last executing test programs: 4m0.302789896s ago: executing program 4 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4m0.174242528s ago: executing program 4 (id=1664): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) msgrcv(0x0, 0x0, 0xfffffffffffffe7b, 0x1, 0x800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x0) unshare(0x24040000) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r4, 0x0) io_uring_setup(0xd54, &(0x7f00000005c0)={0x0, 0x72fa, 0x2, 0x3, 0x1c9}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[]) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f00000002c0), &(0x7f00000005c0)=r7}, 0x20) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x6, 0x151, &(0x7f00000006c0)="1940f382981b85c903ca719647a2f77cb1fabb55e266f623bb5ce91aa14d2d3295602ea7555ee9211ff39038cfeaf4e31ffb2eeecc49ff4bef26168ba1d62ed1dbdaffa8755d7bdc01ebe434602c6ad96d6b84b399359f2a02a63d572a1b180363f420bd14a7dd2db6d9acd96bd1e113520844da32a06231c3ce514a40bc43f7b28e184899e15e01071f04a0f2c88b1e51161f2b186d2a3990080a8aec1f7f837d2dab12d3dadbd8d72380f225648734ccbd081775e7ae219f9a3ef06b4860647f0a55034bb9fce8963b3014269b2c483f70b13c94e3bad7d7c6815f104c69f5506cc539fdc876f131ebfefd74d905d183213ffa37e015a426cf63932f45d196088d160be28191658e8e822957ee90c5a37fd6eb3f0a7943b1efab8f8f2b99aae83c30d0a2bfaf607cec7522c01994fa3ce9f3a2b4423622c9cc49acc61c1c9e932fe265cdddc31afe0d33de1c4003cd410fe79766f722755d55cc544d8f04d60c5eabde152874499fb9bf08e9d46ca87a5be431d6c2f26686a1cefeeed840b73ed016ad2469616442879e21d1b7d3cd1f4a96b9ca45c9b7b603eefc012d3dda2e3d194a91b8a5786fa59dbf1e03c5fe8f45a57123a30c854da6e451a181996f62b1dd2aea0f228a96f229bdd916d42830b0b43369e18061e797241a24208aad388fbeafecfba2dd0fac17ec6938fe3c0831fbd115f47ba26b711b1756ef2e48280d27de38aab9a51bff3cb95a780962a8a2050df7130f664ce8a2a018e123fd8fae6dfbcf2eacac28e862091592217b1a5ef6514c02d5e89e5ebc4f6282df68d6b3c3b6e207d361810584d27ff7b166c33a0d9263371df19c8e5161634b961c0d349180b2ebc0253fcfec14f6450bb6d1c7b48d440c4b2fa688d3615516060209a9033a8fbfe3115916d99de9e2bc60b26dbee3f623b4518a591340f80089aea71ef30b164621caa39b384f296b07aa46b2f1b37f31e2a81facfdc8db370729f3af02ba1901d1c25efa7f50238294eb78a68c10ca4c41e659e83d69791c0d86b748f84d14c8e38780eb3717e2af3fdcc358bbd71c163432e61a36040ce9bc7c69b344ceabf1cd52c6ec63407bdd23fa0530259cc6e7cb584059f0a802bbdd886cfda551c6f3fba6a17dfdc93b442a626e41eb02df89068472aa4772567e8771e7e097f419c3f406d39d5b31296753638a16aefb97f8acf931e598b317508db9f4d946f014f49dab7f1fb7a950f310399ce420d08a2b2e7115eb5e7b3f90f0f4f20298564df36cc81c1baa947be91043ecfc4bb77cc6e2addea3c3a0ba05814f9094d28cc0b93db35ebe372f81fbcdcabd8eb6590238bb7e1f6fef86de2e421309f19107dbf47a8162dfb4e69c48e08285d8e0d97c0b6757632df96d28643ad3bb8f53b0792cb0836df8090e214dea2cd04e02c392de7f998b6fe839441f8a6d"}) unshare(0x2c020400) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) 4m0.133817868s ago: executing program 4 (id=1665): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) 4m0.092984189s ago: executing program 4 (id=1666): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) fstat(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES16=r0, @ANYRES32=r4, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r6, @ANYRESDEC, @ANYBLOB="65a0608c7570b1d356cbb077e83024c42b67e5aff351e49b5581b13fca26a98d1841e25af70a5fb7a1929b12af935b582c54a3146f25687c4b36fa9c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000001c0)='svc_stats_latency\x00', r8, 0x0, 0xbd0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000004900), 0x4) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) lstat(&(0x7f0000000c40)='./file0\x00', 0x0) getgid() pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) mlockall(0x2) setns(0xffffffffffffffff, 0x24020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_FILTER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r9, 0x0, 0x415}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m59.890609862s ago: executing program 4 (id=1669): setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) (fail_nth: 2) 3m59.309504911s ago: executing program 2 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800002abf04000000000000850000001600000095a03277e6fad419a1732ed3c6ebe217101551981264c0311686ebf07ae31cb25271cf7655eefbe7baba94941e082fce8fdddf88bf232e394ddc6979978a88c458b81113a87be517629147e7c480d4dd909b6f9aed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000010000000ae"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 3m59.230710323s ago: executing program 32 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800002abf04000000000000850000001600000095a03277e6fad419a1732ed3c6ebe217101551981264c0311686ebf07ae31cb25271cf7655eefbe7baba94941e082fce8fdddf88bf232e394ddc6979978a88c458b81113a87be517629147e7c480d4dd909b6f9aed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000010000000ae"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 3m58.962732167s ago: executing program 4 (id=1687): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) (fail_nth: 5) 3m58.913317828s ago: executing program 33 (id=1687): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) (fail_nth: 5) 2m43.254291383s ago: executing program 5 (id=3051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/freeze_filesystems', 0x101a02, 0xc8) sendfile(r1, r1, 0x0, 0x101) 2m43.092159286s ago: executing program 5 (id=3052): socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7, 0x8000, 0x7fff, 0x1, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0x17, 0x37, [@multicast2, @multicast1, @broadcast, @multicast1, @broadcast]}, @rr={0x7, 0x13, 0x82, [@local, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0x33, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff7151}, {@empty, 0x1}, {@remote, 0x9}, {@local}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x55, [@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @rand_addr=0x64010102, @broadcast]}]}}}}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) cachestat(r1, &(0x7f0000000180)={0x3, 0x497}, &(0x7f00000003c0), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x0, 0x16c}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0) 2m43.031875257s ago: executing program 5 (id=3054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6056e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x100, 0x1, 0x0, 0x1, 0xc, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/29, 0x1d, 0x6, 0x0, 0x0, 0xffffff00}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 2m42.637368173s ago: executing program 5 (id=3064): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000700)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x550}}, {@delalloc}, {@errors_continue}, {@nombcache}, {@debug}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_clone(0x20180, 0x0, 0xffffff3b, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f00000000c0)=""/15, 0xf, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)={'mangle\x00', 0xaf, "cf81490f1273902ef1f2071700ef05a49b760531143f5fd2a66ce82a64f8082651e31448a0aa7f02d703b555606f6a4e036f48db2e00a2ad403907f051005ea5b8b983af0603eff0c4bc50782860f7f4d09a194a9c1329bcada0a5d37965994b29e5d73f05e01ad2a66057f40de2327d9b8494dc90030df2c6c7f0eeb8a07ebc53c9428763cbd10c2a9495ca2fddbe0bd7226a5db5cbaf55a74446c46f87f63fd87660707c6e6fb624efb4ce5f6c01"}, &(0x7f0000000400)=0xd3) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000001200)={0x60000010}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000140)={0xa000000d}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='vlan1\x00', 0x10) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000600)) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000010380)="d800000018007b29e00212ba0d8105040a601800fe0f041c067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262fbb9ad8ffd5e1cace81ccd40dd601edef3d9393f975307ff0ff0e97031e9f05e9f16e9c95115568624f7ab5000000000000000000000000000000000000000000007a630a5092", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000300)={0x5, 0x0, 0xfffffffd, 0xe, 0x1bf, 0x0}) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14, 0x0, 0xfffffffffffffffc}, 0xfffffffffffffdf3) close_range(r0, r15, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m42.377092827s ago: executing program 5 (id=3074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)=0xb) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB="13e40000520002000000ffff0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x200000d0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext2\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000b00)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'system.posix_acl_default\x00'}}, {@fowner_lt}]}, 0x1, 0x784, &(0x7f00000020c0)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r2, 0x20, &(0x7f0000000700)={&(0x7f0000000800)=""/231, 0xe7, 0x0, &(0x7f0000000b80)=""/170, 0xaa}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r0}, 0x18) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="980000000206010400000000000000000000000a05000400010000000900020073797a300000000011000300686173683a47702c6d61726b003c80f673da65e547e40000000900020073797a3100000000100003006269746d61703a706f72740005000400010000000c00078008000b400000007d0d0003006c6973743a736574000000001400078005001400c0000000060005404e22000005000500010000007e5eb869b5c89a6e1555318b5ba652cdd878e0b7e3d2a861a3f738f079ef41492c79c8b0787423db7baf3c527d5063d656e12aa28c36", @ANYRES8=r4, @ANYRESDEC=r1], 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="3a0001000000000018130000", @ANYRES32, @ANYBLOB="00000000000000008520000001000000d3530001fdffffff8410c0ff08000000185900000800000000000000000000001800000006000000000000000908000000220000", @ANYRES32, @ANYBLOB="0000000005000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) r6 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) lseek(r6, 0xa, 0x4) gettid() r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="080000008a3bd85ffd50e69edece1c42e04bed1020fcf464c25bd1d3ccfc31b49a5be6c07a08f59cb958e4f8", @ANYRES16=r8, @ANYBLOB="00082abd7000ffdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x24048810}, 0x24000804) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(0x0, 0x4) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) write$UHID_DESTROY(r9, &(0x7f0000000080), 0x4) read$char_usb(r10, 0x0, 0x0) 2m39.938239755s ago: executing program 5 (id=3092): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', 0xffffffffffffffff, 0x0, 0x7fffff7f}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000000)={0x400, 0x4}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) 2m39.904743235s ago: executing program 34 (id=3092): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000500)='ext4_alloc_da_blocks\x00', 0xffffffffffffffff, 0x0, 0x7fffff7f}, 0x18) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40103d0b, &(0x7f0000000000)={0x400, 0x4}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r4) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) 1m19.78719864s ago: executing program 7 (id=4473): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6056e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x100, 0x1, 0x0, 0x1, 0xc, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/29, 0x1d, 0x6, 0x0, 0x0, 0xffffff00}}, 0x120) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1m19.517071415s ago: executing program 7 (id=4477): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000180)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x2, 0x0, 0xc0a}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 1m19.433852826s ago: executing program 7 (id=4478): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 1m19.408562586s ago: executing program 7 (id=4480): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m18.917929744s ago: executing program 7 (id=4483): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000001580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x1000) 1m17.627055794s ago: executing program 7 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e011006a001c000000000000000000000008"], 0x38}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0x2271, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) sendfile(r4, r3, 0x0, 0x3ffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) uname(&(0x7f0000000000)=""/2) write$binfmt_aout(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 1m17.603266335s ago: executing program 35 (id=4490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e011006a001c000000000000000000000008"], 0x38}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0x2271, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) sendfile(r4, r3, 0x0, 0x3ffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x18) uname(&(0x7f0000000000)=""/2) write$binfmt_aout(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 16.054600748s ago: executing program 1 (id=5556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40080) io_setup(0xf, &(0x7f0000000000)=0x0) io_getevents(r2, 0x7, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={0x0, 0x989680}) 15.730403194s ago: executing program 1 (id=5558): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") fcntl$setlease(r0, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = getpid() syz_pidfd_open(r5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) sendmmsg$unix(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="f338809965fb852be71e8f9e1bbcf5c0be19777d5bf620a81ab4d0a8c7172597503f6416", 0x24}, {&(0x7f0000000100)="520b0ca33efc59a631e8ad403ec1f88ccc7fda5da9dde610ed7d0d90a474ae9f3f7767aeeb8f1fa16a6c17743fb70de4d51d1ec329768c1b5e28292f823013acf478c6c2040f75d30cbe0048afb1e4b45e391772a370eea70c438e98747bec8843e6b59c78db2e7c9e753085ecf1b6ee3555e6ec48a4c4095084115109633dae42b8cd939ce10536f79394a180aedf9941112831cfa9101696be4850a3ea94c7afc023782a3597b481d0aa96b7204e60c383", 0xb2}, {&(0x7f00000001c0)="8c1184d46699aaff9c7aa7d5ed3acd2358772c54bf9c", 0x16}, {&(0x7f0000000200)="9d29f17d7d56c5be28b6fe5fdf42cab2f7da256a8c3caf623b4bd91327b41a2be3e1c55aca4dfdedc8abc8e06188be861414e9335d19f4bbd1d687286fd6c4ee82b665fa855d214fec19c0657e01b4d8c5ba310778e28ab64f4a15efa114434f8b65692b0bd7325de043d2af8fd01d768daf2c4b04f5fffd2829c171025d0c4bc0bd5ebdce5ce610b54a6c3e2a6bda9a97ef79566643633c5a35a9856804359813deb4ee65e1b0ca1b9a8fe84757375dd7a7bdbedf3fc4109597a5", 0xbb}, {&(0x7f00000002c0)="01b6fedbf5db45e805474f1d158a9aae2f50b32e91672ebf13f2b170c1a343582305bdb0c59add1461166a7145a231d1a9c96ef8634a18bf82edec91ed8bca3b8617efbf6105d48e32edf4e8da2041ce28a25ad6df5ec648fbc61155560c107637e46cba9059e9310e12f1b6bb9ddcf59d6b860f7114ef86e6f6cb85ab0d398ab5926f845bc9ec35182e22442ee5477a5257e6a3f744a28f694850f10dafcad682e4ccafdf24b8c205aca8743d4d703b7a3fd4b74c88bbaaf2ef53a102eb270c2c149736cae11bacbd1723c07901d61879a3fd13c86a600c583fb6e6331a7f692dd327636f54b410214a4c47b2b7160d79e43752551c", 0xf6}, {&(0x7f00000003c0)="cf6c8606a75c860e4442acc5db8208b5512cf4c0ce32e5261563f253bb9d49f87a1b5bdc16d24a6013041268a9d9d22f029abdb44f3cb7d30f8e01977b3756ef8f9209e776271ec260b7a44d4a37616446f73c15ffddd49ec4c632772e9970703724ec7b6fc1c27d073c9be8089095f20c", 0x71}, {&(0x7f0000000440)="9e5cb360ccac1b7bb3d11466a5c6728665339316", 0x14}, {&(0x7f0000000480)="93f3180513f77b9fec44b739263039447195960f8d905b7704caadfa35f080d820749a684e91fe4f50edf2948879bef2196c60672540f8818765028a665d219a1117d6b897ba9b1b8163", 0x4a}, {&(0x7f0000000500)="4128816927fb10678eeeaae8e9d89a06fc5a620d4ec8815c4558764cb11b3341f38e586ae7363ec67094613753cb5a5c0449a17e61f3d0af51133e3696777afd9cf46ef7c9d18206de7aee66c22c3f30e6d2c1b02218835aadc587990781ade4f7027e69cfec3d0e8a3743421c537150e7ed42effc5de7200b2921f12ecd5f7b9a0775632d8afc72fadd9c3f78f5de8a9d9fbb", 0x93}], 0x9, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r2, r3, r0, r2, r2, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0xc0, 0x8e1}}], 0x1, 0x40000) 14.626615331s ago: executing program 1 (id=5571): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='rpm_return_int\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='pwc_handler_exit\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x6, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000000)='|t', 0x2, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) 14.521086192s ago: executing program 1 (id=5573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000900000000000000ff0300001838000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000cda04100000fdffffff3d60feff100000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x3, 0x6}, 0x10, 0x3028a, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[r0, r0], &(0x7f0000000680)=[{0x4, 0x4, 0xb}, {0x2, 0x9, 0xa}, {0x3, 0x3, 0xc, 0x1}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x82) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {0x0}, {0x0}, {&(0x7f0000000380)}], 0x4, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) ptrace(0x4206, r9) ptrace(0x4208, r9) 12.504141154s ago: executing program 1 (id=5603): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) lgetxattr(0x0, &(0x7f0000000d40)=@known='system.posix_acl_access\x00', 0x0, 0x0) 10.458748086s ago: executing program 1 (id=5676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 10.424432257s ago: executing program 36 (id=5676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.309960756s ago: executing program 0 (id=5712): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700003ebc83ef4c8300"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 6.9883244s ago: executing program 0 (id=5717): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 6.970141701s ago: executing program 0 (id=5718): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x2, 