282.256251][T19143] dump_stack_lvl+0xe8/0x140 [ 282.256277][T19143] dump_stack+0x15/0x1b [ 282.256315][T19143] should_fail_ex+0x265/0x280 [ 282.256422][T19143] should_fail+0xb/0x20 [ 282.256456][T19143] should_fail_usercopy+0x1a/0x20 [ 282.256520][T19143] _copy_to_user+0x20/0xa0 [ 282.256545][T19143] simple_read_from_buffer+0xb5/0x130 [ 282.256585][T19143] proc_fail_nth_read+0x100/0x140 [ 282.256627][T19143] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 282.256723][T19143] vfs_read+0x1a0/0x6f0 [ 282.256758][T19143] ? __sys_setsockopt+0x18e/0x200 [ 282.256797][T19143] ? __rcu_read_unlock+0x4f/0x70 [ 282.256824][T19143] ? __fget_files+0x184/0x1c0 [ 282.256873][T19143] ksys_read+0xda/0x1a0 [ 282.256913][T19143] __x64_sys_read+0x40/0x50 [ 282.256952][T19143] x64_sys_call+0x2d77/0x2fb0 [ 282.256983][T19143] do_syscall_64+0xd2/0x200 [ 282.257023][T19143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 282.257056][T19143] ? clear_bhb_loop+0x40/0x90 [ 282.257101][T19143] ? clear_bhb_loop+0x40/0x90 [ 282.257129][T19143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.257154][T19143] RIP: 0033:0x7f88858bd33c [ 282.257173][T19143] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.257196][T19143] RSP: 002b:00007f8883f27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.257283][T19143] RAX: ffffffffffffffda RBX: 00007f8885ae5fa0 RCX: 00007f88858bd33c [ 282.257299][T19143] RDX: 000000000000000f RSI: 00007f8883f270a0 RDI: 0000000000000005 [ 282.257315][T19143] RBP: 00007f8883f27090 R08: 0000000000000000 R09: 0000000000000000 [ 282.257331][T19143] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 282.257377][T19143] R13: 0000000000000000 R14: 00007f8885ae5fa0 R15: 00007ffd22e72ad8 [ 282.257402][T19143] [ 282.398381][T19131] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.3959: mark inode dirty (error -117) [ 282.404212][T19144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3959'. [ 282.454192][T19131] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 282.513905][T19144] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.522193][T19144] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.530440][T19144] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.538911][T19144] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.551380][T19148] loop5: detected capacity change from 0 to 736 [ 282.577217][T19148] rock: directory entry would overflow storage [ 282.583562][T19148] rock: sig=0x3b10, size=4, remaining=3 [ 282.597621][T19144] team0: Port device geneve1 added [ 282.601183][T19148] netlink: 'syz.5.3963': attribute type 27 has an invalid length. [ 282.657242][T19156] tipc: Enabled bearer , priority 0 [ 282.664862][T19154] tipc: Resetting bearer [ 282.684258][T14185] EXT4-fs unmount: 31 callbacks suppressed [ 282.684276][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.690669][T19154] tipc: Disabling bearer [ 282.717042][T19163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19163 comm=syz.5.3969 [ 282.784486][T19170] loop2: detected capacity change from 0 to 512 [ 282.797629][T19170] EXT4-fs (loop2): 1 orphan inode deleted [ 282.803953][T19170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.818106][T19170] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.833696][T19174] loop7: detected capacity change from 0 to 512 [ 282.847926][T19174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.860656][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 282.872492][T19174] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.883272][T19162] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 282.971751][T19181] loop8: detected capacity change from 0 to 512 [ 282.979943][T19181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.998122][T19181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.010898][T19181] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.027556][T19180] hub 6-0:1.0: USB hub found [ 283.032484][T19180] hub 6-0:1.0: 8 ports detected [ 283.506038][T19186] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3976'. [ 283.558860][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.575170][T19192] loop2: detected capacity change from 0 to 736 [ 283.582278][T19192] rock: directory entry would overflow storage [ 283.582292][T19192] rock: sig=0x3b10, size=4, remaining=3 [ 283.583604][T19192] netlink: 'syz.2.3979': attribute type 27 has an invalid length. [ 283.603740][T19192] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.612288][T19192] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.620723][T19192] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.629209][T19192] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.686355][T14878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.694498][T19190] tipc: Enabled bearer , priority 0 [ 283.706062][T19189] tipc: Resetting bearer [ 283.712852][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.744131][T19189] tipc: Disabling bearer [ 283.753783][T19200] siw: device registration error -23 [ 283.811170][T19202] lo speed is unknown, defaulting to 1000 [ 283.825667][T19208] loop2: detected capacity change from 0 to 128 [ 283.832317][T19204] usb usb8: usbfs: process 19204 (syz.8.3982) did not claim interface 0 before use [ 283.845963][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 283.845976][ T29] audit: type=1326 audit(1752133889.001:21714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 283.846174][T19206] hub 6-0:1.0: USB hub found [ 283.852185][ T29] audit: type=1326 audit(1752133889.001:21715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 283.911581][T19208] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.924755][T19208] ext4 filesystem being mounted at /248/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.924979][T19206] hub 6-0:1.0: 8 ports detected [ 283.937998][ T29] audit: type=1326 