last executing test programs: 2m39.330370156s ago: executing program 32 (id=370): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000000ff02001e0fc83600f5ffffffffffff00"], 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 2m23.459729069s ago: executing program 33 (id=691): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.278564159s ago: executing program 3 (id=722): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m22.220219512s ago: executing program 3 (id=724): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x103e, '\x00', 0x0, r0, 0x1, 0x5}, 0x50) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1080860, 0x0) 2m21.966453183s ago: executing program 3 (id=731): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x3, 0x2, 0x6, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m17.434332334s ago: executing program 34 (id=840): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000031401002dbd7000f6dbdf240900020073797a3200000000080041007278650014003300697036677265300000000000000000000900020073797a3000000000080041007369770014003300776c616e3100000000000000000000002ce61bd60f9653d8a4404e48bb56b1d8dae851aa38362e73ead85ae32e7ab885d0489be268f17c9692ce0610bc7fe32e133d4f01f85d"], 0x60}, 0x1, 0x0, 0x0, 0x44191}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890d, 0x0) socket$kcm(0x29, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x20, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m13.703483012s ago: executing program 35 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r7, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r8 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r9 = io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x8000001}) r10 = socket(0x2b, 0x1, 0x1) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) accept(r10, 0x0, 0x0) (async) accept(r10, 0x0, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x0, &(0x7f00000000c0)={@mcast2}, 0x14) close_range(r9, 0xffffffffffffffff, 0x0) 2m6.938561889s ago: executing program 36 (id=731): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x3, 0x2, 0x6, 0x0) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m6.894564002s ago: executing program 37 (id=1113): r0 = getpid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x290}}, 0x4048010) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000200), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000180)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f00000002c0)='GPL\x00'}, 0x90) 2m6.44545364s ago: executing program 38 (id=1124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 2m2.530890506s ago: executing program 39 (id=1216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd54a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x81}, 0x11efa, 0x5, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 2m1.784969178s ago: executing program 40 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2m1.054326089s ago: executing program 41 (id=1267): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 2m0.720105293s ago: executing program 42 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9890}, 0x40) 1m57.524288308s ago: executing program 3 (id=1268): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) 1m57.491032519s ago: executing program 3 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb770b3f6ef8f772, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m56.726366822s ago: executing program 3 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) 1m56.697214214s ago: executing program 43 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) 1m53.772828907s ago: executing program 7 (id=1533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002) read(r0, &(0x7f0000000440)=""/239, 0xef) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1m52.910912664s ago: executing program 7 (id=1583): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x5, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)="3e38b186de7fc57748e6d1cd81970c", 0xf}, {0x0}, {&(0x7f0000000880)="a24fb0", 0x3}, {0x0}], 0x4, &(0x7f0000000bc0)}, 0x0) 1m52.883782065s ago: executing program 7 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 1m52.811145238s ago: executing program 7 (id=1590): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) 1m52.76814791s ago: executing program 7 (id=1592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m51.284120863s ago: executing program 6 (id=1639): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfdef) 1m50.986635086s ago: executing program 7 (id=1642): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) 1m50.938593167s ago: executing program 44 (id=1642): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r1, 0x0, r0}, 0x10) 1m50.393279341s ago: executing program 6 (id=1655): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0xff06, 0x0) 1m50.310606884s ago: executing program 6 (id=1657): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m50.231588208s ago: executing program 6 (id=1659): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 1m50.195785149s ago: executing program 6 (id=1660): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c000500", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m49.919760171s ago: executing program 6 (id=1669): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 1m49.91965215s ago: executing program 45 (id=1669): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x10454ca, 0x0) 1m41.008074578s ago: executing program 8 (id=1949): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x32, 0x0, 0x0, 0x1, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1m40.918657462s ago: executing program 8 (id=1956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x493, &(0x7f0000000740)="$eJzs3MtrXFUYAPDv3jza2kdirY/WqtEiBB9Jk1btwo2i4KKioIu6jElaQqeNNFFsKTYVqRtBCroWl4J/gTsRRF0JbnXjSgpFu2kVhMi9c28yM51pm3aSiZnfDyZzzr1ncs53n+eeM0kAXWso+5FEbIuIXyNioJqtLzBUfbt25ezk31fOTiaxuPjGn0le7uqVs5Nl0fJzW4vMcBqRfpQUldSbO33m+ESlMn2qyI/On3hndO70maffOzFxbPrY9MnxQ4cOHhh77tnxZ9oSZxbX1T0fzO7d/cpbF1+dPHLx7R+/ztq7rVhfG0e7DGWB/7WYa1z3eLsr67DtNemkt4MNYUV6IiLbXX35+T8QPbG88wbi5Q872jhgVWX3pk2tVy8sAhtYEp1uAdAZ5Y0+e/4tX2vU9VgXLr9QfQDK4r5WvKpreiMtyvQ1PN+201BEHFn454vsFas0DgEAUOuTyc8Px1PN+n9p3Je//57/3FHMoQxGxN0RsTMi7omIXRFxb0Re9v6IeGCF9TdODV3f/0kv3XZwtyDr/z1fzG3V9//K3l8M9hS57Xn8fcnRmcr0/mKbDEffpiw/doM6vn3pl09bravt/2WvrP6yL1i041JvwwDd1MT8RN4pbYPL5yP29DaLP1maCUgiYndE7FnZr95RJmae+Gpvq0I3j/8G2jDPtPhlFt5CFv9CNMRfSmrnJ2eum58c3RyV6f2j5VFxvZ9+vvB6q/rvKP42uDxdfa/Z/41FBpPa+dq5lddx4bePWz7TLMe/pfXxn9R/ZmpiPu1P3sznmfuLZe9PzM+fGovoTw7n+brl48ufLfNl+ez4H97X/PzfWXwmq/7BiMgO4oci4uGIeKRo+6MR8VhE7LtB/D+82HpdGX+kHdr/5yOmml7/ljb6YJIdEkv7f+WJnuPff9Oq/lu7/h3MU8PFkvz6dxPNmpNdLhobeCfbDgAAAP4v0vw78Ek6spRO05GR6nf4d8VdaWV2bv7Jo7Pvnpyqfld+MPrScqRroBgPrcxUpseSheI3VsdHx4ux4nK89EAxbvxZz5Y8PzI5W5nqcOzQ7ba2OP8zf/R0unXAKtvSdOl4f7Olrgiw0TTOo6f12XOvRdOLAbAB+Htt6F43Of/TtWoHsPbc/6F7NTv/zzXkjfzBxuT+D93L+Q9dKv2u0y0AOsj9H7rSbfw5/1okNq+PZtT9p4CF1dli/1b/YUUsL1mvOyVPRJSJdF20R2LFiU23VLijlyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC2+S8AAP//4zHlww==") 1m40.817616346s ago: executing program 8 (id=1960): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) close(r2) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) chdir(&(0x7f0000000540)='./cgroup\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$notify(r3, 0x402, 0x8000003d) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1m40.754818179s ago: executing program 8 (id=1962): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x10454ca, 0x0) 1m40.72319893s ago: executing program 8 (id=1966): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m40.566449447s ago: executing program 8 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x493, &(0x7f0000000740)="$eJzs3MtrXFUYAPDv3jza2kdirY/WqtEiBB9Jk1btwo2i4KKioIu6jElaQqeNNFFsKTYVqRtBCroWl4J/gTsRRF0JbnXjSgpFu2kVhMi9c28yM51pm3aSiZnfDyZzzr1ncs53n+eeM0kAXWso+5FEbIuIXyNioJqtLzBUfbt25ezk31fOTiaxuPjGn0le7uqVs5Nl0fJzW4vMcBqRfpQUldSbO33m+ESlMn2qyI/On3hndO70maffOzFxbPrY9MnxQ4cOHhh77tnxZ9oSZxbX1T0fzO7d/cpbF1+dPHLx7R+/ztq7rVhfG0e7DGWB/7WYa1z3eLsr67DtNemkt4MNYUV6IiLbXX35+T8QPbG88wbi5Q872jhgVWX3pk2tVy8sAhtYEp1uAdAZ5Y0+e/4tX2vU9VgXLr9QfQDK4r5WvKpreiMtyvQ1PN+201BEHFn454vsFas0DgEAUOuTyc8Px1PN+n9p3Je//57/3FHMoQxGxN0RsTMi7omIXRFxb0Re9v6IeGCF9TdODV3f/0kv3XZwtyDr/z1fzG3V9//K3l8M9hS57Xn8fcnRmcr0/mKbDEffpiw/doM6vn3pl09bravt/2WvrP6yL1i041JvwwDd1MT8RN4pbYPL5yP29DaLP1maCUgiYndE7FnZr95RJmae+Gpvq0I3j/8G2jDPtPhlFt5CFv9CNMRfSmrnJ2eum58c3RyV6f2j5VFxvZ9+vvB6q/rvKP42uDxdfa/Z/41FBpPa+dq5lddx4bePWz7TLMe/pfXxn9R/ZmpiPu1P3sznmfuLZe9PzM+fGovoTw7n+brl48ufLfNl+ez4H97X/PzfWXwmq/7BiMgO4oci4uGIeKRo+6MR8VhE7LtB/D+82HpdGX+kHdr/5yOmml7/ljb6YJIdEkv7f+WJnuPff9Oq/lu7/h3MU8PFkvz6dxPNmpNdLhobeCfbDgAAAP4v0vw78Ek6spRO05GR6nf4d8VdaWV2bv7Jo7Pvnpyqfld+MPrScqRroBgPrcxUpseSheI3VsdHx4ux4nK89EAxbvxZz5Y8PzI5W5nqcOzQ7ba2OP8zf/R0unXAKtvSdOl4f7Olrgiw0TTOo6f12XOvRdOLAbAB+Htt6F43Of/TtWoHsPbc/6F7NTv/zzXkjfzBxuT+D93L+Q9dKv2u0y0AOsj9H7rSbfw5/1okNq+PZtT9p4CF1dli/1b/YUUsL1mvOyVPRJSJdF20R2LFiU23VLijlyUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC2+S8AAP//4zHlww==") 1m40.566150037s ago: executing program 46 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000e7ef90030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x76}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x493, &(0x7f0000000740)="$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") 1m16.512261057s ago: executing program 2 (id=2751): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1m15.632905244s ago: executing program 2 (id=2766): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r1, 0x407, 0x176) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r2, r3, 0x0) vmsplice(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r0, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000000002010400000000000000000a00000004000180440003800c00028005000100000000002c00018014000300fc000000000000000000000000000000140004fbd83f52aa4780190000000000000000bb06000340000200003c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa"], 0x98}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2144}, 0x18) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x13, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@xdp={0x2c, 0xc, 0x0, 0x28}, 0x80, &(0x7f0000000240)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000006c0)="bd828dfbde8fc5713c6bfd02ffa445985fd1b0cf32a9613f4f889b64c66293f9c8ce724b12a3bbc4e90c04061b8eef0b75f837fdcc55bb9c56ed78d84257d77f338ee10c1632ef18e937bdb1a9db635e79da1410790c948d6c06d1bc2fd7bdf9575c3ea858ae66cd5a530d64dd9357a2c8b883f819a5a7a448e5b94b953be7779564ead60dbdc7365cd9d24e342d94ee9ea009fd385f2823fdd072784e0e069733c2f71a10958cc06ea9968e91c40f59db1ebc1e94e408ff1c37f6494c5f1913a5bcb6ea", 0xc4}], 0x2, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x1380}, 0x0, 0xc006, 0x1, {0x0, r7}}) io_uring_enter(r5, 0x2003, 0x0, 0x0, 0x0, 0x0) gettid() 1m15.579267086s ago: executing program 2 (id=2768): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x80000001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = gettid() process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 1m15.470061001s ago: executing program 2 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m15.341331477s ago: executing program 2 (id=2776): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0xea) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m15.198143022s ago: executing program 2 (id=2785): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x80000001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = gettid() process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 1m0.17154724s ago: executing program 47 (id=2785): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x80000001) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup2(r4, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) r6 = gettid() process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000005304"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) 1.956043717s ago: executing program 9 (id=4298): perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x84280, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbf8, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @broadcast}}]}, 0x60}, 0x1, 0x7}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x84, 0x0) sendmsg$kcm(r0, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/272], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f00000000c0)={0x6, 0x0, 0x9, 0xfffffffffffffffe}) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="42f8294809d83da3173066f37e60f081360a2240822307c0a56fc4fd275bd747a7fa4f3ed2a42ce251f4b9cd07f01677d08bfacb79a742e5abb17b93e8fcf3039c6d65bed5985bae81ca128dbd91152ee609328aa68c0be49cffbcdc4d21f2b7295cb2e8626a9ef04c6a774a445fb897c56d6a1910389b64de", 0x79}, {&(0x7f0000000100)="27b608184810b97e72708b1659bbefa01c0b2194359ace528fdbfcccdd836832ad5c9e37845ab443e24d05d556080eaa80f25b99ecf663b3f83b98aa661f55ccf44ac920c9eda3d1bbadb53a2d718f2a35ca99aaeaf6e5275cbfd8b9f6127b", 0x5f}], 0x2, &(0x7f0000000180), 0x0, 0x20048010}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x40}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000080)={0x24, r4, 0x62c21a4ade68aba1, 0x70bd27, 0xfffffffd, {{0x32}, {@val={0x8, 0x117, 0x57}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1.901982109s ago: executing program 9 (id=4302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='devlink_trap_report\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x5, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.774395325s ago: executing program 5 (id=4306): syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x2040) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff0000000071189100000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203900000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740)={[{@lazytime}, {@inlinecrypt}, {@noblock_validity}, {@abort}, {@mblk_io_submit}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeec4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@errors_remount}, {@bsdgroups}]}, 0x1, 0x453, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000020000000000000000080000", @ANYRES32, @ANYBLOB='\x00\b\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='svcrdma_no_rwctx_err\x00', r2}, 0x18) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0xffffffffffffffb2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r7}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0xcd) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.759756445s ago: executing program 9 (id=4307): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7fffffff, 0x410000) write$evdev(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x21}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f00000004c0), 0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xbb, "a84fea165cb75c059cbc6ef5900faef1910aec24db042f431be696ac71c8763d23b057623de4b8f9913c539b05964ce57100a199c894f67e6d4cc8aa17799c5f7e58febce2f4f4dc54baa333177b7e8fb024fb3fc9f00f74876327e1cdf21629abc2b667bf76d139732bcfcc799cb63cbc146be508c4eecc9c87b5d52739bf4511e03bc0ebca7d3e9508b017a695babf2229a97691228bdc605dd947b550344c966f2c35b69ad95c71d32f9b8fb3f696588a22ea03da70e3f2eeb0"}, &(0x7f0000000600)=0xc3) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x2, 