0x6, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x1000000000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) 6.915037151s ago: executing program 0 (id=5722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000900000000000000ff0300001838000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000cda04100000fdffffff3d60feff100000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0xe, 0x3, 0x6}, 0x10, 0x3028a, 0xffffffffffffffff, 0x3, &(0x7f0000000640)=[r0, r0], &(0x7f0000000680)=[{0x4, 0x4, 0xb}, {0x2, 0x9, 0xa}, {0x3, 0x3, 0xc, 0x1}], 0x10, 0x7fff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2000000, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x82) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000800)=[{&(0x7f0000000f80)="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", 0x11d}, {0x0}, {0x0}, {&(0x7f0000000380)}], 0x4, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, 0x0, 0x0) splice(r3, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$eJzs3d9rXFUeAPDvnWSStJ1u0t3C/njZbtvdLpTOZLKk0IVlW/ZhF9aC2D+gxmQaQyaZkJnUJBRM/wUVLfggIvjki6DvRcRXfRH1QXzxSRAtFRF8GJk7kzZNMklImkzNfD5wuPfcO5nvORnu+c6cSe4JoGudioiViOiLiGcjYrB1PGmVuNwsjcfdv3drvFGSqNevfZek5xv1WPMzDcdazzkQEc/8N+K5ZGPc6tLy9Fi5XJpv1Qu1mblCdWn5wtTM2GRpsjQ7Mjx6abR4sVgsPra+vvRj7venP7j8rzeeeuvjt99bXEzW9HdtP3ZrZZNjza5nI7fmWG9E/H+vwZ4QPa3+9HW6IexKJiJ+GxGn0+t/MHrSVxMAOMzq9cGoD66tAwCHXePzfy6STL41F5CLTCafb87hnYyjmXKlWjt/o7IwOxHpHNZQZDM3psql4dbc2VBkk0a9mO4/rI+sq/8jIk5ExCv9R9J6frxSnujkGx8A6GLH1uX/H/qb+R8AOOQGOt0AAODAyf8A0H3kfwDoPvI/AHQf+R8Auo/8DwDdR/4HgK7y9NWrjVJfvf/1xM2lhenKzQsTpep0fmZhPD9emZ/LT1Yqk+k9e2a2e75ypTJ3MWYXFgu1UrVWqC4tX5+pLMzWrqf39b5eyh5IrwCArZz4890vkohY+eeRtMSatRzkajjcMp1uANAxPZ1uANAxVvuC7uUzPrDJEr1rZNv/idCd3cc09wCdde6P5v+hW8nB0L3M/0P3Mv8P3ateT6z5DwBdZjdz/Jf34X0I0Dlbf/+/xS1C9vD9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPza5dKSZPKttcBzkcnk8xHHI2IossmNqXJpOCJ+ExGf92f7G/VipxsNAOxR5puktf7XucGzufVn+5Kf+tNtRLzw+rXXFsdqtfli4/j3D47X7rSOj3Si/QDAdlbz9GoeX3X/3q3x1XKQ7fn2SnNx0Y3xe6M33Q5ENiKO3k9a9abG+5WexxB/5XZE/GGz+EnkIo4MtVY+XR+/Efv4/sePh/Ezj8TPpOea28bv4nePoS3Qbe5eaS5ovvH6y8SpdLv59T+QjlB71378yzwY/3rajH+ndtrHjwb/1zb+7Yg/9W4+/qzGT9rEP7vD+F9Xvny53bn6mxHnNs0/ySOxCrWZuUJ1afnC1MzYZGmyNDsyPHpptHixWCwW0jnqwupM9Ub/fvWzF7fq/9E28Qe26f9fd9j/rz75z4d/2SL+389s/vqf3CJ+Iyf+bYfx3znz/vPtzjXiT7Tp/3av//kdxr/76bs/7/ChAMABqC4tT4+Vy6V5O3b2c6fvyWiGnZ3udHpkAvbbw4u+0y0BAAAAAAAAAAAAAADaOYh/J+p0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi8fgkAAP//ZCDc4A==") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r9, 0x13) ptrace(0x4206, r9) 5.189066429s ago: executing program 0 (id=5746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000"], 0x48) 4.758345116s ago: executing program 0 (id=5755): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000"/37], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 3.761902671s ago: executing program 37 (id=5755): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000"/37], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) 3.673597472s ago: executing program 6 (id=5765): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = accept4(r0, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000540)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80, &(0x7f0000000200)=[{&(0x7f00000005c0)="aa6ffbea7d42da149e066552827cdf39f6566271c3f2d53deebef625a5e75366e831b5e88a513a460e3796470bbe4a87979309041ec318f6508fc05f9f5ab3af6152866b4ea25784efc8d12848e029a279467a82341fc90e766b234f9b4c5a", 0x5f}, {&(0x7f0000000180)}, {&(0x7f0000001080)="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", 0x1000}], 0x3, &(0x7f0000002080)=[{0x1010, 0x1, 0x9, "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"}], 0x1010}, 0x4000) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0xc8, 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x464, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYRES64=0x0, @ANYRESDEC=r6, @ANYRESDEC, @ANYRES32=0x0, @ANYRES64=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010001) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_emit_ethernet(0x4a, &(0x7f00000007c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd608e272600142c00ff020000000000000000000000000001fe8000000000000000000000000000aa80024e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500800a49c62b3005235dfee3226c48c5428cc8b97b8d744861065898dad8925551bd542054d92ba9551ecf3de48b7e85d01a3fff5701b657b4b7ee3538ccc58a4e0"], 0x0) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) 2.822759026s ago: executing program 6 (id=5777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xc6, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}, {0x8, 0x6558, 0x0, "9fa35b440c672e9640db95afb7ac584b448423a30f3dfbfd50cad13f65c90b7066060fdc1102602c3a39c5c7c395a203d401346f7cfa337a1e727b6ed7490954f0f445cd2726796f3b54f5374f56c2a48fc6b29a56df6c9a23879613a7aef0b849ed24ba7c987167032dcc13084e"}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x1, 0x80000000000001, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffe80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r8, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffc, @empty, 0x6}}}, 0x32) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 1.878912891s ago: executing program 6 (id=5787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6056e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x100, 0x1, 0x0, 0x1, 0xc, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r3}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r8, 0x0, 0x0) write$UHID_DESTROY(r8, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1.408594898s ago: executing program 6 (id=5790): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1.30228303s ago: executing program 6 (id=5792): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff0100000000000000000000000000010000000000000000862300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000159e000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x40000) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket(0x10, 0x2, 0x0) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010005009265406c09306903d800", [0x0, 0x1]}}) 1.29243087s ago: executing program 9 (id=5793): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010000000000140003007866726d30"], 0x58}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r5, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r0) 1.178566741s ago: executing program 6 (id=5794): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240), &(0x7f0000000380)='$\x00LQ->\xa0\x85\'\xf4\xfc\x8f\x96\x96\xfd\xb6\xef\x7f\x04\a\x1b\x1c\xf4\xb8', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e21, @rand_addr=0xf}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x3ff, @mcast1, 0x7}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e20, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, @in6={0xa, 0x4e21, 0x2, @private0, 0xd}], 0x84) sendmmsg$inet6(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000140)='W', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xc0000, 0x20000000, 0x7f, 0x3ff, 0x3, {0x6, 0x2, 0xfa, 0x8, 0x1}, {0x0, 0x2, 0x6, 0xff81, 0xf3dc, 0x6}, 0xd5, 0x7fff, 0x4}}]}, @TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) shutdown(r1, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r8 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r8, &(0x7f0000002480)=[{0x0, 0x0, 0x1000}], 0x1) semop(r8, &(0x7f00000003c0)=[{0x0, 0xfffc, 0x800}], 0x14d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00^\x00', &(0x7f0000000940)="ad", 0x1) 1.146408442s ago: executing program 2 (id=5761): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700003ebc83ef4c8300"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 1.119979312s ago: executing program 9 (id=5796): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xc6, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}, {0x8, 0x6558, 0x0, "9fa35b440c672e9640db95afb7ac584b448423a30f3dfbfd50cad13f65c90b7066060fdc1102602c3a39c5c7c395a203d401346f7cfa337a1e727b6ed7490954f0f445cd2726796f3b54f5374f56c2a48fc6b29a56df6c9a23879613a7aef0b849ed24ba7c987167032dcc13084e"}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x1, 0x80000000000001, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffe80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r8, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffc, @empty, 0x6}}}, 0x32) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 1.037108463s ago: executing program 2 (id=5798): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xc6, 0x0, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}, {0x8, 0x6558, 0x0, "9fa35b440c672e9640db95afb7ac584b448423a30f3dfbfd50cad13f65c90b7066060fdc1102602c3a39c5c7c395a203d401346f7cfa337a1e727b6ed7490954f0f445cd2726796f3b54f5374f56c2a48fc6b29a56df6c9a23879613a7aef0b849ed24ba7c987167032dcc13084e"}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x1, 0x80000000000001, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x1, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xfffffe80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x6}, 0x18) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r8, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x1, 0x2, 0x3, 0x4, {0xa, 0x4e21, 0xfffffffc, @empty, 0x6}}}, 0x32) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) 965.738295ms ago: executing program 3 (id=5800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x769}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) 965.006305ms ago: executing program 8 (id=5801): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r0, r2, 0x0, 0x1000000000004) 931.372016ms ago: executing program 3 (id=5802): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 930.910376ms ago: executing program 8 (id=5803): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x7, @private2, 0x5}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) 925.345165ms ago: executing program 3 (id=5804): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x1012, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) recvmsg$unix(r3, &(0x7f0000000700)={&(0x7f00000004c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/93, 0x5d}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000340)}, {&(0x7f00000005c0)=""/224, 0xe0}], 0x4}, 0x10000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) ioperm(0x0, 0x3, 0x2) (async) fchmodat(r0, &(0x7f0000000780)='./file0\x00', 0xa8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0x10000, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x5, 0xfe9d, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7b2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) (async) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x30000000, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @initdev}, &(0x7f0000000200)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="00000000050000000000000000000000000000000000000000000000675ac8ea8b96ed166f39064e529d9d5e54ea99a2a73610b52d79a6fc120c57c899a4cf30133eeaa88ee75276d264d0b885e9e78ac83492e6af826774eba26eacf91055ad099e940dd8c9db4be7d688b10b0bb3fecc3c57b4eb673ba0081b041ac5c9c011b0cc9d7431e221bc4860d45dcd14fe653b"], 0x50) (async) fsetxattr$security_selinux(r1, &(0x7f0000000340), &(0x7f0000000740)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x2) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 910.934076ms ago: executing program 8 (id=5805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) fadvise64(r1, 0x6000000000000, 0x4, 0x4) (fail_nth: 1) 868.781506ms ago: executing program 3 (id=5806): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010000000000140003007866726d30"], 0x58}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0xb000001c}) close(r0) 661.82557ms ago: executing program 8 (id=5807): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) 661.421ms ago: executing program 3 (id=5808): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700003ebc83ef4c8300"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 644.89463ms ago: executing program 8 (id=5809): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) 609.87069ms ago: executing program 8 (id=5810): r0 = io_uring_setup(0x51d8, &(0x7f0000000100)={0x0, 0x9f09, 0x10000, 0x2, 0x3c0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b7c300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r4, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000280)={0x9}, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r9, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r9, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4ea}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80011}, 0x404c8c4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r7, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r10 = fsmount(r6, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00') openat(r10, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r11, 0x9, 0xba, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=0x24) 592.644711ms ago: executing program 3 (id=5811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e011006a001c000000000000000000000008"], 0x38}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd70000000000001"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x404, &(0x7f0000000200)={[{@data_err_ignore}, {@mb_optimize_scan}]}, 0x1, 0x5e6, &(0x7f0000001200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0x2271, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) sendfile(r5, r4, 0x0, 0x3ffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x18) uname(&(0x7f0000000000)=""/2) write$binfmt_aout(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="000006b191000000910000a485dd0040000000aa020000080000000000000000"], 0x20) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 194.330677ms ago: executing program 9 (id=5812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x769}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x50) 122.117698ms ago: executing program 9 (id=5813): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0xee, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002000000000000000010000e201000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x3, 0x5, 0x8, 0x10002, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x2, 0x2, 0x4, 0x9, @void, @value, @value=r0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000003140)=""/4104, 0x1008}, {&(0x7f0000002f40)=""/196, 0xc4}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001fc0)=""/197, 0xc5}], 0x4}, 0x3}], 0x1b00, 0x0, 0x0) 113.928828ms ago: executing program 2 (id=5814): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 91.515728ms ago: executing program 2 (id=5815): sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2900ffa61e00190f00003fffffffda060200000000e80001dd0008040d000800ea11c21d0005000000", 0x29}], 0x1) 29.791489ms ago: executing program 2 (id=5816): r0 = io_uring_setup(0x51d8, &(0x7f0000000100)={0x0, 0x9f09, 0x10000, 0x2, 0x3c0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="0000000000000000000000b7c300000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x48) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r4, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000280)={0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='afs_cell\x00', r6}, 0xc) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r10, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x4ea}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80011}, 0x404c8c4) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @remote}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) sendto$inet(r8, 0x0, 0x0, 0x24000087, &(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10) r11 = fsmount(r7, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r11, &(0x7f0000000140)='./file0\x00') openat(r11, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r12, 0x9, 0xba, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=0x24) 25.59728ms ago: executing program 9 (id=5817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 0s ago: executing program 9 (id=5818): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010000000000140003007866726d30"], 0x58}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0xb000001c}) close(r0) kernel console output (not intermixed with test programs): call_64+0xd2/0x200 [ 284.973893][T25449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.974048][T25449] ? clear_bhb_loop+0x40/0x90 [ 284.974108][T25449] ? clear_bhb_loop+0x40/0x90 [ 284.974129][T25449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.974152][T25449] RIP: 0033:0x7ff67358e929 [ 284.974236][T25449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.974255][T25449] RSP: 002b:00007ff671bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.974276][T25449] RAX: ffffffffffffffda RBX: 00007ff6737b5fa0 RCX: 00007ff67358e929 [ 284.974292][T25449] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 284.974307][T25449] RBP: 00007ff671bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.974322][T25449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.974354][T25449] R13: 0000000000000000 R14: 00007ff6737b5fa0 R15: 00007ffd60eede48 [ 284.974382][T25449] [ 285.076963][T25442] Set syz1 is full, maxelem 65536 reached [ 285.224324][T25451] loop6: detected capacity change from 0 to 512 [ 285.231119][T25451] ext4: Unknown parameter 'dont_measure' [ 285.278903][T25450] loop1: detected capacity change from 0 to 256 [ 285.286591][T25450] msdos: Unknown parameter 'dttq' [ 285.297746][T25450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.621861][T25472] FAULT_INJECTION: forcing a