audit(1752133889.061:21716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 283.963638][ T29] audit: type=1326 audit(1752133889.061:21717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 283.987395][ T29] audit: type=1326 audit(1752133889.061:21718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.005410][T19210] loop4: detected capacity change from 0 to 512 [ 284.032007][ T29] audit: type=1326 audit(1752133889.091:21719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.055672][ T29] audit: type=1326 audit(1752133889.091:21720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.067430][T19210] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.3984: bad orphan inode 15 [ 284.079277][ T29] audit: type=1326 audit(1752133889.091:21721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.112892][ T29] audit: type=1326 audit(1752133889.091:21722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.125187][T19210] ext4_test_bit(bit=14, block=5) = 0 [ 284.136497][ T29] audit: type=1326 audit(1752133889.091:21723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19201 comm="syz.4.3984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f3addb0e929 code=0x7ffc0000 [ 284.143291][T19210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.191885][T19210] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.669528][T14185] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.784700][T19308] loop2: detected capacity change from 0 to 8192 [ 284.849252][T19315] loop4: detected capacity change from 0 to 1024 [ 284.856249][T19315] EXT4-fs: Ignoring removed orlov option [ 284.876302][T19315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.968124][T19332] loop8: detected capacity change from 0 to 512 [ 284.987816][T19332] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.001020][T19329] loop2: detected capacity change from 0 to 4096 [ 285.019016][T19331] hub 6-0:1.0: USB hub found [ 285.023817][T19331] hub 6-0:1.0: 8 ports detected [ 285.043840][T19332] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.062149][T19332] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.078637][T19322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.088804][T19329] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.496921][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.561768][T19357] loop2: detected capacity change from 0 to 512 [ 285.575871][T19357] EXT4-fs (loop2): orphan cleanup on readonly fs [ 285.584722][T19357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3999: bg 0: block 248: padding at end of block bitmap is not set [ 285.619983][T19350] lo speed is unknown, defaulting to 1000 [ 285.649797][T19357] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3999: Failed to acquire dquot type 1 [ 285.650573][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.664826][T19357] EXT4-fs (loop2): 1 truncate cleaned up [ 285.689464][T19357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000001 ro without journal. Quota mode: writeback. [ 285.764158][T19350] chnl_net:caif_netlink_parms(): no params data found [ 285.792673][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000001. [ 285.842756][T19350] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.849945][T19350] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.878673][T19350] bridge_slave_0: entered allmulticast mode [ 285.885614][T19350] bridge_slave_0: entered promiscuous mode [ 285.892409][T19350] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.899567][T19350] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.907048][T19350] bridge_slave_1: entered allmulticast mode [ 285.913745][T19350] bridge_slave_1: entered promiscuous mode [ 285.924848][T19402] hub 6-0:1.0: USB hub found [ 285.929851][T19402] hub 6-0:1.0: 8 ports detected [ 285.935957][T19399] loop5: detected capacity change from 0 to 8192 [ 286.007444][T19350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.019623][T19350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.023652][T19410] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 286.066975][T19350] team0: Port device team_slave_0 added [ 286.081558][T19350] team0: Port device team_slave_1 added [ 286.103400][T19350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.110464][T19350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.136620][T19350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.151646][T19350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.158665][T19350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.184701][T19350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.211304][T19350] hsr_slave_0: entered promiscuous mode [ 286.217847][T19350] hsr_slave_1: entered promiscuous mode [ 286.223748][T19350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.231461][T19350] Cannot create hsr debugfs directory [ 286.298149][T19350] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 286.306907][T19350] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 286.315542][T19350] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 286.324332][T19350] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 286.373875][T19350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.390941][T19350] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.403053][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.403236][T19430] loop5: detected capacity change from 0 to 128 [ 286.410225][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.418876][T19430] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.429237][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.436248][T19430] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.442650][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.517011][T19350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.618336][T19350] veth0_vlan: entered promiscuous