0x432, 0x8, 0x28, 0x396f, 0x6}, &(0x7f0000000300)=0x9c) mq_open(&(0x7f0000000180)=',@&{,\x00', 0x40, 0xa, 0x0) 1.553960284s ago: executing program 5 (id=4315): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000200000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) pwrite64(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8000c61) fallocate(0xffffffffffffffff, 0x3, 0x8000000, 0x8000c62) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000340), &(0x7f0000000240)=r4}, 0x36) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r2], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.136412682s ago: executing program 4 (id=4325): io_setup(0x4, &(0x7f0000000640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f3, &(0x7f0000000900)={'sit0\x00', @random="0000330c1100"}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmsg$can_j1939(r3, &(0x7f00000003c0)={&(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/117, 0x75}, {&(0x7f0000000180)=""/52, 0x34}], 0x2, &(0x7f0000000540)=""/229, 0xe5}, 0x2122) socket$l2tp6(0xa, 0x2, 0x73) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x888413, &(0x7f0000000200), 0x1e, 0x528, &(0x7f0000000a80)="$eJzs3c9vG1kdAPDvOHaaNGmSBQ6wErsLuyitoE6y0e5GHJZFQnBaCSj3EhIniuLEVeK0TVTRVPwBSAgBEie4cEHiD0BClbhwREiV4AwCBELQwgEk6CDb4zRN7MSbpnYafz7SdN4Pz3zfczvjeTPTmQD61nvZ9DhN0ysRMZ6V57Lpk7XMbsRrEfHo4Z2F2pREml77exJJVtZcV1p3IUYai9RX8NUvRXwjORx3c3tndb5cLm1k+anq2o2pze2dqytr88ul5dL67OzM23PvzL01N/0s3VsayRKXIuLdL/z5e9/+yRff/cVnbv3h+l8vfzNptPluHOjHB5Q/qrLR9UIMHSjbOGGwsyi/PzHc2TL3sn8iAAB0V+249EPZcf6VGI+Bow9nAQAAgBdQ+rnR+G/SvHZ3yGCbcgAAAOAFkouI0Uhyxex+39HI5YrFqN/D+5G4mCtXNqufXqpsrS/W6iImopBbWimXprN7hSeikNTyM/X0k/ybB/KzEfFSRHx3fLieLy5Uyou9PvkBAAAAfWLkwPj/X+ON8T8AAABwzkz0ugEAAADAc2f8DwAAAOef8T8AAACca19+//3alDbff714c3trtXLz6mJpc7W4trVQXKhs3CguVyrL9Wf2rR25sr1XB65v3Z6qljarQxFxfa2ytV69vvLUK7ABAACALnrp1fu/SyJi97PD9almcF/9f7L3BPSsgcBzs3fKLpJsPnj4Q78fa8z/1KVGAV0x0OsGAD1T//0fPtGiJ1sKODMKvW4A0HPJMfVtb975dTb/RKeRHDYAAECvTH6s/fX/3JFL7h5dDZx5NmLoX67/Q/+qX/9vcctfSw4W4FwpOAKAvvfM1/+P5f8QAQBAr43WpyRXzE7vjUYuVyxGXKq/FqCQLK2US9MRMRYRvx0vXKjlZ+pLJseOGQAAAAAAAAAAAAAAAAAAAAAAAACAhjRNIgUAAADOtYjcX5JfNp7lPzn+xujB8wODyb/HI3tF6K0fXvv+7flqdWOmVv6PvfLqD7LyNw+fX8h35SwGAAAA9IcLHX6uOU5vjuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DQ9enhnoTl1M+7fPh8RE63i52OoPh+KQkRc/GcS+X3LJRExcArxd+9FxEdbxU9qzdoL2Sr+8POPHxPZt9Aq/sgpxId+dr+2/3mv1faXi9fq89bbXz7iqfxJtd//xd7+b6DN9n+pwxgvP/jZVNv49yJezrfe/zTjJ23iv95h/K9/bWenXV36o4jJlr8/yVOxpqprN6Y2t3eurqzNL5eWS+uzszNvz70z99bc9NTSSrmU/dkyxnc+/vPHR/X/Ypv4E8f0/40O+/+/B7cffriRLLSKf/n1FvF/9ePsE4fj57Lfvk9l6Vr9ZDO920jv98pPf/PKUf1fbNP/4/7+L3fY/ytf+dYfO/woANAFm9s7q/PlcmnjhU/k21TVRulno4USZy1x93DVq3HiFaZpmta2qWdoWJKm6d1efBuTYxG1RLJX0us9EwAAcNqeDAP2XZ0Y63GjAAAAAAAAAAAAAAAAAAAAoM904wFjB2Pu7qWS03iENgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqfh/AAAA//+EkehI") 1.106786673s ago: executing program 5 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="f22b831a1e", 0x5}, {0x0}], 0x2, 0xb, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x38, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6a}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x19}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000078dc9b51c8ba794ac21d18f623e9010000850000001b000000b7000000000000009598feabb4dacd9eeee93dd4b5955d85b7f3134d241491f450f821ef30f2c9acbc691fe2ca31ee559ced2396c2c3eed2272ce93ef8891a1ffb385f37786e65a3f6d0aef2e304565d84e0975e03934255835c44e149a8912b8a02c83565229e7d3492c3fab783278e771e9fce57f71c712b7b8c"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r8}, 0x18) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xc07a, 0x1, 0xffffffff, 0x289}, &(0x7f00000001c0), &(0x7f0000000140)) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x3, 0x5, 0x9, 0x6, 0x800, 0x3}, {0x6, 0x3, 0x3, 0x4, 0xe554, 0xfffffffffffffffc}], ['\x00', '\x00', '\x00']}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f0000000740)=0x4) r11 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r12 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r13, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x8, 0xb, r11, 0x0, 0x0, 0x1397, 0x0, 0x1, r12}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x3ff, 0x33, &(0x7f0000000540)=""/51, 0x41100, 0x40, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000940)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000980)=[{0x5, 0x1, 0x5, 0x1}, {0x1, 0x2, 0x1, 0x8}], 0x10, 0x3}, 0x94) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x800, 0x80000000, 0xffffffff, 0x20000, r0, 0x3b, '\x00', 0x0, r14, 0x2, 0x3, 0x4, 0x9}, 0x50) 1.054304895s ago: executing program 5 (id=4328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000003c0)={0x0, 0x0, @a}, 0x48, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000440)={r4, 0x7b, 0x36}, &(0x7f0000000600)={'enc=', 'raw', ' hash=', {'ghash-ce-sync\x00'}}, &(0x7f0000000800)="5f50bffc27e9d964291a29c309bc0eed7a81b88e97a44073746f7e9f489fe74f5553152af1db13a298f54b983cafa1d34a74e1bbe66426194a3c0481dc4a1a9d5678dc4ef4df2099a14bd39250341112b40f162b6d39ac4af4f9c6d08f527398607f94e0d584745849761065e07984662ea4f71efa445054cabec4", &(0x7f0000000480)="a7337e3b390c4762db5e33bb8d6685f06f47608de9b1dcd41a75f55808a84e1b131754be89bf6bcc47447c297b6389ca0baa76f3f0b1") bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095", @ANYRES16=r1, @ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r7, r5, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) copy_file_range(r10, 0x0, r10, 0x0, 0x9, 0x0) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8004, 0x0, 0xc, 0x2) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r11, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 966.362099ms ago: executing program 4 (id=4331): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='devlink_trap_report\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x5, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 870.847033ms ago: executing program 4 (id=4332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESOCT], 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x20040001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 804.164136ms ago: executing program 0 (id=4333): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) 774.492227ms ago: executing program 9 (id=4334): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 760.411208ms ago: executing program 0 (id=4335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000", @ANYRESOCT], 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x20040001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xc0000, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 612.222074ms ago: executing program 9 (id=4339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 596.950995ms ago: executing program 4 (id=4340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x44f0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r4, 0x1) 563.666916ms ago: executing program 1 (id=4342): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='devlink_trap_report\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x5, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x1000ffffffff}, 0x2000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x80, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd71}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 545.951436ms ago: executing program 5 (id=4343): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c"], 0xb0}}, 0x0) (fail_nth: 1) 544.283367ms ago: executing program 9 (id=4344): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}, {0x8, 0x2, 0x8, 0x292}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000400)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000310018000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xf3, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) r7 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r8, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000003, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x100, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 450.007981ms ago: executing program 5 (id=4345): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x7fffffff, 0x410000) write$evdev(r0, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4, 0x21}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x48}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f00000004c0), 0x80) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000500)={0x0, 0xbb, "a84fea165cb75c059cbc6ef5900faef1910aec24db042f431be696ac71c8763d23b057623de4b8f9913c539b05964ce57100a199c894f67e6d4cc8aa17799c5f7e58febce2f4f4dc54baa333177b7e8fb024fb3fc9f00f74876327e1cdf21629abc2b667bf76d139732bcfcc799cb63cbc146be508c4eecc9c87b5d52739bf4511e03bc0ebca7d3e9508b017a695babf2229a97691228bdc605dd947b550344c966f2c35b69ad95c71d32f9b8fb3f696588a22ea03da70e3f2eeb0"}, &(0x7f0000000600)=0xc3) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0x2, 0x432, 0x8, 0x28, 0x396f, 0x6}, &(0x7f0000000300)=0x9c) mq_open(&(0x7f0000000180)=',@&{,\x00', 0x40, 0xa, 0x0) 449.532291ms ago: executing program 4 (id=4346): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) 317.855457ms ago: executing program 0 (id=4347): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x81) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 308.520437ms ago: executing program 4 (id=4348): fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000200000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) pwrite64(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x8000c61) fallocate(0xffffffffffffffff, 0x3, 0x8000000, 0x8000c62) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000340), &(0x7f0000000240)=r4}, 0x36) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="050000001b0800000075000000", @ANYRES64=r2], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x440c0) sendmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="050000000208"], 0x80}}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 259.759479ms ago: executing program 0 (id=4349): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000370427bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c0400000000003400128009000100697069700000000024000280050005000300000005000a000000000006000f0003000000080002000a"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) 253.232689ms ago: executing program 1 (id=4350): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000a00), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4, 0x41000000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 150.564913ms ago: executing program 1 (id=4351): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 150.311674ms ago: executing program 1 (id=4352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 144.831284ms ago: executing program 0 (id=4353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="07000000040000000002e61a1042e16fe752a00000db21000010000000", @ANYRES32, @ANYRESOCT, @ANYRES64=0xffffffffffffffff, @ANYRES16=0xffffffffffffffff], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800210003000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000500)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0xc, &(0x7f0000001040)=ANY=[@ANYRESOCT=r1, @ANYBLOB="ba972818a55b2fb99293b8c86d74c47cbef1bc4f6a4faf749325e6c830e11141424f0f15af87c9207e9f00673a8a4daa212bf1735684f23b66a4ff174207c9d27494af72d684cf694340601fbed8355cb45b57057189b53b776384e1dcaed39c4aae0091464849210d38911492dcc9e65898e5dee1c90ef686bdef3a752a513004ff081e8b45ba65a8f1a2", @ANYRES32=r4, @ANYRES64=0x0, @ANYRES32=r2], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r5, 0x2, 0x4, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x9, 0x58, 0x0, 0x7, 0x98142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x4190, 0xaea}, 0x4105, 0x2e, 0xe96, 0x3, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40000000000a9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'ip6erspan0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r10, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18", 0x10) getsockopt$inet_tcp_buf(r10, 0x6, 0x21, 0x0, &(0x7f0000000580)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$unix(0x1, 0x1, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r12}, 0x18) syz_clone(0x0, &(0x7f0000000ec0)="c36b524ccf47db595954b60a27d995000000000000db04a97fa134c87ff428ccedfcfc0854e53957331063de43acfc5d916f0c625870ff734849c2af5ff468e5f325c355bfbe3324409d4255b54ada49f56c9e4c11ed8aa4ad0e9b5dc33ddae05fb34cda5c9b20b8d5dd5072d0454767ac61aa3aed0db4a126878d6ec8ef39fb6eddf90d28feb83e57533b2495ab79436421fbf5c2dbed1faa5d8ac3745d2f1832b7ae5e4d218b1b6821da09297627dd113f2c0f356446cdd83c3439252adeaf19babdbbf5dd90bf44841340a2e83011a151c02bcbb295fc455b0b51ea684c04fb6a2e5f1e602328409b8dc157ab27604e1ca95ce71aaaae6f533f500fecc8829de469dbfd8f18fc70a2f892ae433e1f680ea2dbbe570678912ce491e9e6e2f661ec579c83e311925ed00097186cd67bba772d1e13471d3c75ddb2d61c48abdd1691f58ea027b5636e2adbfea9b739d14f40dca69e577616f3248c9dc8a8ed44b99cecc5efcde94f4400a48996fd92a77a433d1898e223c55272", 0x17a, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000800)="592f620156f934f953954c4ec99ddb7f2550e066fe1c80f9e4e4ab2634c6d287a09acf18ce97e05b6e761aeed4d52f695b1c45b1067775eec19fbeaa702f61e582bcd9ebe220b00fb294db39d5820bccb72aa195ec0ce57eb13c46dc5ec0b8e05a36b44c7314ff952b836483f90a5e67d165101de2d6931b68bd993921") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000740)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000540)={0x0, 0x2, 0x442, 0x7fffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r13, 0x89f4, &(0x7f0000000900)="4a646a5fb007752f0ee0abcd099c8ee7678451c407a381679714ae2527e660cb8b8971bda2ec554634fbd6ce5179bef635672872b31b6b96a6a740933c1ac2bbd495c830fd07cac12ba5e64cddb3e290c698c25b50302780202aaa2a54b12a42309a762a43787f50c25008cdca28ab3375190eba17fe18a95026d8c8") ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000001500)="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"}) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 116.256665ms ago: executing program 1 (id=4354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 303.29µs ago: executing program 1 (id=4355): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x81) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 0s ago: executing program 0 (id=4356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, 0x0, 0x81) (rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) (async) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Engine, BIOS Google 10/02/2025 [ 162.867567][T11912] Call Trace: [ 162.867574][T11912] [ 162.867581][T11912] __dump_stack+0x1d/0x30 [ 162.867602][T11912] dump_stack_lvl+0xe8/0x140 [ 162.867621][T11912] dump_stack+0x15/0x1b [ 162.867636][T11912] should_fail_ex+0x265/0x280 [ 162.867668][T11912] should_failslab+0x8c/0xb0 [ 162.867693][T11912] kmem_cache_alloc_noprof+0x50/0x480 [ 162.867717][T11912] ? getname_flags+0x80/0x3b0 [ 162.867783][T11912] getname_flags+0x80/0x3b0 [ 162.867809][T11912] do_sys_openat2+0x60/0x110 [ 162.867830][T11912] __x64_sys_openat+0xf2/0x120 [ 162.867857][T11912] x64_sys_call+0x2eab/0x3000 [ 162.867937][T11912] do_syscall_64+0xd2/0x200 [ 162.867955][T11912] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.868047][T11912] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.868076][T11912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.868095][T11912] RIP: 0033:0x7f4557e7f749 [ 162.868167][T11912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.868263][T11912] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 162.868280][T11912] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 162.868292][T11912] RDX: 0000000000024200 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 162.868303][T11912] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.868314][T11912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.868324][T11912] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 162.868344][T11912] [ 163.075681][T11915] loop5: detected capacity change from 0 to 512 [ 163.083321][T11915] ext4: Unknown parameter 'uid' [ 163.090944][T11915] siw: device registration error -23 [ 163.099325][T11918] xt_hashlimit: max too large, truncated to 1048576 [ 163.172687][ T29] audit: type=1326 audit(1763786778.762:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 163.196410][ T29] audit: type=1326 audit(1763786778.762:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 163.220020][ T29] audit: type=1326 audit(1763786778.762:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 163.270250][ T29] audit: type=1326 audit(1763786778.762:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11925 comm="syz.1.