last executing test programs: 1m39.245481437s ago: executing program 32 (id=163): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x33, @local, 0x1}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c) write$P9_RVERSION(r0, 0x0, 0x15) futex_waitv(&(0x7f0000001cc0)=[{0x1, &(0x7f00000000c0)=0x1, 0x82}, {0x3, &(0x7f0000000140)=0x1, 0x82}, {0x2, &(0x7f0000000180)=0xff, 0x2}, {0x8001, &(0x7f0000000200)=0x7, 0x82}, {0x7, &(0x7f0000000240)=0x800000000000000, 0x82}, {0x83b, &(0x7f0000000280)=0x5, 0x82}, {0x8, &(0x7f00000002c0)=0x6, 0x82}, {0x9, &(0x7f0000000380)=0xfffffffffffffff8, 0x2}, {0x5, &(0x7f00000003c0)=0x4, 0x2}, {0xd21, &(0x7f0000000440)=0x2, 0x2}, {0x2, &(0x7f0000000480)=0x4, 0x82}, {0x3, &(0x7f00000004c0)=0x98, 0x82}, {0x8, &(0x7f0000000500)=0x3, 0x82}, {0x5, &(0x7f0000000580)=0x1}, {0x4, &(0x7f00000005c0)=0x4, 0x2}, {0xffffffffffffffff, &(0x7f0000000680)=0x101, 0x82}, {0x8000, &(0x7f00000006c0)=0x1, 0x82}, {0x7, &(0x7f0000000740)=0x2, 0x82}, {0x8, &(0x7f0000000780)=0x6, 0x82}, {0xffffffff, &(0x7f00000007c0)=0x7, 0x2}, {0xd3b, &(0x7f0000000800)=0xffff, 0x82}, {0x7fffffffffffffff, &(0x7f0000000840)=0x47}, {0x9, &(0x7f0000000880)=0xe, 0x82}, {0x7, &(0x7f00000008c0)=0xddb4, 0x82}, {0x1, &(0x7f0000000900)=0x5, 0x2}, {0x8, &(0x7f0000000940)=0xba}, {0x9, &(0x7f0000000980)=0xc, 0x82}, {0x80000001, &(0x7f00000009c0)=0x1000, 0x82}, {0x507, &(0x7f0000000a00)=0x7, 0x82}, {0x0, &(0x7f0000000a40), 0x82}, {0x5, &(0x7f0000000ac0)=0x8, 0x82}, {0x3ff, &(0x7f0000000b00)=0x1, 0x82}, {0x1, &(0x7f0000000b40)=0x20000d, 0x2}, {0x800, &(0x7f0000000b80)=0x2, 0x82}, {0x3000, &(0x7f0000000c00)=0x5, 0x82}, {0x101, &(0x7f0000000c40)=0xaeb, 0x2}, {0xffffffffffffffff, &(0x7f0000000c80)=0x8000000000000000, 0x2}, {0xb, &(0x7f0000000cc0)=0x100000001, 0x2}, {0x401, &(0x7f0000000d00)=0x3, 0x2}, {0x9a5, &(0x7f0000000d40)=0x1, 0x82}, {0x0, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x10001, 0x0, 0x2}, {0x2, 0x0, 0x82}, {0x7, &(0x7f0000000ec0)=0x1, 0x2}, {0x8, &(0x7f0000000f00)=0x7, 0x2}, {0x6, 0x0, 0x2}, {0x356, &(0x7f0000000f80)=0xe000000000000000, 0x2}, {0x3, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x6, &(0x7f0000001540)=0x6, 0x2}, {0x3, 0x0, 0x2}, {0x1ce2, 0x0, 0x82}, {0xa903, 0x0, 0x2}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x1ff, 0x0, 0x2}, {0x64, &(0x7f00000019c0)=0x5, 0x2}, {0x797, 0x0, 0x2}], 0x40, 0x0, &(0x7f0000002600)={0x0, 0x3938700}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m30.866600035s ago: executing program 33 (id=291): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817", 0x15, 0xffffffffffffffff) 1m30.449065813s ago: executing program 34 (id=302): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000380)}}, {{0x0, 0x0, 0x0, 0x49}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000000380)=""/171, 0xab}], 0x1, &(0x7f00000053c0)=""/196, 0xc4}, 0x4}, {{0x0, 0x0, 0x0}}], 0x4, 0x2, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x40) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, 0x0, 0x8000) sendmsg$key(0xffffffffffffffff, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 1m20.585688689s ago: executing program 35 (id=396): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) 1m15.24540176s ago: executing program 36 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], &(0x7f0000000040)='GPL\x00', 0x75f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r6, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') vmsplice(r2, 0x0, 0x0, 0x4) 1m13.980917364s ago: executing program 5 (id=483): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2, 0x208fc000}, {0xa, 0x0, 0xb, @loopback}, 0xffffffffffffffff, 0x4}}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xb, 0xb, &(0x7f0000000700)=ANY=[@ANYRES16], &(0x7f0000000240)='GPL\x00', 0x20000000, 0x0, 0x0, 0x40f00, 0x31, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a"], 0xa8}}, 0x0) semget$private(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) (fail_nth: 4) 1m13.865867166s ago: executing program 5 (id=484): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010095595915303d6000"}) poll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x8000}], 0x2, 0x7981) r1 = syz_open_pts(r0, 0x2) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000005) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1m13.049997151s ago: executing program 5 (id=490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='fsi_master_acf_poll_response_busy\x00', r1, 0x0, 0xb}, 0x18) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000003c0)={0x10, {{0xa, 0x4e22, 0xffffdd5a, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000}}, {{0xa, 0x4e21, 0x582f, @loopback, 0x8}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x44f0) 1m12.941433274s ago: executing program 5 (id=492): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1021000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m12.904930154s ago: executing program 5 (id=494): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) readv(r1, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/163, 0xa3}], 0x1) 1m12.624995899s ago: executing program 4 (id=498): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x4}, 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r7, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1m12.56983967s ago: executing program 5 (id=499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010095595915303d6000"}) poll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x8000}], 0x2, 0x7981) r1 = syz_open_pts(r0, 0x2) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000005) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1m12.565798521s ago: executing program 37 (id=499): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010095595915303d6000"}) poll(&(0x7f0000000000)=[{r0, 0x20}, {r0, 0x8000}], 0x2, 0x7981) r1 = syz_open_pts(r0, 0x2) ioctl$TCFLSH(r1, 0x540b, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20000005) r3 = gettid() process_vm_writev(r3, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 1m12.457139393s ago: executing program 4 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac"], 0x54}}, 0x4000000) 1m12.351590515s ago: executing program 4 (id=502): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x8, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x2, 0x0, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xbe, 0x5, 0xa, 0x2, 0x6, 0x6}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000410) 1m12.233887077s ago: executing program 4 (id=503): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1021000, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m12.118269349s ago: executing program 4 (id=505): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}, {@noinit_itable}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '&\"!v.[,-'}}]}, 0x1, 0x516, &(0x7f0000000380)="$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") perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) epoll_create(0xf) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) fcntl$addseals(r3, 0x409, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r5, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xe8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) 1m11.720991837s ago: executing program 4 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg$can_bcm(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/186, 0xba}, {0x0}], 0x2}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) 1m11.720469317s ago: executing program 38 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x8, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmsg$can_bcm(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/186, 0xba}, {0x0}], 0x2}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x8}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) 57.352015358s ago: executing program 9 (id=720): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000340), &(0x7f0000000300)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 57.077941583s ago: executing program 9 (id=722): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0xf807, 0x10, 0xa28, 0x6d5f, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x65, 0x0, 0x9, 0x4, 0x0, @broadcast, @empty, {[@end, @timestamp_addr={0x44, 0x24, 0xcf, 0x1, 0x2, [{@rand_addr=0x64010101, 0xc37}, {@remote, 0xc6}, {@remote, 0x9}, {@rand_addr=0x64010101, 0x3}]}, @noop, @end]}}}}}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @loopback}}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 56.465879375s ago: executing program 9 (id=728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000021) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda00002000"], 0x69) close(r1) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) fstat(r0, &(0x7f0000000700)) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 56.420051416s ago: executing program 9 (id=733): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) r5 = syz_open_dev$hidraw(&(0x7f0000000040), 0x9c, 0x180) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200020000000800010000000000140003007866726d30"], 0x58}}, 0x4048010) read$hidraw(r5, &(0x7f0000000280)=""/180, 0xb4) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYRESDEC=r3], 0x3c}}, 0x0) r9 = syz_open_dev$vcsu(&(0x7f00000003c0), 0x8, 0x100) sendmsg$AUDIT_GET(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbfb, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40084}, 0x40800) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001bc0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r8, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_ACT={0x4}]}}]}, 0x38}}, 0x40) 56.18741794s ago: executing program 9 (id=738): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 55.742664148s ago: executing program 9 (id=740): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}, {@noinit_itable}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '&\"!v.[,-'}}]}, 0x1, 0x516, &(0x7f0000000380)="$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") perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) epoll_create(0xf) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) fcntl$addseals(r2, 0x409, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xe8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) 55.714764809s ago: executing program 39 (id=740): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}, {@noinit_itable}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, '&\"!v.[,-'}}]}, 0x1, 0x516, &(0x7f0000000380)="$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") perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/slabinfo\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) epoll_create(0xf) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001440)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) nanosleep(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000900)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x6}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) fcntl$addseals(r2, 0x409, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x18) connect$unix(r4, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x18) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x48) fsetxattr$security_selinux(r1, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:hald_sonypic_exec_t:s0\x00', 0x29, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xe8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) 54.292093226s ago: executing program 1 (id=762): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x5e88, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 53.950764112s ago: executing program 1 (id=765): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x20}}, 0x0) 53.790725255s ago: executing program 1 (id=766): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e6", 0xa1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x12000021) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r1) getresgid(0x0, &(0x7f00000005c0), &(0x7f0000000600)) fstat(r0, &(0x7f0000000700)) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 53.764752275s ago: executing program 1 (id=767): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1021000, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 53.702734757s ago: executing program 1 (id=768): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x100000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 53.449690891s ago: executing program 1 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea99, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe87]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (fail_nth: 5) 53.448824511s ago: executing program 40 (id=769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea99, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe87]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb, {0x1}}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (fail_nth: 5) 43.685386596s ago: executing program 3 (id=944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty, 0xffa4}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) 43.684891476s ago: executing program 3 (id=945): socket$kcm(0xa, 0x922000000003, 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000042438bdc1be6cecf83b0b3113de415c724"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) (fail_nth: 3) 43.626541457s ago: executing program 3 (id=946): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000340), &(0x7f0000000300)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 43.599671957s ago: executing program 3 (id=948): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x74, 0x30, 0xb, 0xfffffffd, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe3, 0x6, 0x10000000, 0x8, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x62c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xd37cbcf91b5e3511}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x74}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="15452f1c17ce03519634b0f248cd4f35bfbe040d6bec3aac6dbdaea4e21f786824ca85", 0x23}, {&(0x7f0000000100)="445fad3126ce24909e1424d14663981d8c0359c7bc376dafed5c51728053486f03e6c2c2c7c2", 0x26}], 0x2}, 0x404c080) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000100000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000a00000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000"], 0x1a0}}, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000280)={'ipvlan0\x00', {0x2, 0x4e24, @rand_addr=0xac141437}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) write$selinux_load(0xffffffffffffffff, &(0x7f0000001780)={0xf97cff8c, 0x8, 'SE Linux', "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"}, 0xf10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r7, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) r8 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) mq_timedsend(r8, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) 42.357783711s ago: executing program 3 (id=966): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000deff0000000000000000080012000200020000000000000000003000"], 0xa0}}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 41.790300901s ago: executing program 3 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT=r1, @ANYRES32=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x3, @empty, 'erspan0\x00'}}, 0x4e) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 41.766024692s ago: executing program 41 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT=r1, @ANYRES32=r0], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x3, @empty, 'erspan0\x00'}}, 0x4e) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'ip6gre0\x00'}}, 0x1e) 2.353862246s ago: executing program 0 (id=1755): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50) (fail_nth: 9) 2.353452436s ago: executing program 0 (id=1756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000a00)={{r0}, "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"}) unshare(0x62000000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x8}]}) (async) execve(0x0, 0x0, 0x0) (async, rerun: 32) r2 = shmget(0x1, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) (rerun: 32) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000001a00)=""/4096) 2.335269036s ago: executing program 0 (id=1757): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (fail_nth: 3) 2.304277347s ago: executing program 0 (id=1758): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0xe000000, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) 1.909917995s ago: executing program 2 (id=1761): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000000)="b9fd03076804268cb2", 0x0, 0x40400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT=r1, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000300)={0x1a}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) fadvise64(r5, 0x6, 0x3, 0x3) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf918e0000000000b7020000010000008500000085000000b700000000000000950000000000000013a9097b58bcb6ead43e2e4a95c1210b95ce3ac46a92f3536d16ec1500fa1f1e80e8c3a33b4c6a631cbadf844e5f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.884085095s ago: executing program 0 (id=1762): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1.836592056s ago: executing program 0 (id=1764): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000000)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Mc\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x95k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4vL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4E\xf7_\xa4\x86f\x1c\xfa\x83q,Z\x87\xf1d\x9e\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1a\x149\xd2}\xefY\x00\x00\x00\x00\x00\x00\x00!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&\xec\xf9x\xa1\xd6=\xea\xe5\x95\xd6\xd9<8y\xd3\xee\xeep\x88\x14\xabr\xf6\xa3\x87\xa0\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00C\x05\xbeY!\xb2y\xf9\fc\xcd\'\xdc\x11\x92\x98\xc8\xf8A\xd3\xb82\x99\x9fGO\xdf\xee\x05wM\x18\x7f\x99\xd7\xce\xaa\xfb,`\xb6\x18a\x98\xfc\xe8`\x82j*\xa5dTX\xb5~\x13\xf7?\x97_\b\xb1\xbb\x88\x15\x05\xbd\x93+FU-V\xb9\x1f\x8d\xb86\x0e\x91b\xad\xbe\xf6f>\xd0\t\x1cMp\v\xd0\xa8\x83\x9d\x80\x1f\xd0-\xcb\'\x1b$\xe4\x10bW\x887E\x96?\xf3Yy\xcfZ\xab|U\fr@\xf2\x7f\x1e\"\x16\xeeGc|\xe3\xb0\xea\xcc\x97G\xf9\xca\xa8\xf1\x17V\xfbm?\xa3D\x80\x03\"@\xd3\xd7Z\x10\x0e\x00\x9b\xd8\x14\xdf\x1c=\xb3\x89\xa0<\xa0\xfdf8)\xdf\xa1\xceGo8J\x9d\xc4F\xef\x93f\xe1\xf2\x85\x06\xc9ED\x86)\xc1\x86\x02\x06+\x93L\xc7K\xa4\xaf\xe7\xccOZ!C\xaf;\nK\x92\'\x94\x7f\xe9\x1d.