mode [ 286.626283][T19350] veth1_vlan: entered promiscuous mode [ 286.640947][T19350] veth0_macvtap: entered promiscuous mode [ 286.648982][T19350] veth1_macvtap: entered promiscuous mode [ 286.661131][T19350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.673810][T19350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.692261][T19350] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.701092][T19350] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.709940][T19350] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.718800][T19350] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.728625][T19450] loop7: detected capacity change from 0 to 8192 [ 286.739642][T19450] netlink: 'syz.7.4011': attribute type 8 has an invalid length. [ 286.861545][T19462] ipvlan2: entered promiscuous mode [ 286.867565][T19462] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 286.875803][T19462] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.976786][T19469] loop8: detected capacity change from 0 to 512 [ 286.983550][T19469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.997000][T19469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.009983][T19469] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 287.020721][T19469] FAULT_INJECTION: forcing a failure. [ 287.020721][T19469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.033828][T19469] CPU: 0 UID: 0 PID: 19469 Comm: syz.8.4015 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 287.033860][T19469] Tainted: [W]=WARN [ 287.033869][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.033880][T19469] Call Trace: [ 287.033889][T19469] [ 287.033898][T19469] __dump_stack+0x1d/0x30 [ 287.033924][T19469] dump_stack_lvl+0xe8/0x140 [ 287.033986][T19469] dump_stack+0x15/0x1b [ 287.034008][T19469] should_fail_ex+0x265/0x280 [ 287.034059][T19469] should_fail+0xb/0x20 [ 287.034087][T19469] should_fail_usercopy+0x1a/0x20 [ 287.034152][T19469] strncpy_from_user+0x25/0x230 [ 287.034172][T19469] ? kmem_cache_alloc_noprof+0x186/0x310 [ 287.034194][T19469] ? getname_flags+0x80/0x3b0 [ 287.034272][T19469] getname_flags+0xae/0x3b0 [ 287.034290][T19469] __se_sys_quotactl+0x16a/0x670 [ 287.034328][T19469] ? fput+0x8f/0xc0 [ 287.034390][T19469] __x64_sys_quotactl+0x55/0x70 [ 287.034456][T19469] x64_sys_call+0x2886/0x2fb0 [ 287.034474][T19469] do_syscall_64+0xd2/0x200 [ 287.034502][T19469] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.034600][T19469] ? clear_bhb_loop+0x40/0x90 [ 287.034681][T19469] ? clear_bhb_loop+0x40/0x90 [ 287.034699][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.034717][T19469] RIP: 0033:0x7f28276ee929 [ 287.034731][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.034752][T19469] RSP: 002b:00007f2825d57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 287.034773][T19469] RAX: ffffffffffffffda RBX: 00007f2827915fa0 RCX: 00007f28276ee929 [ 287.034791][T19469] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000800 [ 287.034834][T19469] RBP: 00007f2825d57090 R08: 0000000000000000 R09: 0000000000000000 [ 287.034916][T19469] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 287.034930][T19469] R13: 0000000000000000 R14: 00007f2827915fa0 R15: 00007ffea41946d8 [ 287.034952][T19469] [ 287.247175][ T6945] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.271488][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.279100][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.279804][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.287008][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.303093][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.310603][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.318041][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.325451][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.332834][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.340270][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.347713][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.355142][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.362551][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.370628][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.378088][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.385626][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.393038][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.400468][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.404271][T19477] hub 6-0:1.0: USB hub found [ 287.407967][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.420021][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.427460][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.430406][T19477] hub 6-0:1.0: 8 ports detected [ 287.434965][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.434989][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.454721][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.462175][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.469595][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.473082][T19481] loop8: detected capacity change from 0 to 2048 [ 287.477012][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.490769][ T1027] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 287.500282][ T1027] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 287.535889][T19481] loop8: p1 < > p4 [ 287.540393][T19481] loop8: p4 size 8388608 extends beyond EOD, truncated [ 287.557624][T19484] hub 6-0:1.0: USB hub found [ 287.563457][T19484] hub 6-0:1.0: 8 ports detected [ 287.580078][T19489] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 287.601020][T19486] loop7: detected capacity change from 0 to 512 [ 287.621934][T19486] EXT4-fs (loop7): 1 orphan inode deleted [ 287.631711][T19486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.644665][T19492] loop2: detected capacity change from 0 to 4096 [ 