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 163.382932][T11947] siw: device registration error -23 [ 163.426753][ T29] audit: type=1400 audit(1763786779.012:6151): avc: denied { read } for pid=11954 comm="syz.4.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 163.461166][T11957] Process accounting resumed [ 163.487183][T11964] loop4: detected capacity change from 0 to 2048 [ 163.581319][T11970] lo speed is unknown, defaulting to 1000 [ 163.630719][T11970] loop5: detected capacity change from 0 to 512 [ 163.637333][T11970] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 163.681157][T11964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.726008][ T29] audit: type=1326 audit(1763786779.312:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11975 comm="syz.0.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 163.828061][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.941141][T11980] loop9: detected capacity change from 0 to 512 [ 163.963307][T11980] ext4: Unknown parameter 'uid' [ 164.165896][T12001] loop4: detected capacity change from 0 to 1024 [ 164.221385][T12005] __nla_validate_parse: 22 callbacks suppressed [ 164.221403][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 164.246885][T12009] bond1: option resend_igmp: invalid value (1024) [ 164.253398][T12009] bond1: option resend_igmp: allowed values 0 - 255 [ 164.266545][T12009] bond1 (unregistering): Released all slaves [ 164.588591][T12043] bond1: option resend_igmp: invalid value (1024) [ 164.595143][T12043] bond1: option resend_igmp: allowed values 0 - 255 [ 164.603488][T12043] bond1 (unregistering): Released all slaves [ 164.656930][T12050] FAULT_INJECTION: forcing a failure. [ 164.656930][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 164.669672][T12050] CPU: 0 UID: 0 PID: 12050 Comm: syz.5.3288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.669699][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.669713][T12050] Call Trace: [ 164.669720][T12050] [ 164.669729][T12050] __dump_stack+0x1d/0x30 [ 164.669755][T12050] dump_stack_lvl+0xe8/0x140 [ 164.669836][T12050] dump_stack+0x15/0x1b [ 164.669853][T12050] should_fail_ex+0x265/0x280 [ 164.669889][T12050] ? legacy_init_fs_context+0x31/0x80 [ 164.669989][T12050] should_failslab+0x8c/0xb0 [ 164.670020][T12050] __kmalloc_cache_noprof+0x4c/0x4a0 [ 164.670099][T12050] legacy_init_fs_context+0x31/0x80 [ 164.670129][T12050] alloc_fs_context+0x3ef/0x4e0 [ 164.670159][T12050] fs_context_for_mount+0x22/0x30 [ 164.670186][T12050] do_new_mount+0xea/0x660 [ 164.670212][T12050] ? security_capable+0x83/0x90 [ 164.670299][T12050] path_mount+0x4a5/0xb70 [ 164.670339][T12050] ? user_path_at+0x109/0x130 [ 164.670361][T12050] __se_sys_mount+0x28c/0x2e0 [ 164.670388][T12050] ? fput+0x8f/0xc0 [ 164.670409][T12050] __x64_sys_mount+0x67/0x80 [ 164.670523][T12050] x64_sys_call+0x2b51/0x3000 [ 164.670547][T12050] do_syscall_64+0xd2/0x200 [ 164.670569][T12050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.670600][T12050] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.670693][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.670738][T12050] RIP: 0033:0x7f4557e7f749 [ 164.670776][T12050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.670796][T12050] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.670817][T12050] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 164.670831][T12050] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 0000000000000000 [ 164.670911][T12050] RBP: 00007f45568e7090 R08: 0000200000000040 R09: 0000000000000000 [ 164.670925][T12050] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 164.670938][T12050] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 164.670959][T12050] [ 164.719123][T12035] loop9: detected capacity change from 0 to 2048 [ 164.901409][T12035] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.921414][T12035] EXT4-fs error (device loop9): ext4_find_extent:939: inode #2: comm syz.9.3282: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 165.011659][T12069] Cannot find map_set index 0 as target [ 165.095368][ T6510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.104661][T12075] loop5: detected capacity change from 0 to 1024 [ 165.113441][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3302'. [ 165.132048][T12075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.156512][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.193058][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.215419][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3307'. [ 165.227948][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3307'. [ 165.283205][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 165.337171][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3316'. [ 165.437587][T12118] siw: device registration error -23 [ 165.563893][T12152] loop9: detected capacity change from 0 to 512 [ 165.571002][T12152] EXT4-fs: Ignoring removed bh option [ 165.576624][T12152] ext2: Unknown parameter 'fsuuid' [ 165.606810][T12158] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.613577][T10635] Bluetooth: hci0: Frame reassembly failed (-84) [ 165.625775][T12156] loop9: detected capacity change from 0 to 512 [ 165.633781][T12156] ext4: Unknown parameter 'uid' [ 165.723378][T12177] FAULT_INJECTION: forcing a failure. [ 165.723378][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 165.736131][T12177] CPU: 1 UID: 0 PID: 12177 Comm: syz.0.3343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.736161][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 165.736174][T12177] Call Trace: [ 165.736181][T12177] [ 165.736190][T12177] __dump_stack+0x1d/0x30 [ 165.736250][T12177] dump_stack_lvl+0xe8/0x140 [ 165.736269][T12177] dump_stack+0x15/0x1b [ 165.736288][T12177] should_fail_ex+0x265/0x280 [ 165.736324][T12177] ? hci_uart_tty_open+0x69/0x220 [ 165.736397][T12177] should_failslab+0x8c/0xb0 [ 165.736508][T12177] __kmalloc_cache_noprof+0x4c/0x4a0 [ 165.736544][T12177] hci_uart_tty_open+0x69/0x220 [ 165.736642][T12177] tty_ldisc_open+0x5d/0xb0 [ 165.736663][T12177] tty_set_ldisc+0x1db/0x380 [ 165.736700][T12177] tiocsetd+0x51/0x60 [ 165.736728][T12177] tty_ioctl+0xa79/0xb80 [ 165.736753][T12177] ? __pfx_tty_ioctl+0x10/0x10 [ 165.736779][T12177] __se_sys_ioctl+0xce/0x140 [ 165.736804][T12177] __x64_sys_ioctl+0x43/0x50 [ 165.736853][T12177] x64_sys_call+0x1816/0x3000 [ 165.736939][T12177] do_syscall_64+0xd2/0x200 [ 165.736962][T12177] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.736991][T12177] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.737031][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.737055][T12177] RIP: 0033:0x7f9e4a98f749 [ 165.737073][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.737092][T12177] RSP: 002b:00007f9e493ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.737158][T12177] RAX: ffffffffffffffda RBX: 00007f9e4abe6090 RCX: 00007f9e4a98f749 [ 165.737173][T12177] RDX: 0000200000000080 RSI: 0000000000005423 RDI: 0000000000000007 [ 165.737189][T12177] RBP: 00007f9e493ce090 R08: 0000000000000000 R09: 0000000000000000 [ 165.737203][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.737217][T12177] R13: 00007f9e4abe6128 R14: 00007f9e4abe6090 R15: 00007ffe97dae538 [ 165.737287][T12177] [ 165.737295][T12177] Bluetooth: Can't allocate control structure [ 165.829941][T11782] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 165.969862][ T7983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.042995][T12193] siw: device registration error -23 [ 166.086894][T12197] Bluetooth: hci1: Frame reassembly failed (-84) [ 166.105254][T10635] Bluetooth: hci1: Frame reassembly failed (-84) [ 166.105286][T12197] loop9: detected capacity change from 0 to 2048 [ 166.137002][T12198] loop5: detected capacity change from 0 to 2048 [ 166.162931][T12198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.178534][T12198] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 166.195528][T12198] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 166.207848][T12198] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.207848][T12198] [ 166.217523][T12198] EXT4-fs (loop5): Total free blocks count 0 [ 166.223524][T12198] EXT4-fs (loop5): Free/Dirty block details [ 166.229448][T12198] EXT4-fs (loop5): free_blocks=2415919504 [ 166.235187][T12198] EXT4-fs (loop5): dirty_blocks=32 [ 166.240325][T12198] EXT4-fs (loop5): Block reservation details [ 166.246336][T12198] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 166.281753][T12205] xt_hashlimit: max too large, truncated to 1048576 [ 166.311341][T12211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'. [ 166.491062][T12225] siw: device registration error -23 [ 166.824443][T12187] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 166.881168][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3373'. [ 166.892054][T12250] siw: device registration error -23 [ 167.155554][T12273] loop5: detected capacity change from 0 to 2048 [ 167.170477][T12273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.184400][T12273] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 167.199654][T12273] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 167.212211][T12273] EXT4-fs (loop5): This should not happen!! Data will be lost [ 167.212211][T12273] [ 167.221927][T12273] EXT4-fs (loop5): Total free blocks count 0 [ 167.228165][T12273] EXT4-fs (loop5): Free/Dirty block details [ 167.234222][T12273] EXT4-fs (loop5): free_blocks=2415919504 [ 167.239998][T12273] EXT4-fs (loop5): dirty_blocks=32 [ 167.245247][T12273] EXT4-fs (loop5): Block reservation details [ 167.251425][T12273] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 167.628938][ T9738] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 167.628931][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 167.680198][T12287] loop4: detected capacity change from 0 to 256 [ 167.743913][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 167.743931][ T29] audit: type=1326 audit(1763786783.332:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.773972][ T29] audit: type=1326 audit(1763786783.352:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.797541][ T29] audit: type=1326 audit(1763786783.352:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.821130][ T29] audit: type=1326 audit(1763786783.352:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.844651][ T29] audit: type=1400 audit(1763786783.352:6307): avc: denied { associate } for pid=12286 comm="syz.4.3387" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 167.871752][ T29] audit: type=1326 audit(1763786783.352:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.895332][ T29] audit: type=1326 audit(1763786783.352:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12286 comm="syz.4.3387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 167.920154][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 167.920622][T12267] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 167.937316][ T29] audit: type=1326 audit(1763786783.522:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 167.964942][ T29] audit: type=1326 audit(1763786783.522:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 167.988607][ T29] audit: type=1326 audit(1763786783.522:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12300 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 168.108930][ T3506] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 168.109416][ T9738] Bluetooth: hci1: command 0x1003 tx timeout [ 168.138508][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 168.166047][T12320] loop4: detected capacity change from 0 to 2048 [ 168.240649][T12320] loop4: p1 p2 p3 [ 168.389809][T12345] loop4: detected capacity change from 0 to 2048 [ 168.410592][T12345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.444722][T12352] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 168.467096][T12345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 168.484677][T12345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 168.497087][T12345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.497087][T12345] [ 168.506799][T12345] EXT4-fs (loop4): Total free blocks count 0 [ 168.512849][T12345] EXT4-fs (loop4): Free/Dirty block details [ 168.518886][T12345] EXT4-fs (loop4): free_blocks=2415919504 [ 168.524634][T12345] EXT4-fs (loop4): dirty_blocks=32 [ 168.529808][T12345] EXT4-fs (loop4): Block reservation details [ 168.535858][T12345] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 168.722339][T12372] loop9: detected capacity change from 0 to 512 [ 168.729908][T12372] EXT4-fs: Ignoring removed bh option [ 168.735433][T12372] ext2: Unknown parameter 'fsuuid' [ 168.817044][T12383] xt_hashlimit: max too large, truncated to 1048576 [ 169.149358][T12337] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.411030][T12457] loop9: detected capacity change from 0 to 2048 [ 169.445883][T12457] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.468249][T12457] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 169.503103][T12457] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 