failure. [ 285.621861][T25472] name failslab, interval 1, probability 0, space 0, times 0 [ 285.642766][T25472] CPU: 1 UID: 0 PID: 25472 Comm: syz.8.4791 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 285.642833][T25472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.642848][T25472] Call Trace: [ 285.642856][T25472] [ 285.642867][T25472] __dump_stack+0x1d/0x30 [ 285.642894][T25472] dump_stack_lvl+0xe8/0x140 [ 285.642914][T25472] dump_stack+0x15/0x1b [ 285.642968][T25472] should_fail_ex+0x265/0x280 [ 285.643006][T25472] should_failslab+0x8c/0xb0 [ 285.643040][T25472] kmem_cache_alloc_node_noprof+0x57/0x320 [ 285.643071][T25472] ? __alloc_skb+0x101/0x320 [ 285.643109][T25472] __alloc_skb+0x101/0x320 [ 285.643146][T25472] netlink_alloc_large_skb+0xba/0xf0 [ 285.643180][T25472] netlink_sendmsg+0x3cf/0x6b0 [ 285.643208][T25472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.643291][T25472] __sock_sendmsg+0x145/0x180 [ 285.643385][T25472] ____sys_sendmsg+0x31e/0x4e0 [ 285.643463][T25472] ___sys_sendmsg+0x17b/0x1d0 [ 285.643501][T25472] __x64_sys_sendmsg+0xd4/0x160 [ 285.643566][T25472] x64_sys_call+0x2999/0x2fb0 [ 285.643592][T25472] do_syscall_64+0xd2/0x200 [ 285.643616][T25472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 285.643653][T25472] ? clear_bhb_loop+0x40/0x90 [ 285.643758][T25472] ? clear_bhb_loop+0x40/0x90 [ 285.643782][T25472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.643861][T25472] RIP: 0033:0x7f5c521ce929 [ 285.643881][T25472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.643904][T25472] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.643988][T25472] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 285.644005][T25472] RDX: 0000000000008844 RSI: 0000200000000080 RDI: 0000000000000006 [ 285.644029][T25472] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 285.644045][T25472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.644060][T25472] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 285.644185][T25472] [ 285.908277][T25474] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 286.025012][T25480] loop3: detected capacity change from 0 to 512 [ 286.111447][T25490] loop8: detected capacity change from 0 to 256 [ 286.129024][T25490] msdos: Unknown parameter 'dttq' [ 286.145933][T25490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 286.162810][T25480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.210422][T25480] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.297519][T25500] 9pnet: p9_errstr2errno: server reported unknown error [ 286.310542][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.681148][T25508] FAULT_INJECTION: forcing a failure. [ 286.681148][T25508] name failslab, interval 1, probability 0, space 0, times 0 [ 286.693889][T25508] CPU: 0 UID: 0 PID: 25508 Comm: syz.8.4803 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 286.693919][T25508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.693978][T25508] Call Trace: [ 286.693987][T25508] [ 286.693996][T25508] __dump_stack+0x1d/0x30 [ 286.694018][T25508] dump_stack_lvl+0xe8/0x140 [ 286.694037][T25508] dump_stack+0x15/0x1b [ 286.694053][T25508] should_fail_ex+0x265/0x280 [ 286.694137][T25508] should_failslab+0x8c/0xb0 [ 286.694161][T25508] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 286.694194][T25508] ? security_netlbl_sid_to_secattr+0xab/0x140 [ 286.694230][T25508] ? should_fail_ex+0xdb/0x280 [ 286.694282][T25508] kstrdup+0x3e/0xd0 [ 286.694312][T25508] security_netlbl_sid_to_secattr+0xab/0x140 [ 286.694345][T25508] selinux_netlbl_sock_genattr+0xa8/0x260 [ 286.694368][T25508] selinux_netlbl_socket_post_create+0x68/0x100 [ 286.694411][T25508] selinux_mptcp_add_subflow+0xbd/0xd0 [ 286.694437][T25508] security_mptcp_add_subflow+0x40/0x80 [ 286.694464][T25508] mptcp_subflow_create_socket+0xea/0x630 [ 286.694587][T25508] ? __rcu_read_unlock+0x4f/0x70 [ 286.694613][T25508] __mptcp_nmpc_sk+0xb3/0x3b0 [ 286.694635][T25508] mptcp_sendmsg_fastopen+0x90/0x320 [ 286.694667][T25508] mptcp_sendmsg+0xe22/0xf00 [ 286.694718][T25508] ? selinux_socket_sendmsg+0x175/0x1b0 [ 286.694755][T25508] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 286.694784][T25508] inet_sendmsg+0xc2/0xd0 [ 286.694809][T25508] __sock_sendmsg+0x102/0x180 [ 286.694916][T25508] ____sys_sendmsg+0x345/0x4e0 [ 286.695006][T25508] ___sys_sendmsg+0x17b/0x1d0 [ 286.695034][T25508] __sys_sendmmsg+0x178/0x300 [ 286.695061][T25508] __x64_sys_sendmmsg+0x57/0x70 [ 286.695087][T25508] x64_sys_call+0x2f2f/0x2fb0 [ 286.695122][T25508] do_syscall_64+0xd2/0x200 [ 286.695157][T25508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 286.695189][T25508] ? clear_bhb_loop+0x40/0x90 [ 286.695224][T25508] ? clear_bhb_loop+0x40/0x90 [ 286.695251][T25508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.695278][T25508] RIP: 0033:0x7f5c521ce929 [ 286.695305][T25508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.695379][T25508] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.695404][T25508] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 286.695417][T25508] RDX: 0000000000000001 RSI: 0000200000002840 RDI: 0000000000000005 [ 286.695430][T25508] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 286.695444][T25508] R10: 0000000020044000 R11: 0000000000000246 R12: 0000000000000002 [ 286.695472][T25508] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 286.695524][T25508] [ 287.088588][T25534] netlink: 532 bytes leftover after parsing attributes in process `syz.8.4810'. [ 287.095884][T25523] raw_sendmsg: +}[@ forgot to set AF_INET. Fix it! [ 287.198979][T25549] loop0: detected capacity change from 0 to 512 [ 287.215964][T25549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 287.235788][T25549] EXT4-fs (loop0): 1 truncate cleaned up [ 287.242138][T25549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.257183][T25557] netlink: 'syz.8.4819': attribute type 21 has an invalid length. [ 287.304690][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.554727][T25587] loop3: detected capacity change from 0 to 512 [ 287.592602][T25587] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 287.630958][T25587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 287.647786][T25587] EXT4-fs (loop3): 1 truncate cleaned up [ 287.654015][T25587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.717708][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.739658][T25607] netlink: 'syz.0.4832': attribute type 21 has an invalid length. [ 288.135365][T25641] wireguard0: entered allmulticast mode [ 288.232486][T25661] netlink: 'syz.6.4847': attribute type 21 has an invalid length. [ 288.443366][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 288.443385][ T29] audit: type=1400 audit(1749798036.135:21874): avc: denied { write } for pid=25679 comm="syz.6.4848" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.473086][ T29] audit: type=1400 audit(1749798036.135:21875): avc: denied { open } for pid=25679 comm="syz.6.4848" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 288.506799][ T29] audit: type=1400 audit(1749798036.191:21876): avc: denied { create } for pid=25679 comm="syz.6.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.673090][ T29] audit: type=1400 audit(1749798036.191:21877): avc: denied { bind } for pid=25679 comm="syz.6.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.693057][ T29] audit: type=1400 audit(1749798036.191:21878): avc: denied { write } for pid=25679 comm="syz.6.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.713284][ T29] audit: type=1400 audit(1749798036.283:21879): avc: denied { create } for pid=25687 comm="syz.8.4851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.733054][ T29] audit: type=1400 audit(1749798036.283:21880): avc: denied { getopt } for pid=25687 comm="syz.8.4851" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.753627][ T29] audit: type=1400 audit(1749798036.348:21881): avc: denied { watch } for pid=25689 comm="syz.0.4850" path="/288" dev="tmpfs" ino=1564 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.791037][ T29] audit: type=1400 audit(1749798036.449:21882): avc: denied { setopt } for pid=25694 comm="syz.0.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.815878][T25695] loop0: detected capacity change from 0 to 256 [ 288.834364][ T29] audit: type=1400 audit(1749798036.495:21883): avc: denied { mounton } for pid=25694 comm="syz.0.4853" path="/289" dev="tmpfs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 288.834372][T25695] msdos: Unknown parameter 'dttq' [ 288.958662][T25695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.966537][T25695] Set syz1 is full, maxelem 65536 reached [ 288.967288][T25709] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4858'. [ 289.029223][T25709] loop8: detected capacity change from 0 to 1024 [ 289.048880][T25709] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.625205][T25738] loop3: detected capacity change from 0 to 512 [ 289.632446][T25738] EXT4-fs: Ignoring removed mblk_io_submit option [ 289.638908][T25738] EXT4-fs: Ignoring removed oldalloc option [ 289.658096][T25738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.709585][T25738] EXT4-fs (loop3): 1 truncate cleaned up [ 289.716234][T25738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.903896][T25724] netlink: 'syz.0.4864': attribute type 10 has an invalid length. [ 289.911841][T25724] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4864'. [ 289.977569][T25724] team0: entered promiscuous mode [ 290.022086][T25724] team_slave_0: entered promiscuous mode [ 290.028174][T25724] team_slave_1: entered promiscuous mode [ 290.034080][T25724] bridge0: port 3(team0) entered blocking state [ 290.040461][T25724] bridge0: port 3(team0) entered disabled state [ 290.046936][T25724] team0: entered allmulticast mode [ 290.052128][T25724] team_slave_0: entered allmulticast mode [ 290.057875][T25724] team_slave_1: entered allmulticast mode [ 290.065219][T25724] bridge0: port 3(team0) entered blocking state [ 290.071520][T25724] bridge0: port 3(team0) entered forwarding state [ 290.252817][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.263300][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.389565][T25790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4876'. [ 290.519907][T25790] can0: slcan on ptm0. [ 290.583664][T25789] can0 (unregistered): slcan off ptm0. [ 290.915311][T25835] 9pnet_fd: Insufficient options for proto=fd [ 292.086899][T25889] loop8: detected capacity change from 0 to 512 [ 292.249108][T25889] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4899: Parent and EA inode have the same ino 15 [ 292.275189][T25889] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4899: Parent and EA inode have the same ino 15 [ 292.305591][T25889] EXT4-fs (loop8): 1 orphan inode deleted [ 292.312411][T25889] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.485099][T25906] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4906'. [ 292.729464][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.790155][T25917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4908'. [ 292.805234][T25915] netlink: 16 bytes leftover after parsing attributes in process `wޣ'. [ 292.817048][T25919] FAULT_INJECTION: forcing a failure. [ 292.817048][T25919] name failslab, interval 1, probability 0, space 0, times 0 [ 292.829833][T25919] CPU: 1 UID: 0 PID: 25919 Comm: syz.8.4910 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 292.829871][T25919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 292.829884][T25919] Call Trace: [ 292.829891][T25919] [ 292.829899][T25919] __dump_stack+0x1d/0x30 [ 292.829925][T25919] dump_stack_lvl+0xe8/0x140 [ 292.829948][T25919] dump_stack+0x15/0x1b [ 292.829967][T25919] should_fail_ex+0x265/0x280 [ 292.830015][T25919] should_failslab+0x8c/0xb0 [ 292.830043][T25919] kmem_cache_alloc_node_noprof+0x57/0x320 [ 292.830105][T25919] ? __alloc_skb+0x101/0x320 [ 292.830209][T25919] ? ip6_sk_dst_lookup_flow+0x47d/0x580 [ 292.830249][T25919] __alloc_skb+0x101/0x320 [ 292.830344][T25919] alloc_skb_with_frags+0x7d/0x470 [ 292.830382][T25919] ? ip6_rt_copy_init+0x4d8/0x540 [ 292.830448][T25919] ? __rcu_read_unlock+0x34/0x70 [ 292.830474][T25919] sock_alloc_send_pskb+0x43a/0x4f0 [ 292.830527][T25919] ? __ipv6_dev_get_saddr+0x246/0x270 [ 292.830564][T25919] __ip6_append_data+0x18d2/0x23d0 [ 292.830601][T25919] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 292.830732][T25919] ? __rcu_read_unlock+0x4f/0x70 [ 292.830830][T25919] ? __pfx_ip6_mtu+0x10/0x10 [ 292.830855][T25919] ? ip6_mtu+0xf5/0x120 [ 292.830999][T25919] ip6_append_data+0x13b/0x250 [ 292.831031][T25919] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 292.831063][T25919] udpv6_sendmsg+0x706/0x1580 [ 292.831115][T25919] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 292.831145][T25919] ? _raw_spin_unlock_bh+0x36/0x40 [ 292.831188][T25919] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 292.831213][T25919] inet6_sendmsg+0xac/0xd0 [ 292.831265][T25919] __sock_sendmsg+0x8b/0x180 [ 292.831297][T25919] ____sys_sendmsg+0x345/0x4e0 [ 292.831380][T25919] ___sys_sendmsg+0x17b/0x1d0 [ 292.831412][T25919] __sys_sendmmsg+0x178/0x300 [ 292.831491][T25919] __x64_sys_sendmmsg+0x57/0x70 [ 292.831514][T25919] x64_sys_call+0x2f2f/0x2fb0 [ 292.831540][T25919] do_syscall_64+0xd2/0x200 [ 292.831564][T25919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 292.831645][T25919] ? clear_bhb_loop+0x40/0x90 [ 292.831668][T25919] ? clear_bhb_loop+0x40/0x90 [ 292.831694][T25919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.831744][T25919] RIP: 0033:0x7f5c521ce929 [ 292.831763][T25919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.831784][T25919] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 292.831808][T25919] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 292.831824][T25919] RDX: 0000000000000001 RSI: 0000200000000e40 RDI: 0000000000000003 [ 292.831840][T25919] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 292.831855][T25919] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 292.831870][T25919] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 292.831921][T25919] [ 293.122334][T25915] can: request_module (can-proto-3) failed. [ 293.730549][T25981] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4928'. [ 293.776867][T25981] loop6: detected capacity change from 0 to 1024 [ 293.806125][T25981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.841843][T25995] loop3: detected capacity change from 0 to 8192 [ 293.865960][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 293.865978][ T29] audit: type=1400 audit(1749798041.147:22398): avc: denied { read open } for pid=25980 comm="syz.6.4928" path="/59/bus/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.917570][T25995] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 293.926175][T25995] FAT-fs (loop3): Filesystem has been set read-only [ 293.976867][ T29] audit: type=1400 audit(1749798041.184:22399): avc: denied { write } for pid=25980 comm="syz.6.4928" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 293.998916][ T29] audit: type=1400 audit(1749798041.184:22400): avc: denied { mount } for pid=25994 comm="syz.3.4931" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 294.021045][ T29] audit: type=1400 audit(1749798041.203:22401): avc: denied { append } for pid=25980 comm="syz.6.4928" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.045020][ T29] audit: type=1400 audit(1749798041.203:22402): avc: denied { open } for pid=25980 comm="syz.6.4928" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.069215][ T29] audit: type=1400 audit(1749798041.203:22403): avc: denied { ioctl } for pid=25980 comm="syz.6.4928" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 294.095015][ T29] audit: type=1400 audit(1749798041.230:22404): avc: denied { create } for pid=25994 comm="syz.3.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.115630][ T29] audit: type=1400 audit(1749798041.230:22405): avc: denied { open } for pid=26005 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.135396][ T29] audit: type=1400 audit(1749798041.230:22406): avc: denied { kernel } for pid=26005 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.155113][ T29] audit: type=1400 audit(1749798041.230:22407): avc: denied { tracepoint } for pid=26005 comm="syz.1.