287.651608][ T31] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 287.652445][T19486] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.684759][T19492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.699030][T19486] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 287.899046][T14185] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.901358][T19520] tipc: Enabled bearer , priority 0 [ 287.918620][T19519] tipc: Resetting bearer [ 287.943696][T19519] tipc: Disabling bearer [ 288.004728][T19542] loop8: detected capacity change from 0 to 128 [ 288.013035][T19542] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.025584][T19542] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.084835][T19536] team0 (unregistering): Port device team_slave_0 removed [ 288.096713][T19536] team0 (unregistering): Port device team_slave_1 removed [ 288.105256][T19536] team0 (unregistering): Port device geneve1 removed [ 288.200655][T19576] FAULT_INJECTION: forcing a failure. [ 288.200655][T19576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.213849][T19576] CPU: 1 UID: 0 PID: 19576 Comm: syz.2.4030 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 288.213967][T19576] Tainted: [W]=WARN [ 288.213973][T19576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.213985][T19576] Call Trace: [ 288.213991][T19576] [ 288.213998][T19576] __dump_stack+0x1d/0x30 [ 288.214038][T19576] dump_stack_lvl+0xe8/0x140 [ 288.214062][T19576] dump_stack+0x15/0x1b [ 288.214082][T19576] should_fail_ex+0x265/0x280 [ 288.214198][T19576] should_fail+0xb/0x20 [ 288.214231][T19576] should_fail_usercopy+0x1a/0x20 [ 288.214315][T19576] copy_fpstate_to_sigframe+0x628/0x7d0 [ 288.214356][T19576] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 288.214400][T19576] ? x86_task_fpu+0x36/0x60 [ 288.214433][T19576] get_sigframe+0x34d/0x490 [ 288.214464][T19576] ? get_signal+0xdc8/0xf70 [ 288.214508][T19576] x64_setup_rt_frame+0xa8/0x580 [ 288.214590][T19576] arch_do_signal_or_restart+0x27c/0x480 [ 288.214621][T19576] exit_to_user_mode_loop+0x7a/0x100 [ 288.214651][T19576] do_syscall_64+0x1d6/0x200 [ 288.214760][T19576] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.214799][T19576] ? clear_bhb_loop+0x40/0x90 [ 288.214871][T19576] ? clear_bhb_loop+0x40/0x90 [ 288.214896][T19576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.214921][T19576] RIP: 0033:0x7f01dcdde927 [ 288.214939][T19576] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 288.215043][T19576] RSP: 002b:00007f01db447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.215066][T19576] RAX: 0000000000000000 RBX: 00007f01dd005fa0 RCX: 00007f01dcdde929 [ 288.215081][T19576] RDX: 0000000000001001 RSI: 00002000000019c0 RDI: 0000000000000003 [ 288.215094][T19576] RBP: 00007f01db447090 R08: 0000000000000000 R09: 0000000000000000 [ 288.215105][T19576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.215163][T19576] R13: 0000000000000000 R14: 00007f01dd005fa0 R15: 00007ffdba979438 [ 288.215256][T19576] [ 288.264719][T19581] loop5: detected capacity change from 0 to 8192 [ 288.438218][T14878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.441831][T19581] netlink: 'syz.5.4031': attribute type 8 has an invalid length. [ 288.470826][T19598] loop7: detected capacity change from 0 to 512 [ 288.478520][T19598] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 288.490036][T19592] hub 6-0:1.0: USB hub found [ 288.491702][T19598] EXT4-fs (loop7): 1 truncate cleaned up [ 288.494741][T19592] hub 6-0:1.0: 8 ports detected [ 288.502714][T19598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.529111][T19598] FAULT_INJECTION: forcing a failure. [ 288.529111][T19598] name failslab, interval 1, probability 0, space 0, times 0 [ 288.541935][T19598] CPU: 1 UID: 0 PID: 19598 Comm: syz.7.4034 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 288.541970][T19598] Tainted: [W]=WARN [ 288.541983][T19598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.541997][T19598] Call Trace: [ 288.542005][T19598] [ 288.542068][T19598] __dump_stack+0x1d/0x30 [ 288.542104][T19598] dump_stack_lvl+0xe8/0x140 [ 288.542128][T19598] dump_stack+0x15/0x1b [ 288.542147][T19598] should_fail_ex+0x265/0x280 [ 288.542182][T19598] should_failslab+0x8c/0xb0 [ 288.542207][T19598] kmem_cache_alloc_noprof+0x50/0x310 [ 288.542235][T19598] ? getname_flags+0x80/0x3b0 [ 288.542314][T19598] getname_flags+0x80/0x3b0 [ 288.542338][T19598] path_removexattrat+0xf5/0x570 [ 288.542378][T19598] __x64_sys_removexattr+0x38/0x50 [ 288.542404][T19598] x64_sys_call+0x2c7a/0x2fb0 [ 288.542492][T19598] do_syscall_64+0xd2/0x200 [ 288.542530][T19598] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.542561][T19598] ? clear_bhb_loop+0x40/0x90 [ 288.542586][T19598] ? clear_bhb_loop+0x40/0x90 [ 288.542717][T19598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.542789][T19598] RIP: 0033:0x7f88858be929 [ 288.542808][T19598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.542852][T19598] RSP: 002b:00007f8883f27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 288.542877][T19598] RAX: ffffffffffffffda RBX: 00007f8885ae5fa0 RCX: 00007f88858be929 [ 288.542893][T19598] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 00002000000001c0 [ 288.542908][T19598] RBP: 00007f8883f27090 R08: 0000000000000000 R09: 0000000000000000 [ 288.543000][T19598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.543016][T19598] R13: 0000000000000000 R14: 00007f8885ae5fa0 R15: 00007ffd22e72ad8 [ 288.543074][T19598] [ 288.745861][T14878] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.820093][T19647] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 288.820093][T19647] The task syz.7.4035 (19647) triggered the difference, watch for misbehavior. [ 288.853647][T15040] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.864110][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 288.864144][ T29] audit: type=1326 audit(1752133894.011:22193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19580 comm="syz.5.