169.515502][T12457] EXT4-fs (loop9): This should not happen!! Data will be lost [ 169.515502][T12457] [ 169.525257][T12457] EXT4-fs (loop9): Total free blocks count 0 [ 169.531332][T12457] EXT4-fs (loop9): Free/Dirty block details [ 169.532061][T12480] FAULT_INJECTION: forcing a failure. [ 169.532061][T12480] name failslab, interval 1, probability 0, space 0, times 0 [ 169.537275][T12457] EXT4-fs (loop9): free_blocks=2415919504 [ 169.537294][T12457] EXT4-fs (loop9): dirty_blocks=32 [ 169.550553][T12480] CPU: 1 UID: 0 PID: 12480 Comm: syz.4.3472 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.550634][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.550646][T12480] Call Trace: [ 169.550652][T12480] [ 169.550660][T12480] __dump_stack+0x1d/0x30 [ 169.550683][T12480] dump_stack_lvl+0xe8/0x140 [ 169.550703][T12480] dump_stack+0x15/0x1b [ 169.550721][T12480] should_fail_ex+0x265/0x280 [ 169.550905][T12480] ? raw_ioctl+0x1118/0x1d00 [ 169.550952][T12480] should_failslab+0x8c/0xb0 [ 169.551110][T12480] __kmalloc_cache_noprof+0x4c/0x4a0 [ 169.551212][T12480] raw_ioctl+0x1118/0x1d00 [ 169.551249][T12480] ? __pfx_raw_ioctl+0x10/0x10 [ 169.551288][T12480] __se_sys_ioctl+0xce/0x140 [ 169.551309][T12480] __x64_sys_ioctl+0x43/0x50 [ 169.551396][T12480] x64_sys_call+0x1816/0x3000 [ 169.551475][T12480] do_syscall_64+0xd2/0x200 [ 169.551496][T12480] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.551554][T12480] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.551585][T12480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.551611][T12480] RIP: 0033:0x7fdee6fcf34b [ 169.551627][T12480] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 169.551645][T12480] RSP: 002b:00007fdee5a2cf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.551726][T12480] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007fdee6fcf34b [ 169.551739][T12480] RDX: 00007fdee5a2dfe0 RSI: 0000000041015500 RDI: 0000000000000007 [ 169.551752][T12480] RBP: 00007fdee5a2dfe0 R08: 0000000000000000 R09: 00342e6364755f79 [ 169.551765][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.551777][T12480] R13: 00007fdee5a2cfb0 R14: 0000200000000180 R15: 00007fdee7350320 [ 169.551846][T12480] [ 169.740148][T12457] EXT4-fs (loop9): Block reservation details [ 169.746148][T12457] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 169.760801][T12456] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 169.835780][T12491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12491 comm=syz.9.3476 [ 169.852641][T12491] loop9: detected capacity change from 0 to 512 [ 169.860367][T12491] EXT4-fs: Ignoring removed bh option [ 169.866185][T12491] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.875315][T12491] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 169.885193][T12491] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 169.894719][T12491] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 169.904528][T12491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.973194][T12506] __nla_validate_parse: 11 callbacks suppressed [ 169.973213][T12506] netlink: 180 bytes leftover after parsing attributes in process `syz.9.3476'. [ 170.000380][T12506] FAULT_INJECTION: forcing a failure. [ 170.000380][T12506] name failslab, interval 1, probability 0, space 0, times 0 [ 170.000478][T12506] CPU: 0 UID: 0 PID: 12506 Comm: syz.9.3476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.000506][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.000517][T12506] Call Trace: [ 170.000523][T12506] [ 170.000530][T12506] __dump_stack+0x1d/0x30 [ 170.000593][T12506] dump_stack_lvl+0xe8/0x140 [ 170.000645][T12506] dump_stack+0x15/0x1b [ 170.000672][T12506] should_fail_ex+0x265/0x280 [ 170.000798][T12506] should_failslab+0x8c/0xb0 [ 170.000829][T12506] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 170.000869][T12506] ? __alloc_skb+0x101/0x320 [ 170.000967][T12506] __alloc_skb+0x101/0x320 [ 170.001000][T12506] netlink_ack+0xfd/0x500 [ 170.001059][T12506] ? avc_has_perm_noaudit+0x1b1/0x200 [ 170.001149][T12506] netlink_rcv_skb+0x192/0x220 [ 170.001201][T12506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.001233][T12506] rtnetlink_rcv+0x1c/0x30 [ 170.001255][T12506] netlink_unicast+0x5c0/0x690 [ 170.001318][T12506] netlink_sendmsg+0x58b/0x6b0 [ 170.001397][T12506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.001417][T12506] __sock_sendmsg+0x145/0x180 [ 170.001441][T12506] __sys_sendto+0x268/0x330 [ 170.001477][T12506] __x64_sys_sendto+0x76/0x90 [ 170.001521][T12506] x64_sys_call+0x2d14/0x3000 [ 170.001543][T12506] do_syscall_64+0xd2/0x200 [ 170.001569][T12506] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.001596][T12506] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.001627][T12506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.001707][T12506] RIP: 0033:0x7f42788815dc [ 170.001722][T12506] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 170.001740][T12506] RSP: 002b:00007f42772c4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 170.001761][T12506] RAX: ffffffffffffffda RBX: 00007f42772c4fc0 RCX: 00007f42788815dc [ 170.001823][T12506] RDX: 0000000000000020 RSI: 00007f42772c5010 RDI: 0000000000000009 [ 170.001836][T12506] RBP: 0000000000000000 R08: 00007f42772c4f14 R09: 000000000000000c [ 170.001855][T12506] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 170.001867][T12506] R13: 00007f42772c4f68 R14: 00007f42772c5010 R15: 0000000000000000 [ 170.001886][T12506] [ 170.036317][T12508] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.263110][T12513] loop4: detected capacity change from 0 to 2048 [ 170.283195][T12513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.290104][T12513] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 170.324331][T12513] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 170.324366][T12513] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.324366][T12513] [ 170.324378][T12513] EXT4-fs (loop4): Total free blocks count 0 [ 170.324393][T12513] EXT4-fs (loop4): Free/Dirty block details [ 170.324431][T12513] EXT4-fs (loop4): free_blocks=2415919504 [ 170.324447][T12513] EXT4-fs (loop4): dirty_blocks=32 [ 170.324461][T12513] EXT4-fs (loop4): Block reservation details [ 170.324473][T12513] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 170.337966][T12508] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.352081][T12512] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 170.450984][T12508] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.541125][T12508] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.613900][T10644] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.617482][T10644] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.628976][T10644] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.629078][T10644] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.709586][T12545] loop5: detected capacity change from 0 to 256 [ 170.823120][ T6510] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.024338][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'. [ 171.321106][T12603] siw: device registration error -23 [ 171.510438][T12613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.519280][T12613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.875524][T12624] loop4: detected capacity change from 0 to 1024 [ 171.901026][T12624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.940578][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.964819][T12631] loop4: detected capacity change from 0 to 512 [ 171.971438][T12631] ext4: Unknown parameter 'uid' [ 171.978400][T12631] siw: device registration error -23 [ 172.072056][T12645] loop4: detected capacity change from 0 to 512 [ 172.078633][T12645] EXT4-fs: Ignoring removed bh option [ 172.087163][T12645] ext2: Unknown parameter 'fsuuid' [ 172.166278][T12661] loop4: detected capacity change from 0 to 512 [ 172.176154][T12661] ext4: Unknown parameter 'uid' [ 172.179728][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3550'. [ 172.200243][T12661] siw: device registration error -23 [ 172.400290][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 172.413176][T12705] loop4: detected capacity change from 0 to 512 [ 172.421517][T12705] EXT4-fs: dax option not supported [ 172.483945][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3571'. [ 172.545996][T12722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3573'. [ 172.570150][T12722] FAULT_INJECTION: forcing a failure. [ 172.570150][T12722] name failslab, interval 1, probability 0, space 0, times 0 [ 172.582942][T12722] CPU: 1 UID: 0 PID: 12722 Comm: syz.0.3573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.582969][T12722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.583046][T12722] Call Trace: [ 172.583052][T12722] [ 172.583058][T12722] __dump_stack+0x1d/0x30 [ 172.583137][T12722] dump_stack_lvl+0xe8/0x140 [ 172.583156][T12722] dump_stack+0x15/0x1b [ 172.583172][T12722] should_fail_ex+0x265/0x280 [ 172.583215][T12722] ? rtnl_newlink+0x5c/0x12d0 [ 172.583236][T12722] should_failslab+0x8c/0xb0 [ 172.583262][T12722] __kmalloc_cache_noprof+0x4c/0x4a0 [ 172.583312][T12722] rtnl_newlink+0x5c/0x12d0 [ 172.583337][T12722] ? xas_load+0x413/0x430 [ 172.583354][T12722] ? xas_load+0x413/0x430 [ 172.583370][T12722] ? __rcu_read_unlock+0x4f/0x70 [ 172.583402][T12722] ? xa_load+0xb1/0xe0 [ 172.583419][T12722] ? __rcu_read_unlock+0x4f/0x70 [ 172.583521][T12722] ? avc_has_perm_noaudit+0x1b1/0x200 [ 172.583563][T12722] ? cred_has_capability+0x210/0x280 [ 172.583592][T12722] ? selinux_capable+0x31/0x40 [ 172.583612][T12722] ? security_capable+0x83/0x90 [ 172.583717][T12722] ? ns_capable+0x7d/0xb0 [ 172.583738][T12722] ? __pfx_rtnl_newlink+0x10/0x10 [ 172.583759][T12722] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 172.583857][T12722] ? avc_has_perm_noaudit+0x1b1/0x200 [ 172.583878][T12722] netlink_rcv_skb+0x123/0x220 [ 172.583907][T12722] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 172.583934][T12722] rtnetlink_rcv+0x1c/0x30 [ 172.584007][T12722] netlink_unicast+0x5c0/0x690 [ 172.584113][T12722] netlink_sendmsg+0x58b/0x6b0 [ 172.584134][T12722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.584151][T12722] __sock_sendmsg+0x145/0x180 [ 172.584175][T12722] ____sys_sendmsg+0x31e/0x4e0 [ 172.584198][T12722] ___sys_sendmsg+0x17b/0x1d0 [ 172.584230][T12722] __x64_sys_sendmsg+0xd4/0x160 [ 172.584251][T12722] x64_sys_call+0x191e/0x3000 [ 172.584316][T12722] do_syscall_64+0xd2/0x200 [ 172.584340][T12722] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.584371][T12722] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.584437][T12722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.584461][T12722] RIP: 0033:0x7f9e4a98f749 [ 172.584478][T12722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.584495][T12722] RSP: 002b:00007f9e493ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.584568][T12722] RAX: ffffffffffffffda RBX: 00007f9e4abe5fa0 RCX: 00007f9e4a98f749 [ 172.584581][T12722] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 172.584595][T12722] RBP: 00007f9e493ef090 R08: 0000000000000000 R09: 0000000000000000 [ 172.584609][T12722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.584623][T12722] R13: 00007f9e4abe6038 R14: 00007f9e4abe5fa0 R15: 00007ffe97dae538 [ 172.584643][T12722] [ 172.880873][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 172.880891][ T29] audit: type=1326 audit(1763786788.462:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 172.910626][ T29] audit: type=1326 audit(1763786788.462:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 172.934180][ T29] audit: type=1326 audit(1763786788.462:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 172.957860][ T29] audit: type=1326 audit(1763786788.462:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12727 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 173.003875][ T29] audit: type=1326 audit(1763786788.582:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.027580][ T29] audit: type=1326 audit(1763786788.582:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.051083][ T29] audit: type=1326 audit(1763786788.592:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.074624][ T29] audit: type=1326 audit(1763786788.592:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.098138][ T29] audit: type=1326 audit(1763786788.592:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.134105][ T29] audit: type=1326 audit(1763786788.592:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12731 comm="syz.0.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 173.186974][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3583'. [ 173.247216][T12747] FAULT_INJECTION: forcing a failure. [ 173.247216][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 173.259980][T12747] CPU: 1 UID: 0 PID: 12747 Comm: syz.9.3585 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.260007][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.260020][T12747] Call Trace: [ 173.260033][T12747] [ 173.260040][T12747] __dump_stack+0x1d/0x30 [ 173.260062][T12747] dump_stack_lvl+0xe8/0x140 [ 173.260108][T12747] dump_stack+0x15/0x1b [ 173.260129][T12747] should_fail_ex+0x265/0x280 [ 173.260166][T12747] should_failslab+0x8c/0xb0 [ 173.260202][T12747] kmem_cache_alloc_noprof+0x50/0x480 [ 173.260230][T12747] ? audit_log_start+0x342/0x720 [ 173.260253][T12747] audit_log_start+0x342/0x720 [ 173.260275][T12747] ? kstrtouint+0x76/0xc0 [ 173.260311][T12747] audit_seccomp+0x48/0x100 [ 173.260344][T12747] ? __seccomp_filter+0x82d/0x1250 [ 173.260372][T12747] __seccomp_filter+0x83e/0x1250 [ 173.260402][T12747] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 173.260546][T12747] ? vfs_write+0x7e8/0x960 [ 173.260584][T12747] ? __rcu_read_unlock+0x4f/0x70 [ 173.260640][T12747] ? __fget_files+0x184/0x1c0 [ 173.260673][T12747] __secure_computing+0x82/0x150 [ 173.260701][T12747] syscall_trace_enter+0xcf/0x1e0 [ 173.260809][T12747] do_syscall_64+0xac/0x200 [ 173.260831][T12747] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.260858][T12747] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.260963][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.260987][T12747] RIP: 0033:0x7f427887f749 [ 173.261004][T12747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.261032][T12747] RSP: 002b:00007f42772e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e1 [ 173.261118][T12747] RAX: ffffffffffffffda RBX: 00007f4278ad5fa0 RCX: 00007f427887f749 [ 173.261131][T12747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.261207][T12747] RBP: 00007f42772e7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.261221][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.261234][T12747] R13: 00007f4278ad6038 R14: 00007f4278ad5fa0 R15: 00007fff125653a8 [ 173.261254][T12747] [ 173.600633][T12766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3594'. [ 173.632725][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'. [ 