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 294.421970][T26034] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 294.436946][T26036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4944'. [ 294.453823][T26036] loop0: detected capacity change from 0 to 1024 [ 294.466755][T26036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.664355][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.683334][T26048] loop8: detected capacity change from 0 to 512 [ 294.691368][T26048] journal_path: Non-blockdev passed as './bus' [ 294.697624][T26048] EXT4-fs: error: could not find journal device path [ 295.020131][T26071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=112 sclass=netlink_audit_socket pid=26071 comm=syz.6.4952 [ 295.138114][T26081] syzkaller0: entered promiscuous mode [ 295.143704][T26081] syzkaller0: entered allmulticast mode [ 295.459086][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.477110][T26094] wireguard1: entered allmulticast mode [ 296.013645][T26130] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.099234][T26130] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.155024][T26130] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.208418][T26130] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.266118][T26153] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4976'. [ 296.279398][T26130] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.289062][T26153] loop3: detected capacity change from 0 to 1024 [ 296.291784][T26130] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.299828][T26153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.308429][T26130] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.337238][T26130] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.401542][T26169] loop6: detected capacity change from 0 to 512 [ 296.419235][T26169] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 296.432462][T26169] block device autoloading is deprecated and will be removed. [ 296.440477][T26169] bio_check_eod: 214 callbacks suppressed [ 296.440496][T26169] syz.6.4978: attempt to access beyond end of device [ 296.440496][T26169] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 296.459802][T26169] EXT4-fs (loop6): couldn't read superblock of external journal [ 296.608479][T26186] syzkaller0: entered promiscuous mode [ 296.614193][T26186] syzkaller0: entered allmulticast mode [ 296.756648][T26205] wireguard0: entered allmulticast mode [ 296.786821][T26214] netlink: 'syz.0.4992': attribute type 1 has an invalid length. [ 296.804024][T26214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 296.824252][T26214] bond1: (slave veth3): Enslaving as an active interface with a down link [ 296.897222][T26214] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4992'. [ 297.001467][T26214] bond1: (slave dummy0): making interface the new active one [ 297.031563][T26214] dummy0: entered promiscuous mode [ 297.043158][T26214] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 297.325507][T26269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4995'. [ 297.341330][T26269] loop0: detected capacity change from 0 to 1024 [ 297.352146][T26269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.398719][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.642839][T26287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5000'. [ 297.679320][T26287] loop1: detected capacity change from 0 to 1024 [ 297.707486][T26283] syzkaller0: entered promiscuous mode [ 297.713773][T26283] syzkaller0: entered allmulticast mode [ 297.738798][T26287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.295574][T26308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26308 comm=syz.3.5005 [ 298.308320][T26308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26308 comm=syz.3.5005 [ 298.473177][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.587347][T16358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.667834][T26331] wireguard0: entered allmulticast mode [ 298.709805][T26337] netlink: 'syz.3.5012': attribute type 1 has an invalid length. [ 298.728130][T26337] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.742455][T26337] bond1: (slave gretap1): making interface the new active one [ 298.750586][T26337] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 298.819313][T26375] loop3: detected capacity change from 0 to 8192 [ 298.851586][T26375] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 298.860292][T26375] FAT-fs (loop3): Filesystem has been set read-only [ 299.348013][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 299.348033][ T29] audit: type=1400 audit(1749798046.205:23164): avc: denied { module_request } for pid=26390 comm="syz.3.5017" kmod="netdev-/dev/ttyS3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 299.378097][ T29] audit: type=1400 audit(1749798046.205:23165): avc: denied { sys_module } for pid=26390 comm="syz.3.5017" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 299.511032][ T29] audit: type=1400 audit(1749798046.353:23166): avc: denied { append } for pid=26397 comm="syz.0.5018" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 299.620622][ T29] audit: type=1400 audit(1749798046.418:23167): avc: denied { ioctl } for pid=26399 comm="syz.6.5019" path="socket:[60350]" dev="sockfs" ino=60350 ioctlcmd=0x8943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 299.775078][ T29] audit: type=1400 audit(1749798046.593:23168): avc: denied { write } for pid=26397 comm="syz.0.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 299.797492][ T29] audit: type=1404 audit(1749798046.621:23169): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 299.817848][ T29] audit: type=1404 audit(1749798046.630:23170): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 300.866207][ T29] audit: type=1400 audit(1749798046.658:23171): avc: denied { create } for pid=26397 comm="syz.0.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.887810][ T29] audit: type=1400 audit(1749798046.667:23172): avc: denied { write } for pid=26397 comm="syz.0.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 300.908403][ T29] audit: type=1400 audit(1749798046.861:23173): avc: denied { map_create } for pid=26409 comm="syz.1.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 301.153016][T26457] wireguard2: entered allmulticast mode [ 301.242086][T26472] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5035'. [ 301.257722][T26472] loop0: detected capacity change from 0 to 1024 [ 301.269536][T26472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.361287][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.481088][T26552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.490032][T26552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.498800][T26552] SELinux: failed to load policy [ 302.638983][T26569] netlink: 316 bytes leftover after parsing attributes in process `syz.6.5052'. [ 302.672605][T26572] FAULT_INJECTION: forcing a failure. [ 302.672605][T26572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.686091][T26572] CPU: 1 UID: 0 PID: 26572 Comm: syz.6.5053 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 302.686161][T26572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.686176][T26572] Call Trace: [ 302.686184][T26572] [ 302.686192][T26572] __dump_stack+0x1d/0x30 [ 302.686242][T26572] dump_stack_lvl+0xe8/0x140 [ 302.686266][T26572] dump_stack+0x15/0x1b [ 302.686286][T26572] should_fail_ex+0x265/0x280 [ 302.686332][T26572] should_fail+0xb/0x20 [ 302.686362][T26572] should_fail_usercopy+0x1a/0x20 [ 302.686387][T26572] _copy_from_iter+0xcf/0xe40 [ 302.686412][T26572] ? alloc_pages_mpol+0x201/0x250 [ 302.686536][T26572] copy_page_from_iter+0x178/0x2a0 [ 302.686594][T26572] tun_get_user+0x5f0/0x2500 [ 302.686635][T26572] ? ref_tracker_alloc+0x1f2/0x2f0 [ 302.686686][T26572] tun_chr_write_iter+0x15e/0x210 [ 302.686760][T26572] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 302.686792][T26572] vfs_write+0x49d/0x8e0 [ 302.686821][T26572] ksys_write+0xda/0x1a0 [ 302.686876][T26572] __x64_sys_write+0x40/0x50 [ 302.686897][T26572] x64_sys_call+0x2cdd/0x2fb0 [ 302.686923][T26572] do_syscall_64+0xd2/0x200 [ 302.686949][T26572] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.687033][T26572] ? clear_bhb_loop+0x40/0x90 [ 302.687121][T26572] ? clear_bhb_loop+0x40/0x90 [ 302.687147][T26572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.687171][T26572] RIP: 0033:0x7efcc637d3df [ 302.687225][T26572] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 302.687244][T26572] RSP: 002b:00007efcc49e7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 302.687291][T26572] RAX: ffffffffffffffda RBX: 00007efcc65a5fa0 RCX: 00007efcc637d3df [ 302.687308][T26572] RDX: 00000000000000d2 RSI: 0000200000000d00 RDI: 00000000000000c8 [ 302.687339][T26572] RBP: 00007efcc49e7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.687354][T26572] R10: 00000000000000d2 R11: 0000000000000293 R12: 0000000000000001 [ 302.687369][T26572] R13: 0000000000000000 R14: 00007efcc65a5fa0 R15: 00007ffefaa9b418 [ 302.687391][T26572] [ 302.925007][T26574] FAULT_INJECTION: forcing a failure. [ 302.925007][T26574] name failslab, interval 1, probability 0, space 0, times 0 [ 302.937811][T26574] CPU: 0 UID: 0 PID: 26574 Comm: syz.8.5054 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 302.937913][T26574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.937925][T26574] Call Trace: [ 302.937932][T26574] [ 302.937939][T26574] __dump_stack+0x1d/0x30 [ 302.937961][T26574] dump_stack_lvl+0xe8/0x140 [ 302.937979][T26574] dump_stack+0x15/0x1b [ 302.937995][T26574] should_fail_ex+0x265/0x280 [ 302.938073][T26574] should_failslab+0x8c/0xb0 [ 302.938114][T26574] kmem_cache_alloc_node_noprof+0x57/0x320 [ 302.938199][T26574] ? __alloc_skb+0x101/0x320 [ 302.938231][T26574] __alloc_skb+0x101/0x320 [ 302.938322][T26574] ? audit_log_start+0x365/0x6c0 [ 302.938355][T26574] audit_log_start+0x380/0x6c0 [ 302.938387][T26574] audit_seccomp+0x48/0x100 [ 302.938417][T26574] ? __seccomp_filter+0x68c/0x10d0 [ 302.938440][T26574] __seccomp_filter+0x69d/0x10d0 [ 302.938497][T26574] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.938551][T26574] ? vfs_write+0x75e/0x8e0 [ 302.938569][T26574] ? __rcu_read_unlock+0x4f/0x70 [ 302.938646][T26574] ? __fget_files+0x184/0x1c0 [ 302.938670][T26574] __secure_computing+0x82/0x150 [ 302.938691][T26574] syscall_trace_enter+0xcf/0x1e0 [ 302.938714][T26574] do_syscall_64+0xac/0x200 [ 302.938747][T26574] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.938772][T26574] ? clear_bhb_loop+0x40/0x90 [ 302.938828][T26574] ? clear_bhb_loop+0x40/0x90 [ 302.938849][T26574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.938870][T26574] RIP: 0033:0x7f5c521ce929 [ 302.938886][T26574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.938905][T26574] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 302.938968][T26574] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 302.938981][T26574] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000000 [ 302.938994][T26574] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 302.939006][T26574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.939018][T26574] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 302.939036][T26574] [ 303.271014][T26594] SELinux: policydb string does not match my string SE Linux [ 303.281408][T26594] SELinux: failed to load policy [ 303.293302][T26594] loop1: detected capacity change from 0 to 1024 [ 303.312750][T26590] tipc: Enabling of bearer rejected, failed to enable media [ 303.335174][T26594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.416213][T26635] ucma_write: process 228 (syz.6.5068) changed security contexts after opening file descriptor, this is not allowed. [ 303.417916][T26629] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.5062: Allocating blocks 497-513 which overlap fs metadata [ 303.445038][T26629] EXT4-fs (loop1): pa ffff8881054eb930: logic 256, phys. 385, len 8 [ 303.453118][T26629] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 303.476020][T26594] program syz.1.5062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.663777][T16358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.739716][T26681] loop0: detected capacity change from 0 to 2048 [ 303.759453][T26681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.782711][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.802411][T26695] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5081'. [ 303.811700][T26695] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5081'. [ 303.868933][T26702] sg_write: data in/out 124/1 bytes for SCSI command 0x75-- guessing data in; [ 303.868933][T26702] program syz.0.5083 not setting count and/or reply_len properly [ 303.905141][T26706] loop0: detected capacity change from 0 to 512 [ 303.912373][T26706] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.931228][T26706] EXT4-fs error (device loop0): ext4_quota_enable:7120: comm syz.0.5084: Bad quota inum: 29696, type: 1 [ 303.942660][T26706] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix. [ 303.958323][T26706] EXT4-fs (loop0): mount failed [ 304.122112][T26731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5093'. [ 304.138685][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5093'. [ 304.147869][T26731] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (40192) [ 304.193154][T26736] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 304.204608][T26735] IPVS: stopping master sync thread 26736 ... [ 304.538874][T26787] loop0: detected capacity change from 0 to 2048 [ 304.548563][T26787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.562517][T26787] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.5116: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 304.579251][T26787] EXT4-fs (loop0): Remounting filesystem read-only [ 304.586066][T26787] FAULT_INJECTION: forcing a failure. [ 304.586066][T26787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.599235][T26787] CPU: 0 UID: 0 PID: 26787 Comm: syz.0.5116 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 304.599270][T26787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.599281][T26787] Call Trace: [ 304.599288][T26787] [ 304.599296][T26787] __dump_stack+0x1d/0x30 [ 304.599369][T26787] dump_stack_lvl+0xe8/0x140 [ 304.599393][T26787] dump_stack+0x15/0x1b [ 304.599413][T26787] should_fail_ex+0x265/0x280 [ 304.599474][T26787] should_fail+0xb/0x20 [ 304.599497][T26787] should_fail_usercopy+0x1a/0x20 [ 304.599511][T26787] _copy_to_user+0x20/0xa0 [ 304.599530][T26787] simple_read_from_buffer+0xb5/0x130 [ 304.599638][T26787] proc_fail_nth_read+0x100/0x140 [ 304.599690][T26787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 304.599704][T26787] vfs_read+0x19d/0x6f0 [ 304.599726][T26787] ? __rcu_read_unlock+0x4f/0x70 [ 304.599741][T26787] ? __fget_files+0x184/0x1c0 [ 304.599821][T26787] ksys_read+0xda/0x1a0 [ 304.599873][T26787] __x64_sys_read+0x40/0x50 [ 304.599961][T26787] x64_sys_call+0x2d77/0x2fb0 [ 304.599976][T26787] do_syscall_64+0xd2/0x200 [ 304.600060][T26787] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.600083][T26787] ? clear_bhb_loop+0x40/0x90 [ 304.600098][T26787] ? clear_bhb_loop+0x40/0x90 [ 304.600149][T26787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.600207][T26787] RIP: 0033:0x7ff67358d33c [ 304.600217][T26787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 304.600228][T26787] RSP: 002b:00007ff671bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 304.600258][T26787] RAX: ffffffffffffffda RBX: 00007ff6737b5fa0 RCX: 00007ff67358d33c [ 304.600266][T26787] RDX: 000000000000000f RSI: 00007ff671bf70a0 RDI: 0000000000000007 [ 304.600273][T26787] RBP: 00007ff671bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 304.600289][T26787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.600295][T26787] R13: 0000000000000000 R14: 00007ff6737b5fa0 R15: 00007ffd60eede48 [ 304.600306][T26787] [ 304.819291][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.871563][ T29] kauditd_printk_skb: 785 callbacks suppressed [ 304.871579][ T29] audit: type=1400 audit(1749798051.291:23957): avc: denied { write } for pid=26801 comm="syz.1.5121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 304.898065][ T29] audit: type=1400 audit(1749798051.328:23958): avc: denied { write } for pid=26795 comm="syz.0.5117" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 304.922206][ T29] audit: type=1400 audit(1749798051.328:23959): avc: denied { open } for pid=26795 comm="syz.0.5117" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 304.947269][ T29] audit: type=1400 audit(1749798051.328:23960): avc: denied { create } for pid=26795 comm="syz.0.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.950198][T26802] netlink: 'syz.1.5121': attribute type 21 has an invalid length. [ 304.967015][ T29] audit: type=1400 audit(1749798051.328:23961): avc: denied { bind } for pid=26795 comm="syz.0.