\xb3\xd5\xef\x95O\xaeW\xd5\x9d\x84\xbdx\xcb\xfa\xcc\"/\x9f\xb6E\xe34\x83\"\xa6G\xd9T\xdb\xceB\xd5A\n\xa0\x9a\x13\x90s\xaa\xb2\x1a\xaa@\xa0\x8c\xc2\n\x15e\tPI\xb1L\a\xb9\x06\x8b\xe7>\xcb\xb2\xe8T\x9c\x9a\x1d\x99\xd0\xa2~\xf8\xean}Y&\xd0u\xa1\xd5{\xba\xd5\x87@A\x93E\xda=&\x9ek\x9ak/oT)$\xd5H\xa5k\xb0\x8a\xf0\x817Oo\xa2\x9e\x9e\xb33_\xd5\"M\xccc^gS?p\xb0}\xf7\xe3\xd3\xbf1\xd8\xd5\x86\xab\xa4\x10\xcc[I2T\x03L\xa4\x13\xfeL\x15\x91\x18\x06+\xac\x8c\t(\xe9\r\xfe\xc3\xee\xcd\x04\xf6\xc8\xee\x824\x80?iaxM\xd0N\xe3,\xdfU2\x8eA\x99\x81Y\xe4P5\xd7\xe8A\x1f9\xeb\xcd\xa0&\xeb\x1fhL\xd8\x10\x9c\xa4\f\x15T\x9b\xe0\xdb\xb5\x8e\xe8\xef\x0e\xaa\x0f\x98\xcd\x1f\x1da\x1es\xe8\'\xea\xe4\xabO\xac`\x80\xac3\xb3\\\x8e\x1c\xf7\xeb\x9d\xe7q9Hb\a\xd31\xbf\xf60\x9d\xb5\xc9o\x12\xd2\xac\xab\x8d^\x97\xb3a\xf1\xa8\xf7\xd9\\\xc7\xc27$\x1c\x7f\x9b(\xac\x19\x13\v\x10\x94\xb4>\x10\xd1\x96\xae\x87tn\xe1R\xefz\x01\x95\xea\xf8\xcb\x9aC\x17o7\xbe6u\x1b!\xb2\xe2\xad4h0x0) getsockname$packet(r0, &(0x7f0000000580), &(0x7f00000005c0)=0x14) io_submit(r5, 0x1, &(0x7f0000000d40)=[&(0x7f0000000600)={0x0, 0x0, 0xfe, 0x1, 0x0, r4, 0x0, 0x53, 0x0, 0x0, 0x2}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000300), 0xdb) recvmsg$unix(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10103) mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) unshare(0x22020600) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xecb5, 0x3180, 0x80, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000640)=""/195) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) r12 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "6035ae1e0fe721441705322025000000003e2a5b4377f7ad4bcf2b71d17e1ec0ef54e6773fd7264c39ea00c508ba607269613800"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r12, r1, r1, 0x0) 1.800204656s ago: executing program 2 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000003600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0}}], 0x2, 0x810) 1.780409017s ago: executing program 2 (id=1767): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000047b7080000840000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400004d44e5000000000000000c009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xfffffffffffffe68, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sysinfo(&(0x7f00000009c0)=""/229) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='tlb_flush\x00', r5}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) 1.311178615s ago: executing program 8 (id=1779): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf367e243100000007", @ANYRES8=r0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB="ef7e8079c45fc1a1ca275e9d6b37f0808c3f9d97e0abdef2c369c72a856eeabfa974d54a9d9c4541e77a1b", @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregs(0xe, r3, 0x16, &(0x7f0000000200)=""/117) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @rand_addr=' \x01\x00', @loopback}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x800) 1.197208168s ago: executing program 2 (id=1781): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0x100}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0005110004"], 0xfdef) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.195297538s ago: executing program 8 (id=1783): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff98, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000340), &(0x7f0000000300)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="9020f2f9924c"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0xb, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) getsockopt$MRT6(r0, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 1.133665519s ago: executing program 2 (id=1784): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1f4, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x8c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x74, 0x1, [@m_simple={0x70, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x41, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df930827"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0x128, 0x1, [@m_connmark={0x124, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0xd5, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721099eb87bbdf128c2d67d606cc26e787ce45c03fde1ba3b27d5dee1efa3eda225021429dfdbc555fa38db8cd8c88f888028d9c70ef8a8946d40da5441a39a55b3cdb62b43c2b7bc5f44599e2dcc16b860d7dbe968ccddcc329a9015e939bf295f7d59358fe899de8e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x2000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.132739819s ago: executing program 6 (id=1785): socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) (fail_nth: 3) 1.116491359s ago: executing program 2 (id=1786): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x4}]}) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x165303, 0x0) fsmount(r0, 0x0, 0x2) pipe2$watch_queue(0x0, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES64=0x0, @ANYRESHEX=r3, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000010000)='\t\t\xe9\x82~\x9a_\x95\b7\xb6q\xf3q\xc2\x0e2!\xef*\x86\x8b\xb8\xa3g\x8b\xcd\x9a\x9f\x8d\x03\x88\xdd\xf0\xa9\xbd\b,/\x16\xdd0d c\xba&_\x94\xfa|\x05\x15Y\xfbg\xbc\x8d\x8c,;c\xc2\x19Cisk\x94\x9f\xafa_\xfad\xff\x87\x04u\xa5U\f\xcb\x160/\xef\xa3\v\x7fV\x01\xc0b\xec\x0fA\x95\x13\x82vxOWCO\x14$s\x8f\x06\xd2\xce\x00\x00\x00\x00\x00\x00\x00\x00\xc8,\x80\xe3\xec\xa5\x85\x1f\xaf\x96ZR\xd3\xc8\xd0`\xc4\xa3\x80\x10\a\x12\xae\xf8d\xdb\x86\xa7\x84vmY\x8e\x8539\x13D\x88\x1dR*4\xd4\xa6\xf1\xaa^\xb4\xb4\x97Y\x19\xa5\xbc\xad-\xcb\xc4\x9fGP\x8c\x96\xa9\xb8\x87\xc1r}\xe1)\x830iL;P5\xb9C\xd9\x99~\t\x87\"\xc7\xb1?$\xf1\xfa\xa0^3J[_\xcbM\x16\x83\x84') sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfa, 0x5, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4408, 0x0, 0x2, 0x4, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffff7ffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r10, 0x0, 0x0) sendfile(r10, r9, 0x0, 0x3ffff) 1.099245589s ago: executing program 6 (id=1787): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040)) sendmsg$qrtr(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000080)="0a93c306c6d3ff62ea61f277cc411d58b0d8e96b1f2094019f1a6fe8572ee2f47339c4acb072aea956574d050e5567ce1249221bd077dfce5840b15e9a1d42bd71727a2454d68b573914a8d41bf1db203a6da5b82a", 0x55}, {&(0x7f0000000100)="cf219ee2b26ceb2ffec967aea43dc054fbc6685638378695b8edcc3b59eccb8be126b5931ccf7726778f1a467e0db7e8fae7159f8ea568e7167685b3a8dd04dc3e57829293abd7210c633f31314700322c952e31e988720a317bd0b1b66830187727556a92cb139f010ce10efbd3a3c7231acb0d189bcb84fd95f606c7148562b3e24df371de2a6e40609b9f6bbcec6ba4fa533dd9ae188fa0a3eca58a1bd6bc710af4a6ed6bfa30a83673d2478b63a60ef0ca916a95a069f44b950a218d03db6cd2daeb08821f954e4e758bf3edd58b65ecd32137a2f19b9cf4be45844f3c0d26011a376147fb1cb2eaa84b0cf820cc3566c2a99313f145fd52ee070bdd50337e2e8dddfcff13750748d538cdd2c303a0dded60e0090f8cf7f8e793fb821350016c71faf886057af8f9f0a6bc09b96a318ff505b538438c5179243d402b39877f71068475515e6ca380d30f7b2e5e0c6b6a3de76485169f4506786205cf71488f0f3bef1609e9df115ff6fd53ac3d438287120284970f0a584c1ae832eafedab83989eca36fd74565041a630aeec973f663111ad31b807c387381d91dfac61f08ae63bddab1b149be5c0f99512c10f1cebc65bccd10046f79e9b8fde7bd0e58bf19fc40b2129f654f01182b16d36be4aea21e5f068c2d6d17cd0764f8378a9233ebc7c5bea4bfc567dc342728b2a2c06e69d838ecb3e88c80f5a2a851b949cc4039cd205e7468fbd9c158b5db0a403a9470a55a1e1a57c34df0b4f45962d4621d10c5448fc2fe83c5bca49805aa2c69a74f7280505f5418c41a15c11d9cd811abe2ee8f23f7f5b5ffcb9d7814cb83729c27452275507299d94839fe0ee70c2d2e0a4cf05350b51469adb41c9fc5246c0ef76673279d9ea2ccdd9a50ea1e371e6a381a2fd1fcbe8699729299f6ead2f9c1cdd918920b57eebbebb7c3400fcb07ca78f6a4c6ab3c8ce077a5b3201d2df3b536e04c464cbce3c48e0ec601824488182326f888e1b0057b5af8b4d08a8431738b2614db7e979dfa4507e03f9c351fc6fb96903d31fa6dceb26c7320e5a32f8d8728a074d63360685481bf42ff6f14ca6210c6a3e7e391c3f4c7ea33b56058bc0bca37b6fedd5d466ecb7943dee6ac0d6f5caddd3eafa611c37ca7e22eee394ff131fde7805d9b77830128e842b7536bc286d3c84b7b07026c6622ba3d690d786e8c81a3143df307edd3a95664ff01a02a05422188c579e1ae8107d0d1eaad0b1b6a2cfa62ddad0c5140b09fb31525d980f25ef92c17979cbd835759a38968ad5f3ecf6715890fffbeb0d3c42f72526ac8514e6af178fa6e8ffa33f29f1b3772085f5b2adc4a829358daaa829266bc03f026f6562f2ccd42bb8b61723fc6c60f2b26ab8f97ec085196432b9ece653c6afd77ca84b3c3fca115a912cf080f2b83d81669acbead32e1508b8a6ee604abddf0440351251ff1bc78edd3eb52f03dd0301fded7a7565d7a7cf1afa7410e1f71b94b7d4a55632c5e5f99e24daec2944e2cce633a0aacc674192774df6cc1212516b6efa1a646c577acaa2adb8b0225bd44fa7387b0d8fcfca514b8dc030aaa47458feaf50c1016b460a3aeb4969f93724685245c794b136a95a3da69a43408bed05ff9eff8e6a269b1ea465acc1cbd754c0042bd4e44dbb1b27ea1f432b5354b9bef61c75dcb88db9d36c49e48a20f7ab0eac69edc8a5143a88d081affcc4941bef8b3ace0f0b32f48757a6fa6fe75b469644d93f4d2f9aadd0b757faa5d30fe295af8a84d1e867be42f391571c8260a43160ad6dba17fe759d8ea229a10d9a47a7ddc14e84b8eaa8603aca89bd9bae2bd3d8a4f0e08e480ca3fef552fdb0861f729a7bf87add2b87230c1392c7382ab98cd27fbe1f35e716640d87e82ce8990e5bc0c9434787a79e18c475a839b4fa94eb72ac6d507af19f86bed294b9fcd88cd0a9e5a6b429bf0c490476d3c5bc7b5127d45e8d269578480dae68d9b42ac02cff362620c205dd6e63d850958de84f9efce467a4d945d266bdad288121f887ffc1fc88d3956474718d438df5d402da3d71d93750450d276ae468c299d4943397ff30c4f64566c00c5af5eda05acd864abebf216898dfd0470f8152d85ccd8f6a6c85e7aaa8c6eb62e34651808120b903df9c20e315d1e442bb7f46888c332ef5b9280fc4ed60f0ee28cca893dd282e104d6a8b95f6bdee68430863e0f57ddaa08b493ba7bdb4a9f0b2cb12e1cf6ea3388a3b83fac90ff68fb9ecf909e69dd7f236252dabfde94731a790fe08dae5261a74e68ca426759ca056bfa2e5f2e793fee510950e6c7c32707cc56401a886ffea7abe145b1c8bc17e17438897c5ccc80018fc79b4cffc8b61d6227954f2f91d8d1322d6d0ed39476fd5b1df2cb7a039bb0df6fedc0120b0ad095b55d8a37dccc7a70a779653553ed5cd0b13ce907877333c1129f861b0533195cfb22c831bc89bea350859b77c001a3a018020f0e6aa8c4a5daebfc2cf6aeeeb653e14a424224f6e886acbf863e2035d02997cd3e5da7809ec020d9ba39bb7aef563c0b973de3d922315d879f1ab79ceaa7c955871341dab78288a9129b275cffa02d3d840c460f5647878d748627aa81ab5b8c4df5148e814b065d320be39835b34058c57421952d382e7b3ec6ed4c049baaf06753ccdf84635116d012e0cdb11496081911377c78a01758ca478e66f621861b23ea67274e6b69f383812f48a3ae64fdfe07654d288aa98eab702ff7f6e1aa63d9c07795dec662e5894d760345b5a08e1a235153dba545f46f2c0475bebf00fc58c0aad718ca12bb0126187da43eee97b0bd99f078aae509dd9f850dffea966575348b7d21065ca6f94ea63e29a971e093085a770b1f277f59526188c13e6501d2c23f44bf76bf0306ce56f56eb087d8fbe135c41314c570ac30e7020718f4864ed0bdd6e57295b4f39fdf67fac5ad762eecbf2ccccd0c15a6170b20712c25f9157bb20f6dd1f214fb2bb55c1099b46e97de320d518f7d647b77369a8c9e3c048bb5d0b4162a86048b4da879168dd97c724957a2873dc2bdf5b7961054f023eee5c419eb10331cf3a36953ba18253e7d0557720ae08d17f9f2ec7ccd17334dceda7e2ac7a0024a88221e8ba806d66f58b63a68c5fea909ca3e5452e2fe7314cf075a11a25c2c8b0cb89733d1ccfed9896c566755b85e7bda7818088cb52dbb4a6430be28b813f7e5d294bde8349439c6f74d05bdaa8e15303b6f4c025c1b75ebe42fb939e6f9e03a8b6422f73e1ec99ddd9f3cafeb38dcf556f42a27a7aa9a8e5f6e14f6d7b39ae076df4944fe2ae12542d78f61276b0d0d74f4437f80fdd4bbe1d6b16507b8ca380c5506c2745377683c3a729b951a9078521c618686a767f2cc3e5fd0ce7169379d37f226f0c8a9d3416e8ef2e574b1261f43ea9321e0e36090b4230f250fe7d5591c1496b1812da8fa2cd3703297c09179cb14d46674b18b7219e5f355e7eb4a04d584b181588c1242fc1358ffce7e884e106b9044b1c7d6ab8219ec2950bfdadc1f2204f6947c2ee03fd78a437384555447fe2af35319fc73d37eb6c12151ff5ba761ab3a1a2bb952c97ee6b362a1a256028bb3cadff813866ee3e4840d739f7db17391b7fca9900f368294de2cee506690dae0b63e1b225d8876557afdf4dd1b6e71ce6695414a4cf95f8da1bcbc7880fbec492e94905659ce54b0678411075b1b336c29f1de68c33b4ebc842f38238a6dddc801d954492a7c7e3111551d9747a812cf360d8063d4010272e593e21567843af93ee54ef7a4ff4574657a28a4c6feaae558ce57114c50e0f0dd31248eec653d86c3d67b4323ac3b404125acbcbd2f28246e1be2486aa5273683d34b66c13a701050bd5c17c812b12a8286d309d6f78a821d1d2e3a1f0325a12aeb0db492733076f41a8261f2fa2ae7be606628bfa702164f31d01f53e6dd5f44d91b44ebd87579de87e805387d901fe9feeac4c1e1ab928a3937ae4eee34e18d8ed7b2f3d0937105cccbb1ea21d9dfc16a38a7e89961a7df90c88779c4dd2fb3f5d86cf624fb26fc21dfa67b0a2217a098a28f0c3ee421de685a87a45f8cff3e7db44d76a71d8f889fddc2987c7534b66569c488ac651ce6cb7732e9662b6a6aed4b738b71d0b979d09cdfd1e9f8d9267f7458f4b1c93823200a91cf34606de073889c99097e2ae22d8939e8feb5e8a8a76930e3f327b1d93a3eb77d9548d15ad19dfed81eb5aeccd60dae87c976f5a8ec0ae89eb36061d8f9919e865705969e34acf24cc08bab62017ebeee42124ab011c067d1a609e1f721c27c8dc56a5d7f7ef2e0f3d47b688b01bd433939da33462f231f196f8af6d16a9a2b024cd590ed678638d42c71ef435110e33168db5d324c68b3d115d48a0681faacf0c2ab1d5245c08deee6c354faf98c3c5bf77b9e5105f5341457cf364127db326ffaf1d579423bf89197f1ae00d77be0f68743100cb21c32feea39d58c312fecf81a115461a5b6cf55628d1b5a02edd4ba60bba6675fcb67e2fc40364ebb1be8d830769996e2f7f454e1fbf7ccb476645f23e4c8f1f27ae3b8cd76a71bc0954c7436ba3a17e0cbf39ec1bb288b2e846934fcc759267769e4a6ebedebbc4c39e2b0893b5b898a01726dd8ad9f4627f0359dcccb6b11c6d972f0f7a5e479ba13cb0fcf33ef7bd5a0adcc0e2dccb87264e629c906ac822b3aaf0f1cf8e9836d4a27e861705d069196e55a8a80dab42e82623eb3765816c0715d305fae8f0c718b2fe7560905494001fb26018bc8a488e3eca61ba9697db96e7f34f0fd1386cb18e0223956bf776c49e00d89d0aebe2a2d13b00019dad36407fcd93c2a7ce73886c9cf2b69d09fe3640f02925c3fa158e31a0ed1f9d2be9a4c9e68b6096dab238a669998906f9b40cbc18bde233d582e6296f3fa481732387204333802d960263c1ac3eb232345a53ff18bd65dfe46f9832dc9ea6b719f80a553a004dda2f302606dcf5f66324771ebf45677a467bc582c0bcba96262dbfde3f6233711d1c050b8c069fd39acde9963727c6f21881102f3fbc9c4b7db96e40683a1f3bf0606f72ae27c719a607d202913cec4cbc5c0911cd1f05e56184a117a3499bbeb58d445cc08b9444a158cc3b3be1ebb0a11918b307972f9a0b9160aa7d2a22fe283e9670471b2107829e870996253b0598915430e5219fd6c9dee9b8c63509780a2185855305f869106425a9ddb284b2b6dcdf71cb731aa899b1d07973525d61c62c19b04d3dcbaee4c187e273a852c0b0466385fe55e1437e1749174df185a1464653461d291e4d0c25a6d31039c25e603b0dc0732a206fc2fd561d73edbc4abea3076e67c48db3ecc16564ffab52e1f38a5e1d61bcd8b06ce9113d9cef197adf323d741053b4143f945d2f237d81e2fde8536b517e44ec52a9e597d1c40f2163d49a74f683284fecebc62d8a5455c1c4b358a605ede44cbc1d8e604d0febcb08712f973cd5a2cb9e0a34c83e80d465b317fc57b69d585af5bdc6636a4b5c4a083cba4563f48a5e91b8fb7b873e1cffc9bf64e4e2e3ab8bcfa542320a97e4c9adcf65f6af7b3895a732f8481e6edd07235d09bbb94e4d6dea8c7b4b8cd3bd7db38df5927030e3bb0d2dc1f03bd36b19ec1eaa488aaef86246c0686fe5c2b834092cf7f18821eb5d3af4ebd728169e908d28e934811d2aabfa426616a0a3fc6a1ce3c36a6d75d0bd79b133971dad038044d421390f44d42aefc6662f4b8b1be9bcb5b2f486fb35dfaa10e5cd464ac14d40621856e34ff84", 0x1000}], 0x2, 0x0, 0x0, 0x8040}, 0x38) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001180)=""/255, &(0x7f0000001280)=0xff) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) socketpair(0x0, 0xa, 0x3ff, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet_nvme(r2, &(0x7f0000001340)=""/133, 0x85, 0x2, &(0x7f0000001400)=@isdn={0x22, 0x2, 0xff, 0x3, 0xa}, 0x80) r3 = add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000001500)={'gre0\x00', 0x8}) getpeername$llc(r0, &(0x7f0000001540)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001580)=0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000015c0)={'erspan0\x00', 0x200}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001600), 0x101181, 0x0) r5 = socket$inet6(0xa, 0xa, 0x40) connect$inet6(r5, &(0x7f0000001640)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10001}, 0x1c) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000001680)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000001780)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x2, 0xa, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, [@exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x959}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000001740)='GPL\x00', 0x20000, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x4, &(0x7f0000001800)=[r0, r0, r0, r0, r0, r6, r7, r0, r0], &(0x7f0000001840)=[{0x5, 0x3, 0xb, 0xa}, {0x0, 0x1, 0x8, 0x9}, {0x2, 0x2, 0x3, 0x4}, {0x5, 0x3, 0xa, 0x4}], 0x10, 0x6}, 0x94) sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x70, 0x0, 0x704, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x1, 0x0, {0xb9, 0xff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x5a, 0x8}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="7cd6d8747fac"}, @NL80211_ATTR_FILS_KEK={0x18, 0xf2, "ccf64d097b2471524fbcbfaf19e5684d671e9063"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040005}, 0x4000410) r8 = openat$cgroup_ro(r6, &(0x7f0000001a80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r8, 0xf517, 0x0) write$P9_RREADDIR(r0, &(0x7f0000001ac0)={0x68, 0x29, 0x1, {0x6, [{{0x20, 0x2, 0x4}, 0x6, 0xb1, 0x7, './file0'}, {{0x8, 0x1, 0x8}, 0x3ff, 0x81, 0x7, './file0'}, {{0x40, 0x4, 0x6}, 0x6, 0x5, 0x7, './file0'}]}}, 0x68) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001bc0)={&(0x7f0000001b40)='ext4_alloc_da_blocks\x00', r9, 0x0, 0x7a89e195}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r6) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x0, 0x0, 0x0, &(0x7f0000001c40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001cc0)={0x4, 0x6, 0x1402, 0x6e11}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[r7, r0, r8], &(0x7f0000001d40)=[{0x1, 0x1, 0x8, 0x8}, {0x3, 0x4}, {0x5, 0x2, 0xb, 0x5}], 0x10, 0x1ff}, 0x94) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000002140)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x40}) 1.052308141s ago: executing program 8 (id=1788): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x77, @rand_addr=' \x01\x00'}}, 0x80000000, 0x0, 0x3, 0x3, 0x24, 0x69e, 0x15}, &(0x7f0000000240)=0x9c) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x24d, &(0x7f0000000500)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x64) fallocate(r8, 0x0, 0x8, 0x2000402) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x20000000000003bd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYRESOCT=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x27, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x101}, 0x1c) process_mrelease(0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/112, &(0x7f0000000080)=0x70) 981.789112ms ago: executing program 7 (id=1789): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9, 0x0, &(0x7f0000000000)="b9fd03076804268cb2", 0x0, 0x40400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000000), 0xfe3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT=r1, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r10 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000300)={0x1a}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000280)={0x2000000}) fadvise64(r5, 0x6, 0x3, 