173.649735][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3596'. [ 173.779900][T12783] syzkaller0: entered promiscuous mode [ 173.786201][T12783] syzkaller0: entered allmulticast mode [ 173.956534][T12805] FAULT_INJECTION: forcing a failure. [ 173.956534][T12805] name failslab, interval 1, probability 0, space 0, times 0 [ 173.969234][T12805] CPU: 1 UID: 0 PID: 12805 Comm: syz.0.3612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.969265][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.969279][T12805] Call Trace: [ 173.969287][T12805] [ 173.969295][T12805] __dump_stack+0x1d/0x30 [ 173.969321][T12805] dump_stack_lvl+0xe8/0x140 [ 173.969409][T12805] dump_stack+0x15/0x1b [ 173.969425][T12805] should_fail_ex+0x265/0x280 [ 173.969497][T12805] should_failslab+0x8c/0xb0 [ 173.969530][T12805] kmem_cache_alloc_noprof+0x50/0x480 [ 173.969609][T12805] ? getname_flags+0x80/0x3b0 [ 173.969644][T12805] getname_flags+0x80/0x3b0 [ 173.969747][T12805] user_path_at+0x28/0x130 [ 173.969767][T12805] __se_sys_mount+0x25b/0x2e0 [ 173.969808][T12805] __x64_sys_mount+0x67/0x80 [ 173.969870][T12805] x64_sys_call+0x2b51/0x3000 [ 173.969891][T12805] do_syscall_64+0xd2/0x200 [ 173.969909][T12805] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.969976][T12805] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.970014][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.970039][T12805] RIP: 0033:0x7f9e4a98f749 [ 173.970056][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.970087][T12805] RSP: 002b:00007f9e493ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 173.970110][T12805] RAX: ffffffffffffffda RBX: 00007f9e4abe5fa0 RCX: 00007f9e4a98f749 [ 173.970126][T12805] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000000 [ 173.970141][T12805] RBP: 00007f9e493ef090 R08: 0000000000000000 R09: 0000000000000000 [ 173.970189][T12805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.970200][T12805] R13: 00007f9e4abe6038 R14: 00007f9e4abe5fa0 R15: 00007ffe97dae538 [ 173.970223][T12805] [ 174.426604][T12842] loop5: detected capacity change from 0 to 2048 [ 174.454455][T12842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.547918][T12856] lo speed is unknown, defaulting to 1000 [ 174.591150][T12842] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 174.646769][T12842] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 174.659239][T12842] EXT4-fs (loop5): This should not happen!! Data will be lost [ 174.659239][T12842] [ 174.669003][T12842] EXT4-fs (loop5): Total free blocks count 0 [ 174.674996][T12842] EXT4-fs (loop5): Free/Dirty block details [ 174.680957][T12842] EXT4-fs (loop5): free_blocks=2415919504 [ 174.686687][T12842] EXT4-fs (loop5): dirty_blocks=32 [ 174.691836][T12842] EXT4-fs (loop5): Block reservation details [ 174.697824][T12842] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 174.761163][T12839] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 174.965160][T12883] loop9: detected capacity change from 0 to 512 [ 174.988773][T12883] EXT4-fs: Ignoring removed bh option [ 174.996489][T12883] ext2: Unknown parameter 'fsuuid' [ 175.049841][T12888] syzkaller0: entered promiscuous mode [ 175.055364][T12888] syzkaller0: entered allmulticast mode [ 175.156785][T12900] __nla_validate_parse: 3 callbacks suppressed [ 175.156802][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3653'. [ 175.279138][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3661'. [ 175.405465][T12927] loop5: detected capacity change from 0 to 8192 [ 175.522806][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3672'. [ 175.568139][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3674'. [ 175.621388][T12952] loop4: detected capacity change from 0 to 256 [ 175.882506][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3685'. [ 176.204744][T13018] loop4: detected capacity change from 0 to 2048 [ 176.220776][T13018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.235289][T13018] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 176.252197][T13018] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 176.264540][T13018] EXT4-fs (loop4): This should not happen!! Data will be lost [ 176.264540][T13018] [ 176.274216][T13018] EXT4-fs (loop4): Total free blocks count 0 [ 176.280238][T13018] EXT4-fs (loop4): Free/Dirty block details [ 176.286143][T13018] EXT4-fs (loop4): free_blocks=2415919504 [ 176.291905][T13018] EXT4-fs (loop4): dirty_blocks=32 [ 176.297034][T13018] EXT4-fs (loop4): Block reservation details [ 176.303049][T13018] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 176.325331][T13016] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.524110][T13059] loop9: detected capacity change from 0 to 2048 [ 176.541377][T13059] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.555588][T13059] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 176.577228][T13059] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 176.589612][T13059] EXT4-fs (loop9): This should not happen!! Data will be lost [ 176.589612][T13059] [ 176.599367][T13059] EXT4-fs (loop9): Total free blocks count 0 [ 176.605363][T13059] EXT4-fs (loop9): Free/Dirty block details [ 176.611346][T13059] EXT4-fs (loop9): free_blocks=2415919504 [ 176.617114][T13059] EXT4-fs (loop9): dirty_blocks=32 [ 176.622261][T13059] EXT4-fs (loop9): Block reservation details [ 176.628257][T13059] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 176.643931][T13058] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 176.678879][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 176.703233][T13072] lo speed is unknown, defaulting to 1000 [ 176.975894][T13110] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 176.983828][T13110] SELinux: failed to load policy [ 176.994670][T13112] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3736'. [ 177.389065][T13112] IPVS: Error connecting to the multicast addr [ 177.408600][T13128] netlink: 'syz.0.3743': attribute type 4 has an invalid length. [ 177.455682][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3736'. [ 177.532608][T13135] siw: device registration error -23 [ 177.644044][T13148] FAULT_INJECTION: forcing a failure. [ 177.644044][T13148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.657231][T13148] CPU: 0 UID: 0 PID: 13148 Comm: syz.0.3753 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.657283][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.657297][T13148] Call Trace: [ 177.657303][T13148] [ 177.657388][T13148] __dump_stack+0x1d/0x30 [ 177.657411][T13148] dump_stack_lvl+0xe8/0x140 [ 177.657430][T13148] dump_stack+0x15/0x1b [ 177.657446][T13148] should_fail_ex+0x265/0x280 [ 177.657498][T13148] should_fail+0xb/0x20 [ 177.657515][T13148] should_fail_usercopy+0x1a/0x20 [ 177.657537][T13148] _copy_from_user+0x1c/0xb0 [ 177.657603][T13148] ___sys_sendmsg+0xc1/0x1d0 [ 177.657633][T13148] __x64_sys_sendmsg+0xd4/0x160 [ 177.657658][T13148] x64_sys_call+0x191e/0x3000 [ 177.657744][T13148] do_syscall_64+0xd2/0x200 [ 177.657766][T13148] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.657849][T13148] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.657883][T13148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.657902][T13148] RIP: 0033:0x7f9e4a98f749 [ 177.657917][T13148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.657934][T13148] RSP: 002b:00007f9e493ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.657982][T13148] RAX: ffffffffffffffda RBX: 00007f9e4abe5fa0 RCX: 00007f9e4a98f749 [ 177.657996][T13148] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 177.658016][T13148] RBP: 00007f9e493ef090 R08: 0000000000000000 R09: 0000000000000000 [ 177.658028][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.658039][T13148] R13: 00007f9e4abe6038 R14: 00007f9e4abe5fa0 R15: 00007ffe97dae538 [ 177.658060][T13148] [ 177.859481][T13154] FAULT_INJECTION: forcing a failure. [ 177.859481][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 177.872206][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.0.3755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 177.872236][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 177.872248][T13154] Call Trace: [ 177.872255][T13154] [ 177.872263][T13154] __dump_stack+0x1d/0x30 [ 177.872368][T13154] dump_stack_lvl+0xe8/0x140 [ 177.872462][T13154] dump_stack+0x15/0x1b [ 177.872481][T13154] should_fail_ex+0x265/0x280 [ 177.872554][T13154] should_failslab+0x8c/0xb0 [ 177.872579][T13154] kmem_cache_alloc_noprof+0x50/0x480 [ 177.872658][T13154] ? getname_flags+0x80/0x3b0 [ 177.872686][T13154] getname_flags+0x80/0x3b0 [ 177.872714][T13154] __se_sys_newstat+0x4b/0x280 [ 177.872839][T13154] ? fput+0x8f/0xc0 [ 177.872859][T13154] ? ksys_write+0x192/0x1a0 [ 177.872890][T13154] __x64_sys_newstat+0x31/0x40 [ 177.873003][T13154] x64_sys_call+0x73e/0x3000 [ 177.873030][T13154] do_syscall_64+0xd2/0x200 [ 177.873053][T13154] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 177.873129][T13154] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 177.873167][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.873191][T13154] RIP: 0033:0x7f9e4a98f749 [ 177.873209][T13154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.873237][T13154] RSP: 002b:00007f9e493ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 177.873260][T13154] RAX: ffffffffffffffda RBX: 00007f9e4abe5fa0 RCX: 00007f9e4a98f749 [ 177.873275][T13154] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000340 [ 177.873289][T13154] RBP: 00007f9e493ef090 R08: 0000000000000000 R09: 0000000000000000 [ 177.873302][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.873316][T13154] R13: 00007f9e4abe6038 R14: 00007f9e4abe5fa0 R15: 00007ffe97dae538 [ 177.873338][T13154] [ 177.927058][T13152] lo speed is unknown, defaulting to 1000 [ 178.068645][T13167] siw: device registration error -23 [ 178.127497][T13176] loop5: detected capacity change from 0 to 128 [ 178.159953][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 178.159970][ T29] audit: type=1326 audit(1763786793.752:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 178.162885][T13152] chnl_net:caif_netlink_parms(): no params data found [ 178.166381][ T29] audit: type=1326 audit(1763786793.752:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 178.220821][ T29] audit: type=1326 audit(1763786793.812:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 178.244401][ T29] audit: type=1326 audit(1763786793.812:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.1.3762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e69af749 code=0x7ffc0000 [ 178.327281][ T29] audit: type=1326 audit(1763786793.912:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 178.350922][ T29] audit: type=1326 audit(1763786793.912:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 178.374434][ T29] audit: type=1326 audit(1763786793.912:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 178.397973][ T29] audit: type=1326 audit(1763786793.912:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 178.421426][ T29] audit: type=1326 audit(1763786793.912:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13192 comm="syz.5.3767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 178.452606][T13152] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.459900][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.467252][T13152] bridge_slave_0: entered allmulticast mode [ 178.473990][T13152] bridge_slave_0: entered promiscuous mode [ 178.486963][T13198] loop5: detected capacity change from 0 to 512 [ 178.489262][T13152] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.500509][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.508050][T13198] ext4: Unknown parameter 'uid' [ 178.516266][T13198] siw: device registration error -23 [ 178.519057][T13152] bridge_slave_1: entered allmulticast mode [ 178.542618][T13152] bridge_slave_1: entered promiscuous mode [ 178.561373][ T29] audit: type=1326 audit(1763786793.992:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13181 comm="syz.0.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 178.623012][T13152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.645249][T13152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.657234][T13206] loop5: detected capacity change from 0 to 164 [ 178.669340][T13206] iso9660: Bad value for 'uid' [ 178.674141][T13206] iso9660: Bad value for 'uid' [ 178.686338][T10716] bridge_slave_1: left allmulticast mode [ 178.692128][T10716] bridge_slave_1: left promiscuous mode [ 178.697875][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.706221][T10716] bridge_slave_0: left allmulticast mode [ 178.712025][T10716] bridge_slave_0: left promiscuous mode [ 178.717691][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.802656][T13217] loop4: detected capacity change from 0 to 256 [ 179.060866][T10716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.070437][T10716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.080340][T10716] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 179.088797][T10716] bond0 (unregistering): Released all slaves [ 179.101687][T13204] lo speed is unknown, defaulting to 1000 [ 179.108145][T13227] siw: device registration error -23 [ 179.120016][T13152] team0: Port device team_slave_0 added [ 179.135648][T10716] tipc: Left network mode [ 179.142157][T13152] team0: Port device team_slave_1 added [ 179.159231][T13230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3783'. [ 179.188623][T10716] hsr_slave_0: left promiscuous mode [ 179.194558][T10716] hsr_slave_1: left promiscuous mode [ 179.200486][T10716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.207913][T10716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.242963][T10716] team0 (unregistering): Port device team_slave_1 removed [ 179.252584][T10716] team0 (unregistering): Port device team_slave_0 removed [ 179.294990][T13152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.302056][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.327986][T13152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.359286][T13152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.366254][T13152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.392232][T13152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.423579][T13240] syzkaller0: entered promiscuous mode [ 179.429106][T13240] syzkaller0: entered allmulticast mode [ 179.469976][T13152] hsr_slave_0: entered promiscuous mode [ 179.476047][T13152] hsr_slave_1: entered promiscuous mode [ 179.482368][T13152] debugfs: 'hsr0' already exists in 'hsr' [ 179.488111][T13152] Cannot create hsr debugfs directory [ 179.533178][T13251] loop5: detected capacity change from 0 to 512 [ 179.539906][T13251] EXT4-fs: Ignoring removed bh option [ 179.545516][T13251] ext2: Unknown parameter 'fsuuid' [ 179.618471][T13257] lo speed is unknown, defaulting to 1000 [ 179.624412][T13257] lo speed is unknown, defaulting to 1000 [ 179.673632][T13257] lo speed is unknown, defaulting to 1000 [ 