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74a66258e7 code=0x7ffc0000 [ 288.896229][ T29] audit: type=1326 audit(1752133894.051:22194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19580 comm="syz.5.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74a65cab19 code=0x7ffc0000 [ 288.919849][ T29] audit: type=1326 audit(1752133894.051:22195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19580 comm="syz.5.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f74a66258e7 code=0x7ffc0000 [ 288.943421][ T29] audit: type=1326 audit(1752133894.051:22196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19580 comm="syz.5.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f74a65cab19 code=0x7ffc0000 [ 288.967117][ T29] audit: type=1326 audit(1752133894.051:22197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19580 comm="syz.5.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f74a662e929 code=0x7ffc0000 [ 288.990969][ T29] audit: type=1326 audit(1752133894.121:22198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.8.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 289.014863][ T29] audit: type=1326 audit(1752133894.121:22199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.8.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 289.038493][ T29] audit: type=1326 audit(1752133894.121:22200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.8.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 289.062195][ T29] audit: type=1326 audit(1752133894.121:22201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.8.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 289.085889][ T29] audit: type=1326 audit(1752133894.121:22202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19657 comm="syz.8.4037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28276ee929 code=0x7ffc0000 [ 289.140598][T19667] loop5: detected capacity change from 0 to 1024 [ 289.147464][T19667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.166658][T19667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.180167][T19667] FAULT_INJECTION: forcing a failure. [ 289.180167][T19667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.193379][T19667] CPU: 0 UID: 0 PID: 19667 Comm: syz.5.4039 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 289.193418][T19667] Tainted: [W]=WARN [ 289.193426][T19667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.193511][T19667] Call Trace: [ 289.193519][T19667] [ 289.193527][T19667] __dump_stack+0x1d/0x30 [ 289.193551][T19667] dump_stack_lvl+0xe8/0x140 [ 289.193568][T19667] dump_stack+0x15/0x1b [ 289.193587][T19667] should_fail_ex+0x265/0x280 [ 289.193768][T19667] should_fail+0xb/0x20 [ 289.193801][T19667] should_fail_usercopy+0x1a/0x20 [ 289.193840][T19667] _copy_to_user+0x20/0xa0 [ 289.193952][T19667] simple_read_from_buffer+0xb5/0x130 [ 289.194027][T19667] proc_fail_nth_read+0x100/0x140 [ 289.194210][T19667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.194250][T19667] vfs_read+0x1a0/0x6f0 [ 289.194283][T19667] ? __rcu_read_unlock+0x4f/0x70 [ 289.194386][T19667] ? __fget_files+0x184/0x1c0 [ 289.194411][T19667] ksys_read+0xda/0x1a0 [ 289.194466][T19667] __x64_sys_read+0x40/0x50 [ 289.194503][T19667] x64_sys_call+0x2d77/0x2fb0 [ 289.194535][T19667] do_syscall_64+0xd2/0x200 [ 289.194574][T19667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 289.194652][T19667] ? clear_bhb_loop+0x40/0x90 [ 289.194680][T19667] ? clear_bhb_loop+0x40/0x90 [ 289.194708][T19667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.194813][T19667] RIP: 0033:0x7f74a662d33c [ 289.194830][T19667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.194848][T19667] RSP: 002b:00007f74a4c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.194866][T19667] RAX: ffffffffffffffda RBX: 00007f74a6855fa0 RCX: 00007f74a662d33c [ 289.194900][T19667] RDX: 000000000000000f RSI: 00007f74a4c970a0 RDI: 0000000000000005 [ 289.194914][T19667] RBP: 00007f74a4c97090 R08: 0000000000000000 R09: 0000000000000000 [ 289.194929][T19667] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 289.194944][T19667] R13: 0000000000000000 R14: 00007f74a6855fa0 R15: 00007ffd6fe9a198 [ 289.194966][T19667] [ 289.434173][ T6945] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.443624][T19676] FAULT_INJECTION: forcing a failure. [ 289.443624][T19676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.456906][T19676] CPU: 1 UID: 0 PID: 19676 Comm: syz.8.4043 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 289.456953][T19676] Tainted: [W]=WARN [ 289.456962][T19676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.456976][T19676] Call Trace: [ 289.456984][T19676] [ 289.456993][T19676] __dump_stack+0x1d/0x30 [ 289.457019][T19676] dump_stack_lvl+0xe8/0x140 [ 289.457126][T19676] dump_stack+0x15/0x1b [ 289.457147][T19676] should_fail_ex+0x265/0x280 [ 289.457183][T19676] should_fail+0xb/0x20 [ 289.457237][T19676] should_fail_usercopy+0x1a/0x20 [ 289.457273][T19676] _copy_from_iter+0xcf/0xe40 [ 289.457354][T19676] ? __build_skb_around+0x1a0/0x200 [ 289.457424][T19676] ? __alloc_skb+0x223/0x320 [ 289.457460][T19676] netlink_sendmsg+0x471/0x6b0 [ 289.457500][T19676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.457539][T19676] __sock_sendmsg+0x142/0x180 [ 289.457585][T19676] ____sys_sendmsg+0x31e/0x4e0 [ 289.457622][T19676] ___sys_sendmsg+0x17b/0x1d0 [ 289.457717][T19676] __x64_sys_sendmsg+0xd4/0x160 [ 289.457775][T19676] x64_sys_call+0x2999/0x2fb0 [ 289.457796][T19676] do_syscall_64+0xd2/0x200 [ 289.457829][T19676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 289.457933][T19676] ? clear_bhb_loop+0x40/0x90 [ 289.457960][T19676] ? clear_bhb_loop+0x40/0x90 [ 