0x3) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf918e0000000000b7020000010000008500000085000000b700000000000000950000000000000013a9097b58bcb6ead43e2e4a95c1210b95ce3ac46a92f3536d16ec1500fa1f1e80e8c3a33b4c6a631cbadf844e5f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 981.000272ms ago: executing program 6 (id=1790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r2, &(0x7f0000003600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)}}], 0x2, 0x810) 931.752353ms ago: executing program 7 (id=1791): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x28801}, 0x8000002) 931.082413ms ago: executing program 6 (id=1792): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 861.057784ms ago: executing program 7 (id=1793): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000008000000010000004000000042000000", @ANYRES32, @ANYBLOB="000000000000000000000082474662784235bc28", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8937, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r5, 0x409, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32=r6, @ANYBLOB="00140000000000000000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r7, &(0x7f0000000d40), 0x0}, 0x20) 716.036507ms ago: executing program 7 (id=1796): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (fail_nth: 3) 433.278822ms ago: executing program 7 (id=1797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r3, 0x2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x400}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000480)={[], [{@uid_gt={'uid>', 0xee00}}]}, 0x3, 0x462, &(0x7f0000001280)="$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") lsetxattr$system_posix_acl(0x0, &(0x7f0000000840)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000300)=[{0x4, 0x4, 0x1800}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6, @ANYRES8=r7], 0xa0}, 0x4c840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r9, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000340)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="01002bbd7000fcdbdf2517000000a1ee01e56d657464657673696d0005000f0002006e657464657673696d300000080003000100000008000b000305000000000000009700000500120000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000058}, 0x20004804) 421.046382ms ago: executing program 6 (id=1798): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000009c0)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@resgid}, {@stripe={'stripe', 0x3d, 0x8}}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='rtc_alarm_irq_enable\x00', r1, 0x0, 0xb}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) finit_module(r2, 0x0, 0x2) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendto(r2, &(0x7f00000008c0)="4a9fc56a9010104c9685958adb539e292034db4454c8e207ce9c92465cd197fe096741ddcccef5fd3ba4c5625ae02c6ba13ce9d0291a7a53ccce96fce71ea0d7822f2ea0d4606f9568777e1e896aba075ca6eba876cb0c527612fda44f52783de382ace3c663fd6376697bd2b58a6fa695db3c228ffc32c05e91e9d78cc1f6bdf4aa907552fcab3a0a89c390e7eb92bfb87c857d04bd96a6154e33c3c70950a1bbec1c57a3f88e2cfddd3f41fd1ffa4fcc4aca093d48ac8079bc86790213358b42f2664123439b05bdf1a1b7e8652d4f144b", 0xd2, 0x5, &(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x2, @local, 'pim6reg\x00'}}, 0x80) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x2000000000000005, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000100000000000000000010018010000202070250000000000202020731af8ff000000004f", @ANYRES64, @ANYRESHEX=r0], &(0x7f0000000700)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) r4 = semget(0x1, 0x4, 0x39c) semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r4, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @empty, 0xc}}}, 0x32) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) semctl$GETZCNT(r4, 0x2, 0xf, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000}) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000800)="59fdd4", 0xfdef}], 0x1, 0x8, 0x365) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, 0xffffffffffffffff, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xd7, 0x98, 0x6, 0x2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x18030, 0x1, 0x2d, 0x5}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, r7, 0x25, 0x8, @void}, 0x10) fadvise64(0xffffffffffffffff, 0x7f, 0x1000000, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x49) 286.564175ms ago: executing program 7 (id=1799): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fsync(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) io_uring_setup(0x354a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x32b}) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800004010000305fcfffffffbdbdf2500000000a21f24623054ac008c21cd51002fbd5eab15", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r6, @ANYBLOB="ff2e2fc56c82ca06a7800f716d8bc7a4ce33b7237dbb07dc811eb7c6eaec074ffeece09570b9afab15eb8ade83ca436b1bbb827ac1f9f6055e6db7e0fa16109e70fce9a55e1cad22af16856dc2a13eabe7fb8567acf224f6977b17f4c660cfb5ba3ed7b6c263a9b086e778105674e6078af62eb674897e4c87d46ce050138983cde8b5b90635f735d1552352bdf8c8f369c5b315ab517767311415"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) accept$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) clock_getres(0x6, 0x0) 183.792537ms ago: executing program 8 (id=1800): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) 0s ago: executing program 8 (id=1801): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf050, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5, @perf_config_ext={0x3, 0x7fffffff}, 0x0, 0x10000, 0xda, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0xf0b, 0x10000000, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): ast mode [ 114.646592][T12561] bond0: entered allmulticast mode [ 114.651866][T12561] bond_slave_0: entered allmulticast mode [ 114.657623][T12561] bond_slave_1: entered allmulticast mode [ 114.689875][T12564] lo speed is unknown, defaulting to 1000 [ 115.170030][T12601] 9pnet_fd: Insufficient options for proto=fd [ 115.190710][T12601] lo speed is unknown, defaulting to 1000 [ 115.315421][T12601] loop8: detected capacity change from 0 to 512 [ 115.324694][T12601] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1101: error while reading EA inode 32 err=-116 [ 115.337535][T12601] EXT4-fs (loop8): Remounting filesystem read-only [ 115.346594][T12601] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 115.357283][T12601] EXT4-fs (loop8): 1 orphan inode deleted [ 115.364014][T12601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.377113][T12601] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.436809][T12643] 9pnet: Could not find request transport: fdáófdno=0x0000000000000005 [ 115.480276][T12649] loop7: detected capacity change from 0 to 1024 [ 115.486958][T12649] EXT4-fs: Ignoring removed orlov option [ 115.508200][T12649] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.585219][T12657] __nla_validate_parse: 6 callbacks suppressed [ 115.585256][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1107'. [ 115.828769][T12647] loop8: detected capacity change from 0 to 2364 [ 115.846055][T12647] iso9660: Unknown parameter 'h' [ 115.910238][T12671] pim6reg: entered allmulticast mode [ 115.916343][T12671] pim6reg: left allmulticast mode [ 115.935392][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.985132][T12716] loop7: detected capacity change from 0 to 164 [ 115.993585][T12716] FAULT_INJECTION: forcing a failure. [ 115.993585][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 116.006591][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.7.1115 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.006660][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.006678][T12716] Call Trace: [ 116.006685][T12716] [ 116.006695][T12716] __dump_stack+0x1d/0x30 [ 116.006754][T12716] dump_stack_lvl+0xe8/0x140 [ 116.006811][T12716] dump_stack+0x15/0x1b [ 116.006900][T12716] should_fail_ex+0x265/0x280 [ 116.006941][T12716] should_failslab+0x8c/0xb0 [ 116.007000][T12716] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 116.007078][T12716] ? sidtab_sid2str_get+0xa0/0x130 [ 116.007164][T12716] kmemdup_noprof+0x2b/0x70 [ 116.007197][T12716] sidtab_sid2str_get+0xa0/0x130 [ 116.007231][T12716] security_sid_to_context_core+0x1eb/0x2e0 [ 116.007267][T12716] security_sid_to_context+0x27/0x40 [ 116.007379][T12716] avc_audit_post_callback+0x9d/0x520 [ 116.007414][T12716] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 116.007445][T12716] common_lsm_audit+0x1bb/0x230 [ 116.007467][T12716] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 116.007567][T12716] slow_avc_audit+0x104/0x140 [ 116.007610][T12716] audit_inode_permission+0x111/0x150 [ 116.007657][T12716] selinux_inode_permission+0x69b/0x740 [ 116.007755][T12716] security_inode_permission+0x6d/0xb0 [ 116.007794][T12716] inode_permission+0x106/0x310 [ 116.007825][T12716] may_open+0x255/0x350 [ 116.007924][T12716] path_openat+0x1b4a/0x2170 [ 116.007994][T12716] ? mntput+0x4b/0x80 [ 116.008033][T12716] ? terminate_walk+0x27f/0x2a0 [ 116.008170][T12716] do_filp_open+0x109/0x230 [ 116.008202][T12716] do_open_execat+0xd8/0x260 [ 116.008224][T12716] alloc_bprm+0x25/0x350 [ 116.008254][T12716] do_execveat_common+0x12e/0x750 [ 116.008306][T12716] ? getname_flags+0x154/0x3b0 [ 116.008347][T12716] __x64_sys_execveat+0x73/0x90 [ 116.008443][T12716] x64_sys_call+0x1fec/0x3000 [ 116.008542][T12716] do_syscall_64+0xd2/0x200 [ 116.008631][T12716] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.008726][T12716] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 116.008798][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.008826][T12716] RIP: 0033:0x7f5760edeec9 [ 116.008842][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.008862][T12716] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 116.008881][T12716] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 116.008894][T12716] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 116.008934][T12716] RBP: 00007f575f947090 R08: 0000000000001000 R09: 0000000000000000 [ 116.008950][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.008967][T12716] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 116.008994][T12716] [ 116.300140][T12716] syz.7.1115: attempt to access beyond end of device [ 116.300140][T12716] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 116.326891][T12716] syz.7.1115: attempt to access beyond end of device [ 116.326891][T12716] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 116.346428][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1116'. [ 116.364247][T12725] loop7: detected capacity change from 0 to 512 [ 116.371036][T12725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.378735][T12725] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 116.386835][T12725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 116.396068][T12725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 116.402847][T12725] EXT4-fs warning (device loop7): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 116.417552][T12725] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 116.424668][T12725] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1117: bg 0: block 40: padding at end of block bitmap is not set [ 116.439228][T12725] EXT4-fs (loop7): Remounting filesystem read-only [ 116.446085][T12725] EXT4-fs (loop7): 1 truncate cleaned up [ 116.450001][T12729] netlink: 'syz.6.1118': attribute type 4 has an invalid length. [ 116.452409][T12725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.479623][T12725] EXT4-fs (loop7): shut down requested (2) [ 116.486259][T12725] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=16 [ 116.495284][T12725] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=16 [ 116.515164][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.672529][T12734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1119'. [ 116.749334][T12750] siw: device registration error -23 [ 116.760746][T12756] 9pnet_fd: Insufficient options for proto=fd [ 116.781003][T12756] lo speed is unknown, defaulting to 1000 [ 116.885331][T12788] 9pnet_fd: Insufficient options for proto=fd [ 117.067768][T12799] FAULT_INJECTION: forcing a failure. [ 117.067768][T12799] name failslab, interval 1, probability 0, space 0, times 0 [ 117.081154][T12799] CPU: 0 UID: 0 PID: 12799 Comm: syz.7.1132 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.081292][T12799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 117.081367][T12799] Call Trace: [ 117.081377][T12799] [ 117.081387][T12799] __dump_stack+0x1d/0x30 [ 117.081449][T12799] dump_stack_lvl+0xe8/0x140 [ 117.081515][T12799] dump_stack+0x15/0x1b [ 117.081554][T12799] should_fail_ex+0x265/0x280 [ 117.081595][T12799] should_failslab+0x8c/0xb0 [ 117.081630][T12799] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 117.081724][T12799] ? __alloc_skb+0x101/0x320 [ 117.081758][T12799] __alloc_skb+0x101/0x320 [ 117.081807][T12799] inet6_ifmcaddr_notify+0x8f/0x150 [ 117.081840][T12799] __ipv6_dev_mc_dec+0x19f/0x380 [ 117.081869][T12799] ipv6_mc_destroy_dev+0x22e/0x4a0 [ 117.081973][T12799] addrconf_ifdown+0xcb5/0xf30 [ 117.082006][T12799] ? __nf_tables_flowtable_event+0x4b5/0x540 [ 117.082108][T12799] ? tls_dev_event+0x3d7/0x910 [ 117.082144][T12799] addrconf_notify+0x222/0x930 [ 117.082184][T12799] ? __pfx_addrconf_notify+0x10/0x10 [ 117.082263][T12799] raw_notifier_call_chain+0x6f/0x1b0 [ 117.082307][T12799] ? call_netdevice_notifiers_info+0x9c/0x100 [ 117.082337][T12799] call_netdevice_notifiers_info+0xae/0x100 [ 117.082373][T12799] unregister_netdevice_many_notify+0xda9/0x15d0 [ 117.082424][T12799] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 117.082528][T12799] rtnl_dellink+0x3cb/0x550 [ 117.082593][T12799] ? selinux_capable+0x31/0x40 [ 117.082645][T12799] ? security_capable+0x83/0x90 [ 117.082682][T12799] ? ns_capable+0x7d/0xb0 [ 117.082711][T12799] ? __pfx_rtnl_dellink+0x10/0x10 [ 117.082819][T12799] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 117.082902][T12799] netlink_rcv_skb+0x120/0x220 [ 117.083014][T12799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 117.083066][T12799] rtnetlink_rcv+0x1c/0x30 [ 117.083100][T12799] netlink_unicast+0x5c0/0x690 [ 117.083137][T12799] netlink_sendmsg+0x58b/0x6b0 [ 117.083229][T12799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.083269][T12799] __sock_sendmsg+0x142/0x180 [ 117.083295][T12799] ____sys_sendmsg+0x31e/0x4e0 [ 117.083396][T12799] ___sys_sendmsg+0x17b/0x1d0 [ 117.083445][T12799] __x64_sys_sendmsg+0xd4/0x160 [ 117.083505][T12799] x64_sys_call+0x191e/0x3000 [ 117.083571][T12799] do_syscall_64+0xd2/0x200 [ 117.083645][T12799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 117.083728][T12799] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 117.083826][T12799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.083855][T12799] RIP: 0033:0x7f5760edeec9 [ 117.083876][T12799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.083895][T12799] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.083915][T12799] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 117.083981][T12799] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 117.083993][T12799] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 117.084005][T12799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 117.084017][T12799] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 117.084038][T12799] [ 117.468169][T12789] loop8: detected capacity change from 0 to 512 [ 117.509844][T12789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.564920][T12789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.595185][T12789] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.640025][T12816] netlink: 7 bytes leftover after parsing attributes in process `syz.7.1138'. [ 117.656981][T12816] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1138'. [ 117.669880][T12789] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1129: corrupted xattr block 19: overlapping e_value [ 117.695081][T12789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 117.708968][T12789] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1129: corrupted xattr block 19: overlapping e_value [ 117.728741][T12789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 117.743878][T12789] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.1129: corrupted xattr block 19: overlapping e_value [ 117.770252][T12840] loop7: detected capacity change from 0 to 1024 [ 117.777441][T12840] EXT4-fs: Ignoring removed orlov option [ 117.801351][ T6652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.812543][T12840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.848798][T12827] cgroup: fork rejected by pids controller in /syz0 [ 117.879050][T12859] 9pnet_fd: Insufficient options for proto=fd [ 117.887120][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1144'. [ 117.901685][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 117.901751][ T29] audit: type=1326 audit(1759555076.931:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.120787][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1146'. [ 118.291333][T12872] bpf: Bad value for 'gid' [ 118.370185][ T29] audit: type=1326 audit(1759555077.061:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.394253][ T29] audit: type=1326 audit(1759555077.061:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.417998][ T29] audit: type=1326 audit(1759555077.061:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.441758][ T29] audit: type=1326 audit(1759555077.061:6260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.465674][ T29] audit: type=1326 audit(1759555077.061:6261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.489530][ T29] audit: type=1326 audit(1759555077.061:6262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.513323][ T29] audit: type=1326 audit(1759555077.061:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.537022][ T29] audit: type=1326 audit(1759555077.061:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.561030][ T29] audit: type=1326 audit(1759555077.061:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12858 comm="syz.2.