179.694618][T13257] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 179.711750][T13257] lo speed is unknown, defaulting to 1000 [ 179.718107][T13257] lo speed is unknown, defaulting to 1000 [ 179.724495][T13257] lo speed is unknown, defaulting to 1000 [ 179.731954][T13257] lo speed is unknown, defaulting to 1000 [ 179.738168][T13257] lo speed is unknown, defaulting to 1000 [ 179.744320][T13257] lo speed is unknown, defaulting to 1000 [ 179.755057][T13257] lo speed is unknown, defaulting to 1000 [ 179.871859][T13152] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 179.882346][T13152] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 179.891920][T13152] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 179.916457][T13152] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 179.934282][T13291] 9pnet_fd: Insufficient options for proto=fd [ 179.966713][T13295] loop4: detected capacity change from 0 to 512 [ 179.980906][T13295] ext4: Unknown parameter 'uid' [ 179.994969][T13295] siw: device registration error -23 [ 180.010416][T13307] syzkaller0: entered promiscuous mode [ 180.015928][T13307] syzkaller0: entered allmulticast mode [ 180.040760][T13152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.055970][T13152] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.066438][T10716] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.073534][T10716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.102768][T10716] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.109946][T10716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.152602][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'. [ 180.162294][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3816'. [ 180.222509][T13152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.260515][T13340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3820'. [ 180.451887][T13152] veth0_vlan: entered promiscuous mode [ 180.468112][T13152] veth1_vlan: entered promiscuous mode [ 180.487683][T13152] veth0_macvtap: entered promiscuous mode [ 180.495492][T13152] veth1_macvtap: entered promiscuous mode [ 180.518807][T13372] FAULT_INJECTION: forcing a failure. [ 180.518807][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.520280][T13152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.532096][T13372] CPU: 0 UID: 0 PID: 13372 Comm: syz.4.3828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.532121][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.532134][T13372] Call Trace: [ 180.532140][T13372] [ 180.532147][T13372] __dump_stack+0x1d/0x30 [ 180.532170][T13372] dump_stack_lvl+0xe8/0x140 [ 180.532190][T13372] dump_stack+0x15/0x1b [ 180.532298][T13372] should_fail_ex+0x265/0x280 [ 180.532331][T13372] should_fail+0xb/0x20 [ 180.532347][T13372] should_fail_usercopy+0x1a/0x20 [ 180.532367][T13372] _copy_from_user+0x1c/0xb0 [ 180.532443][T13372] ___sys_sendmsg+0xc1/0x1d0 [ 180.532493][T13372] __x64_sys_sendmsg+0xd4/0x160 [ 180.532516][T13372] x64_sys_call+0x191e/0x3000 [ 180.532584][T13372] do_syscall_64+0xd2/0x200 [ 180.532604][T13372] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.532631][T13372] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 180.532749][T13372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.532770][T13372] RIP: 0033:0x7fdee6fcf749 [ 180.532786][T13372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.532804][T13372] RSP: 002b:00007fdee5a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.532896][T13372] RAX: ffffffffffffffda RBX: 00007fdee7225fa0 RCX: 00007fdee6fcf749 [ 180.532909][T13372] RDX: 0000000000008804 RSI: 00002000000002c0 RDI: 0000000000000003 [ 180.532921][T13372] RBP: 00007fdee5a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 180.532933][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.532946][T13372] R13: 00007fdee7226038 R14: 00007fdee7225fa0 R15: 00007ffc2e34c818 [ 180.532965][T13372] [ 180.730855][T13152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.742452][T10635] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.759682][T10635] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.779425][T10646] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.794371][T13389] loop4: detected capacity change from 0 to 512 [ 180.809279][T13389] EXT4-fs: Ignoring removed bh option [ 180.814720][T13389] ext2: Unknown parameter 'fsuuid' [ 180.821293][T10646] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.856621][T13394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.881756][T13394] syz_tun: entered allmulticast mode [ 180.887979][T13394] syz_tun: left allmulticast mode [ 180.929376][T13404] loop9: detected capacity change from 0 to 2048 [ 180.955801][T13404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.015045][T13416] loop4: detected capacity change from 0 to 2048 [ 181.038220][T13152] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.060650][T13421] loop9: detected capacity change from 0 to 256 [ 181.070562][T13416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.084398][T13421] 9pnet_fd: Insufficient options for proto=fd [ 181.116282][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3838'. [ 181.125322][T13401] tipc: Started in network mode [ 181.130205][T13401] tipc: Node identity 7, cluster identity 4711 [ 181.136387][T13401] tipc: Node number set to 7 [ 181.217454][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.346363][T13458] loop9: detected capacity change from 0 to 1024 [ 181.357769][T13454] syzkaller0: entered promiscuous mode [ 181.363321][T13454] syzkaller0: entered allmulticast mode [ 181.371270][T13458] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.383514][T13458] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.416391][T13458] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm syz.9.3860: lblock 8 mapped to illegal pblock 8 (length 1) [ 181.430891][T13458] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.3860: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 181.434991][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3862'. [ 181.473204][T10716] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm kworker/u8:52: lblock 0 mapped to illegal pblock 0 (length 1) [ 181.487633][T10716] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 181.500130][T10716] EXT4-fs (loop9): This should not happen!! Data will be lost [ 181.500130][T10716] [ 181.515161][T13152] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.538107][T13468] loop4: detected capacity change from 0 to 2048 [ 181.603020][T13481] loop5: detected capacity change from 0 to 512 [ 181.610143][T13481] EXT4-fs: Ignoring removed bh option [ 181.610851][T13468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.615586][T13481] ext2: Unknown parameter 'fsuuid' [ 181.637238][T13478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 181.650405][T13467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3861'. [ 181.766087][T13508] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3880'. [ 181.778330][T13510] loop9: detected capacity change from 0 to 2048 [ 181.795767][T13510] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.812939][T13514] loop5: detected capacity change from 0 to 512 [ 181.819732][T13514] EXT4-fs: Ignoring removed bh option [ 181.821084][T13510] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 181.825168][T13514] ext2: Unknown parameter 'fsuuid' [ 181.846045][T13510] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1 with error 28 [ 181.858489][T13510] EXT4-fs (loop9): This should not happen!! Data will be lost [ 181.858489][T13510] [ 181.867061][T13518] FAULT_INJECTION: forcing a failure. [ 181.867061][T13518] name failslab, interval 1, probability 0, space 0, times 0 [ 181.868272][T13510] EXT4-fs (loop9): Total free blocks count 0 [ 181.880879][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.5.3885 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.880908][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.880990][T13518] Call Trace: [ 181.880997][T13518] [ 181.881006][T13518] __dump_stack+0x1d/0x30 [ 181.881057][T13518] dump_stack_lvl+0xe8/0x140 [ 181.881111][T13518] dump_stack+0x15/0x1b [ 181.881130][T13518] should_fail_ex+0x265/0x280 [ 181.881162][T13518] should_failslab+0x8c/0xb0 [ 181.881245][T13518] kmem_cache_alloc_noprof+0x50/0x480 [ 181.881272][T13518] ? audit_log_start+0x342/0x720 [ 181.881307][T13518] audit_log_start+0x342/0x720 [ 181.881327][T13518] ? kstrtouint+0x76/0xc0 [ 181.881490][T13518] audit_seccomp+0x48/0x100 [ 181.881598][T13518] ? __seccomp_filter+0x82d/0x1250 [ 181.881629][T13518] __seccomp_filter+0x83e/0x1250 [ 181.881699][T13518] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.881742][T13518] ? vfs_write+0x7e8/0x960 [ 181.881771][T13518] __secure_computing+0x82/0x150 [ 181.881814][T13518] syscall_trace_enter+0xcf/0x1e0 [ 181.881842][T13518] do_syscall_64+0xac/0x200 [ 181.881862][T13518] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.881959][T13518] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 181.882130][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.882152][T13518] RIP: 0033:0x7f4557e7f749 [ 181.882169][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.882188][T13518] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b9 [ 181.882245][T13518] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 181.882258][T13518] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffffffffffffff [ 181.882271][T13518] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.882357][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.882376][T13518] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 181.882401][T13518] [ 181.956179][T13527] loop5: detected capacity change from 0 to 512 [ 181.960466][T13510] EXT4-fs (loop9): Free/Dirty block details [ 181.960486][T13510] EXT4-fs (loop9): free_blocks=2415919504 [ 181.960500][T13510] EXT4-fs (loop9): dirty_blocks=32 [ 181.998077][T13527] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3889: Failed to acquire dquot type 1 [ 182.001541][T13510] EXT4-fs (loop9): Block reservation details [ 182.001559][T13510] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 182.014290][T13509] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 182.019111][T13527] EXT4-fs (loop5): 1 truncate cleaned up [ 182.153269][T13527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.165899][T13527] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.193549][ T7983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.207172][T13534] FAULT_INJECTION: forcing a failure. [ 182.207172][T13534] name failslab, interval 1, probability 0, space 0, times 0 [ 182.219907][T13534] CPU: 0 UID: 0 PID: 13534 Comm: syz.9.3892 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.219943][T13534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.219956][T13534] Call Trace: [ 182.219963][T13534] [ 182.219971][T13534] __dump_stack+0x1d/0x30 [ 182.219995][T13534] dump_stack_lvl+0xe8/0x140 [ 182.220017][T13534] dump_stack+0x15/0x1b [ 182.220036][T13534] should_fail_ex+0x265/0x280 [ 182.220132][T13534] ? __se_sys_memfd_create+0x1cc/0x590 [ 182.220159][T13534] should_failslab+0x8c/0xb0 [ 182.220256][T13534] __kmalloc_cache_noprof+0x4c/0x4a0 [ 182.220360][T13534] ? fput+0x8f/0xc0 [ 182.220441][T13534] __se_sys_memfd_create+0x1cc/0x590 [ 182.220536][T13534] __x64_sys_memfd_create+0x31/0x40 [ 182.220635][T13534] x64_sys_call+0x2ac2/0x3000 [ 182.220659][T13534] do_syscall_64+0xd2/0x200 [ 182.220681][T13534] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.220814][T13534] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.220851][T13534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.220923][T13534] RIP: 0033:0x7f801d7ef749 [ 182.220939][T13534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.220959][T13534] RSP: 002b:00007f801c256e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 182.221013][T13534] RAX: ffffffffffffffda RBX: 000000000000053e RCX: 00007f801d7ef749 [ 182.221066][T13534] RDX: 00007f801c256ef0 RSI: 0000000000000000 RDI: 00007f801d874960 [ 182.221080][T13534] RBP: 0000200000000940 R08: 00007f801c256bb7 R09: 00007f801c256e40 [ 182.221093][T13534] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 182.221107][T13534] R13: 00007f801c256ef0 R14: 00007f801c256eb0 R15: 00002000000003c0 [ 182.221128][T13534] [ 182.422321][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.445220][T13544] loop4: detected capacity change from 0 to 512 [ 182.460759][T13544] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3894: Failed to acquire dquot type 1 [ 182.473955][T13544] EXT4-fs (loop4): 1 truncate cleaned up [ 182.480408][T13544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.493189][T13544] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.506870][T13544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3894'. [ 182.512333][T13555] loop5: detected capacity change from 0 to 256 [ 182.558521][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.610093][T13555] 9pnet_fd: Insufficient options for proto=fd [ 182.650322][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3904'. [ 182.690759][T13574] siw: device registration error -23 [ 182.700641][T13572] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3906'. [ 182.817088][T13586] FAULT_INJECTION: forcing a failure. [ 182.817088][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.830245][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.4.3914 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.830356][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.830367][T13586] Call Trace: [ 182.830374][T13586] [ 182.830381][T13586] __dump_stack+0x1d/0x30 [ 182.830402][T13586] dump_stack_lvl+0xe8/0x140 [ 182.830445][T13586] dump_stack+0x15/0x1b [ 182.830493][T13586] should_fail_ex+0x265/0x280 [ 182.830531][T13586] should_fail+0xb/0x20 [ 182.830548][T13586] should_fail_usercopy+0x1a/0x20 [ 182.830637][T13586] _copy_from_user+0x1c/0xb0 [ 182.830665][T13586] ___sys_sendmsg+0xc1/0x1d0 [ 182.830723][T13586] __x64_sys_sendmsg+0xd4/0x160 [ 182.830749][T13586] x64_sys_call+0x191e/0x3000 [ 182.830777][T13586] do_syscall_64+0xd2/0x200 [ 182.830800][T13586] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.830830][T13586] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.830892][T13586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.830911][T13586] RIP: 0033:0x7fdee6fcf749 [ 182.830926][T13586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.830942][T13586] RSP: 002b:00007fdee5a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.831003][T13586] RAX: ffffffffffffffda RBX: 00007fdee7225fa0 RCX: 00007fdee6fcf749 [ 182.831073][T13586] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 182.831086][T13586] RBP: 00007fdee5a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.831097][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.831109][T13586] R13: 00007fdee7226038 R14: 00007fdee7225fa0 R15: 00007ffc2e34c818 [ 182.831190][T13586] [ 183.061716][T13602] loop4: detected capacity change from 0 to 256 [ 183.072000][T13600] loop5: detected capacity change from 0 to 512 [ 183.072590][T13602] 9pnet_fd: Insufficient options for proto=fd [ 183.089073][T13600] ext4: Unknown parameter 'uid' [ 183.107209][T13600] siw: device registration error -23 [ 183.221432][ T29] kauditd_printk_skb: 431 callbacks suppressed [ 183.221451][ T29] audit: type=1400 audit(1763786798.812:7272): avc: denied { create } for pid=13625 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.257044][ T29] audit: type=1400 audit(1763786798.842:7273): avc: denied { write } for pid=13625 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.303755][ T29] audit: type=1400 audit(1763786798.862:7274): avc: denied { connect } for pid=13624 comm="syz.1.