289.457982][T19676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.458003][T19676] RIP: 0033:0x7f28276ee929 [ 289.458018][T19676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.458036][T19676] RSP: 002b:00007f2825d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.458126][T19676] RAX: ffffffffffffffda RBX: 00007f2827915fa0 RCX: 00007f28276ee929 [ 289.458138][T19676] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 289.458229][T19676] RBP: 00007f2825d57090 R08: 0000000000000000 R09: 0000000000000000 [ 289.458241][T19676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.458253][T19676] R13: 0000000000000000 R14: 00007f2827915fa0 R15: 00007ffea41946d8 [ 289.458348][T19676] [ 289.473136][T19678] netlink: 'syz.2.4044': attribute type 27 has an invalid length. [ 289.689588][T19685] syz_tun: entered allmulticast mode [ 289.697533][T19677] syz_tun: left allmulticast mode [ 289.772553][T19697] loop8: detected capacity change from 0 to 4096 [ 289.782614][T19697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.839464][T19698] loop7: detected capacity change from 0 to 2048 [ 289.973168][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.031833][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4054'. [ 290.069842][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4054'. [ 290.078877][T19707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4054'. [ 290.111946][T19717] loop9: detected capacity change from 0 to 2048 [ 290.143872][T19707] netlink: 'syz.8.4054': attribute type 10 has an invalid length. [ 290.157608][T19717] loop9: p1 < > p4 [ 290.164739][T19717] loop9: p4 size 8388608 extends beyond EOD, truncated [ 290.586648][ T31] bond0 (unregistering): Released all slaves [ 290.595947][ T31] bond1 (unregistering): (slave veth3): Releasing active interface [ 290.604391][ T31] bond1 (unregistering): Released all slaves [ 290.614064][ T31] bond2 (unregistering): Released all slaves [ 290.624110][ T31] bond3 (unregistering): Released all slaves [ 290.632459][T19707] team0: Device macvtap0 failed to register rx_handler [ 290.658638][ T31] tipc: Left network mode [ 290.677774][T19705] lo speed is unknown, defaulting to 1000 [ 290.677780][ T3416] lo speed is unknown, defaulting to 1000 [ 290.677876][ T3416] syz0: Port: 1 Link ACTIVE [ 290.677895][ T1027] lo speed is unknown, defaulting to 1000 [ 290.677911][ T3388] lo speed is unknown, defaulting to 1000 [ 290.725908][ T31] hsr_slave_0: left promiscuous mode [ 290.741734][ T31] hsr_slave_1: left promiscuous mode [ 290.743523][T19738] loop8: detected capacity change from 0 to 4096 [ 290.762093][T19738] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.807054][ T12] smc: removing ib device syz! [ 290.978941][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.018008][T19705] chnl_net:caif_netlink_parms(): no params data found [ 291.023048][T19745] loop8: detected capacity change from 0 to 512 [ 291.034713][T19745] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 291.047289][T19745] EXT4-fs (loop8): 1 truncate cleaned up [ 291.053472][T19745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.075766][T19705] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.082987][T19705] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.091599][T19705] bridge_slave_0: entered allmulticast mode [ 291.098548][T19705] bridge_slave_0: entered promiscuous mode [ 291.105449][T19705] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.112515][T19705] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.119766][T19705] bridge_slave_1: entered allmulticast mode [ 291.126127][T19705] bridge_slave_1: entered promiscuous mode [ 291.143347][T19705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.153593][T19705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.172562][T19705] team0: Port device team_slave_0 added [ 291.179241][T19705] team0: Port device team_slave_1 added [ 291.188880][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.206651][T19705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.213696][T19705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.239874][T19705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.251224][T19705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.258277][T19705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.284345][T19705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.311753][T19705] hsr_slave_0: entered promiscuous mode [ 291.317837][T19705] hsr_slave_1: entered promiscuous mode [ 291.405783][T19758] loop7: detected capacity change from 0 to 128 [ 291.582004][T19705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 291.590836][T19705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 291.599487][T19705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 291.608387][T19705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 291.620088][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.627624][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.635891][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.643367][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.650921][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.658517][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.666075][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.673529][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.681005][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.688450][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.695892][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.703297][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.711106][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.718597][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.726111][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.733575][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.741166][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.748776][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.756281][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.763715][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.771132][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.778560][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.785988][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.793427][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.800847][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.808267][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.815786][ T10] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 291.833164][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 291.872292][T19705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.890272][T19705] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.901544][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.908747][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.937151][T19705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.947624][T19705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.963506][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.970764][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.077279][T19705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.244034][T19787] loop9: detected capacity change from 0 to 4096 [ 292.250988][T19705] veth0_vlan: entered promiscuous mode [ 292.256877][T19705] veth1_vlan: entered promiscuous mode [ 292.260667][T19787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.274322][T19705] veth0_macvtap: entered promiscuous mode [ 292.286303][T19705] veth1_macvtap: entered promiscuous mode [ 292.312005][T19705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.313494][T19705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.314603][T19705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.314718][T19705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.314749][T19705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.314812][T19705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.399056][T19793] tipc: Enabled bearer , priority 0 [ 292.419353][T19799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.428919][T19792] tipc: Resetting bearer [ 292.438194][T19799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.449033][T19792] tipc: Disabling bearer [ 292.457050][T19801] FAULT_INJECTION: forcing a failure. [ 292.457050][T19801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.470151][T19801] CPU: 1 UID: 0 PID: 19801 Comm: syz.2.4078 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 292.470294][T19801] Tainted: [W]=WARN [ 292.470300][T19801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.470312][T19801] Call Trace: [ 292.470319][T19801] [ 292.470328][T19801] __dump_stack+0x1d/0x30 [ 292.470369][T19801] dump_stack_lvl+0xe8/0x140 [ 292.470442][T19801] dump_stack+0x15/0x1b [ 292.470486][T19801] should_fail_ex+0x265/0x280 [ 292.470524][T19801] should_fail+0xb/0x20 [ 292.470622][T19801] should_fail_usercopy+0x1a/0x20 [ 292.470726][T19801] strncpy_from_user+0x25/0x230 [ 292.470750][T19801] path_setxattrat+0xeb/0x310 [ 292.470791][T19801] __x64_sys_fsetxattr+0x6b/0x80 [ 292.470859][T19801] x64_sys_call+0x2f7c/0x2fb0 [ 292.470883][T19801] do_syscall_64+0xd2/0x200 [ 292.470947][T19801] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 292.470978][T19801] ? clear_bhb_loop+0x40/0x90 [ 292.471003][T19801] ? clear_bhb_loop+0x40/0x90 [ 292.471028][T19801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.471125][T19801] RIP: 0033:0x7f01dcdde929 [ 292.471142][T19801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.471163][T19801] RSP: 002b:00007f01db447038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 292.471194][T19801] RAX: ffffffffffffffda RBX: 00007f01dd005fa0 RCX: 00007f01dcdde929 [ 292.471209][T19801] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000007 [ 292.471223][T19801] RBP: 00007f01db447090 R08: 0000000000000000 R09: 0000000000000000 [ 292.471238][T19801] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 292.471252][T19801] R13: 0000000000000000 R14: 00007f01dd005fa0 R15: 00007ffdba979438 [ 292.471269][T19801] [ 292.664981][T19802] tipc: New replicast peer: 255.255.255.255 [ 292.671041][T19802] tipc: Enabled bearer , priority 10 [ 292.743766][T19809] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 292.766231][T19350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.882512][T19824] loop3: detected capacity change from 0 to 512 [ 292.896730][T19824] EXT4-fs (loop3): 1 orphan inode deleted [ 292.906240][T19824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.919785][T19824] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.934336][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 292.947491][T19824] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 293.096860][T19839] loop9: detected capacity change from 0 to 512 [ 293.106069][T19839] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 293.118037][T19839] EXT4-fs (loop9): 1 truncate cleaned up [ 293.124305][T19839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.192784][T19844] tipc: Enabled bearer , priority 0 [ 293.200689][T19843] tipc: Resetting bearer [ 293.212846][T19843] tipc: Disabling bearer [ 293.214857][T19350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.297110][T19855] loop7: detected capacity change from 0 to 736 [ 293.319203][T19855] rock: directory entry would overflow storage [ 293.325464][T19855] rock: sig=0x3b10, size=4, remaining=3 [ 293.335017][T19855] netlink: 'syz.7.4100': attribute type 27 has an invalid length. [ 293.344694][T19855] syz_tun: entered allmulticast mode [ 293.355781][T19853] syz_tun: left allmulticast mode [ 293.434401][T19865] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 