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 118.607323][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.621341][T12876] Unsupported ieee802154 address type: 0 [ 118.694063][T12876] siw: device registration error -23 [ 118.735081][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1153'. [ 118.748208][T12887] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1153'. [ 118.888329][T12908] pim6reg: entered allmulticast mode [ 118.909359][T12908] pim6reg: left allmulticast mode [ 118.975759][T12919] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1165'. [ 119.175972][T12936] loop2: detected capacity change from 0 to 1024 [ 119.190554][T12936] EXT4-fs: Ignoring removed orlov option [ 119.229810][T12936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.500517][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.582558][T12970] loop2: detected capacity change from 0 to 1024 [ 119.584280][T12974] vlan3: entered allmulticast mode [ 119.605353][T12970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.622365][T12970] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1179: Allocating blocks 385-513 which overlap fs metadata [ 119.655828][T12970] EXT4-fs (loop2): pa ffff888106ec8310: logic 16, phys. 129, len 24 [ 119.663969][T12970] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 119.677051][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.775603][T12997] FAULT_INJECTION: forcing a failure. [ 119.775603][T12997] name failslab, interval 1, probability 0, space 0, times 0 [ 119.788783][T12997] CPU: 0 UID: 0 PID: 12997 Comm: syz.8.1185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.788818][T12997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.788834][T12997] Call Trace: [ 119.788842][T12997] [ 119.788851][T12997] __dump_stack+0x1d/0x30 [ 119.788973][T12997] dump_stack_lvl+0xe8/0x140 [ 119.789019][T12997] dump_stack+0x15/0x1b [ 119.789115][T12997] should_fail_ex+0x265/0x280 [ 119.789294][T12997] should_failslab+0x8c/0xb0 [ 119.789326][T12997] kmem_cache_alloc_noprof+0x50/0x480 [ 119.789358][T12997] ? getname_flags+0x80/0x3b0 [ 119.789459][T12997] getname_flags+0x80/0x3b0 [ 119.789496][T12997] __se_sys_mq_unlink+0x6b/0x260 [ 119.789594][T12997] __x64_sys_mq_unlink+0x1f/0x30 [ 119.789623][T12997] x64_sys_call+0x28b2/0x3000 [ 119.789649][T12997] do_syscall_64+0xd2/0x200 [ 119.789674][T12997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 119.789763][T12997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 119.789820][T12997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.789847][T12997] RIP: 0033:0x7f971849eec9 [ 119.789886][T12997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.789910][T12997] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f1 [ 119.789933][T12997] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 119.789949][T12997] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.790022][T12997] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 119.790037][T12997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.790083][T12997] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 119.790207][T12997] [ 119.794155][T12999] loop7: detected capacity change from 0 to 1024 [ 119.976380][T12999] EXT4-fs: Ignoring removed orlov option [ 119.984516][T12999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.062224][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.205908][T13034] loop2: detected capacity change from 0 to 1024 [ 120.213174][T13034] EXT4-fs: Ignoring removed orlov option [ 120.225616][T13034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.268915][T13040] loop7: detected capacity change from 0 to 1024 [ 120.275868][T13040] EXT4-fs: Ignoring removed orlov option [ 120.287556][T13040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.353514][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.391927][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.416078][T13059] Unsupported ieee802154 address type: 0 [ 120.460152][T13067] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 120.475954][T13059] siw: device registration error -23 [ 120.529213][T13067] team0 (unregistering): Port device team_slave_0 removed [ 120.570495][T13067] team0 (unregistering): Port device team_slave_1 removed [ 120.832388][T13051] loop8: detected capacity change from 0 to 2364 [ 120.848056][T13051] iso9660: Unknown parameter 'h' [ 120.892303][T13137] FAULT_INJECTION: forcing a failure. [ 120.892303][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.905757][T13137] CPU: 1 UID: 0 PID: 13137 Comm: syz.7.1221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.905800][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 120.905815][T13137] Call Trace: [ 120.905823][T13137] [ 120.905838][T13137] __dump_stack+0x1d/0x30 [ 120.905879][T13137] dump_stack_lvl+0xe8/0x140 [ 120.906001][T13137] dump_stack+0x15/0x1b [ 120.906039][T13137] should_fail_ex+0x265/0x280 [ 120.906071][T13137] should_fail+0xb/0x20 [ 120.906113][T13137] should_fail_usercopy+0x1a/0x20 [ 120.906155][T13137] _copy_from_user+0x1c/0xb0 [ 120.906183][T13137] ucma_write+0xd9/0x250 [ 120.906208][T13137] ? __pfx_ucma_write+0x10/0x10 [ 120.906230][T13137] vfs_write+0x269/0x960 [ 120.906280][T13137] ? __rcu_read_unlock+0x4f/0x70 [ 120.906321][T13137] ? __fget_files+0x184/0x1c0 [ 120.906360][T13137] ksys_write+0xda/0x1a0 [ 120.906391][T13137] __x64_sys_write+0x40/0x50 [ 120.906473][T13137] x64_sys_call+0x2802/0x3000 [ 120.906543][T13137] do_syscall_64+0xd2/0x200 [ 120.906603][T13137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 120.906636][T13137] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 120.906682][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.906710][T13137] RIP: 0033:0x7f5760edeec9 [ 120.906731][T13137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.906786][T13137] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 120.906805][T13137] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 120.906820][T13137] RDX: 0000000000000018 RSI: 0000200000000180 RDI: 0000000000000006 [ 120.906832][T13137] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 120.906843][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.906855][T13137] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 120.906957][T13137] [ 121.158628][T13146] pim6reg: entered allmulticast mode [ 121.166741][T13146] pim6reg: left allmulticast mode [ 121.353389][T13160] loop2: detected capacity change from 0 to 2364 [ 121.364028][T13160] iso9660: Unknown parameter 'h' [ 121.405301][T13177] loop7: detected capacity change from 0 to 128 [ 121.628566][T13184] tmpfs: Unknown parameter 'mpoš”ml' [ 121.638327][T13186] loop8: detected capacity change from 0 to 128 [ 121.657851][T13186] FAULT_INJECTION: forcing a failure. [ 121.657851][T13186] name failslab, interval 1, probability 0, space 0, times 0 [ 121.670845][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.8.1237 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.670960][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.670977][T13186] Call Trace: [ 121.670986][T13186] [ 121.671047][T13186] __dump_stack+0x1d/0x30 [ 121.671084][T13186] dump_stack_lvl+0xe8/0x140 [ 121.671128][T13186] dump_stack+0x15/0x1b [ 121.671209][T13186] should_fail_ex+0x265/0x280 [ 121.671319][T13186] should_failslab+0x8c/0xb0 [ 121.671352][T13186] kmem_cache_alloc_noprof+0x50/0x480 [ 121.671387][T13186] ? getname_flags+0x80/0x3b0 [ 121.671460][T13186] getname_flags+0x80/0x3b0 [ 121.671493][T13186] do_sys_openat2+0x60/0x110 [ 121.671520][T13186] __x64_sys_openat+0xf2/0x120 [ 121.671547][T13186] x64_sys_call+0x2eab/0x3000 [ 121.671614][T13186] do_syscall_64+0xd2/0x200 [ 121.671636][T13186] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.671680][T13186] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 121.671779][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.671810][T13186] RIP: 0033:0x7f971849eec9 [ 121.671830][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.671854][T13186] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.671874][T13186] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 121.671891][T13186] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 121.672034][T13186] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 121.672046][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.672058][T13186] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 121.672140][T13186] [ 121.874427][T13191] loop8: detected capacity change from 0 to 128 [ 121.970657][T13200] pim6reg1: entered promiscuous mode [ 121.976302][T13200] pim6reg1: entered allmulticast mode [ 121.989905][T13208] sock: sock_timestamping_bind_phc: sock not bind to device [ 121.998528][T13214] 9pnet_fd: Insufficient options for proto=fd [ 122.020103][T13214] lo speed is unknown, defaulting to 1000 [ 122.138686][T13214] loop7: detected capacity change from 0 to 512 [ 122.151237][T13214] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1245: error while reading EA inode 32 err=-116 [ 122.168586][T13214] EXT4-fs (loop7): Remounting filesystem read-only [ 122.175598][T13214] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.186950][T13214] EXT4-fs (loop7): 1 orphan inode deleted [ 122.193341][T13214] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.207459][T13214] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.403191][T13290] sock: sock_timestamping_bind_phc: sock not bind to device [ 122.498709][T13292] siw: device registration error -23 [ 122.649268][T13296] __nla_validate_parse: 6 callbacks suppressed [ 122.649356][T13296] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1263'. [ 122.687955][T13287] loop7: detected capacity change from 0 to 2364 [ 122.707118][T13287] iso9660: Unknown parameter 'h' [ 122.772054][T13304] 9pnet_fd: Insufficient options for proto=fd [ 122.793735][T13304] lo speed is unknown, defaulting to 1000 [ 122.979058][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 122.979077][ T29] audit: type=1400 audit(1759555082.001:6934): avc: denied { bind } for pid=13337 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 123.060060][ T29] audit: type=1326 audit(1759555082.091:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.060170][ T29] audit: type=1326 audit(1759555082.091:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.149878][ T29] audit: type=1326 audit(1759555082.111:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150004][ T29] audit: type=1326 audit(1759555082.111:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150040][ T29] audit: type=1326 audit(1759555082.111:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150077][ T29] audit: type=1326 audit(1759555082.111:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150104][ T29] audit: type=1326 audit(1759555082.111:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150153][ T29] audit: type=1326 audit(1759555082.111:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.150188][ T29] audit: type=1326 audit(1759555082.111:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13343 comm="syz.0.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4c6f07eec9 code=0x7ffc0000 [ 123.336103][T13356] loop2: detected capacity change from 0 to 512 [ 123.352270][T13356] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1273: dx entry: limit 0 != root limit 125 [ 123.365659][T13356] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1273: Corrupt directory, running e2fsck is recommended [ 123.386699][T13356] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 123.400121][T13356] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1273: corrupted in-inode xattr: invalid ea_ino [ 123.416946][T13356] EXT4-fs (loop2): Remounting filesystem read-only [ 123.430173][T13356] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.467584][T13371] loop8: detected capacity change from 0 to 128 [ 123.553402][T13375] FAULT_INJECTION: forcing a failure. [ 123.553402][T13375] name failslab, interval 1, probability 0, space 0, times 0 [ 123.566306][T13375] CPU: 0 UID: 0 PID: 13375 Comm: syz.8.1280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.566407][T13375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.566423][T13375] Call Trace: [ 123.566507][T13375] [ 123.566517][T13375] __dump_stack+0x1d/0x30 [ 123.566564][T13375] dump_stack_lvl+0xe8/0x140 [ 123.566600][T13375] dump_stack+0x15/0x1b [ 123.566632][T13375] should_fail_ex+0x265/0x280 [ 123.566668][T13375] should_failslab+0x8c/0xb0 [ 123.566706][T13375] kmem_cache_alloc_noprof+0x50/0x480 [ 123.566731][T13375] ? getname_flags+0x80/0x3b0 [ 123.566766][T13375] getname_flags+0x80/0x3b0 [ 123.566848][T13375] do_sys_openat2+0x60/0x110 [ 123.566873][T13375] __x64_sys_openat+0xf2/0x120 [ 123.566898][T13375] x64_sys_call+0x2eab/0x3000 [ 123.566924][T13375] do_syscall_64+0xd2/0x200 [ 123.567024][T13375] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.567051][T13375] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 123.567088][T13375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.567115][T13375] RIP: 0033:0x7f971849eec9 [ 123.567198][T13375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.567222][T13375] RSP: 002b:00007f9716ede038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.567265][T13375] RAX: ffffffffffffffda RBX: 00007f97186f6090 RCX: 00007f971849eec9 [ 123.567282][T13375] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 123.567298][T13375] RBP: 00007f9716ede090 R08: 0000000000000000 R09: 0000000000000000 [ 123.567355][T13375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.567367][T13375] R13: 00007f97186f6128 R14: 00007f97186f6090 R15: 00007fff16b53198 [ 123.567391][T13375] [ 123.577144][T13374] lo speed is unknown, defaulting to 1000 [ 123.897657][T13400] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1273: dx entry: limit 0 != root limit 125 [ 123.910877][T13400] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1273: Corrupt directory, running e2fsck is recommended [ 124.189479][T13410] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.1273: dx entry: limit 0 != root limit 125 [ 124.201959][T13410] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1273: Corrupt directory, running e2fsck is recommended [ 124.347586][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.793414][T13447] loop8: detected capacity change from 0 to 2364 [ 124.804124][T13447] iso9660: Unknown parameter 'h' [ 124.850283][T13460] pim6reg: entered allmulticast mode [ 124.856482][T13460] pim6reg: left allmulticast mode [ 124.909843][T13468] FAULT_INJECTION: forcing a failure. [ 124.909843][T13468] name failslab, interval 1, probability 0, space 0, times 0 [ 124.922881][T13468] CPU: 0 UID: 0 PID: 13468 Comm: syz.2.1296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.922907][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.922919][T13468] Call Trace: [ 124.922926][T13468] [ 124.922934][T13468] __dump_stack+0x1d/0x30 [ 124.922992][T13468] dump_stack_lvl+0xe8/0x140 [ 124.923030][T13468] dump_stack+0x15/0x1b [ 124.923113][T13468] should_fail_ex+0x265/0x280 [ 124.923142][T13468] should_failslab+0x8c/0xb0 [ 124.923167][T13468] kmem_cache_alloc_noprof+0x50/0x480 [ 124.923223][T13468] ? audit_log_start+0x342/0x720 [ 124.923300][T13468] audit_log_start+0x342/0x720 [ 124.923343][T13468] ? kstrtouint+0x76/0xc0 [ 124.923377][T13468] audit_seccomp+0x48/0x100 [ 124.923459][T13468] ? __seccomp_filter+0x82d/0x1250 [ 124.923492][T13468] __seccomp_filter+0x83e/0x1250 [ 124.923524][T13468] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.923571][T13468] ? vfs_write+0x7e8/0x960 [ 124.923601][T13468] ? __rcu_read_unlock+0x4f/0x70 [ 124.923629][T13468] ? __fget_files+0x184/0x1c0 [ 124.923706][T13468] __secure_computing+0x82/0x150 [ 124.923761][T13468] syscall_trace_enter+0xcf/0x1e0 [ 124.923802][T13468] do_syscall_64+0xac/0x200 [ 124.923829][T13468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 124.923862][T13468] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 124.924055][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.924076][T13468] RIP: 0033:0x7f948c9aeec9 [ 124.924090][T13468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.924107][T13468] RSP: 002b:00007f948b40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 124.924139][T13468] RAX: ffffffffffffffda RBX: 00007f948cc05fa0 RCX: 00007f948c9aeec9 [ 124.924151][T13468] RDX: 00002000000003c0 RSI: 0000000000005423 RDI: 0000000000000006 [ 124.924162][T13468] RBP: 00007f948b40f090 R08: 0000000000000000 R09: 0000000000000000 [ 124.924173][T13468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.924184][T13468] R13: 00007f948cc06038 R14: 00007f948cc05fa0 R15: 00007fff372844e8 [ 124.924203][T13468] [ 124.926314][T13468] can0: slcan on ttyS3. [ 125.206357][T13490] Unsupported ieee802154 address type: 0 [ 125.213171][T13467] can0 (unregistered): slcan off ttyS3. [ 125.272871][T13490] siw: device registration error -23 [ 125.297494][T13503] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1300'. [ 125.361335][T13511] pim6reg: entered allmulticast mode [ 125.367565][T13511] pim6reg: left allmulticast mode [ 125.389940][T13516] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 125.451925][T13522] lo speed is unknown, defaulting to 1000 [ 125.466365][T13533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 125.472006][T13532] loop7: detected capacity change from 0 to 1024 [ 125.510494][T13532] EXT4-fs: Ignoring removed orlov option [ 125.532507][T13532] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.585947][T13522] loop8: detected capacity change from 0 to 512 [ 125.608954][T13522] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1309: error while reading EA inode 32 err=-116 [ 125.627915][T13522] EXT4-fs (loop8): Remounting filesystem read-only [ 125.636851][T13522] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 125.647519][T13522] EXT4-fs (loop8): 1 orphan inode deleted [ 125.653798][T13522] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.667179][T13522] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.691604][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.744509][T13575] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1314'. [ 125.772908][T13577] Unsupported ieee802154 address type: 0 [ 125.804560][T13577] siw: device registration error -23 [ 125.849160][T13583] lo speed is unknown, defaulting to 1000 [ 125.948672][T13583] loop7: detected capacity change from 0 to 512 [ 125.958004][T13583] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1318: error while reading EA inode 32 err=-116 [ 125.971434][T13583] EXT4-fs (loop7): Remounting filesystem read-only [ 125.978300][T13583] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 125.989566][T13583] EXT4-fs (loop7): 1 orphan inode deleted [ 125.996039][T13583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.009819][T13583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.064165][T13617] pim6reg: entered allmulticast mode [ 126.071056][T13617] pim6reg: left allmulticast mode [ 126.090008][T13606] loop8: detected capacity change from 0 to 2364 [ 126.099926][T13606] iso9660: Unknown parameter 'h' [ 126.300113][T13647] cgroup: none used incorrectly [ 126.305566][T13648] loop2: detected capacity change from 0 to 1024 [ 126.321158][T13648] EXT4-fs: Ignoring removed orlov option [ 126.354674][T13648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.448398][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 126.460338][T13639] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 126.484609][T13648] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1331'. [ 126.514175][T13639] SELinux: failed to load policy [ 126.537347][T13657] siw: device registration error -23 [ 126.636548][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.747958][T13677] FAULT_INJECTION: forcing a failure. [ 126.747958][T13677] name failslab, interval 1, probability 0, space 0, times 0 [ 126.760958][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.8.1339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.760987][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 126.761000][T13677] Call Trace: [ 126.761009][T13677] [ 126.761020][T13677] __dump_stack+0x1d/0x30 [ 126.761066][T13677] dump_stack_lvl+0xe8/0x140 [ 126.761155][T13677] dump_stack+0x15/0x1b [ 126.761256][T13677] should_fail_ex+0x265/0x280 [ 126.761288][T13677] should_failslab+0x8c/0xb0 [ 126.761317][T13677] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 126.761357][T13677] ? __get_vm_area_node+0x106/0x1d0 [ 126.761389][T13677] __get_vm_area_node+0x106/0x1d0 [ 126.761504][T13677] __vmalloc_node_range_noprof+0x28c/0xed0 [ 126.761537][T13677] ? copy_process+0x399/0x2000 [ 126.761618][T13677] ? obj_cgroup_charge_account+0xba/0x1a0 [ 126.761779][T13677] __vmalloc_node_noprof+0x89/0xc0 [ 126.761832][T13677] ? copy_process+0x399/0x2000 [ 126.761859][T13677] ? copy_process+0x399/0x2000 [ 126.761924][T13677] dup_task_struct+0x433/0x6b0 [ 126.761957][T13677] ? _parse_integer+0x27/0x40 [ 126.761992][T13677] copy_process+0x399/0x2000 [ 126.762026][T13677] ? kstrtouint+0x76/0xc0 [ 126.762090][T13677] ? kstrtouint_from_user+0x9f/0xf0 [ 126.762120][T13677] ? __rcu_read_unlock+0x4f/0x70 [ 126.762151][T13677] kernel_clone+0x16c/0x5c0 [ 126.762189][T13677] ? vfs_write+0x7e8/0x960 [ 126.762218][T13677] __x64_sys_clone+0xe6/0x120 [ 126.762254][T13677] x64_sys_call+0x119c/0x3000 [ 126.762274][T13677] do_syscall_64+0xd2/0x200 [ 126.762398][T13677] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 126.762433][T13677] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 126.762472][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.762501][T13677] RIP: 0033:0x7f971849eec9 [ 126.762566][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.762632][T13677] RSP: 002b:00007f9716efefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 126.762656][T13677] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 126.762670][T13677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 126.762684][T13677] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 126.762696][T13677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 126.762707][T13677] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 126.762766][T13677] [ 126.762775][T13677] syz.8.1339: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 127.028059][T13677] CPU: 1 UID: 0 PID: 13677 Comm: syz.8.1339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.028087][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 127.028103][T13677] Call Trace: [ 127.028113][T13677] [ 127.028123][T13677] __dump_stack+0x1d/0x30 [ 127.028169][T13677] dump_stack_lvl+0xe8/0x140 [ 127.028286][T13677] dump_stack+0x15/0x1b [ 127.028421][T13677] warn_alloc+0x12b/0x1a0 [ 127.028466][T13677] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 127.028522][T13677] ? obj_cgroup_charge_account+0xba/0x1a0 [ 127.028563][T13677] __vmalloc_node_noprof+0x89/0xc0 [ 127.028737][T13677] ? copy_process+0x399/0x2000 [ 127.028771][T13677] ? copy_process+0x399/0x2000 [ 127.028803][T13677] dup_task_struct+0x433/0x6b0 [ 127.028881][T13677] ? _parse_integer+0x27/0x40 [ 127.028936][T13677] copy_process+0x399/0x2000 [ 127.028969][T13677] ? kstrtouint+0x76/0xc0 [ 127.029004][T13677] ? kstrtouint_from_user+0x9f/0xf0 [ 127.029122][T13677] ? __rcu_read_unlock+0x4f/0x70 [ 127.029157][T13677] kernel_clone+0x16c/0x5c0 [ 127.029193][T13677] ? vfs_write+0x7e8/0x960 [ 127.029284][T13677] __x64_sys_clone+0xe6/0x120 [ 127.029331][T13677] x64_sys_call+0x119c/0x3000 [ 127.029417][T13677] do_syscall_64+0xd2/0x200 [ 127.029458][T13677] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.029538][T13677] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.029575][T13677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.029656][T13677] RIP: 0033:0x7f971849eec9 [ 127.029676][T13677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.029696][T13677] RSP: 002b:00007f9716efefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 127.029733][T13677] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 127.029751][T13677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 127.029768][T13677] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 127.029784][T13677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 127.029797][T13677] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 127.029852][T13677] [ 127.259181][T13677] Mem-Info: [ 127.262637][T13677] active_anon:38722 inactive_anon:15 isolated_anon:0 [ 127.262637][T13677] active_file:11174 inactive_file:15181 isolated_file:0 [ 127.262637][T13677] unevictable:0 dirty:308 writeback:0 [ 127.262637][T13677] slab_reclaimable:3664 slab_unreclaimable:15669 [ 127.262637][T13677] mapped:29598 shmem:33750 pagetables:1184 [ 127.262637][T13677] sec_pagetables:0 bounce:0 [ 127.262637][T13677] kernel_misc_reclaimable:0 [ 127.262637][T13677] free:1847717 free_pcp:6086 free_cma:0 [ 127.308848][T13677] Node 0 active_anon:155816kB inactive_anon:60kB active_file:44696kB inactive_file:60724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118392kB dirty:1232kB writeback:0kB shmem:135464kB kernel_stack:3840kB pagetables:4736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 127.337472][T13677] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.368123][T13677] lowmem_reserve[]: 0 2883 7862 7862 [ 127.373476][T13677] Node 0 DMA32 free:2949364kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952896kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 127.405072][T13677] lowmem_reserve[]: 0 0 4978 4978 [ 127.410196][T13677] Node 0 Normal free:4426144kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:156164kB inactive_anon:60kB active_file:44696kB inactive_file:60724kB unevictable:0kB writepending:1232kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19548kB local_pcp:11008kB free_cma:0kB [ 127.444312][T13677] lowmem_reserve[]: 0 0 0 0 [ 127.448924][T13677] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.462139][T13677] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949364kB [ 127.478518][T13677] Node 0 Normal: 981*4kB (UME) 444*8kB (UME) 387*16kB (UME) 361*32kB (UME) 171*64kB (UME) 96*128kB (UME) 45*256kB (UME) 50*512kB (UME) 27*1024kB (UM) 44*2048kB (UM) 1031*4096kB (UM) = 4426308kB [ 127.498036][T13677] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 127.507350][T13677] 60114 total pagecache pages [ 127.512126][T13677] 15 pages in swap cache [ 127.516462][T13677] Free swap = 124936kB [ 127.520775][T13677] Total swap = 124996kB [ 127.525068][T13677] 2097051 pages RAM [ 127.528964][T13677] 0 pages HighMem/MovableOnly [ 127.533672][T13677] 80427 pages reserved [ 127.574937][T13675] pim6reg: entered allmulticast mode [ 127.581360][T13679] pim6reg: left allmulticast mode [ 127.695170][T13691] ref_ctr_offset mismatch. inode: 0x190 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 127.927488][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 127.995470][T13719] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1347'. [ 128.006484][T13718] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.016189][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.025249][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.043921][T13718] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.053388][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.062548][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.091205][T13718] netlink: 7 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.101302][T13718] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1351'. [ 128.713767][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 128.713786][ T29] audit: type=1326 audit(1759555087.741:7083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 128.744548][ T29] audit: type=1326 audit(1759555087.741:7084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13743 comm="syz.2.1361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948c9aeec9 code=0x7ffc0000 [ 128.991453][T13759] loop2: detected capacity change from 0 to 512 [ 129.091141][T13759] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.151004][ T29] audit: type=1400 audit(1759555088.171:7085): avc: denied { remove_name } for pid=13758 comm="syz.2.1366" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.174547][ T29] audit: type=1400 audit(1759555088.171:7086): avc: denied { rmdir } for pid=13758 comm="syz.2.1366" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 129.251297][T13759] EXT4-fs error (device loop2): ext4_empty_dir:3080: inode #12: comm syz.2.1366: Directory hole found for htree leaf block 0 [ 129.299532][T13759] EXT4-fs (loop2): Remounting filesystem read-only [ 129.575445][ T29] audit: type=1326 audit(1759555088.601:7087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.8.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 129.688209][ T29] audit: type=1326 audit(1759555088.631:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.8.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 129.712050][ T29] audit: type=1326 audit(1759555088.641:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.8.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 129.736612][ T29] audit: type=1326 audit(1759555088.641:7090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.8.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 129.760895][ T29] audit: type=1326 audit(1759555088.641:7091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.8.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 129.885231][ T29] audit: type=1326 audit(1759555088.911:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13779 comm="syz.7.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 129.909956][ T4795] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 129.921830][T13780] FAULT_INJECTION: forcing a failure. [ 129.921830][T13780] name failslab, interval 1, probability 0, space 0, times 0 [ 129.934588][T13780] CPU: 1 UID: 0 PID: 13780 Comm: syz.7.1373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.934617][T13780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.934679][T13780] Call Trace: [ 129.934688][T13780] [ 129.934698][T13780] __dump_stack+0x1d/0x30 [ 129.934758][T13780] dump_stack_lvl+0xe8/0x140 [ 129.934802][T13780] dump_stack+0x15/0x1b [ 129.934881][T13780] should_fail_ex+0x265/0x280 [ 129.934917][T13780] should_failslab+0x8c/0xb0 [ 129.935007][T13780] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 129.935034][T13780] ? __alloc_skb+0x101/0x320 [ 129.935067][T13780] __alloc_skb+0x101/0x320 [ 129.935097][T13780] ? audit_log_start+0x342/0x720 [ 129.935177][T13780] audit_log_start+0x3a0/0x720 [ 129.935212][T13780] audit_seccomp+0x48/0x100 [ 129.935250][T13780] ? __seccomp_filter+0x82d/0x1250 [ 129.935395][T13780] __seccomp_filter+0x83e/0x1250 [ 129.935425][T13780] ? __se_sys_mbind+0x49d/0xac0 [ 129.935461][T13780] ? vfs_write+0x7e8/0x960 [ 129.935534][T13780] ? __rcu_read_unlock+0x4f/0x70 [ 129.935606][T13780] __secure_computing+0x82/0x150 [ 129.935721][T13780] syscall_trace_enter+0xcf/0x1e0 [ 129.935765][T13780] do_syscall_64+0xac/0x200 [ 129.935866][T13780] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 129.935892][T13780] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.935970][T13780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.935997][T13780] RIP: 0033:0x7f5760edd8dc [ 129.936018][T13780] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 129.936042][T13780] RSP: 002b:00007f575f947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.936076][T13780] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edd8dc [ 129.936092][T13780] RDX: 000000000000000f RSI: 00007f575f9470a0 RDI: 0000000000000003 [ 129.936108][T13780] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 129.936124][T13780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.936211][T13780] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 129.936233][T13780] [ 129.937122][ T4795] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.212677][T13782] veth1_to_bridge: entered promiscuous mode [ 130.222933][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.234012][T13784] bridge_slave_1 (unregistering): left allmulticast mode [ 130.241710][T13784] bridge_slave_1 (unregistering): left promiscuous mode [ 130.248844][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.289051][T13785] lo speed is unknown, defaulting to 1000 [ 130.345081][T13806] loop2: detected capacity change from 0 to 1024 [ 130.372829][T13806] EXT4-fs: Ignoring removed orlov option [ 130.400358][T13823] loop8: detected capacity change from 0 to 512 [ 130.519351][T13823] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1375: error while reading EA inode 32 err=-116 [ 130.549725][T13823] EXT4-fs (loop8): Remounting filesystem read-only [ 130.561750][T13823] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 130.603916][T13823] EXT4-fs (loop8): 1 orphan inode deleted [ 130.722024][T13848] loop8: detected capacity change from 0 to 1024 [ 130.843184][T13855] FAULT_INJECTION: forcing a failure. [ 130.843184][T13855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.857087][T13855] CPU: 1 UID: 0 PID: 13855 Comm: syz.8.1383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.857200][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.857218][T13855] Call Trace: [ 130.857225][T13855] [ 130.857235][T13855] __dump_stack+0x1d/0x30 [ 130.857282][T13855] dump_stack_lvl+0xe8/0x140 [ 130.857383][T13855] dump_stack+0x15/0x1b [ 130.857440][T13855] should_fail_ex+0x265/0x280 [ 130.857471][T13855] should_fail+0xb/0x20 [ 130.857511][T13855] should_fail_usercopy+0x1a/0x20 [ 130.857552][T13855] fpu__restore_sig+0x12d/0xaa0 [ 130.857656][T13855] ? should_fail_ex+0xdb/0x280 [ 130.857704][T13855] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 130.857751][T13855] x64_sys_call+0x2d4b/0x3000 [ 130.857774][T13855] do_syscall_64+0xd2/0x200 [ 130.857798][T13855] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.857828][T13855] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.857906][T13855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.858024][T13855] RIP: 0033:0x7f971849eec7 [ 130.858041][T13855] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 130.858059][T13855] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 [ 130.858075][T13855] RAX: 0000000000000013 RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 130.858087][T13855] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000003 [ 130.858159][T13855] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 130.858172][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.858184][T13855] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 130.858203][T13855] [ 131.486018][T13884] loop2: detected capacity change from 0 to 32768 [ 131.543098][T13884] loop2: p1 p3 < > [ 131.568698][T13906] team0: Port device dummy0 removed [ 131.583990][T13906] bridge_slave_0: left allmulticast mode [ 131.590260][T13906] bridge_slave_0: left promiscuous mode [ 131.596467][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.611630][T13906] bridge_slave_1: left allmulticast mode [ 131.617438][T13906] bridge_slave_1: left promiscuous mode [ 131.623616][T13906] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.650350][T13915] netlink: 'syz.7.1399': attribute type 10 has an invalid length. [ 131.672810][T13906] bond0: (slave bond_slave_0): Releasing backup interface [ 131.684711][T13906] bond0: (slave bond_slave_1): Releasing backup interface [ 131.709041][T13906] team0: Port device team_slave_0 removed [ 131.724223][T13906] team0: Port device team_slave_1 removed [ 131.755113][T13898] loop8: detected capacity change from 0 to 32768 [ 131.773044][T13906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.780778][T13906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.789880][T13906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.797610][T13906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.806353][T13898] loop8: p1 p3 < > [ 131.823320][T13906] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 131.841309][T13915] vlan0: entered promiscuous mode [ 131.846578][T13915] vlan0: entered allmulticast mode [ 131.851880][T13915] veth0_vlan: entered allmulticast mode [ 131.858539][T13915] bridge0: port 2(vlan0) entered blocking state [ 131.865317][T13915] bridge0: port 2(vlan0) entered disabled state [ 131.899048][T13915] bridge0: port 2(vlan0) entered blocking state [ 131.905654][T13915] bridge0: port 2(vlan0) entered forwarding state [ 131.935933][T13931] pim6reg: entered allmulticast mode [ 131.957944][T13931] pim6reg: left allmulticast mode [ 131.984301][T13943] Unsupported ieee802154 address type: 0 [ 132.014504][T13943] siw: device registration error -23 [ 132.074630][T13953] bond_slave_0: entered promiscuous mode [ 132.081572][T13953] bond_slave_1: entered promiscuous mode [ 132.091130][T13953] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 132.116825][T13953] bond_slave_0: left promiscuous mode [ 132.122491][T13953] bond_slave_1: left promiscuous mode [ 132.263455][T13980] Unsupported ieee802154 address type: 0 [ 132.312290][T13984] pim6reg: entered allmulticast mode [ 132.327489][T13980] siw: device registration error -23 [ 132.365381][T13984] pim6reg: left allmulticast mode [ 132.612035][T14011] lo speed is unknown, defaulting to 1000 [ 133.262345][T14064] loop8: detected capacity change from 0 to 1024 [ 133.272876][T14064] EXT4-fs: Ignoring removed orlov option [ 133.283780][T14064] EXT4-fs mount: 8 callbacks suppressed [ 133.283796][T14064] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.286391][T14067] pim6reg: entered allmulticast mode [ 133.333904][T14079] pim6reg: left allmulticast mode [ 133.378453][T14064] __nla_validate_parse: 