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.309575][T13636] loop5: detected capacity change from 0 to 256 [ 183.323739][ T29] audit: type=1400 audit(1763786798.862:7275): avc: denied { name_connect } for pid=13624 comm="syz.1.3932" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 183.353334][T13636] 9pnet_fd: Insufficient options for proto=fd [ 183.354831][ T29] audit: type=1400 audit(1763786798.942:7276): avc: denied { block_suspend } for pid=13624 comm="syz.1.3932" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 183.381648][ T29] audit: type=1400 audit(1763786798.952:7277): avc: denied { write } for pid=13625 comm="syz.9.3934" lport=49701 faddr=::ffff:10.1.1.0 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 183.399052][T13639] loop9: detected capacity change from 0 to 1024 [ 183.405290][ T29] audit: type=1400 audit(1763786798.952:7278): avc: denied { setopt } for pid=13625 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.435325][ T29] audit: type=1326 audit(1763786798.982:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.5.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 183.458906][ T29] audit: type=1326 audit(1763786798.982:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.5.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 183.467658][T13637] loop4: detected capacity change from 0 to 512 [ 183.482458][ T29] audit: type=1326 audit(1763786798.982:7281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.5.3935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 183.518055][T13637] ext4: Unknown parameter 'uid' [ 183.526348][T13637] siw: device registration error -23 [ 183.548080][T13639] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.560614][T13639] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.606769][T13639] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm syz.9.3934: lblock 8 mapped to illegal pblock 8 (length 1) [ 183.622007][T13639] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.3934: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 183.768423][T13670] syzkaller0: entered promiscuous mode [ 183.774049][T13670] syzkaller0: entered allmulticast mode [ 183.817576][T13674] syzkaller0: entered promiscuous mode [ 183.823139][T13674] syzkaller0: entered allmulticast mode [ 183.871042][T13684] loop4: detected capacity change from 0 to 256 [ 183.890294][T13684] 9pnet_fd: Insufficient options for proto=fd [ 183.959173][T13692] FAULT_INJECTION: forcing a failure. [ 183.959173][T13692] name failslab, interval 1, probability 0, space 0, times 0 [ 183.971857][T13692] CPU: 0 UID: 0 PID: 13692 Comm: syz.5.3961 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.971887][T13692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.971899][T13692] Call Trace: [ 183.971906][T13692] [ 183.971939][T13692] __dump_stack+0x1d/0x30 [ 183.971971][T13692] dump_stack_lvl+0xe8/0x140 [ 183.971995][T13692] dump_stack+0x15/0x1b [ 183.972015][T13692] should_fail_ex+0x265/0x280 [ 183.972172][T13692] should_failslab+0x8c/0xb0 [ 183.972265][T13692] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 183.972362][T13692] ? __alloc_skb+0x101/0x320 [ 183.972499][T13692] __alloc_skb+0x101/0x320 [ 183.972525][T13692] alloc_skb_with_frags+0x7d/0x470 [ 183.972619][T13692] sock_alloc_send_pskb+0x430/0x4e0 [ 183.972642][T13692] ? xfrm_policy_find_inexact_candidates+0x41d/0x430 [ 183.972678][T13692] __ip_append_data+0x18bd/0x2440 [ 183.972809][T13692] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 183.972840][T13692] ? ipv4_mtu+0x210/0x230 [ 183.972862][T13692] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 183.972886][T13692] ip_make_skb+0x137/0x2c0 [ 183.973007][T13692] udp_sendmsg+0x1013/0x13c0 [ 183.973040][T13692] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 183.973080][T13692] udpv6_sendmsg+0x812/0x15b0 [ 183.973155][T13692] ? mntput_no_expire+0x6f/0x440 [ 183.973178][T13692] ? __rcu_read_unlock+0x4f/0x70 [ 183.973216][T13692] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 183.973240][T13692] inet6_sendmsg+0xac/0xd0 [ 183.973315][T13692] __sock_sendmsg+0x8b/0x180 [ 183.973338][T13692] sock_write_iter+0x1a7/0x1f0 [ 183.973438][T13692] ? __pfx_sock_write_iter+0x10/0x10 [ 183.973458][T13692] vfs_write+0x52a/0x960 [ 183.973490][T13692] ksys_write+0xda/0x1a0 [ 183.973520][T13692] __x64_sys_write+0x40/0x50 [ 183.973555][T13692] x64_sys_call+0x2802/0x3000 [ 183.973580][T13692] do_syscall_64+0xd2/0x200 [ 183.973600][T13692] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.973649][T13692] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 183.973683][T13692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.973746][T13692] RIP: 0033:0x7f4557e7f749 [ 183.973761][T13692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.973780][T13692] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.973804][T13692] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 183.973820][T13692] RDX: 000000000000ffe3 RSI: 0000200000000200 RDI: 0000000000000003 [ 183.973838][T13692] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 183.973849][T13692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.973881][T13692] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 183.973902][T13692] [ 184.262049][T13152] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.411054][T13706] syzkaller0: entered promiscuous mode [ 184.416584][T13706] syzkaller0: entered allmulticast mode [ 184.438112][T13720] loop4: detected capacity change from 0 to 256 [ 184.463187][T13720] 9pnet_fd: Insufficient options for proto=fd [ 184.597975][T13743] syzkaller0: entered promiscuous mode [ 184.603570][T13743] syzkaller0: entered allmulticast mode [ 184.717761][T13761] FAULT_INJECTION: forcing a failure. [ 184.717761][T13761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.730924][T13761] CPU: 0 UID: 0 PID: 13761 Comm: syz.9.3995 Not tainted syzkaller #0 PREEMPT(voluntary) [ 184.730954][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.730967][T13761] Call Trace: [ 184.730974][T13761] [ 184.730982][T13761] __dump_stack+0x1d/0x30 [ 184.731007][T13761] dump_stack_lvl+0xe8/0x140 [ 184.731062][T13761] dump_stack+0x15/0x1b [ 184.731081][T13761] should_fail_ex+0x265/0x280 [ 184.731117][T13761] should_fail+0xb/0x20 [ 184.731136][T13761] should_fail_usercopy+0x1a/0x20 [ 184.731182][T13761] _copy_from_user+0x1c/0xb0 [ 184.731209][T13761] ___sys_sendmsg+0xc1/0x1d0 [ 184.731290][T13761] __x64_sys_sendmsg+0xd4/0x160 [ 184.731316][T13761] x64_sys_call+0x191e/0x3000 [ 184.731340][T13761] do_syscall_64+0xd2/0x200 [ 184.731362][T13761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.731391][T13761] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.731458][T13761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.731481][T13761] RIP: 0033:0x7f801d7ef749 [ 184.731499][T13761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.731519][T13761] RSP: 002b:00007f801c257038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.731543][T13761] RAX: ffffffffffffffda RBX: 00007f801da45fa0 RCX: 00007f801d7ef749 [ 184.731621][T13761] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 184.731635][T13761] RBP: 00007f801c257090 R08: 0000000000000000 R09: 0000000000000000 [ 184.731649][T13761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.731662][T13761] R13: 00007f801da46038 R14: 00007f801da45fa0 R15: 00007ffe994051e8 [ 184.731689][T13761] [ 185.008625][T13783] bond1: invalid ARP target 0.0.0.0 specified for addition [ 185.016071][T13783] bond1: option arp_ip_target: invalid value (0) [ 185.024527][T13783] bond1 (unregistering): Released all slaves [ 185.121270][T13799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13799 comm=syz.1.4012 [ 185.136725][T13799] netlink: 'syz.1.4012': attribute type 12 has an invalid length. [ 185.196985][T13809] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 185.217411][T13813] loop4: detected capacity change from 0 to 512 [ 185.225018][T13813] EXT4-fs: Ignoring removed bh option [ 185.230826][T13813] ext2: Unknown parameter 'fsuuid' [ 185.463441][T13833] loop4: detected capacity change from 0 to 512 [ 185.473340][T13833] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.482088][T13833] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.490840][T13833] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.517787][T13836] loop9: detected capacity change from 0 to 8192 [ 185.525732][T13833] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4028: Allocating blocks 41-42 which overlap fs metadata [ 185.539815][T13833] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4028: Allocating blocks 41-42 which overlap fs metadata [ 185.553911][T13833] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.4028: Failed to acquire dquot type 1 [ 185.565631][T13833] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 185.580331][T13833] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.4028: corrupted inode contents [ 185.592709][T13836] loop9: p1 < > p2 < > p3 p4 < > [ 185.597744][T13836] loop9: partition table partially beyond EOD, truncated [ 185.599139][T13833] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #12: comm syz.4.4028: mark_inode_dirty error [ 185.604904][T13836] loop9: p1 start 67108864 is beyond EOD, truncated [ 185.623482][T13836] loop9: p3 start 100859904 is beyond EOD, truncated [ 185.656559][T13833] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.4028: corrupted inode contents [ 185.668890][T13833] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4028: mark_inode_dirty error [ 185.683210][T13833] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.4028: corrupted inode contents [ 185.696613][T13833] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 185.729268][T13833] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #12: comm syz.4.4028: corrupted inode contents [ 185.756666][T13833] EXT4-fs error (device loop4): ext4_truncate:4637: inode #12: comm syz.4.4028: mark_inode_dirty error [ 185.768230][T13833] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 185.777703][T13833] EXT4-fs (loop4): 1 truncate cleaned up [ 185.784139][T13833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.830903][T13859] siw: device registration error -23 [ 185.855649][T13861] __nla_validate_parse: 5 callbacks suppressed [ 185.855664][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 185.929374][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.036195][T13885] siw: device registration error -23 [ 186.043338][T13887] loop5: detected capacity change from 0 to 256 [ 186.075908][T13887] 9pnet_fd: Insufficient options for proto=fd [ 186.212359][T13906] FAULT_INJECTION: forcing a failure. [ 186.212359][T13906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.225511][T13906] CPU: 0 UID: 0 PID: 13906 Comm: syz.0.4056 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.225543][T13906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.225557][T13906] Call Trace: [ 186.225565][T13906] [ 186.225574][T13906] __dump_stack+0x1d/0x30 [ 186.225674][T13906] dump_stack_lvl+0xe8/0x140 [ 186.225698][T13906] dump_stack+0x15/0x1b [ 186.225717][T13906] should_fail_ex+0x265/0x280 [ 186.225766][T13906] should_fail+0xb/0x20 [ 186.225785][T13906] should_fail_usercopy+0x1a/0x20 [ 186.225809][T13906] _copy_from_user+0x1c/0xb0 [ 186.225837][T13906] sg_write+0x610/0x750 [ 186.225955][T13906] ? __pfx_sg_write+0x10/0x10 [ 186.226052][T13906] vfs_write+0x269/0x960 [ 186.226076][T13906] ? __rcu_read_unlock+0x4f/0x70 [ 186.226105][T13906] ? __fget_files+0x184/0x1c0 [ 186.226139][T13906] ksys_write+0xda/0x1a0 [ 186.226166][T13906] __x64_sys_write+0x40/0x50 [ 186.226196][T13906] x64_sys_call+0x2802/0x3000 [ 186.226221][T13906] do_syscall_64+0xd2/0x200 [ 186.226245][T13906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.226291][T13906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 186.226351][T13906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.226377][T13906] RIP: 0033:0x7f9e4a98f749 [ 186.226396][T13906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.226478][T13906] RSP: 002b:00007f9e493ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 186.226502][T13906] RAX: ffffffffffffffda RBX: 00007f9e4abe5fa0 RCX: 00007f9e4a98f749 [ 186.226517][T13906] RDX: 00000000000003c0 RSI: 0000200000000a00 RDI: 0000000000000004 [ 186.226533][T13906] RBP: 00007f9e493ef090 R08: 0000000000000000 R09: 0000000000000000 [ 186.226547][T13906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.226635][T13906] R13: 00007f9e4abe6038 R14: 00007f9e4abe5fa0 R15: 00007ffe97dae538 [ 186.226658][T13906] [ 186.371800][T13899] FAULT_INJECTION: forcing a failure. [ 186.371800][T13899] name failslab, interval 1, probability 0, space 0, times 0 [ 186.383416][T13904] capability: warning: `syz.4.4046' uses deprecated v2 capabilities in a way that may be insecure [ 186.385234][T13899] CPU: 1 UID: 0 PID: 13899 Comm: syz.5.4052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.385262][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.385273][T13899] Call Trace: [ 186.385280][T13899] [ 186.385288][T13899] __dump_stack+0x1d/0x30 [ 186.385311][T13899] dump_stack_lvl+0xe8/0x140 [ 186.385349][T13899] dump_stack+0x15/0x1b [ 186.385366][T13899] should_fail_ex+0x265/0x280 [ 186.385476][T13899] should_failslab+0x8c/0xb0 [ 186.385503][T13899] kmem_cache_alloc_noprof+0x50/0x480 [ 186.385529][T13899] ? audit_log_start+0x342/0x720 [ 186.385551][T13899] audit_log_start+0x342/0x720 [ 186.385584][T13899] ? kstrtouint+0x76/0xc0 [ 186.385613][T13899] audit_seccomp+0x48/0x100 [ 186.385642][T13899] ? __seccomp_filter+0x82d/0x1250 [ 186.385668][T13899] __seccomp_filter+0x83e/0x1250 [ 186.385754][T13899] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.385783][T13899] ? vfs_write+0x7e8/0x960 [ 186.385831][T13899] ? __rcu_read_unlock+0x4f/0x70 [ 186.385855][T13899] ? __fget_files+0x184/0x1c0 [ 186.385883][T13899] __secure_computing+0x82/0x150 [ 186.385979][T13899] syscall_trace_enter+0xcf/0x1e0 [ 186.386006][T13899] do_syscall_64+0xac/0x200 [ 186.386047][T13899] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.386073][T13899] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 186.386170][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.386191][T13899] RIP: 