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 304.967053][ T29] audit: type=1400 audit(1749798051.328:23962): avc: denied { write } for pid=26795 comm="syz.0.5117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 305.014826][ T29] audit: type=1400 audit(1749798051.365:23963): avc: denied { write } for pid=26801 comm="syz.1.5121" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 305.059209][ T29] audit: type=1404 audit(1749798051.476:23964): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 305.077029][ T29] audit: type=1404 audit(1749798051.485:23965): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 305.092534][ T29] audit: type=1400 audit(1749798051.494:23966): avc: denied { read write } for pid=16358 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 305.334734][T26817] loop1: detected capacity change from 0 to 256 [ 305.341993][T26817] msdos: Unknown parameter 'dttq' [ 305.353189][T26817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.442382][T26832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26832 comm=syz.3.5133 [ 305.463433][T26832] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26832 comm=syz.3.5133 [ 305.744381][T26854] loop8: detected capacity change from 0 to 512 [ 305.751515][T26854] ext4: Unknown parameter 'dont_measure' [ 306.099080][T26867] loop0: detected capacity change from 0 to 2048 [ 306.122204][T26867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.135843][T26867] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.755006][T26881] loop6: detected capacity change from 0 to 512 [ 306.784098][T26881] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 306.842901][T26881] EXT4-fs (loop6): 1 truncate cleaned up [ 306.850231][T26881] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.067005][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.076878][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.601318][T26943] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1801 sclass=netlink_xfrm_socket pid=26943 comm=syz.0.5153 [ 307.621938][T26948] loop8: detected capacity change from 0 to 128 [ 307.630693][T26948] FAT-fs (loop8): Directory bread(block 11554) failed [ 307.638820][T26948] FAT-fs (loop8): Directory bread(block 11555) failed [ 307.645867][T26948] FAT-fs (loop8): Directory bread(block 11556) failed [ 307.652715][T26948] FAT-fs (loop8): Directory bread(block 11557) failed [ 307.661142][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.668665][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.668678][T26948] FAT-fs (loop8): Directory bread(block 11558) failed [ 307.676171][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.690532][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.698046][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.705567][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.705800][T26948] FAT-fs (loop8): Directory bread(block 11559) failed [ 307.713128][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.713155][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.720865][T26948] FAT-fs (loop8): Directory bread(block 11560) failed [ 307.727335][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.727361][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.727382][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.750224][T26948] FAT-fs (loop8): Directory bread(block 11561) failed [ 307.756669][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.769500][T26948] FAT-fs (loop8): Directory bread(block 11562) failed [ 307.770856][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.779953][T26948] FAT-fs (loop8): Directory bread(block 11563) failed [ 307.784991][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.806931][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.814470][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.821981][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.829380][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.837003][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.844409][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.852014][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.859675][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.867090][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.874514][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.881877][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.889338][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.896770][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.904164][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.911606][T13362] hid-generic 0006:0000:0000.000E: unknown main item tag 0x0 [ 307.921219][T13362] hid-generic 0006:0000:0000.000E: hidraw0: VIRTUAL HID vffffff.00 Device [syz0] on syz1 [ 307.964174][T26964] FAULT_INJECTION: forcing a failure. [ 307.964174][T26964] name failslab, interval 1, probability 0, space 0, times 0 [ 307.967964][T26962] loop6: detected capacity change from 0 to 2048 [ 307.976917][T26964] CPU: 1 UID: 0 PID: 26964 Comm: syz.8.5164 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 307.977063][T26964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 307.977076][T26964] Call Trace: [ 307.977084][T26964] [ 307.977102][T26964] __dump_stack+0x1d/0x30 [ 307.977126][T26964] dump_stack_lvl+0xe8/0x140 [ 307.977147][T26964] dump_stack+0x15/0x1b [ 307.977241][T26964] should_fail_ex+0x265/0x280 [ 307.977276][T26964] ? __pfx_cond_bools_destroy+0x10/0x10 [ 307.977311][T26964] should_failslab+0x8c/0xb0 [ 307.977359][T26964] kmem_cache_alloc_noprof+0x50/0x310 [ 307.977432][T26964] ? hashtab_duplicate+0xfe/0x360 [ 307.977457][T26964] ? __pfx_cond_bools_destroy+0x10/0x10 [ 307.977489][T26964] hashtab_duplicate+0xfe/0x360 [ 307.977514][T26964] ? __pfx_cond_bools_copy+0x10/0x10 [ 307.977567][T26964] cond_policydb_dup+0xd2/0x4e0 [ 307.977603][T26964] security_set_bools+0xa0/0x340 [ 307.977633][T26964] sel_commit_bools_write+0x1ea/0x270 [ 307.977725][T26964] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 307.977758][T26964] vfs_write+0x266/0x8e0 [ 307.977826][T26964] ? __rcu_read_unlock+0x4f/0x70 [ 307.977914][T26964] ? __fget_files+0x184/0x1c0 [ 307.977939][T26964] __x64_sys_pwrite64+0xfd/0x150 [ 307.977964][T26964] x64_sys_call+0xe45/0x2fb0 [ 307.977987][T26964] do_syscall_64+0xd2/0x200 [ 307.978010][T26964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 307.978071][T26964] ? clear_bhb_loop+0x40/0x90 [ 307.978102][T26964] ? clear_bhb_loop+0x40/0x90 [ 307.978126][T26964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.978150][T26964] RIP: 0033:0x7f5c521ce929 [ 307.978224][T26964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.978245][T26964] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 307.978267][T26964] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 307.978282][T26964] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 307.978295][T26964] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 307.978309][T26964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.978336][T26964] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 307.978374][T26964] [ 308.242434][T26962] loop6: p3 p4 < > [ 308.303042][T26993] loop6: detected capacity change from 0 to 1024 [ 308.304880][T26989] netlink: 532 bytes leftover after parsing attributes in process `syz.8.5173'. [ 308.315925][T26993] EXT4-fs: Ignoring removed oldalloc option [ 308.332271][T26993] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 308.354833][T26993] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec019, mo2=0083] [ 308.366161][T27002] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5176'. [ 308.375781][T26993] System zones: 1-12 [ 308.380418][T26993] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.432809][T27008] syzkaller0: entered promiscuous mode [ 308.438582][T27008] syzkaller0: entered allmulticast mode [ 308.681636][T27047] FAULT_INJECTION: forcing a failure. [ 308.681636][T27047] name failslab, interval 1, probability 0, space 0, times 0 [ 308.694608][T27047] CPU: 0 UID: 0 PID: 27047 Comm: syz.3.5190 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 308.694635][T27047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.694647][T27047] Call Trace: [ 308.694654][T27047] [ 308.694707][T27047] __dump_stack+0x1d/0x30 [ 308.694724][T27047] dump_stack_lvl+0xe8/0x140 [ 308.694740][T27047] dump_stack+0x15/0x1b [ 308.694830][T27047] should_fail_ex+0x265/0x280 [ 308.694894][T27047] should_failslab+0x8c/0xb0 [ 308.694913][T27047] kmem_cache_alloc_noprof+0x50/0x310 [ 308.694958][T27047] ? alloc_empty_file+0x76/0x200 [ 308.695003][T27047] alloc_empty_file+0x76/0x200 [ 308.695059][T27047] alloc_file_pseudo+0xc6/0x160 [ 308.695091][T27047] __shmem_file_setup+0x1de/0x210 [ 308.695117][T27047] shmem_file_setup+0x3b/0x50 [ 308.695165][T27047] __se_sys_memfd_create+0x2c3/0x590 [ 308.695190][T27047] __x64_sys_memfd_create+0x31/0x40 [ 308.695291][T27047] x64_sys_call+0x122f/0x2fb0 [ 308.695367][T27047] do_syscall_64+0xd2/0x200 [ 308.695394][T27047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.695420][T27047] ? clear_bhb_loop+0x40/0x90 [ 308.695461][T27047] ? clear_bhb_loop+0x40/0x90 [ 308.695476][T27047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.695492][T27047] RIP: 0033:0x7fe4c55ee929 [ 308.695550][T27047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.695564][T27047] RSP: 002b:00007fe4c3c56d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 308.695579][T27047] RAX: ffffffffffffffda RBX: 00000000000005e0 RCX: 00007fe4c55ee929 [ 308.695589][T27047] RDX: 00007fe4c3c56dec RSI: 0000000000000000 RDI: 00007fe4c56714cc [ 308.695598][T27047] RBP: 0000200000000600 R08: 00007fe4c3c56b07 R09: 0000000000000000 [ 308.695659][T27047] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 308.695667][T27047] R13: 00007fe4c3c56dec R14: 00007fe4c3c56df0 R15: 00007ffc1f3d3048 [ 308.695687][T27047] [ 309.236976][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.398797][T27090] netlink: 532 bytes leftover after parsing attributes in process `syz.6.5196'. [ 309.644403][T27127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5210'. [ 309.678755][T27127] loop3: detected capacity change from 0 to 1024 [ 309.720965][T27127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.858697][T27143] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5206'. [ 309.916454][T27149] set match dimension is over the limit! [ 310.155948][T27194] netlink: 'syz.6.5220': attribute type 9 has an invalid length. [ 310.163802][T27194] netlink: 'syz.6.5220': attribute type 7 has an invalid length. [ 310.171667][T27194] netlink: 'syz.6.5220': attribute type 8 has an invalid length. [ 310.272779][T27203] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5224'. [ 310.311819][ T29] kauditd_printk_skb: 995 callbacks suppressed [ 310.311869][ T29] audit: type=1326 audit(1749798057.322:24962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.342816][ T29] audit: type=1400 audit(1749798057.322:24963): avc: denied { write } for pid=27200 comm="syz.0.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 310.362433][ T29] audit: type=1400 audit(1749798057.331:24964): avc: denied { create } for pid=27200 comm="syz.0.5223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 310.382369][ T29] audit: type=1404 audit(1749798057.331:24965): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 310.397594][ T29] audit: type=1326 audit(1749798057.331:24966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.421276][ T29] audit: type=1326 audit(1749798057.331:24967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.445111][ T29] audit: type=1326 audit(1749798057.331:24968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.468841][ T29] audit: type=1326 audit(1749798057.331:24969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.492505][ T29] audit: type=1326 audit(1749798057.331:24970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.516274][ T29] audit: type=1326 audit(1749798057.331:24971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27204 comm="syz.6.5225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 310.701029][T27209] syzkaller0: entered promiscuous mode [ 310.706651][T27209] syzkaller0: entered allmulticast mode [ 310.792190][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.827440][T27221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5227'. [ 310.905225][T27230] loop1: detected capacity change from 0 to 1024 [ 310.943116][T27241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5235'. [ 311.046992][T27252] loop3: detected capacity change from 0 to 2048 [ 311.083758][T27255] syzkaller0: entered promiscuous mode [ 311.089383][T27255] syzkaller0: entered allmulticast mode [ 311.189356][ T9506] dummy0: left promiscuous mode [ 311.429477][T27291] syzkaller0: entered promiscuous mode [ 311.435098][T27291] syzkaller0: entered allmulticast mode [ 311.517708][T27298] netlink: 532 bytes leftover after parsing attributes in process `syz.8.5253'. [ 311.622737][T27307] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5255'. [ 311.750726][T27322] loop6: detected capacity change from 0 to 512 [ 311.757660][T27322] ext4: Unknown parameter 'dont_measure' [ 311.879562][T27321] loop1: detected capacity change from 0 to 8192 [ 311.929716][T27321] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 311.938417][T27321] FAT-fs (loop1): Filesystem has been set read-only [ 312.253531][T27343] 9pnet_fd: Insufficient options for proto=fd [ 312.595446][T27359] syzkaller0: entered promiscuous mode [ 312.601097][T27359] syzkaller0: entered allmulticast mode [ 313.185886][T27391] syzkaller0: entered promiscuous mode [ 313.191499][T27391] syzkaller0: entered allmulticast mode [ 313.489344][T27425] loop8: detected capacity change from 0 to 256 [ 313.498598][T27425] msdos: Unknown parameter 'dttq' [ 313.508616][T27425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.651017][T27441] loop0: detected capacity change from 0 to 512 [ 313.666203][T27441] ext4: Unknown parameter 'dont_measure' [ 313.747804][T27443] __nla_validate_parse: 2 callbacks suppressed [ 313.747825][T27443] netlink: 532 bytes leftover after parsing attributes in process `syz.8.5301'. [ 313.943267][T27457] netlink: 'syz.1.5303': attribute type 32 has an invalid length. [ 314.167130][T27464] loop3: detected capacity change from 0 to 256 [ 314.197747][T27464] msdos: Unknown parameter 'dttq' [ 314.240711][T27464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.598113][T27489] loop3: detected capacity change from 0 to 1024 [ 314.632539][T27489] ext4: Unknown parameter 'noacl' [ 314.892005][T27499] syzkaller0: entered promiscuous mode [ 314.897651][T27499] syzkaller0: entered allmulticast mode [ 314.932350][T27498] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.005554][T27498] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.085091][T27498] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.144630][T27498] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.328393][T27498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.363044][T27498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.405985][T27498] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.464695][T27498] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.471332][T27557] loop1: detected capacity change from 0 to 8192 [ 315.519940][T27557] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 315.528596][T27557] FAT-fs (loop1): Filesystem has been set read-only [ 315.586380][T27574] netlink: 'syz.6.5333': attribute type 21 has an invalid length. [ 315.777801][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 315.777819][ T29] audit: type=1400 audit(1749798062.361:25942): avc: denied { relabelfrom } for pid=27603 comm="syz.1.5342" name="NETLINK" dev="sockfs" ino=64176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.824618][ T29] audit: type=1400 audit(1749798062.380:25943): avc: denied { relabelto } for pid=27603 comm="syz.1.5342" name="NETLINK" dev="sockfs" ino=64176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 315.882892][T27610] syzkaller0: entered promiscuous mode [ 315.888432][T27610] syzkaller0: entered allmulticast mode [ 315.896571][T27616] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5347'. [ 315.971933][ T29] audit: type=1400 audit(1749798062.546:25944): avc: denied { ioctl } for pid=27625 comm="syz.8.5351" path="socket:[64206]" dev="sockfs" ino=64206 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 316.002237][ T29] audit: type=1326 audit(1749798062.574:25945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.026040][ T29] audit: type=1326 audit(1749798062.574:25946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.050303][ T29] audit: type=1326 audit(1749798062.574:25947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.074151][ T29] audit: type=1326 audit(1749798062.574:25948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.097792][ T29] audit: type=1326 audit(1749798062.574:25949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.097821][ T29] audit: type=1326 audit(1749798062.574:25950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.097911][ T29] audit: type=1326 audit(1749798062.574:25951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27627 comm="syz.1.5352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c57de929 code=0x7ffc0000 [ 316.234649][T27640] loop9: detected capacity change from 0 to 7 [ 316.245950][T27640] buffer_io_error: 8 callbacks suppressed [ 316.246019][T27640] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.247192][T27646] netlink: 'syz.8.5358': attribute type 21 has an invalid length. [ 316.252290][T27640] Buffer I/O error on dev loop9, logical block 0, async page read [ 316.275947][T27640] loop9: unable to read partition table [ 316.282035][T27640] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 316.282035][T27640] U) failed (rc=-5) [ 316.371761][T27656] syzkaller0: entered promiscuous mode [ 316.377369][T27656] syzkaller0: entered allmulticast mode [ 316.504167][T27667] netlink: 532 bytes leftover after parsing attributes in process `syz.1.5364'. [ 316.655828][T27696] loop6: detected capacity change from 0 to 2048 [ 316.657880][T27696] ext4: Unknown parameter 'appraise' [ 316.670260][T27699] netlink: 'syz.1.5369': attribute type 21 has an invalid length. [ 316.763859][T27717] syzkaller0: entered promiscuous mode [ 316.769420][T27717] syzkaller0: entered allmulticast mode [ 316.971636][T27740] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5381'. [ 317.028212][T27744] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.116544][T27744] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.203799][T27744] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.268460][T27744] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.328917][T27744] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.341372][T27744] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.359754][T27744] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.370835][T27744] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.438619][T27788] loop6: detected capacity change from 0 to 512 [ 317.446553][T27788] EXT4-fs: Ignoring removed oldalloc option [ 317.453494][T27788] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.470903][T27788] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 317.491546][T27788] EXT4-fs (loop6): orphan cleanup on readonly fs [ 317.500865][T27788] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5385: Failed to acquire dquot type 1 [ 317.513098][T27788] EXT4-fs (loop6): 1 truncate cleaned up [ 317.517547][T27797] syzkaller0: entered promiscuous mode [ 317.524333][T27797] syzkaller0: entered allmulticast mode [ 317.531382][T27788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.544292][T27788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.677875][T27817] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.694232][T27821] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5395'. [ 317.707020][T27821] loop8: detected capacity change from 0 to 1024 [ 317.716325][T27821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.757518][T27817] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.826388][T27817] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.887823][T27817] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.907018][T27842] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5399'. [ 317.939435][T27844] syzkaller0: Caught tx_queue_len zero misconfig [ 318.000634][T27817] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.002429][T27852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5403'. [ 318.014099][T27817] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.031089][T27817] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.043718][T27817] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.066435][T27852] loop3: detected capacity change from 0 to 1024 [ 318.077453][T27852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.703817][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.752441][T27878] loop9: detected capacity change from 0 to 7 [ 318.758747][T27878] Buffer I/O error on dev loop9, logical block 0, async page read [ 318.767218][T27878] Buffer I/O error on dev loop9, logical block 0, async page read [ 318.775143][T27878] loop9: unable to read partition table [ 318.781138][T27878] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 318.781138][T27878] U) failed (rc=-5) [ 318.845920][T27884] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5410'. [ 318.861924][T27884] loop8: detected capacity change from 0 to 1024 [ 318.883871][T27884] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.048822][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.849401][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.584932][T27971] loop6: detected capacity change from 0 to 256 [ 320.591931][T27971] msdos: Unknown parameter 'dttq' [ 320.602372][T27971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 320.605768][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5433'. [ 320.643743][T27979] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.713250][T27979] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.784335][T27979] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.831961][T27998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17936 sclass=netlink_route_socket pid=27998 comm=syz.6.5440 [ 320.941324][T27979] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.062727][T27979] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.070107][T28014] loop6: detected capacity change from 0 to 256 [ 321.076037][T27979] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.078306][T28014] msdos: Unknown parameter 'dttq' [ 321.089009][T27979] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.098224][T28014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.101021][T28014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5446'. [ 321.103349][T27979] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.135124][T28025] netlink: 532 bytes leftover after parsing attributes in process `syz.6.5447'. [ 321.212351][ T29] kauditd_printk_skb: 846 callbacks suppressed [ 321.212368][ T29] audit: type=1400 audit(1749798067.383:26796): avc: denied { create } for pid=28035 comm="syz.6.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.238871][ T29] audit: type=1400 audit(1749798067.383:26797): avc: denied { getopt } for pid=28035 comm="syz.6.5450" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 321.318937][ T29] audit: type=1400 audit(1749798067.484:26798): avc: denied { open } for pid=28035 comm="syz.6.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 321.339499][ T29] audit: type=1400 audit(1749798067.484:26799): avc: denied { kernel } for pid=28035 comm="syz.6.5450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 321.376119][ T29] audit: type=1400 audit(1749798067.530:26800): avc: denied { create } for pid=28038 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.395791][ T29] audit: type=1400 audit(1749798067.530:26801): avc: denied { write } for pid=28038 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 321.444069][ T29] audit: type=1400 audit(1749798067.595:26802): avc: denied { create } for pid=28040 comm="syz.6.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 321.464681][ T29] audit: type=1404 audit(1749798067.595:26803): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 321.488363][ T29] audit: type=1400 audit(1749798067.623:26804): avc: denied { read write } for pid=16358 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.513041][ T29] audit: type=1400 audit(1749798067.632:26805): avc: denied { recv } for pid=28040 comm="syz.6.5452" saddr=10.128.0.163 src=30030 daddr=10.128.1.156 dest=56330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 321.568975][T28052] loop6: detected capacity change from 0 to 256 [ 321.575677][T28052] msdos: Unknown parameter 'dttq' [ 321.582513][T28054] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.584963][T28052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.596050][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5457'. [ 321.623616][T28054] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.706544][T28074] netlink: 532 bytes leftover after parsing attributes in process `syz.6.5464'. [ 321.731871][T28054] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.821538][T28054] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.880206][T28054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.892113][T28054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.903436][T28054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.915515][T28054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.963617][T28110] FAULT_INJECTION: forcing a failure. [ 321.963617][T28110] name failslab, interval 1, probability 0, space 0, times 0 [ 321.976484][T28110] CPU: 0 UID: 0 PID: 28110 Comm: syz.1.5472 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 321.976502][T28110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.976509][T28110] Call Trace: [ 321.976537][T28110] [ 321.976542][T28110] __dump_stack+0x1d/0x30 [ 321.976607][T28110] dump_stack_lvl+0xe8/0x140 [ 321.976629][T28110] dump_stack+0x15/0x1b [ 321.976679][T28110] should_fail_ex+0x265/0x280 [ 321.976702][T28110] should_failslab+0x8c/0xb0 [ 321.976762][T28110] kmem_cache_alloc_noprof+0x50/0x310 [ 321.976781][T28110] ? audit_log_start+0x365/0x6c0 [ 321.976869][T28110] audit_log_start+0x365/0x6c0 [ 321.976892][T28110] audit_seccomp+0x48/0x100 [ 321.976910][T28110] ? __seccomp_filter+0x68c/0x10d0 [ 321.976999][T28110] __seccomp_filter+0x69d/0x10d0 [ 321.977015][T28110] ? htab_map_delete_elem+0x2c2/0x430 [ 321.977082][T28110] __secure_computing+0x82/0x150 [ 321.977098][T28110] syscall_trace_enter+0xcf/0x1e0 [ 321.977115][T28110] do_syscall_64+0xac/0x200 [ 321.977129][T28110] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.977207][T28110] ? clear_bhb_loop+0x40/0x90 [ 321.977219][T28110] ? clear_bhb_loop+0x40/0x90 [ 321.977304][T28110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.977316][T28110] RIP: 0033:0x7f22c57de929 [ 321.977405][T28110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.977421][T28110] RSP: 002b:00007f22c3e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 321.977508][T28110] RAX: ffffffffffffffda RBX: 00007f22c5a05fa0 RCX: 00007f22c57de929 [ 321.977515][T28110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.977522][T28110] RBP: 00007f22c3e47090 R08: 0000000000000000 R09: 0000000000000000 [ 321.977546][T28110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.977553][T28110] R13: 0000000000000000 R14: 00007f22c5a05fa0 R15: 00007ffca4a06f78 [ 321.977563][T28110] [ 322.199029][T28113] netlink: 'syz.1.5473': attribute type 11 has an invalid length. [ 322.207809][T28113] netlink: 448 bytes leftover after parsing attributes in process `syz.1.5473'. [ 322.235209][T28118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5475'. [ 322.239296][T28119] loop1: detected capacity change from 0 to 1024 [ 322.262838][T28119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.283851][T28125] netlink: 'syz.3.5477': attribute type 21 has an invalid length. [ 322.373426][T16358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.426672][T28136] netlink: 532 bytes leftover after parsing attributes in process `syz.1.5481'. [ 322.505521][T28143] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.577208][T28143] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.631198][T28143] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.685245][T28143] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.812349][T28170] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5487'. [ 322.828082][T28170] loop6: detected capacity change from 0 to 1024 [ 322.848563][T28170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.870725][T28176] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5489'. [ 322.940513][T28176] loop8: detected capacity change from 0 to 1024 [ 323.019480][T28176] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.235871][T28189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 323.838002][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.918251][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.028962][T28257] loop8: detected capacity change from 0 to 1024 [ 324.039478][T28257] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.068480][T28257] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.5503: Allocating blocks 497-513 which overlap fs metadata [ 324.084731][T28256] EXT4-fs (loop8): pa ffff8881054eba80: logic 128, phys. 273, len 15 [ 324.093017][T28256] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 324.114108][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.148413][T28269] loop8: detected capacity change from 0 to 512 [ 324.169907][T28269] EXT4-fs (loop8): too many log groups per flexible block group [ 324.177705][T28269] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 324.184839][T28269] EXT4-fs (loop8): mount failed [ 324.253994][T28284] loop8: detected capacity change from 0 to 256 [ 324.260846][T28284] msdos: Unknown parameter 'dttq' [ 324.270499][T28284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 324.294879][T28293] No such timeout policy "syz0" [ 324.315784][T28293] loop8: detected capacity change from 0 to 512 [ 324.331720][T28293] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.5511: Parent and EA inode have the same ino 15 [ 324.349329][T28293] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.5511: Parent and EA inode have the same ino 15 [ 324.362239][T28293] EXT4-fs (loop8): 1 orphan inode deleted [ 324.368594][T28293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.401500][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.777558][T28320] Set syz1 is full, maxelem 65536 reached [ 325.777377][T28377] Set syz1 is full, maxelem 65536 reached [ 325.865034][T28384] loop6: detected capacity change from 0 to 512 [ 325.893932][T28384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.907424][T28384] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 325.932117][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.101176][T28405] netlink: 'syz.6.5552': attribute type 3 has an invalid length. [ 326.416261][T28143] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.427858][T28143] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.438754][T28143] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.449903][T28143] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.745868][T28428] loop0: detected capacity change from 0 to 512 [ 326.752703][T28428] ext4: Unknown parameter 'dont_measure' [ 326.857621][T28435] loop1: detected capacity change from 0 to 128 [ 326.910123][ T29] kauditd_printk_skb: 848 callbacks suppressed [ 326.910140][ T29] audit: type=1400 audit(1749798072.644:27652): avc: denied { mount } for pid=28434 comm="syz.1.5558" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 326.946420][T28434] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 326.954400][T28434] FAT-fs (loop1): Filesystem has been set read-only [ 326.984184][T28440] __nla_validate_parse: 5 callbacks suppressed [ 326.984201][T28440] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5560'. [ 327.014225][T28434] syz.1.5558: attempt to access beyond end of device [ 327.014225][T28434] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 327.068297][T28434] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 327.076301][T28434] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 327.094524][ T29] audit: type=1400 audit(1749798072.708:27653): avc: denied { create } for pid=28439 comm="syz.8.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.116237][ T29] audit: type=1400 audit(1749798072.708:27654): avc: denied { write } for pid=28439 comm="syz.8.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 327.137000][ T29] audit: type=1400 audit(1749798072.764:27655): avc: denied { write } for pid=28441 comm="syz.3.5561" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.162243][ T29] audit: type=1400 audit(1749798072.764:27656): avc: denied { open } for pid=28441 comm="syz.3.5561" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 327.186964][ T29] audit: type=1400 audit(1749798072.773:27657): avc: denied { create } for pid=28439 comm="syz.8.5560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 327.207193][ T29] audit: type=1400 audit(1749798072.773:27658): avc: denied { read write } for pid=28439 comm="syz.8.5560" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 327.231746][ T29] audit: type=1400 audit(1749798072.773:27659): avc: denied { open } for pid=28439 comm="syz.8.5560" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 327.331336][T28434] syz.1.5558: attempt to access beyond end of device [ 327.331336][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.405706][T28434] syz.1.5558: attempt to access beyond end of device [ 327.405706][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.556817][T28434] syz.1.5558: attempt to access beyond end of device [ 327.556817][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.576278][T28455] loop6: detected capacity change from 0 to 256 [ 327.587638][T28457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5567'. [ 327.597051][T28455] msdos: Unknown parameter 'dttq' [ 327.603076][T28435] syz.1.5558: attempt to access beyond end of device [ 327.603076][T28435] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.620696][T28455] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.631765][T28435] syz.1.5558: attempt to access beyond end of device [ 327.631765][T28435] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.666467][T28435] syz.1.5558: attempt to access beyond end of device [ 327.666467][T28435] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.734678][T28434] syz.1.5558: attempt to access beyond end of device [ 327.734678][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.762326][T28434] syz.1.5558: attempt to access beyond end of device [ 327.762326][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.798335][T28434] syz.1.5558: attempt to access beyond end of device [ 327.798335][T28434] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 327.879293][T28467] netlink: 'syz.8.5570': attribute type 21 has an invalid length. [ 327.894175][T16358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 327.900854][T16358] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 327.926394][T28473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5571'. [ 327.976646][T28462] Set syz1 is full, maxelem 65536 reached [ 328.277115][T28486] loop1: detected capacity change from 0 to 512 [ 328.335769][T28486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 328.343981][T28486] System zones: 0-2, 18-18, 34-35 [ 328.406402][T28486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.419279][T28486] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.591482][T28496] loop6: detected capacity change from 0 to 256 [ 328.631334][T28496] msdos: Unknown parameter 'dttq' [ 328.689597][T28496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.733146][T28498] loop9: detected capacity change from 0 to 7 [ 328.861015][T28498] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.175318][T28498] Buffer I/O error on dev loop9, logical block 0, async page read [ 329.183241][T28498] loop9: unable to read partition table [ 329.191812][T28498] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 329.191812][T28498] U) failed (rc=-5) [ 329.426607][T28547] netlink: 532 bytes leftover after parsing attributes in process `syz.6.5589'. [ 329.512259][T28557] FAULT_INJECTION: forcing a failure. [ 329.512259][T28557] name failslab, interval 1, probability 0, space 0, times 0 [ 329.525069][T28557] CPU: 1 UID: 0 PID: 28557 Comm: +}[@ Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 329.525106][T28557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.525129][T28557] Call Trace: [ 329.525137][T28557] [ 