14 callbacks suppressed [ 133.378473][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1437'. [ 133.422280][T14064] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1437'. [ 133.524818][T14093] SELinux: failed to load policy [ 133.551371][ T6652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.655480][T14126] pim6reg: entered allmulticast mode [ 133.686139][T14126] pim6reg: left allmulticast mode [ 133.698625][T14139] FAULT_INJECTION: forcing a failure. [ 133.698625][T14139] name failslab, interval 1, probability 0, space 0, times 0 [ 133.705826][T14142] loop7: detected capacity change from 0 to 1024 [ 133.711531][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.8.1458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.711565][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.711581][T14139] Call Trace: [ 133.711593][T14139] [ 133.711604][T14139] __dump_stack+0x1d/0x30 [ 133.711684][T14139] dump_stack_lvl+0xe8/0x140 [ 133.711733][T14139] dump_stack+0x15/0x1b [ 133.711775][T14139] should_fail_ex+0x265/0x280 [ 133.711843][T14139] should_failslab+0x8c/0xb0 [ 133.711880][T14139] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 133.711919][T14139] ? __alloc_skb+0x101/0x320 [ 133.711957][T14139] ? ida_alloc_range+0x68f/0x6c0 [ 133.712047][T14139] __alloc_skb+0x101/0x320 [ 133.712160][T14139] create_monitor_ctrl_open+0x107/0x4a0 [ 133.712239][T14139] hci_sock_bind+0x722/0x990 [ 133.712275][T14139] __sys_bind+0x1d1/0x2a0 [ 133.712389][T14139] __x64_sys_bind+0x3f/0x50 [ 133.712419][T14139] x64_sys_call+0x2b72/0x3000 [ 133.712496][T14139] do_syscall_64+0xd2/0x200 [ 133.712526][T14139] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.712564][T14139] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.712625][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.712678][T14139] RIP: 0033:0x7f971849eec9 [ 133.712699][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.712726][T14139] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 133.712753][T14139] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 133.712771][T14139] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000007 [ 133.712832][T14139] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 133.712850][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.712908][T14139] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 133.712935][T14139] [ 133.914060][T14142] EXT4-fs: Ignoring removed orlov option [ 133.943696][T14142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.965252][T14149] loop8: detected capacity change from 0 to 1024 [ 133.997238][T14149] EXT4-fs: Ignoring removed orlov option [ 134.010396][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1459'. [ 134.035127][T14142] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1459'. [ 134.050006][T14149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 134.068469][T14149] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.081982][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 134.082001][ T29] audit: type=1400 audit(1759555093.111:7237): avc: denied { execute } for pid=14148 comm="syz.8.1461" path="/170/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.082635][T14149] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.1461: lblock 0 mapped to illegal pblock 0 (length 1) [ 134.137137][T14149] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 134.150133][T14149] EXT4-fs (loop8): This should not happen!! Data will be lost [ 134.150133][T14149] [ 134.168342][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.190811][ T6652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.222414][T14174] tmpfs: Bad value for 'mpol' [ 134.228788][ T29] audit: type=1400 audit(1759555093.251:7238): avc: denied { mounton } for pid=14173 comm="syz.7.1466" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 134.427778][T14183] Unsupported ieee802154 address type: 0 [ 134.440443][T14178] FAULT_INJECTION: forcing a failure. [ 134.440443][T14178] name failslab, interval 1, probability 0, space 0, times 0 [ 134.454056][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.8.1468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.454088][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.454105][T14178] Call Trace: [ 134.454113][T14178] [ 134.454123][T14178] __dump_stack+0x1d/0x30 [ 134.454189][T14178] dump_stack_lvl+0xe8/0x140 [ 134.454260][T14178] dump_stack+0x15/0x1b [ 134.454301][T14178] should_fail_ex+0x265/0x280 [ 134.454413][T14178] should_failslab+0x8c/0xb0 [ 134.454440][T14178] kmem_cache_alloc_noprof+0x50/0x480 [ 134.454466][T14178] ? security_file_alloc+0x32/0x100 [ 134.454494][T14178] security_file_alloc+0x32/0x100 [ 134.454514][T14178] init_file+0x5c/0x1d0 [ 134.454567][T14178] alloc_empty_file+0x8b/0x200 [ 134.454652][T14178] alloc_file_pseudo+0xc6/0x160 [ 134.454730][T14178] hugetlb_file_setup+0x2a6/0x3d0 [ 134.454811][T14178] ksys_mmap_pgoff+0x157/0x310 [ 134.454854][T14178] x64_sys_call+0x14a3/0x3000 [ 134.454909][T14178] do_syscall_64+0xd2/0x200 [ 134.454933][T14178] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.454960][T14178] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 134.455009][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.455038][T14178] RIP: 0033:0x7f971849eec9 [ 134.455058][T14178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.455083][T14178] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.455105][T14178] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 134.455118][T14178] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 134.455138][T14178] RBP: 00007f9716eff090 R08: ffffffffffffffff R09: 0000000000000000 [ 134.455225][T14178] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 134.455242][T14178] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 134.455268][T14178] [ 134.668699][ T29] audit: type=1400 audit(1759555093.691:7239): avc: denied { read write } for pid=14188 comm="syz.2.1471" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.692954][ T29] audit: type=1400 audit(1759555093.691:7240): avc: denied { open } for pid=14188 comm="syz.2.1471" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 134.750785][T14183] siw: device registration error -23 [ 134.783790][T14196] pim6reg: entered allmulticast mode [ 134.791710][T14196] pim6reg: left allmulticast mode [ 134.816391][T14197] lo speed is unknown, defaulting to 1000 [ 134.905719][T14225] loop2: detected capacity change from 0 to 1024 [ 134.918841][T14225] EXT4-fs: Ignoring removed orlov option [ 134.932290][T14225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.954472][T14246] program syz.7.1479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.978615][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 134.992129][T14225] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1477'. [ 135.021641][ T29] audit: type=1400 audit(1759555094.051:7241): avc: denied { write } for pid=14252 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 135.060983][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.086534][ T29] audit: type=1326 audit(1759555094.111:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 135.113603][ T29] audit: type=1326 audit(1759555094.111:7243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 135.123239][T14251] lo speed is unknown, defaulting to 1000 [ 135.138321][ T29] audit: type=1326 audit(1759555094.111:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 135.168772][ T29] audit: type=1326 audit(1759555094.111:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 135.192682][ T29] audit: type=1326 audit(1759555094.111:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14257 comm="syz.7.1483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 135.223611][T14281] loop8: detected capacity change from 0 to 512 [ 135.252332][T14281] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1482: error while reading EA inode 32 err=-116 [ 135.259791][T14292] loop2: detected capacity change from 0 to 512 [ 135.273501][T14281] EXT4-fs (loop8): Remounting filesystem read-only [ 135.281482][T14281] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 135.291777][T14281] EXT4-fs (loop8): 1 orphan inode deleted [ 135.298265][T14281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.311824][T14292] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.327330][T14281] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.336704][T14292] EXT4-fs (loop2): mount failed [ 135.349118][T14292] loop2: detected capacity change from 0 to 512 [ 135.355840][T14292] ext4: Unknown parameter 'fsmagic' [ 135.504062][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1492'. [ 135.589026][T14345] loop7: detected capacity change from 0 to 1024 [ 135.608446][T14345] EXT4-fs: Ignoring removed orlov option [ 135.625134][T14345] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.631735][T14358] program syz.2.1498 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.695512][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1495'. [ 135.708096][T14345] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1495'. [ 135.744845][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.785366][T14364] lo speed is unknown, defaulting to 1000 [ 135.805324][T14358] loop2: detected capacity change from 0 to 8192 [ 135.822915][T14358] vfat: Unknown parameter 'ÿÿ' [ 135.884201][T14364] loop7: detected capacity change from 0 to 512 [ 135.923740][T14364] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.1499: error while reading EA inode 32 err=-116 [ 135.939201][T14364] EXT4-fs (loop7): Remounting filesystem read-only [ 135.946060][T14364] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 135.956551][T14364] EXT4-fs (loop7): 1 orphan inode deleted [ 135.963021][T14364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.975880][T14364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.988486][T14398] loop2: detected capacity change from 0 to 512 [ 136.002888][T14398] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.015196][T14398] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1502: bad orphan inode 13 [ 136.026908][T14398] ext4_test_bit(bit=12, block=18) = 1 [ 136.032402][T14398] is_bad_inode(inode)=0 [ 136.036859][T14398] NEXT_ORPHAN(inode)=2130706432 [ 136.041830][T14398] max_ino=32 [ 136.045036][T14398] i_nlink=1 [ 136.049129][T14398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.062168][T14398] FAULT_INJECTION: forcing a failure. [ 136.062168][T14398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.067581][T14409] loop7: detected capacity change from 0 to 1024 [ 136.075702][T14398] CPU: 0 UID: 0 PID: 14398 Comm: syz.2.1502 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.075797][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.075821][T14398] Call Trace: [ 136.075832][T14398] [ 136.075842][T14398] __dump_stack+0x1d/0x30 [ 136.075892][T14398] dump_stack_lvl+0xe8/0x140 [ 136.075939][T14398] dump_stack+0x15/0x1b [ 136.076036][T14398] should_fail_ex+0x265/0x280 [ 136.076079][T14398] should_fail+0xb/0x20 [ 136.076117][T14398] should_fail_usercopy+0x1a/0x20 [ 136.076161][T14398] strncpy_from_user+0x25/0x230 [ 136.076229][T14398] ? kmem_cache_alloc_noprof+0x242/0x480 [ 136.076266][T14398] ? getname_flags+0x80/0x3b0 [ 136.076309][T14398] getname_flags+0xae/0x3b0 [ 136.076397][T14398] user_path_at+0x28/0x130 [ 136.076424][T14398] __se_sys_fspick+0xaa/0x240 [ 136.076467][T14398] __x64_sys_fspick+0x43/0x50 [ 136.076541][T14398] x64_sys_call+0x44c/0x3000 [ 136.076628][T14398] do_syscall_64+0xd2/0x200 [ 136.076660][T14398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.076698][T14398] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.076746][T14398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.076880][T14398] RIP: 0033:0x7f948c9aeec9 [ 136.076904][T14398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.076930][T14398] RSP: 002b:00007f948b40f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 136.076957][T14398] RAX: ffffffffffffffda RBX: 00007f948cc05fa0 RCX: 00007f948c9aeec9 [ 136.076976][T14398] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 136.076994][T14398] RBP: 00007f948b40f090 R08: 0000000000000000 R09: 0000000000000000 [ 136.077052][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.077066][T14398] R13: 00007f948cc06038 R14: 00007f948cc05fa0 R15: 00007fff372844e8 [ 136.077108][T14398] [ 136.277654][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.277882][T14409] EXT4-fs: Ignoring removed orlov option [ 136.292500][T14409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.315701][T14409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.347714][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.393762][T14426] FAULT_INJECTION: forcing a failure. [ 136.393762][T14426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.407993][T14426] CPU: 1 UID: 0 PID: 14426 Comm: syz.8.1511 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.408025][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 136.408109][T14426] Call Trace: [ 136.408118][T14426] [ 136.408179][T14426] __dump_stack+0x1d/0x30 [ 136.408226][T14426] dump_stack_lvl+0xe8/0x140 [ 136.408271][T14426] dump_stack+0x15/0x1b [ 136.408312][T14426] should_fail_ex+0x265/0x280 [ 136.408400][T14426] should_fail+0xb/0x20 [ 136.408435][T14426] should_fail_usercopy+0x1a/0x20 [ 136.408489][T14426] _copy_from_user+0x1c/0xb0 [ 136.408517][T14426] ___sys_sendmsg+0xc1/0x1d0 [ 136.408566][T14426] __x64_sys_sendmsg+0xd4/0x160 [ 136.408668][T14426] x64_sys_call+0x191e/0x3000 [ 136.408754][T14426] do_syscall_64+0xd2/0x200 [ 136.408782][T14426] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 136.408873][T14426] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 136.408921][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.408950][T14426] RIP: 0033:0x7f971849eec9 [ 136.408968][T14426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.408992][T14426] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.409024][T14426] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 136.409041][T14426] RDX: 0000000000040000 RSI: 0000200000000340 RDI: 0000000000000005 [ 136.409058][T14426] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 136.409072][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.409084][T14426] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 136.409104][T14426] [ 136.696742][T14445] loop8: detected capacity change from 0 to 164 [ 136.707048][T14445] syz.8.1517: attempt to access beyond end of device [ 136.707048][T14445] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 136.722014][T14445] syz.8.1517: attempt to access beyond end of device [ 136.722014][T14445] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 136.773067][T14451] loop2: detected capacity change from 0 to 512 [ 136.918008][T14438] wg2: left promiscuous mode [ 136.922952][T14438] wg2: left allmulticast mode [ 137.060722][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 137.164334][ T2547] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.175975][ T2547] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.188354][ T2547] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.207758][ T2547] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.313921][T14486] loop7: detected capacity change from 0 to 1024 [ 137.336514][T14472] loop8: detected capacity change from 0 to 2364 [ 137.355343][T14486] EXT4-fs: test_dummy_encryption option not supported [ 137.384623][T14472] iso9660: Unknown parameter 'h' [ 137.442479][T14484] loop2: detected capacity change from 0 to 1024 [ 137.511173][T14484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.638850][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.720587][T14515] loop2: detected capacity change from 0 to 512 [ 137.733789][T14515] ext4: Unknown parameter 'uid<00000000000000000000' [ 137.830491][T14529] Unsupported ieee802154 address type: 0 [ 137.876023][T14529] siw: device registration error -23 [ 137.900367][T14544] FAULT_INJECTION: forcing a failure. [ 137.900367][T14544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.913594][T14544] CPU: 0 UID: 0 PID: 14544 Comm: syz.2.1545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.913633][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.913649][T14544] Call Trace: [ 137.913657][T14544] [ 137.913665][T14544] __dump_stack+0x1d/0x30 [ 137.913731][T14544] dump_stack_lvl+0xe8/0x140 [ 137.913802][T14544] dump_stack+0x15/0x1b [ 137.913832][T14544] should_fail_ex+0x265/0x280 [ 137.913868][T14544] should_fail+0xb/0x20 [ 137.913938][T14544] should_fail_usercopy+0x1a/0x20 [ 137.913974][T14544] _copy_from_user+0x1c/0xb0 [ 137.913998][T14544] ___bpf_copy_key+0xaa/0x120 [ 137.914040][T14544] map_update_elem+0x165/0x520 [ 137.914087][T14544] __sys_bpf+0x57b/0x7c0 [ 137.914293][T14544] __x64_sys_bpf+0x41/0x50 [ 137.914329][T14544] x64_sys_call+0x2aee/0x3000 [ 137.914355][T14544] do_syscall_64+0xd2/0x200 [ 137.914376][T14544] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.914408][T14544] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.914452][T14544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.914478][T14544] RIP: 0033:0x7f948c9aeec9 [ 137.914494][T14544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.914513][T14544] RSP: 002b:00007f948b40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 137.914580][T14544] RAX: ffffffffffffffda RBX: 00007f948cc05fa0 RCX: 00007f948c9aeec9 [ 137.914597][T14544] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000002 [ 137.914613][T14544] RBP: 00007f948b40f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.914629][T14544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.914645][T14544] R13: 00007f948cc06038 R14: 00007f948cc05fa0 R15: 00007fff372844e8 [ 137.914669][T14544] [ 138.154704][T14556] loop2: detected capacity change from 0 to 512 [ 138.162612][T14556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.175456][T14556] EXT4-fs (loop2): 1 truncate cleaned up [ 138.181949][T14556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.272461][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.338963][T14580] loop8: detected capacity change from 0 to 512 [ 138.346167][T14580] ext4: Unknown parameter 'uid<00000000000000000000' [ 138.361531][T14578] loop2: detected capacity change from 0 to 512 [ 138.405820][T14578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.418617][T14578] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.445235][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.474626][T14605] loop2: detected capacity change from 0 to 512 [ 