293.456994][T19860] hub 6-0:1.0: USB hub found [ 293.461748][T19860] hub 6-0:1.0: 8 ports detected [ 293.585749][T19871] loop8: detected capacity change from 0 to 512 [ 293.590771][T19874] loop9: detected capacity change from 0 to 512 [ 293.600223][T19874] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 293.611752][T19874] EXT4-fs (loop9): 1 truncate cleaned up [ 293.618070][T19874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.642172][T19871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.665820][T19871] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.678425][T19350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.707888][T19705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.757229][T19879] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 293.784861][ T3416] tipc: Node number set to 1146680677 [ 293.786910][T19879] SELinux: failed to load policy [ 293.798066][T15040] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.832119][T19896] loop3: detected capacity change from 0 to 256 [ 293.864734][T19896] FAT-fs (loop3): Directory bread(block 64) failed [ 293.865026][T19893] loop7: detected capacity change from 0 to 8192 [ 293.882338][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 293.882355][ T29] audit: type=1326 audit(1752133899.031:22405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 293.885654][T19896] FAT-fs (loop3): Directory bread(block 65) failed [ 293.893120][T19902] loop9: detected capacity change from 0 to 512 [ 293.915638][T19896] FAT-fs (loop3): Directory bread(block 66) failed [ 293.926448][T19893] netlink: 'syz.7.4115': attribute type 8 has an invalid length. [ 293.931965][ T29] audit: type=1326 audit(1752133899.081:22406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 293.945158][T19896] FAT-fs (loop3): Directory bread(block 67) failed [ 293.963132][ T29] audit: type=1326 audit(1752133899.081:22407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 293.971320][T19902] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 293.993267][ T29] audit: type=1326 audit(1752133899.081:22408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.009405][T19896] FAT-fs (loop3): Directory bread(block 68) failed [ 294.027571][ T29] audit: type=1326 audit(1752133899.081:22409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.027605][ T29] audit: type=1326 audit(1752133899.081:22410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.027632][ T29] audit: type=1326 audit(1752133899.081:22411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.061948][T19896] FAT-fs (loop3): Directory bread(block 69) failed [ 294.081460][ T29] audit: type=1326 audit(1752133899.081:22412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.135579][ T29] audit: type=1326 audit(1752133899.081:22413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.159243][ T29] audit: type=1326 audit(1752133899.081:22414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19892 comm="syz.7.4115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88858be929 code=0x7ffc0000 [ 294.166714][T19896] FAT-fs (loop3): Directory bread(block 70) failed [ 294.190008][T19902] EXT4-fs (loop9): 1 truncate cleaned up [ 294.196244][T19902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.226777][T19896] FAT-fs (loop3): Directory bread(block 71) failed [ 294.244547][T19896] FAT-fs (loop3): Directory bread(block 72) failed [ 294.259117][T19350] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.270017][T19896] FAT-fs (loop3): Directory bread(block 73) failed [ 294.309150][T19924] SELinux: policydb version 786552274 does not match my version range 15-34 [ 294.318113][T19924] SELinux: failed to load policy [ 294.338789][T19929] ================================================================== [ 294.346897][T19929] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk [ 294.354295][T19929] [ 294.356636][T19929] write to 0xffff888103d67e00 of 8 bytes by task 19927 on cpu 1: [ 294.364358][T19929] mas_replace_node+0x1a6/0x410 [ 294.369221][T19929] mas_wr_store_entry+0x2406/0x2b50 [ 294.374444][T19929] mas_store_prealloc+0x74d/0x9e0 [ 294.379488][T19929] vma_iter_store_new+0x1c5/0x200 [ 294.384522][T19929] vma_complete+0x125/0x580 [ 294.389036][T19929] __split_vma+0x5d9/0x650 [ 294.393467][T19929] vma_modify+0x3f2/0xc80 [ 294.397802][T19929] vma_modify_flags+0x101/0x130 [ 294.402664][T19929] mprotect_fixup+0x2cc/0x570 [ 294.407361][T19929] do_mprotect_pkey+0x6d6/0x980 [ 294.412223][T19929] __x64_sys_mprotect+0x48/0x60 [ 294.417090][T19929] x64_sys_call+0x2794/0x2fb0 [ 294.421776][T19929] do_syscall_64+0xd2/0x200 [ 294.426305][T19929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.432212][T19929] [ 294.434542][T19929] read to 0xffff888103d67e00 of 8 bytes by task 19929 on cpu 0: [ 294.442186][T19929] mas_state_walk+0x485/0x650 [ 294.446902][T19929] mas_walk+0x30/0x120 [ 294.450988][T19929] lock_vma_under_rcu+0xa2/0x2f0 [ 294.455943][T19929] do_user_addr_fault+0x233/0x1090 [ 294.461079][T19929] exc_page_fault+0x62/0xa0 [ 294.465615][T19929] asm_exc_page_fault+0x26/0x30 [ 294.470479][T19929] [ 294.472840][T19929] value changed: 0xffff8881187ac306 -> 0xffff888103d67e00 [ 294.480036][T19929] [ 294.482361][T19929] Reported by Kernel Concurrency Sanitizer on: [ 294.488520][T19929] CPU: 0 UID: 0 PID: 19929 Comm: syz.8.4125 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 294.502596][T19929] Tainted: [W]=WARN [ 294.506405][T19929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.516481][T19929] ================================================================== [ 294.588736][T19926] tipc: Started in network mode [ 294.593738][T19926] tipc: Node identity 7e71c5a7157b, cluster identity 4711 [ 294.600954][T19926] tipc: Enabled bearer , priority 0 [ 294.608631][T19925] tipc: Resetting bearer [ 294.622194][T19925] tipc: Disabling bearer