329.525145][T28557] __dump_stack+0x1d/0x30 [ 329.525167][T28557] dump_stack_lvl+0xe8/0x140 [ 329.525217][T28557] dump_stack+0x15/0x1b [ 329.525248][T28557] should_fail_ex+0x265/0x280 [ 329.525288][T28557] ? __pfx_cond_bools_destroy+0x10/0x10 [ 329.525402][T28557] should_failslab+0x8c/0xb0 [ 329.525496][T28557] kmem_cache_alloc_noprof+0x50/0x310 [ 329.525528][T28557] ? hashtab_duplicate+0xfe/0x360 [ 329.525557][T28557] ? __pfx_cond_bools_destroy+0x10/0x10 [ 329.525594][T28557] hashtab_duplicate+0xfe/0x360 [ 329.525687][T28557] ? __pfx_cond_bools_copy+0x10/0x10 [ 329.525725][T28557] cond_policydb_dup+0xd2/0x4e0 [ 329.525773][T28557] security_set_bools+0xa0/0x340 [ 329.525804][T28557] sel_commit_bools_write+0x1ea/0x270 [ 329.525844][T28557] vfs_writev+0x406/0x8b0 [ 329.525947][T28557] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 329.526016][T28557] ? mutex_lock+0xd/0x30 [ 329.526053][T28557] do_writev+0xe7/0x210 [ 329.526157][T28557] __x64_sys_writev+0x45/0x50 [ 329.526184][T28557] x64_sys_call+0x2006/0x2fb0 [ 329.526206][T28557] do_syscall_64+0xd2/0x200 [ 329.526233][T28557] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.526263][T28557] ? clear_bhb_loop+0x40/0x90 [ 329.526284][T28557] ? clear_bhb_loop+0x40/0x90 [ 329.526309][T28557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.526335][T28557] RIP: 0033:0x7f5c521ce929 [ 329.526359][T28557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.526400][T28557] RSP: 002b:00007f5c50837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 329.526425][T28557] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521ce929 [ 329.526490][T28557] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000008 [ 329.526506][T28557] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 329.526520][T28557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.526535][T28557] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 329.526558][T28557] [ 329.926299][T28564] netlink: 'syz.8.5595': attribute type 21 has an invalid length. [ 330.144932][T28596] FAULT_INJECTION: forcing a failure. [ 330.144932][T28596] name failslab, interval 1, probability 0, space 0, times 0 [ 330.157725][T28596] CPU: 1 UID: 0 PID: 28596 Comm: wޣ Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 330.157845][T28596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.157861][T28596] Call Trace: [ 330.157869][T28596] [ 330.157878][T28596] __dump_stack+0x1d/0x30 [ 330.158004][T28596] dump_stack_lvl+0xe8/0x140 [ 330.158026][T28596] dump_stack+0x15/0x1b [ 330.158054][T28596] should_fail_ex+0x265/0x280 [ 330.158143][T28596] ? __request_region+0x55/0x410 [ 330.158172][T28596] should_failslab+0x8c/0xb0 [ 330.158195][T28596] __kmalloc_cache_noprof+0x4c/0x320 [ 330.158258][T28596] __request_region+0x55/0x410 [ 330.158287][T28596] ? x86_vector_deactivate+0xeb/0x180 [ 330.158311][T28596] ? __slab_free+0x77/0x270 [ 330.158350][T28596] serial8250_request_std_resource+0x11d/0x260 [ 330.158434][T28596] serial8250_config_port+0x38/0x2cb0 [ 330.158462][T28596] ? free_resource+0x11b/0x270 [ 330.158489][T28596] ? __release_region+0x1e1/0x240 [ 330.158524][T28596] univ8250_config_port+0x296/0x370 [ 330.158653][T28596] uart_ioctl+0xc31/0xe40 [ 330.158679][T28596] ? do_vfs_ioctl+0x9df/0x11d0 [ 330.158712][T28596] ? tty_jobctrl_ioctl+0x29e/0x810 [ 330.158739][T28596] tty_ioctl+0x7de/0xb80 [ 330.158842][T28596] ? __pfx_tty_ioctl+0x10/0x10 [ 330.158876][T28596] __se_sys_ioctl+0xce/0x140 [ 330.158911][T28596] __x64_sys_ioctl+0x43/0x50 [ 330.158944][T28596] x64_sys_call+0x19a8/0x2fb0 [ 330.159028][T28596] do_syscall_64+0xd2/0x200 [ 330.159064][T28596] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.159096][T28596] ? clear_bhb_loop+0x40/0x90 [ 330.159118][T28596] ? clear_bhb_loop+0x40/0x90 [ 330.159140][T28596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.159162][T28596] RIP: 0033:0x7efcc637e929 [ 330.159180][T28596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.159284][T28596] RSP: 002b:00007efcc49e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.159398][T28596] RAX: ffffffffffffffda RBX: 00007efcc65a5fa0 RCX: 00007efcc637e929 [ 330.159414][T28596] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 330.159429][T28596] RBP: 00007efcc49e7090 R08: 0000000000000000 R09: 0000000000000000 [ 330.159518][T28596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.159556][T28596] R13: 0000000000000000 R14: 00007efcc65a5fa0 R15: 00007ffefaa9b418 [ 330.159576][T28596] [ 330.518561][T28620] loop0: detected capacity change from 0 to 512 [ 330.535068][T28620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 330.553406][T28620] EXT4-fs (loop0): 1 truncate cleaned up [ 330.559971][T28620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.648003][T18562] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.819631][T28670] loop9: detected capacity change from 0 to 7 [ 330.826779][T28670] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.835111][T28670] Buffer I/O error on dev loop9, logical block 0, async page read [ 330.843151][T28670] loop9: unable to read partition table [ 330.849000][T28670] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 330.849000][T28670] U) failed (rc=-5) [ 331.335547][T28717] wireguard1: entered allmulticast mode [ 331.533535][T28724] Set syz1 is full, maxelem 65536 reached [ 331.586459][T28729] syzkaller0: Caught tx_queue_len zero misconfig [ 331.617183][T28733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5665'. [ 331.630206][T28733] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5665'. [ 331.647595][T28733] loop3: detected capacity change from 0 to 1024 [ 331.657871][T28733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.953941][T28759] loop0: detected capacity change from 0 to 8192 [ 332.023937][T28769] netlink: 532 bytes leftover after parsing attributes in process `syz.0.5675'. [ 332.064576][T28492] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.096868][T19974] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.199416][T19974] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.241289][T19974] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.322666][T19974] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.355561][ T29] kauditd_printk_skb: 827 callbacks suppressed [ 332.355579][ T29] audit: type=1400 audit(1749798077.646:28486): avc: denied { read } for pid=28782 comm="syz.8.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 332.382917][ T29] audit: type=1400 audit(1749798077.665:28487): avc: denied { sys_module } for pid=28775 comm="syz.0.5678" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 332.435154][ T29] audit: type=1400 audit(1749798077.748:28488): avc: denied { recv } for pid=3293 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.1.156 dest=56330 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 332.466367][ T29] audit: type=1400 audit(1749798077.748:28489): avc: denied { read write } for pid=23581 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.490984][ T29] audit: type=1400 audit(1749798077.748:28490): avc: denied { open } for pid=23581 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.515304][ T29] audit: type=1400 audit(1749798077.748:28491): avc: denied { ioctl } for pid=23581 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 332.541361][ T29] audit: type=1400 audit(1749798077.766:28492): avc: denied { read write } for pid=18562 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.544373][T28777] chnl_net:caif_netlink_parms(): no params data found [ 332.564942][ T29] audit: type=1400 audit(1749798077.766:28493): avc: denied { open } for pid=18562 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.595408][ T29] audit: type=1400 audit(1749798077.766:28494): avc: denied { ioctl } for pid=18562 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1038 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 332.620851][ T29] audit: type=1326 audit(1749798077.766:28495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28885 comm="syz.8.5680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c521ce929 code=0x7ffc0000 [ 332.740817][T28924] loop6: detected capacity change from 0 to 512 [ 332.751561][T28924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.763504][T19974] bridge_slave_1: left allmulticast mode [ 332.769195][T19974] bridge_slave_1: left promiscuous mode [ 332.773043][T28924] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.5685: invalid block [ 332.774958][T19974] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.788014][T28924] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5685: invalid indirect mapped block 4294967295 (level 1) [ 332.795100][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.809103][T28924] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5685: invalid indirect mapped block 4294967295 (level 1) [ 332.832655][T28924] EXT4-fs (loop6): 2 truncates cleaned up [ 332.838902][T19974] bridge_slave_0: left allmulticast mode [ 332.839512][T28924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.844579][T19974] bridge_slave_0: left promiscuous mode [ 332.844812][T19974] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.945076][T28949] netlink: 'syz.3.5689': attribute type 29 has an invalid length. [ 333.006469][T28956] loop3: detected capacity change from 0 to 1024 [ 333.013664][T28956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.022424][T28956] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.033456][T28956] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 333.042599][T28956] EXT4-fs (loop3): orphan cleanup on readonly fs [ 333.049192][T19974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.049382][T28956] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.5689: Invalid inode table block 0 in block_group 0 [ 333.070930][T28956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 333.081211][T19974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.081720][T28956] EXT4-fs error (device loop3): ext4_quota_write:7322: inode #3: comm syz.3.5689: mark_inode_dirty error [ 333.101357][T28956] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5689: Failed to acquire dquot type 0 [ 333.102326][T19974] bond0 (unregistering): Released all slaves [ 333.113648][T28956] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.5689: Invalid inode table block 0 in block_group 0 [ 333.131712][T28956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 333.144084][T28956] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.5689: mark_inode_dirty error [ 333.173083][T28956] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.5689: Invalid inode table block 0 in block_group 0 [ 333.188360][T28956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 333.198131][T28956] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 333.209678][T28956] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.5689: Invalid inode table block 0 in block_group 0 [ 333.211687][T28777] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.222991][T28956] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 333.229991][T28777] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.240872][T28956] EXT4-fs error (device loop3): ext4_truncate:4597: inode #15: comm syz.3.5689: mark_inode_dirty error [ 333.249716][T28777] bridge_slave_0: entered allmulticast mode [ 333.264431][T28777] bridge_slave_0: entered promiscuous mode [ 333.265133][T28956] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 333.271297][T28777] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.286504][T28777] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.293766][T28956] EXT4-fs (loop3): 1 truncate cleaned up [ 333.293795][T28777] bridge_slave_1: entered allmulticast mode [ 333.294485][T28777] bridge_slave_1: entered promiscuous mode [ 333.300209][T28956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.325322][T19974] hsr_slave_0: left promiscuous mode [ 333.331887][T19974] hsr_slave_1: left promiscuous mode [ 333.339620][T19974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.347124][T19974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.356035][T19974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.363476][T19974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.375781][T19974] veth1_macvtap: left promiscuous mode [ 333.381452][T19974] veth0_macvtap: left promiscuous mode [ 333.387083][T19974] veth1_vlan: left promiscuous mode [ 333.393384][T19974] veth0_vlan: left promiscuous mode [ 333.442780][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.482876][T19974] team0 (unregistering): Port device team_slave_1 removed [ 333.492641][T29000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5695'. [ 333.502219][T19974] team0 (unregistering): Port device team_slave_0 removed [ 333.507328][T29000] loop3: detected capacity change from 0 to 1024 [ 333.519087][T29000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.534855][T19974] team0 (unregistering): Port device dummy0 removed [ 333.568991][T28777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.581650][T28777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.609209][T28777] team0: Port device team_slave_0 added [ 333.616051][T28777] team0: Port device team_slave_1 added [ 333.643640][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.661930][T28777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.669087][T28777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.695334][T28777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.719012][T28777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.726207][T28777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.752384][T28777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.765630][T29085] loop8: detected capacity change from 0 to 2048 [ 333.793365][T28777] hsr_slave_0: entered promiscuous mode [ 333.825625][T28777] hsr_slave_1: entered promiscuous mode [ 333.831542][T28777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.841428][T28777] Cannot create hsr debugfs directory [ 333.854276][T29085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.931552][T29085] EXT4-fs error (device loop8): ext4_find_extent:939: inode #2: comm syz.8.5699: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 333.946519][T29086] Set syz1 is full, maxelem 65536 reached [ 333.975374][T29085] EXT4-fs (loop8): Remounting filesystem read-only [ 334.014165][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.154843][T29191] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5701'. [ 334.187008][T28777] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 334.198290][T28777] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 334.212058][T29191] loop8: detected capacity change from 0 to 1024 [ 334.222320][T28777] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.238315][T29191] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.251387][T28777] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.350919][T29211] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5705'. [ 334.371413][T29211] loop6: detected capacity change from 0 to 1024 [ 334.416818][T29211] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.579634][T28777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.889664][T28777] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.900898][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.908181][T20657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.922985][T19974] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.930188][T19974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.951567][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.955678][T28777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.971372][T28777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 335.066597][T28777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.388588][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.398239][T24218] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.423488][T28777] veth0_vlan: entered promiscuous mode [ 335.431308][T29266] Set syz1 is full, maxelem 65536 reached [ 335.431648][T28777] veth1_vlan: entered promiscuous mode [ 335.477094][T28777] veth0_macvtap: entered promiscuous mode [ 335.485238][T28777] veth1_macvtap: entered promiscuous mode [ 335.497850][T28777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.507768][T28777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.529467][T28777] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.538288][T28777] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.547273][T28777] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.556192][T28777] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.758789][T29311] loop9: detected capacity change from 0 to 7 [ 335.766657][T29311] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.776391][T29311] Buffer I/O error on dev loop9, logical block 0, async page read [ 335.784336][T29311] loop9: unable to read partition table [ 335.796091][T29311] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 335.796091][T29311] U) failed (rc=-5) [ 335.909278][T29323] loop0: detected capacity change from 0 to 512 [ 336.100112][T29323] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 336.108365][T29323] System zones: 0-2, 18-18, 34-35 [ 336.116956][T29323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.130095][T29323] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.781212][T29310] Set syz1 is full, maxelem 65536 reached [ 337.062795][T29320] Set syz1 is full, maxelem 65536 reached [ 337.458881][T29377] ALSA: seq fatal error: cannot create timer (-19) [ 337.485782][T20489] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.682425][T29402] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5754'. [ 337.698211][T29402] loop8: detected capacity change from 0 to 1024 [ 337.718514][T29402] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.799483][T29418] loop9: detected capacity change from 0 to 512 [ 337.806312][T29418] ext4: Unknown parameter 'dont_measure' [ 337.823486][ T29] kauditd_printk_skb: 973 callbacks suppressed [ 337.823505][ T29] audit: type=1400 audit(1749798082.714:29467): avc: denied { add_name } for pid=29401 comm="syz.8.5754" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 337.850525][ T29] audit: type=1400 audit(1749798082.714:29468): avc: denied { create } for pid=29401 comm="syz.8.5754" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.126818][ T29] audit: type=1326 audit(1749798082.760:29469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.151006][ T29] audit: type=1326 audit(1749798082.760:29470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.174694][ T29] audit: type=1326 audit(1749798082.760:29471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.198597][ T29] audit: type=1326 audit(1749798082.760:29472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.222303][ T29] audit: type=1326 audit(1749798082.760:29473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.245990][ T29] audit: type=1326 audit(1749798082.760:29474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29403 comm="syz.6.5753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7efcc637e929 code=0x7ffc0000 [ 338.269660][ T29] audit: type=1400 audit(1749798082.787:29475): avc: denied { read open } for pid=29401 comm="syz.8.5754" path="/265/bus/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.293371][ T29] audit: type=1400 audit(1749798082.787:29476): avc: denied { write } for pid=29401 comm="syz.8.5754" name="bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.679528][T23581] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.829603][T29451] syzkaller1: entered promiscuous mode [ 338.835196][T29451] syzkaller1: entered allmulticast mode [ 338.900941][T29457] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.935796][T29460] FAULT_INJECTION: forcing a failure. [ 338.935796][T29460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.949056][T29460] CPU: 1 UID: 0 PID: 29460 Comm: syz.8.5764 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 338.949086][T29460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.949118][T29460] Call Trace: [ 338.949125][T29460] [ 338.949134][T29460] __dump_stack+0x1d/0x30 [ 338.949158][T29460] dump_stack_lvl+0xe8/0x140 [ 338.949177][T29460] dump_stack+0x15/0x1b [ 338.949194][T29460] should_fail_ex+0x265/0x280 [ 338.949281][T29460] should_fail+0xb/0x20 [ 338.949310][T29460] should_fail_usercopy+0x1a/0x20 [ 338.949409][T29460] _copy_from_iter+0xcf/0xe40 [ 338.949434][T29460] ? selinux_file_open+0x2df/0x330 [ 338.949489][T29460] ? should_fail_ex+0xdb/0x280 [ 338.949523][T29460] ? skb_set_owner_w+0x16a/0x1c0 [ 338.949544][T29460] ? sock_alloc_send_pskb+0x456/0x4f0 [ 338.949634][T29460] skb_copy_datagram_from_iter+0xb1/0x490 [ 338.949665][T29460] ? skb_put+0xa9/0xf0 [ 338.949738][T29460] tun_get_user+0xa0e/0x2500 [ 338.949811][T29460] ? ref_tracker_alloc+0x1f2/0x2f0 [ 338.949932][T29460] ? selinux_file_permission+0x1e4/0x320 [ 338.949963][T29460] tun_chr_write_iter+0x15e/0x210 [ 338.950049][T29460] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 338.950084][T29460] vfs_write+0x49d/0x8e0 [ 338.950112][T29460] ksys_write+0xda/0x1a0 [ 338.950137][T29460] __x64_sys_write+0x40/0x50 [ 338.950221][T29460] x64_sys_call+0x2cdd/0x2fb0 [ 338.950248][T29460] do_syscall_64+0xd2/0x200 [ 338.950274][T29460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.950304][T29460] ? clear_bhb_loop+0x40/0x90 [ 338.950326][T29460] ? clear_bhb_loop+0x40/0x90 [ 338.950363][T29460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.950389][T29460] RIP: 0033:0x7f5c521ce929 [ 338.950406][T29460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.950425][T29460] RSP: 002b:00007f5c50816038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.950445][T29460] RAX: ffffffffffffffda RBX: 00007f5c523f6080 RCX: 00007f5c521ce929 [ 338.950462][T29460] RDX: 00000000000000dc RSI: 00002000000003c0 RDI: 0000000000000006 [ 338.950589][T29460] RBP: 00007f5c50816090 R08: 0000000000000000 R09: 0000000000000000 [ 338.950605][T29460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.950621][T29460] R13: 0000000000000001 R14: 00007f5c523f6080 R15: 00007ffe7a085978 [ 338.950641][T29460] [ 339.213579][T29457] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.309300][T29457] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.368152][T29456] chnl_net:caif_netlink_parms(): no params data found [ 339.394462][T29457] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.445742][T29622] loop9: detected capacity change from 0 to 7 [ 339.452308][T29622] Buffer I/O error on dev loop9, logical block 0, async page read [ 339.460847][T29622] Buffer I/O error on dev loop9, logical block 0, async page read [ 339.468922][T29622] loop9: unable to read partition table [ 339.475534][T29622] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 339.475534][T29622] U) failed (rc=-5) [ 339.507342][T29456] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.514538][T29456] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.533131][T29456] bridge_slave_0: entered allmulticast mode [ 339.539697][T29456] bridge_slave_0: entered promiscuous mode [ 339.556823][T29457] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.572770][T29456] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.579932][T29456] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.587487][T29456] bridge_slave_1: entered allmulticast mode [ 339.594355][T29456] bridge_slave_1: entered promiscuous mode [ 339.604573][T29457] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.617066][T29457] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.646842][T29457] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.657982][T29456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.669475][T29456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.720045][T29456] team0: Port device team_slave_0 added [ 339.731614][T29456] team0: Port device team_slave_1 added [ 339.772957][T29456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.780094][T29456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.806394][T29456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.843772][T29750] wireguard0: entered allmulticast mode [ 339.850089][T29456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.857154][T29456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.883763][T29456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.914590][T29456] hsr_slave_0: entered promiscuous mode [ 339.931749][T29456] hsr_slave_1: entered promiscuous mode [ 339.937783][T29456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.945573][T29456] Cannot create hsr debugfs directory [ 340.227226][T29456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 340.247471][T29456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 340.267313][T29456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.285244][T29456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.364663][T29456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.389250][T29456] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.408770][T19974] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.415977][T19974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.454933][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.462143][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.540515][T29892] loop9: detected capacity change from 0 to 7 [ 340.549602][T29549] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5771'. [ 340.558693][T29549] netlink: 'syz.3.5771': attribute type 9 has an invalid length. [ 340.571516][T29892] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.587563][T29892] Buffer I/O error on dev loop9, logical block 0, async page read [ 340.588425][T29898] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5786'. [ 340.595589][T29892] loop9: unable to read partition table [ 340.605711][T29456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.619939][T29892] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 340.619939][T29892] U) failed (rc=-5) [ 340.746910][T29908] FAULT_INJECTION: forcing a failure. [ 340.746910][T29908] name failslab, interval 1, probability 0, space 0, times 0 [ 340.759834][T29908] CPU: 1 UID: 0 PID: 29908 Comm: syz.9.5789 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 340.759868][T29908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.759912][T29908] Call Trace: [ 340.759920][T29908] [ 340.759929][T29908] __dump_stack+0x1d/0x30 [ 340.760022][T29908] dump_stack_lvl+0xe8/0x140 [ 340.760044][T29908] dump_stack+0x15/0x1b [ 340.760089][T29908] should_fail_ex+0x265/0x280 [ 340.760128][T29908] should_failslab+0x8c/0xb0 [ 340.760151][T29908] kmem_cache_alloc_node_noprof+0x57/0x320 [ 340.760214][T29908] ? __alloc_skb+0x101/0x320 [ 340.760252][T29908] __alloc_skb+0x101/0x320 [ 340.760288][T29908] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 340.760319][T29908] ? raw_notifier_call_chain+0x190/0x1b0 [ 340.760401][T29908] ? call_netdevice_notifiers_info+0x9c/0x100 [ 340.760435][T29908] unregister_netdevice_many_notify+0xe0c/0x1690 [ 340.760503][T29908] unregister_netdevice_queue+0x1f5/0x220 [ 340.760531][T29908] vti6_siocdevprivate+0x273/0x8e0 [ 340.760574][T29908] dev_ifsioc+0x8f5/0xaa0 [ 340.760602][T29908] dev_ioctl+0x78d/0x960 [ 340.760665][T29908] sock_ioctl+0x593/0x610 [ 340.760696][T29908] ? __pfx_sock_ioctl+0x10/0x10 [ 340.760726][T29908] __se_sys_ioctl+0xce/0x140 [ 340.760832][T29908] __x64_sys_ioctl+0x43/0x50 [ 340.760866][T29908] x64_sys_call+0x19a8/0x2fb0 [ 340.760959][T29908] do_syscall_64+0xd2/0x200 [ 340.760983][T29908] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 340.761014][T29908] ? clear_bhb_loop+0x40/0x90 [ 340.761039][T29908] ? clear_bhb_loop+0x40/0x90 [ 340.761122][T29908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.761148][T29908] RIP: 0033:0x7fc6e97ce929 [ 340.761168][T29908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.761187][T29908] RSP: 002b:00007fc6e7e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.761209][T29908] RAX: ffffffffffffffda RBX: 00007fc6e99f5fa0 RCX: 00007fc6e97ce929 [ 340.761273][T29908] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000005 [ 340.761291][T29908] RBP: 00007fc6e7e37090 R08: 0000000000000000 R09: 0000000000000000 [ 340.761306][T29908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.761322][T29908] R13: 0000000000000000 R14: 00007fc6e99f5fa0 R15: 00007fffc29a4208 [ 340.761343][T29908] [ 340.849904][T29902] Set syz1 is full, maxelem 65536 reached [ 341.105324][T29456] veth0_vlan: entered promiscuous mode [ 341.127080][T29456] veth1_vlan: entered promiscuous mode [ 341.160503][T29456] veth0_macvtap: entered promiscuous mode [ 341.182706][T29456] veth1_macvtap: entered promiscuous mode [ 341.212576][T29914] Set syz1 is full, maxelem 65536 reached [ 341.215249][T29456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.246861][T29925] loop9: detected capacity change from 0 to 7 [ 341.253331][T29925] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.263124][T29925] Buffer I/O error on dev loop9, logical block 0, async page read [ 341.271374][T29925] loop9: unable to read partition table [ 341.278281][T29925] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 341.278281][T29925] U) failed (rc=-5) [ 341.294796][T29456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.306075][T29456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.315138][T29456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.323928][T29456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.332866][T29456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.428615][T29945] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5795'. [ 341.487705][T29947] wireguard0: entered allmulticast mode [ 341.541894][T29549] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5771'. [ 341.581218][T29959] wireguard0: entered allmulticast mode [ 341.633150][T29976] FAULT_INJECTION: forcing a failure. [ 341.633150][T29976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.646363][T29976] CPU: 0 UID: 0 PID: 29976 Comm: syz.8.5805 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 341.646412][T29976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.646426][T29976] Call Trace: [ 341.646434][T29976] [ 341.646443][T29976] __dump_stack+0x1d/0x30 [ 341.646468][T29976] dump_stack_lvl+0xe8/0x140 [ 341.646490][T29976] dump_stack+0x15/0x1b [ 341.646510][T29976] should_fail_ex+0x265/0x280 [ 341.646640][T29976] should_fail+0xb/0x20 [ 341.646674][T29976] should_fail_usercopy+0x1a/0x20 [ 341.646699][T29976] _copy_to_user+0x20/0xa0 [ 341.646786][T29976] simple_read_from_buffer+0xb5/0x130 [ 341.646826][T29976] proc_fail_nth_read+0x100/0x140 [ 341.646853][T29976] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 341.646919][T29976] vfs_read+0x19d/0x6f0 [ 341.646938][T29976] ? __rcu_read_unlock+0x4f/0x70 [ 341.646960][T29976] ? __fget_files+0x184/0x1c0 [ 341.646983][T29976] ksys_read+0xda/0x1a0 [ 341.647036][T29976] __x64_sys_read+0x40/0x50 [ 341.647109][T29976] x64_sys_call+0x2d77/0x2fb0 [ 341.647135][T29976] do_syscall_64+0xd2/0x200 [ 341.647161][T29976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 341.647226][T29976] ? clear_bhb_loop+0x40/0x90 [ 341.647247][T29976] ? clear_bhb_loop+0x40/0x90 [ 341.647268][T29976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.647291][T29976] RIP: 0033:0x7f5c521cd33c [ 341.647391][T29976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 341.647413][T29976] RSP: 002b:00007f5c50837030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 341.647437][T29976] RAX: ffffffffffffffda RBX: 00007f5c523f5fa0 RCX: 00007f5c521cd33c [ 341.647453][T29976] RDX: 000000000000000f RSI: 00007f5c508370a0 RDI: 0000000000000007 [ 341.647500][T29976] RBP: 00007f5c50837090 R08: 0000000000000000 R09: 0000000000000000 [ 341.647513][T29976] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 341.647526][T29976] R13: 0000000000000000 R14: 00007f5c523f5fa0 R15: 00007ffe7a085978 [ 341.647544][T29976] [ 341.954027][T29995] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5811'. [ 341.970183][T29995] loop3: detected capacity change from 0 to 1024 [ 341.979759][T29995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.408496][T30007] syzkaller0: entered promiscuous mode [ 342.414201][T30007] syzkaller0: entered allmulticast mode [ 342.570110][T29995] ================================================================== [ 342.578254][T29995] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 342.586378][T29995] [ 342.588726][T29995] write to 0xffff88811f1906e4 of 4 bytes by task 30000 on cpu 1: [ 342.596479][T29995] xas_set_mark+0x12b/0x140 [ 342.601272][T29995] tag_pages_for_writeback+0xc2/0x290 [ 342.606697][T29995] ext4_do_writepages+0x697/0x21c0 [ 342.611884][T29995] ext4_writepages+0x176/0x300 [ 342.616791][T29995] do_writepages+0x1c6/0x310 [ 342.621418][T29995] filemap_write_and_wait_range+0x144/0x340 [ 342.627443][T29995] filemap_invalidate_pages+0xa4/0x1a0 [ 342.632940][T29995] kiocb_invalidate_pages+0x6e/0x80 [ 342.638200][T29995] __iomap_dio_rw+0x5d4/0x1250 [ 342.642996][T29995] iomap_dio_rw+0x40/0x90 [ 342.647349][T29995] ext4_file_write_iter+0xad9/0xf00 [ 342.652560][T29995] iter_file_splice_write+0x5f2/0x970 [ 342.657963][T29995] direct_splice_actor+0x156/0x2a0 [ 342.663095][T29995] splice_direct_to_actor+0x312/0x680 [ 342.668665][T29995] do_splice_direct+0xda/0x150 [ 342.673475][T29995] do_sendfile+0x380/0x650 [ 342.677941][T29995] __x64_sys_sendfile64+0x105/0x150 [ 342.683205][T29995] x64_sys_call+0xb39/0x2fb0 [ 342.687820][T29995] do_syscall_64+0xd2/0x200 [ 342.692339][T29995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.698251][T29995] [ 342.700592][T29995] read to 0xffff88811f1906e4 of 4 bytes by task 29995 on cpu 0: [ 342.708256][T29995] file_write_and_wait_range+0x10e/0x2c0 [ 342.713933][T29995] generic_buffers_fsync_noflush+0x45/0x120 [ 342.719856][T29995] ext4_sync_file+0x1ab/0x690 [ 342.724558][T29995] vfs_fsync_range+0x10d/0x130 [ 342.729420][T29995] ext4_buffered_write_iter+0x34f/0x3c0 [ 342.734990][T29995] ext4_file_write_iter+0xdbf/0xf00 [ 342.740295][T29995] iter_file_splice_write+0x5f2/0x970 [ 342.745687][T29995] direct_splice_actor+0x156/0x2a0 [ 342.750822][T29995] splice_direct_to_actor+0x312/0x680 [ 342.756212][T29995] do_splice_direct+0xda/0x150 [ 342.761000][T29995] do_sendfile+0x380/0x650 [ 342.765431][T29995] __x64_sys_sendfile64+0x105/0x150 [ 342.770663][T29995] x64_sys_call+0xb39/0x2fb0 [ 342.775358][T29995] do_syscall_64+0xd2/0x200 [ 342.779957][T29995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.786051][T29995] [ 342.788398][T29995] value changed: 0x02000021 -> 0x04000021 [ 342.794124][T29995] [ 342.796453][T29995] Reported by Kernel Concurrency Sanitizer on: [ 342.802623][T29995] CPU: 0 UID: 0 PID: 29995 Comm: syz.3.5811 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(voluntary) [ 342.815150][T29995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.825327][T29995] ================================================================== [ 342.967753][T14899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.