138.497679][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1565'. [ 138.507486][T14605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.509881][T14609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.520871][T14605] ext4 filesystem being mounted at /146/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.580619][T14609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.606149][T14616] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1563'. [ 138.616358][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.616391][T14597] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1563'. [ 138.640420][T14621] /dev/loop6: Can't lookup blockdev [ 138.646457][T14621] netlink: 9643 bytes leftover after parsing attributes in process `GPL'. [ 138.698445][T14633] loop8: detected capacity change from 0 to 4096 [ 138.712849][T14633] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 138.740160][T14633] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1570'. [ 138.757157][T14633] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 138.769581][T14646] pim6reg: entered allmulticast mode [ 138.775858][T14646] pim6reg: left allmulticast mode [ 138.841186][T14633] tipc: Started in network mode [ 138.846360][T14633] tipc: Node identity ac14140f, cluster identity 4711 [ 138.854178][T14633] tipc: New replicast peer: 255.255.255.255 [ 138.860772][T14633] tipc: Enabled bearer , priority 10 [ 138.871560][T14664] netlink: 'syz.2.1579': attribute type 30 has an invalid length. [ 138.926781][T14671] FAULT_INJECTION: forcing a failure. [ 138.926781][T14671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.940222][T14671] CPU: 1 UID: 0 PID: 14671 Comm: syz.8.1581 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.940253][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.940269][T14671] Call Trace: [ 138.940275][T14671] [ 138.940298][T14671] __dump_stack+0x1d/0x30 [ 138.940342][T14671] dump_stack_lvl+0xe8/0x140 [ 138.940377][T14671] dump_stack+0x15/0x1b [ 138.940456][T14671] should_fail_ex+0x265/0x280 [ 138.940494][T14671] should_fail+0xb/0x20 [ 138.940717][T14671] should_fail_usercopy+0x1a/0x20 [ 138.940797][T14671] _copy_from_user+0x1c/0xb0 [ 138.940826][T14671] generic_map_update_batch+0x3c3/0x550 [ 138.940940][T14671] ? __pfx_generic_map_update_batch+0x10/0x10 [ 138.940973][T14671] bpf_map_do_batch+0x25c/0x380 [ 138.941005][T14671] __sys_bpf+0x5f8/0x7c0 [ 138.941049][T14671] __x64_sys_bpf+0x41/0x50 [ 138.941085][T14671] x64_sys_call+0x2aee/0x3000 [ 138.941107][T14671] do_syscall_64+0xd2/0x200 [ 138.941130][T14671] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.941210][T14671] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.941249][T14671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.941299][T14671] RIP: 0033:0x7f971849eec9 [ 138.941318][T14671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.941340][T14671] RSP: 002b:00007f9716eff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.941362][T14671] RAX: ffffffffffffffda RBX: 00007f97186f5fa0 RCX: 00007f971849eec9 [ 138.941377][T14671] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 138.941434][T14671] RBP: 00007f9716eff090 R08: 0000000000000000 R09: 0000000000000000 [ 138.941447][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.941460][T14671] R13: 00007f97186f6038 R14: 00007f97186f5fa0 R15: 00007fff16b53198 [ 138.941525][T14671] [ 139.177185][T14678] loop7: detected capacity change from 0 to 512 [ 139.186435][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 139.186521][ T29] audit: type=1326 audit(1759555098.191:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.217681][ T29] audit: type=1326 audit(1759555098.191:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.243041][ T29] audit: type=1326 audit(1759555098.191:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.268591][ T29] audit: type=1326 audit(1759555098.191:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.292884][ T29] audit: type=1326 audit(1759555098.191:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.306563][T14678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.317075][ T29] audit: type=1326 audit(1759555098.191:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.330560][T14678] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.354372][ T29] audit: type=1326 audit(1759555098.191:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.391208][ T29] audit: type=1326 audit(1759555098.191:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.415733][ T29] audit: type=1326 audit(1759555098.191:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.420899][T14701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=14701 comm=syz.8.1587 [ 139.439871][ T29] audit: type=1326 audit(1759555098.191:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14677 comm="syz.7.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 139.479175][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.506243][T14700] bond0: (slave dummy0): Releasing backup interface [ 139.536295][T14717] pim6reg: entered allmulticast mode [ 139.542506][T14717] pim6reg: left allmulticast mode [ 139.631846][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1595'. [ 139.885129][ T3153] tipc: Node number set to 2886997007 [ 139.992901][T14761] pim6reg: entered allmulticast mode [ 140.004865][T14761] pim6reg: left allmulticast mode [ 140.153172][T14762] loop2: detected capacity change from 0 to 2364 [ 140.163638][T14762] iso9660: Unknown parameter 'h' [ 140.201471][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1616'. [ 140.305052][T14819] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 140.351498][T14828] pim6reg: entered allmulticast mode [ 140.357766][T14828] pim6reg: left allmulticast mode [ 140.532898][T14847] lo speed is unknown, defaulting to 1000 [ 140.572690][T14854] netlink: 'wÞ¡ÿ': attribute type 1 has an invalid length. [ 140.580528][T14854] netlink: 198116 bytes leftover after parsing attributes in process `wÞ¡ÿ'. [ 140.781346][T14885] FAULT_INJECTION: forcing a failure. [ 140.781346][T14885] name failslab, interval 1, probability 0, space 0, times 0 [ 140.794520][T14885] CPU: 0 UID: 0 PID: 14885 Comm: syz.7.1636 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.794555][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.794606][T14885] Call Trace: [ 140.794611][T14885] [ 140.794619][T14885] __dump_stack+0x1d/0x30 [ 140.794662][T14885] dump_stack_lvl+0xe8/0x140 [ 140.794754][T14885] dump_stack+0x15/0x1b [ 140.794787][T14885] should_fail_ex+0x265/0x280 [ 140.794818][T14885] should_failslab+0x8c/0xb0 [ 140.794930][T14885] kmem_cache_alloc_noprof+0x50/0x480 [ 140.795008][T14885] ? security_file_alloc+0x32/0x100 [ 140.795031][T14885] security_file_alloc+0x32/0x100 [ 140.795055][T14885] init_file+0x5c/0x1d0 [ 140.795123][T14885] alloc_empty_file+0x8b/0x200 [ 140.795165][T14885] alloc_file_pseudo+0xc6/0x160 [ 140.795212][T14885] hugetlb_file_setup+0x2a6/0x3d0 [ 140.795248][T14885] ksys_mmap_pgoff+0x157/0x310 [ 140.795291][T14885] x64_sys_call+0x14a3/0x3000 [ 140.795319][T14885] do_syscall_64+0xd2/0x200 [ 140.795355][T14885] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 140.795436][T14885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.795458][T14885] RIP: 0033:0x7f5760edeec9 [ 140.795476][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.795501][T14885] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.795571][T14885] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 140.795587][T14885] RDX: 000000000300000c RSI: 0000000000c00000 RDI: 0000200000400000 [ 140.795604][T14885] RBP: 00007f575f947090 R08: ffffffffffffffff R09: 0000000000000000 [ 140.795620][T14885] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 140.795636][T14885] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 140.795661][T14885] [ 141.001560][T14886] lo speed is unknown, defaulting to 1000 [ 141.440011][T14918] loop2: detected capacity change from 0 to 1024 [ 141.459926][T14918] EXT4-fs: Ignoring removed orlov option [ 141.500698][T14918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.660625][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1639'. [ 141.683481][T14918] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1639'. [ 141.710505][T14936] Unsupported ieee802154 address type: 0 [ 141.755477][T14938] loop7: detected capacity change from 0 to 512 [ 141.781298][T14938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.851341][T14936] siw: device registration error -23 [ 141.927485][T14938] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.940496][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.019124][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.125943][T14960] loop2: detected capacity change from 0 to 1024 [ 142.142242][T14960] EXT4-fs: Ignoring removed orlov option [ 142.167008][T14960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.203531][T14968] SELinux: failed to load policy [ 142.275246][T14973] FAULT_INJECTION: forcing a failure. [ 142.275246][T14973] name failslab, interval 1, probability 0, space 0, times 0 [ 142.288533][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.7.1654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.288612][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.288629][T14973] Call Trace: [ 142.288636][T14973] [ 142.288646][T14973] __dump_stack+0x1d/0x30 [ 142.288723][T14973] dump_stack_lvl+0xe8/0x140 [ 142.288779][T14973] dump_stack+0x15/0x1b [ 142.288821][T14973] should_fail_ex+0x265/0x280 [ 142.288853][T14973] should_failslab+0x8c/0xb0 [ 142.288911][T14973] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 142.288948][T14973] ? alloc_vmap_area+0x236/0xe80 [ 142.288985][T14973] alloc_vmap_area+0x236/0xe80 [ 142.289049][T14973] ? should_failslab+0x8c/0xb0 [ 142.289074][T14973] ? __kmalloc_cache_node_noprof+0x2b2/0x4a0 [ 142.289136][T14973] __get_vm_area_node+0x173/0x1d0 [ 142.289176][T14973] __vmalloc_node_range_noprof+0x28c/0xed0 [ 142.289213][T14973] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.289324][T14973] ? __rcu_read_unlock+0x4f/0x70 [ 142.289418][T14973] ? cred_has_capability+0x210/0x280 [ 142.289451][T14973] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.289532][T14973] __vmalloc_noprof+0x83/0xc0 [ 142.289633][T14973] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.289668][T14973] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.289704][T14973] ? bpf_prog_alloc+0x2a/0x150 [ 142.289738][T14973] bpf_prog_alloc+0x3c/0x150 [ 142.289769][T14973] bpf_prog_load+0x506/0x1100 [ 142.289813][T14973] ? security_bpf+0x2b/0x90 [ 142.289867][T14973] __sys_bpf+0x469/0x7c0 [ 142.289969][T14973] __x64_sys_bpf+0x41/0x50 [ 142.289999][T14973] x64_sys_call+0x2aee/0x3000 [ 142.290020][T14973] do_syscall_64+0xd2/0x200 [ 142.290071][T14973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.290109][T14973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.290145][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.290262][T14973] RIP: 0033:0x7f5760edeec9 [ 142.290279][T14973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.290298][T14973] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.290386][T14973] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 142.290399][T14973] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 142.290412][T14973] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 142.290425][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.290437][T14973] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 142.290508][T14973] [ 142.548618][T14973] syz.7.1654: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 142.565209][T14973] CPU: 0 UID: 0 PID: 14973 Comm: syz.7.1654 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.565245][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.565262][T14973] Call Trace: [ 142.565270][T14973] [ 142.565280][T14973] __dump_stack+0x1d/0x30 [ 142.565372][T14973] dump_stack_lvl+0xe8/0x140 [ 142.565416][T14973] dump_stack+0x15/0x1b [ 142.565477][T14973] warn_alloc+0x12b/0x1a0 [ 142.565598][T14973] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 142.565636][T14973] ? __rcu_read_unlock+0x4f/0x70 [ 142.565722][T14973] ? cred_has_capability+0x210/0x280 [ 142.565792][T14973] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.565832][T14973] __vmalloc_noprof+0x83/0xc0 [ 142.565867][T14973] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.565923][T14973] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 142.565962][T14973] ? bpf_prog_alloc+0x2a/0x150 [ 142.565994][T14973] bpf_prog_alloc+0x3c/0x150 [ 142.566094][T14973] bpf_prog_load+0x506/0x1100 [ 142.566289][T14973] ? security_bpf+0x2b/0x90 [ 142.566317][T14973] __sys_bpf+0x469/0x7c0 [ 142.566367][T14973] __x64_sys_bpf+0x41/0x50 [ 142.566431][T14973] x64_sys_call+0x2aee/0x3000 [ 142.566460][T14973] do_syscall_64+0xd2/0x200 [ 142.566491][T14973] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.566525][T14973] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.566571][T14973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.566638][T14973] RIP: 0033:0x7f5760edeec9 [ 142.566657][T14973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.566679][T14973] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.566755][T14973] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 142.566767][T14973] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 142.566779][T14973] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 142.566791][T14973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.566802][T14973] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 142.566824][T14973] [ 142.566832][T14973] Mem-Info: [ 142.785264][T14973] active_anon:54829 inactive_anon:17 isolated_anon:0 [ 142.785264][T14973] active_file:11174 inactive_file:15199 isolated_file:0 [ 142.785264][T14973] unevictable:0 dirty:656 writeback:0 [ 142.785264][T14973] slab_reclaimable:3662 slab_unreclaimable:15658 [ 142.785264][T14973] mapped:39962 shmem:49674 pagetables:1536 [ 142.785264][T14973] sec_pagetables:0 bounce:0 [ 142.785264][T14973] kernel_misc_reclaimable:0 [ 142.785264][T14973] free:1833672 free_pcp:7590 free_cma:0 [ 142.831329][T14973] Node 0 active_anon:220012kB inactive_anon:68kB active_file:44696kB inactive_file:60796kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160196kB dirty:2624kB writeback:0kB shmem:199508kB kernel_stack:4016kB pagetables:6260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.860094][T14973] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.890460][T14973] lowmem_reserve[]: 0 2883 7862 7862 [ 142.895913][T14973] Node 0 DMA32 free:2949364kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952896kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 142.927530][T14973] lowmem_reserve[]: 0 0 4978 4978 [ 142.932688][T14973] Node 0 Normal free:4369964kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:221520kB inactive_anon:68kB active_file:44696kB inactive_file:60796kB unevictable:0kB writepending:2624kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:24040kB local_pcp:12732kB free_cma:0kB [ 142.966237][T14973] lowmem_reserve[]: 0 0 0 0 [ 142.970806][T14973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.983515][T14973] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 4*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 4*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949364kB [ 142.999787][T14973] Node 0 Normal: 683*4kB (U) 203*8kB (UE) 67*16kB (UE) 32*32kB (U) 37*64kB (UE) 37*128kB (UE) 33*256kB (UM) 40*512kB (UE) 26*1024kB (UM) 40*2048kB (U) 1030*4096kB (UM) = 4369908kB [ 143.018350][T14973] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 143.027772][T14973] 71215 total pagecache pages [ 143.032539][T14973] 17 pages in swap cache [ 143.036833][T14973] Free swap = 124928kB [ 143.041112][T14973] Total swap = 124996kB [ 143.045370][T14973] 2097051 pages RAM [ 143.049229][T14973] 0 pages HighMem/MovableOnly [ 143.053945][T14973] 80427 pages reserved [ 143.096782][ T9859] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.131291][T14996] FAULT_INJECTION: forcing a failure. [ 143.131291][T14996] name failslab, interval 1, probability 0, space 0, times 0 [ 143.144391][T14996] CPU: 1 UID: 0 PID: 14996 Comm: syz.7.1662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.144451][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.144473][T14996] Call Trace: [ 143.144481][T14996] [ 143.144490][T14996] __dump_stack+0x1d/0x30 [ 143.144532][T14996] dump_stack_lvl+0xe8/0x140 [ 143.144566][T14996] dump_stack+0x15/0x1b [ 143.144648][T14996] should_fail_ex+0x265/0x280 [ 143.144686][T14996] should_failslab+0x8c/0xb0 [ 143.144715][T14996] __kmalloc_noprof+0xa5/0x570 [ 143.144745][T14996] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 143.144850][T14996] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 143.144877][T14996] genl_family_rcv_msg_doit+0x48/0x1b0 [ 143.144914][T14996] ? selinux_capable+0x31/0x40 [ 143.144950][T14996] ? security_capable+0x83/0x90 [ 143.144977][T14996] ? ns_capable+0x7d/0xb0 [ 143.145059][T14996] genl_rcv_msg+0x422/0x460 [ 143.145081][T14996] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 143.145200][T14996] netlink_rcv_skb+0x120/0x220 [ 143.145229][T14996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 143.145259][T14996] genl_rcv+0x28/0x40 [ 143.145346][T14996] netlink_unicast+0x5c0/0x690 [ 143.145461][T14996] netlink_sendmsg+0x58b/0x6b0 [ 143.145523][T14996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.145560][T14996] __sock_sendmsg+0x142/0x180 [ 143.145580][T14996] ____sys_sendmsg+0x31e/0x4e0 [ 143.145613][T14996] ___sys_sendmsg+0x17b/0x1d0 [ 143.145669][T14996] __x64_sys_sendmsg+0xd4/0x160 [ 143.145723][T14996] x64_sys_call+0x191e/0x3000 [ 143.145743][T14996] do_syscall_64+0xd2/0x200 [ 143.145855][T14996] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.145883][T14996] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.145934][T14996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.145963][T14996] RIP: 0033:0x7f5760edeec9 [ 143.145984][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.146008][T14996] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.146029][T14996] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 143.146109][T14996] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 143.146121][T14996] RBP: 00007f575f947090 R08: 0000000000000000 R09: 0000000000000000 [ 143.146135][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.146150][T14996] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 143.146174][T14996] [ 143.146800][T14996] SELinux: failed to load policy [ 143.426610][T15000] FAULT_INJECTION: forcing a failure. [ 143.426610][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 143.440347][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.2.1663 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.440384][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.440401][T15000] Call Trace: [ 143.440410][T15000] [ 143.440419][T15000] __dump_stack+0x1d/0x30 [ 143.440543][T15000] dump_stack_lvl+0xe8/0x140 [ 143.440588][T15000] dump_stack+0x15/0x1b [ 143.440628][T15000] should_fail_ex+0x265/0x280 [ 143.440680][T15000] should_failslab+0x8c/0xb0 [ 143.440714][T15000] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 143.440751][T15000] ? __get_vm_area_node+0x106/0x1d0 [ 143.440829][T15000] __get_vm_area_node+0x106/0x1d0 [ 143.440906][T15000] __vmalloc_node_range_noprof+0x28c/0xed0 [ 143.440999][T15000] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.441041][T15000] ? __rcu_read_unlock+0x4f/0x70 [ 143.441127][T15000] ? cred_has_capability+0x210/0x280 [ 143.441154][T15000] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.441202][T15000] __vmalloc_noprof+0x83/0xc0 [ 143.441236][T15000] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.441353][T15000] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 143.441382][T15000] ? bpf_prog_alloc+0x2a/0x150 [ 143.441505][T15000] bpf_prog_alloc+0x3c/0x150 [ 143.441535][T15000] bpf_prog_load+0x506/0x1100 [ 143.441612][T15000] ? security_bpf+0x2b/0x90 [ 143.441646][T15000] __sys_bpf+0x469/0x7c0 [ 143.441705][T15000] __x64_sys_bpf+0x41/0x50 [ 143.441742][T15000] x64_sys_call+0x2aee/0x3000 [ 143.441764][T15000] do_syscall_64+0xd2/0x200 [ 143.441826][T15000] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.441861][T15000] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.441898][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.441974][T15000] RIP: 0033:0x7f948c9aeec9 [ 143.441993][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.442049][T15000] RSP: 002b:00007f948b40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 143.442071][T15000] RAX: ffffffffffffffda RBX: 00007f948cc05fa0 RCX: 00007f948c9aeec9 [ 143.442083][T15000] RDX: 0000000000000094 RSI: 0000200000000740 RDI: 0000000000000005 [ 143.442143][T15000] RBP: 00007f948b40f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.442159][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.442174][T15000] R13: 00007f948cc06038 R14: 00007f948cc05fa0 R15: 00007fff372844e8 [ 143.442206][T15000] [ 143.702741][T15005] pim6reg: entered allmulticast mode [ 143.709071][T15005] pim6reg: left allmulticast mode [ 143.727332][T15011] 9pnet_fd: Insufficient options for proto=fd [ 143.749022][T15011] lo speed is unknown, defaulting to 1000 [ 143.762585][T15018] netlink: 'syz.7.1668': attribute type 10 has an invalid length. [ 143.782851][T15018] team0 (unregistering): Port device team_slave_0 removed [ 143.795034][T15018] team0 (unregistering): Port device team_slave_1 removed [ 143.838429][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.846275][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.853739][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.861240][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.869064][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.876543][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.884165][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 143.891685][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.899405][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.907449][ T3153] hid-generic 0000:0000:0000.0001: unknown main item tag 0x4 [ 143.946688][ T3153] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.961897][T15011] loop2: detected capacity change from 0 to 512 [ 144.027359][T15011] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.1667: error while reading EA inode 32 err=-116 [ 144.049520][T15011] EXT4-fs (loop2): Remounting filesystem read-only [ 144.064372][T15098] __nla_validate_parse: 4 callbacks suppressed [ 144.064389][T15098] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1673'. [ 144.105543][T15011] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 144.167274][T15011] EXT4-fs (loop2): 1 orphan inode deleted [ 144.175699][T15011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.188844][T15011] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.245338][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 144.267024][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 144.278190][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 144.287444][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 144.287460][ T29] audit: type=1400 audit(1759555103.350:7971): avc: denied { write } for pid=15115 comm="syz.6.1679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.319249][T15121] pim6reg: entered allmulticast mode [ 144.325357][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 144.325651][T15121] pim6reg: left allmulticast mode [ 144.340015][T15105] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1676'. [ 144.372280][ T29] audit: type=1400 audit(1759555103.442:7972): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=30036 daddr=10.128.1.31 dest=51922 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 144.408161][ T29] audit: type=1326 audit(1759555103.473:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.432493][ T29] audit: type=1326 audit(1759555103.473:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.456527][ T29] audit: type=1326 audit(1759555103.473:7975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.480750][ T29] audit: type=1326 audit(1759555103.473:7976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.488428][T15131] loop8: detected capacity change from 0 to 512 [ 144.504852][ T29] audit: type=1326 audit(1759555103.473:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.534908][ T29] audit: type=1326 audit(1759555103.473:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.558675][ T29] audit: type=1326 audit(1759555103.473:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.582575][ T29] audit: type=1326 audit(1759555103.473:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15129 comm="syz.8.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f971849eec9 code=0x7ffc0000 [ 144.608931][T15131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.622135][T15131] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.655145][ T6652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.696122][T15151] 9pnet_fd: Insufficient options for proto=fd [ 144.730346][T15151] lo speed is unknown, defaulting to 1000 [ 144.873053][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 144.882607][T15197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.890025][T15197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.933475][T15198] pim6reg: entered allmulticast mode [ 144.940268][T15198] pim6reg: left allmulticast mode [ 145.073498][T15212] loop7: detected capacity change from 0 to 8192 [ 145.087545][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.096501][T15212] FAT-fs (loop7): Filesystem has been set read-only [ 145.105957][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.115038][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.124016][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.133608][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.143734][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.153409][T15212] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 1043) [ 145.265787][T15237] 9pnet_fd: Insufficient options for proto=fd [ 145.285476][T15237] lo speed is unknown, defaulting to 1000 [ 145.769524][T15282] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1715'. [ 145.848738][T15290] 9pnet_fd: Insufficient options for proto=fd [ 145.869292][T15290] lo speed is unknown, defaulting to 1000 [ 146.039323][T15316] loop7: detected capacity change from 0 to 512 [ 146.068661][T15316] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.082390][T15316] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.112658][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.149671][T15327] pim6reg: entered allmulticast mode [ 146.157321][T15327] pim6reg: left allmulticast mode [ 146.191247][T15337] 9pnet_fd: Insufficient options for proto=fd [ 146.210486][T15336] loop7: detected capacity change from 0 to 128 [ 146.343353][T15356] 9pnet_fd: Insufficient options for proto=fd [ 146.383396][T15356] lo speed is unknown, defaulting to 1000 [ 146.611151][T15401] pim6reg: entered allmulticast mode [ 146.618420][T15401] pim6reg: left allmulticast mode [ 146.625441][T15402] netlink: 'syz.8.1736': attribute type 1 has an invalid length. [ 146.643296][T15402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.655333][T15402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1736'. [ 146.674324][T15402] bond1 (unregistering): Released all slaves [ 146.769911][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 146.834471][T15489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.855116][T15489] bridge0: entered promiscuous mode [ 146.862439][T15489] bridge0: port 4(macvlan0) entered blocking state [ 146.869224][T15489] bridge0: port 4(macvlan0) entered disabled state [ 146.876705][T15489] macvlan0: entered allmulticast mode [ 146.882263][T15489] bridge0: entered allmulticast mode [ 146.889410][T15489] macvlan0: left allmulticast mode [ 146.894599][T15489] bridge0: left allmulticast mode [ 146.896252][T15485] loop8: detected capacity change from 0 to 1024 [ 146.900330][T15489] bridge0: left promiscuous mode [ 146.955657][T15493] siw: device registration error -23 [ 147.048194][T15513] pim6reg: entered allmulticast mode [ 147.054504][T15513] pim6reg: left allmulticast mode [ 147.275065][T15520] loop7: detected capacity change from 0 to 512 [ 147.300875][T15520] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.1753: bad orphan inode 11862016 [ 147.330273][T15520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 147.362055][T15520] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.435203][ T3153] page_pool_release_retry() stalled pool shutdown: id 84, 1 inflight 60 sec [ 147.646488][T11718] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 147.820325][T15561] 9pnet_fd: Insufficient options for proto=fd [ 147.863013][T15561] lo speed is unknown, defaulting to 1000 [ 147.932683][T15592] loop8: detected capacity change from 0 to 512 [ 147.959094][T15592] EXT4-fs error (device loop8): ext4_xattr_inode_iget:442: comm syz.8.1765: error while reading EA inode 32 err=-116 [ 147.974289][T15592] EXT4-fs (loop8): Remounting filesystem read-only [ 147.980975][T15592] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 147.991683][T15592] EXT4-fs (loop8): 1 orphan inode deleted [ 147.998014][T15592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.011006][T15592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.085024][T15608] batadv_slave_1: entered promiscuous mode [ 148.091728][T15608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.104989][T15608] batadv_slave_1 (unregistering): left promiscuous mode [ 148.112387][T15608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.210471][T15615] siw: device registration error -23 [ 148.314010][T15627] syz_tun: entered allmulticast mode [ 148.321588][T15625] loop8: detected capacity change from 0 to 512 [ 148.332491][T15627] dvmrp8: entered allmulticast mode [ 148.343041][T15626] syz_tun: left allmulticast mode [ 148.350692][T15625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.373296][T15625] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.403342][ T6652] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.575001][T15660] SELinux: policydb version 0 does not match my version range 15-35 [ 148.614394][T15660] SELinux: failed to load policy [ 148.630741][T15660] loop8: detected capacity change from 0 to 128 [ 148.650142][T15660] EXT4-fs: Ignoring removed nobh option [ 148.674072][T15660] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.690387][T15673] ipvlan2: entered promiscuous mode [ 148.721153][T15660] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.765784][T15677] pim6reg1: entered promiscuous mode [ 148.771160][T15677] pim6reg1: entered allmulticast mode [ 148.784774][T15660] IPVS: length: 112 != 24 [ 148.802459][ T6652] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.900829][T15689] FAULT_INJECTION: forcing a failure. [ 148.900829][T15689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.914494][T15689] CPU: 0 UID: 0 PID: 15689 Comm: syz.7.1796 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.914524][T15689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.914549][T15689] Call Trace: [ 148.914556][T15689] [ 148.914608][T15689] __dump_stack+0x1d/0x30 [ 148.914652][T15689] dump_stack_lvl+0xe8/0x140 [ 148.914692][T15689] dump_stack+0x15/0x1b [ 148.914779][T15689] should_fail_ex+0x265/0x280 [ 148.914820][T15689] should_fail_alloc_page+0xf2/0x100 [ 148.914857][T15689] __alloc_frozen_pages_noprof+0xff/0x360 [ 148.914957][T15689] alloc_pages_mpol+0xb3/0x260 [ 148.915003][T15689] alloc_pages_noprof+0x90/0x130 [ 148.915040][T15689] __pmd_alloc+0x47/0x420 [ 148.915115][T15689] handle_mm_fault+0x19d4/0x2be0 [ 148.915149][T15689] ? check_vma_flags+0x26e/0x340 [ 148.915244][T15689] __get_user_pages+0x102a/0x1ed0 [ 148.915273][T15689] __gup_longterm_locked+0x8ef/0xe60 [ 148.915298][T15689] ? security_ptrace_access_check+0x69/0x80 [ 148.915331][T15689] ? __ptrace_may_access+0x2c3/0x340 [ 148.915487][T15689] pin_user_pages_remote+0x7e/0xb0 [ 148.915573][T15689] process_vm_rw+0x484/0x960 [ 148.915622][T15689] __x64_sys_process_vm_writev+0x78/0x90 [ 148.915667][T15689] x64_sys_call+0x2a80/0x3000 [ 148.915694][T15689] do_syscall_64+0xd2/0x200 [ 148.915722][T15689] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.915758][T15689] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.915810][T15689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.915839][T15689] RIP: 0033:0x7f5760edeec9 [ 148.915859][T15689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.915971][T15689] RSP: 002b:00007f575f947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 148.916001][T15689] RAX: ffffffffffffffda RBX: 00007f5761135fa0 RCX: 00007f5760edeec9 [ 148.916016][T15689] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 0000000000000192 [ 148.916028][T15689] RBP: 00007f575f947090 R08: 0000000000000001 R09: 0000000000000000 [ 148.916040][T15689] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 148.916052][T15689] R13: 00007f5761136038 R14: 00007f5761135fa0 R15: 00007ffde74da5d8 [ 148.916124][T15689] [ 149.198069][ T29] kauditd_printk_skb: 652 callbacks suppressed [ 149.198166][ T29] audit: type=1400 audit(1759555108.394:8633): avc: denied { bind } for pid=15692 comm="syz.7.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.202662][T15693] loop7: detected capacity change from 0 to 512 [ 149.241993][T15693] ext4: Unknown parameter 'uid>00000000000000060928' [ 149.275493][ T29] audit: type=1326 audit(1759555108.466:8634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.342380][ T29] audit: type=1326 audit(1759555108.466:8635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.366160][ T29] audit: type=1326 audit(1759555108.466:8636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.391971][ T29] audit: type=1326 audit(1759555108.466:8637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.397867][T15704] SELinux: policydb version 0 does not match my version range 15-35 [ 149.416009][ T29] audit: type=1326 audit(1759555108.466:8638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.448280][ T29] audit: type=1326 audit(1759555108.466:8639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.451276][T15704] SELinux: failed to load policy [ 149.472231][ T29] audit: type=1326 audit(1759555108.466:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.477738][T15705] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.477738][T15705] The task syz.6.1798 (15705) triggered the difference, watch for misbehavior. [ 149.501593][ T29] audit: type=1326 audit(1759555108.466:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.501644][ T29] audit: type=1326 audit(1759555108.466:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15699 comm="syz.7.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5760edeec9 code=0x7ffc0000 [ 149.606347][T15695] ================================================================== [ 149.614598][T15695] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 149.621880][T15695] [ 149.624314][T15695] write to 0xffff8881252ceb88 of 8 bytes by task 15705 on cpu 0: [ 149.632139][T15695] shmem_fallocate+0x221/0x840 [ 149.637785][T15695] vfs_fallocate+0x3b6/0x400 [ 149.642494][T15695] madvise_vma_behavior+0x1920/0x1cf0 [ 149.648017][T15695] madvise_do_behavior+0x5b7/0x970 [ 149.653253][T15695] do_madvise+0x10e/0x190 [ 149.657609][T15695] __x64_sys_madvise+0x64/0x80 [ 149.662494][T15695] x64_sys_call+0x1f1a/0x3000 [ 149.667288][T15695] do_syscall_64+0xd2/0x200 [ 149.671821][T15695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.677940][T15695] [ 149.680433][T15695] read to 0xffff8881252ceb88 of 8 bytes by task 15695 on cpu 1: [ 149.688336][T15695] shmem_fault+0x90/0x250 [ 149.692959][T15695] __do_fault+0xbc/0x200 [ 149.697322][T15695] handle_mm_fault+0xf78/0x2be0 [ 149.702184][T15695] __get_user_pages+0x102a/0x1ed0 [ 149.707417][T15695] __mm_populate+0x243/0x3a0 [ 149.712233][T15695] vm_mmap_pgoff+0x232/0x2e0 [ 149.717051][T15695] ksys_mmap_pgoff+0xc2/0x310 [ 149.721849][T15695] x64_sys_call+0x14a3/0x3000 [ 149.726733][T15695] do_syscall_64+0xd2/0x200 [ 149.731350][T15695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.737356][T15695] [ 149.739880][T15695] value changed: 0x0000000000000000 -> 0xffffc900087c3b58 [ 149.747187][T15695] [ 149.749521][T15695] Reported by Kernel Concurrency Sanitizer on: [ 149.755859][T15695] CPU: 1 UID: 0 PID: 15695 Comm: syz.6.1798 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.765792][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.776209][T15695] ================================================================== [ 156.945735][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 156.945752][ T29] audit: type=1400 audit(1759555116.274:8648): avc: denied { egress } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 156.975979][ T29] audit: type=1400 audit(1759555116.274:8649): avc: denied { sendto } for pid=22 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1