0033:0x7f4557e7f749 [ 186.386206][T13899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.386224][T13899] RSP: 002b:00007f455673d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fc [ 186.386244][T13899] RAX: ffffffffffffffda RBX: 00007f45580d6090 RCX: 00007f4557e7f749 [ 186.386257][T13899] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000000000000003 [ 186.386270][T13899] RBP: 00007f455673d090 R08: 0000000000000000 R09: 0000000000000000 [ 186.386363][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.386375][T13899] R13: 00007f45580d6128 R14: 00007f45580d6090 R15: 00007fffc263d808 [ 186.386394][T13899] [ 186.717851][T13920] loop5: detected capacity change from 0 to 512 [ 186.726027][T13920] ext4: Unknown parameter 'uid' [ 186.733430][T13920] siw: device registration error -23 [ 201.882358][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 201.882375][ T29] audit: type=1400 audit(1763786817.472:7566): avc: denied { create } for pid=13937 comm="syz.1.4068" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 201.884411][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4068'. [ 201.919685][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.927087][T13946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.953701][ T29] audit: type=1326 audit(1763786817.542:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 201.991109][T13950] loop4: detected capacity change from 0 to 512 [ 202.009493][T13951] loop9: detected capacity change from 0 to 1764 [ 202.028410][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.031416][T13950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 202.035884][T13946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.044684][ T29] audit: type=1326 audit(1763786817.542:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.075340][ T29] audit: type=1400 audit(1763786817.542:7569): avc: denied { read } for pid=13938 comm="syz.5.4069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 202.094443][ T29] audit: type=1326 audit(1763786817.542:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.117960][ T29] audit: type=1326 audit(1763786817.542:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.141477][ T29] audit: type=1326 audit(1763786817.542:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.165085][ T29] audit: type=1326 audit(1763786817.542:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.188611][ T29] audit: type=1326 audit(1763786817.542:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.212136][ T29] audit: type=1326 audit(1763786817.542:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13938 comm="syz.5.4069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f4557e7f749 code=0x7ffc0000 [ 202.236065][T13946] batman_adv: batadv0: Interface deactivated: macvtap1 [ 202.243028][T13946] batman_adv: batadv0: Removing interface: macvtap1 [ 202.289935][T13950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.302700][T13950] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.434642][T13943] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.4072: corrupted xattr block 32: bad e_name length [ 202.469174][T13943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 202.489239][T13943] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.4072: corrupted xattr block 32: bad e_name length [ 202.528296][T13943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 202.542819][T13967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'. [ 202.574780][T13943] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.4072: corrupted xattr block 32: bad e_name length [ 202.600005][T13943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 202.701105][T11314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.811405][T13979] loop5: detected capacity change from 0 to 512 [ 202.869244][T13979] ext4: Unknown parameter 'uid' [ 202.889639][T13979] siw: device registration error -23 [ 203.066684][T13994] bond1: invalid ARP target 0.0.0.0 specified for addition [ 203.074076][T13994] bond1: option arp_ip_target: invalid value (0) [ 203.083278][T13994] bond1 (unregistering): Released all slaves [ 203.174530][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4092'. [ 203.201495][T14008] bond1: invalid ARP target 0.0.0.0 specified for addition [ 203.208793][T14008] bond1: option arp_ip_target: invalid value (0) [ 203.225760][T14012] loop4: detected capacity change from 0 to 512 [ 203.227886][T14008] bond1 (unregistering): Released all slaves [ 203.232997][T14012] ext4: Unknown parameter 'uid' [ 203.247075][T14012] siw: device registration error -23 [ 203.359849][T14033] FAULT_INJECTION: forcing a failure. [ 203.359849][T14033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.373184][T14033] CPU: 1 UID: 0 PID: 14033 Comm: syz.9.4099 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.373215][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 203.373230][T14033] Call Trace: [ 203.373237][T14033] [ 203.373290][T14033] __dump_stack+0x1d/0x30 [ 203.373317][T14033] dump_stack_lvl+0xe8/0x140 [ 203.373341][T14033] dump_stack+0x15/0x1b [ 203.373362][T14033] should_fail_ex+0x265/0x280 [ 203.373400][T14033] should_fail+0xb/0x20 [ 203.373420][T14033] should_fail_usercopy+0x1a/0x20 [ 203.373459][T14033] _copy_from_user+0x1c/0xb0 [ 203.373489][T14033] do_ip6t_set_ctl+0x3a9/0x840 [ 203.373524][T14033] nf_setsockopt+0x199/0x1b0 [ 203.373591][T14033] ipv6_setsockopt+0x11a/0x130 [ 203.373623][T14033] udpv6_setsockopt+0x99/0xb0 [ 203.373702][T14033] sock_common_setsockopt+0x69/0x80 [ 203.373726][T14033] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.373758][T14033] __sys_setsockopt+0x184/0x200 [ 203.373867][T14033] __x64_sys_setsockopt+0x64/0x80 [ 203.373933][T14033] x64_sys_call+0x20ec/0x3000 [ 203.373996][T14033] do_syscall_64+0xd2/0x200 [ 203.374017][T14033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 203.374073][T14033] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 203.374107][T14033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.374133][T14033] RIP: 0033:0x7f801d7ef749 [ 203.374149][T14033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.374217][T14033] RSP: 002b:00007f801c257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.374248][T14033] RAX: ffffffffffffffda RBX: 00007f801da45fa0 RCX: 00007f801d7ef749 [ 203.374264][T14033] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 203.374279][T14033] RBP: 00007f801c257090 R08: 0000000000000540 R09: 0000000000000000 [ 203.374294][T14033] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 203.374307][T14033] R13: 00007f801da46038 R14: 00007f801da45fa0 R15: 00007ffe994051e8 [ 203.374325][T14033] [ 203.703091][T14047] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 203.730416][T14047] bond1 (unregistering): Released all slaves [ 203.872828][T14053] loop9: detected capacity change from 0 to 512 [ 203.889375][T14053] ext4: Unknown parameter 'uid' [ 203.896781][T14053] siw: device registration error -23 [ 204.365828][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4123'. [ 204.415823][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4123'. [ 204.426163][T14094] tmpfs: Unknown parameter 'si{e' [ 204.458544][T14099] geneve2: entered promiscuous mode [ 204.463844][T14099] geneve2: entered allmulticast mode [ 204.784118][T14113] FAULT_INJECTION: forcing a failure. [ 204.784118][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 204.796817][T14113] CPU: 0 UID: 0 PID: 14113 Comm: syz.4.4127 Not tainted syzkaller #0 PREEMPT(voluntary) [ 204.796854][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.796868][T14113] Call Trace: [ 204.796876][T14113] [ 204.796884][T14113] __dump_stack+0x1d/0x30 [ 204.796982][T14113] dump_stack_lvl+0xe8/0x140 [ 204.797001][T14113] dump_stack+0x15/0x1b [ 204.797021][T14113] should_fail_ex+0x265/0x280 [ 204.797077][T14113] ? find_get_pmu_context+0x58/0x450 [ 204.797101][T14113] should_failslab+0x8c/0xb0 [ 204.797201][T14113] __kmalloc_cache_noprof+0x4c/0x4a0 [ 204.797238][T14113] find_get_pmu_context+0x58/0x450 [ 204.797350][T14113] __se_sys_perf_event_open+0x93c/0x11c0 [ 204.797386][T14113] __x64_sys_perf_event_open+0x67/0x80 [ 204.797412][T14113] x64_sys_call+0x7bd/0x3000 [ 204.797545][T14113] do_syscall_64+0xd2/0x200 [ 204.797564][T14113] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.797590][T14113] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.797619][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.797656][T14113] RIP: 0033:0x7fdee6fcf749 [ 204.797674][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.797697][T14113] RSP: 002b:00007fdee59ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 204.797716][T14113] RAX: ffffffffffffffda RBX: 00007fdee7226180 RCX: 00007fdee6fcf749 [ 204.797728][T14113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 204.797740][T14113] RBP: 00007fdee59ed090 R08: 0000000000000008 R09: 0000000000000000 [ 204.797754][T14113] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 204.797835][T14113] R13: 00007fdee7226218 R14: 00007fdee7226180 R15: 00007ffc2e34c818 [ 204.797853][T14113] [ 204.995133][T14113] lo speed is unknown, defaulting to 1000 [ 205.323485][T14082] syz.1.4118 (14082) used greatest stack depth: 7480 bytes left [ 206.422921][T14219] loop5: detected capacity change from 0 to 512 [ 206.440467][T14219] ext4: Unknown parameter 'uid' [ 206.456891][T14219] siw: device registration error -23 [ 206.481073][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4166'. [ 206.558492][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.616500][T14234] bond1: invalid ARP target 0.0.0.0 specified for addition [ 206.623781][T14234] bond1: option arp_ip_target: invalid value (0) [ 206.631613][T14234] bond1 (unregistering): Released all slaves [ 206.645725][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.690125][T14227] lo speed is unknown, defaulting to 1000 [ 206.730952][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.765452][T14227] chnl_net:caif_netlink_parms(): no params data found [ 206.785649][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.797071][T14248] FAULT_INJECTION: forcing a failure. [ 206.797071][T14248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.810205][T14248] CPU: 0 UID: 0 PID: 14248 Comm: syz.5.4178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.810234][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.810245][T14248] Call Trace: [ 206.810250][T14248] [ 206.810329][T14248] __dump_stack+0x1d/0x30 [ 206.810354][T14248] dump_stack_lvl+0xe8/0x140 [ 206.810377][T14248] dump_stack+0x15/0x1b [ 206.810401][T14248] should_fail_ex+0x265/0x280 [ 206.810554][T14248] should_fail+0xb/0x20 [ 206.810569][T14248] should_fail_usercopy+0x1a/0x20 [ 206.810605][T14248] _copy_to_iter+0xd2/0xe70 [ 206.810707][T14248] ? schedule+0x5f/0xd0 [ 206.810738][T14248] eventfd_read+0x268/0x3c0 [ 206.810762][T14248] ? __pfx_autoremove_wake_function+0x10/0x10 [ 206.810806][T14248] ? __pfx_eventfd_read+0x10/0x10 [ 206.810828][T14248] vfs_read+0x64c/0x770 [ 206.810852][T14248] ? __pfx_eventfd_read+0x10/0x10 [ 206.810886][T14248] ksys_read+0xda/0x1a0 [ 206.810972][T14248] __x64_sys_read+0x40/0x50 [ 206.810996][T14248] x64_sys_call+0x27c0/0x3000 [ 206.811022][T14248] do_syscall_64+0xd2/0x200 [ 206.811046][T14248] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.811148][T14248] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.811276][T14248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.811295][T14248] RIP: 0033:0x7f4557e7f749 [ 206.811310][T14248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.811326][T14248] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.811348][T14248] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 206.811366][T14248] RDX: 0000000000000008 RSI: 0000200000000240 RDI: 0000000000000006 [ 206.811380][T14248] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 206.811394][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.811409][T14248] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 206.811430][T14248] [ 207.024868][T14258] loop5: detected capacity change from 0 to 512 [ 207.034357][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 207.034444][ T29] audit: type=1326 audit(1763786822.622:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 207.039266][T14258] ext4: Unknown parameter 'uid' [ 207.041176][ T29] audit: type=1326 audit(1763786822.632:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 207.093384][ T29] audit: type=1326 audit(1763786822.662:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 207.117005][ T29] audit: type=1326 audit(1763786822.662:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 207.125399][T14258] siw: device registration error -23 [ 207.140462][ T29] audit: type=1326 audit(1763786822.662:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14260 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 207.172745][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.179990][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.202496][T14227] bridge_slave_0: entered allmulticast mode [ 207.211919][T14227] bridge_slave_0: entered promiscuous mode [ 207.235459][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.242653][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.251305][T14227] bridge_slave_1: entered allmulticast mode [ 207.257986][T14227] bridge_slave_1: entered promiscuous mode [ 207.281953][T14274] bond1: invalid ARP target 0.0.0.0 specified for addition [ 207.289250][T14274] bond1: option arp_ip_target: invalid value (0) [ 207.313770][T14274] bond1 (unregistering): Released all slaves [ 207.345862][ T29] audit: type=1400 audit(1763786822.932:8236): avc: denied { execute } for pid=14278 comm="syz.0.4189" path="/478/file1" dev="tmpfs" ino=2512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.457161][ T12] bridge_slave_1: left allmulticast mode [ 207.462885][ T12] bridge_slave_1: left promiscuous mode [ 207.468580][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.489061][ T12] bridge_slave_0: left allmulticast mode [ 207.494821][ T12] bridge_slave_0: left promiscuous mode [ 207.500551][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.577108][T14293] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 207.807062][T14295] siw: device registration error -23 [ 207.844440][ T12] dvmrp1 (unregistering): left allmulticast mode [ 207.922853][ T12] bridge0 (unregistering): left allmulticast mode [ 208.208890][T14308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14308 comm=syz.9.4197 [ 208.221731][ T29] audit: type=1400 audit(1763786823.812:8237): avc: denied { audit_write } for pid=14307 comm="syz.9.4197" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 208.243117][ T29] audit: type=1107 audit(1763786823.812:8238): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 208.741099][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.750976][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.760399][ T12] bond0 (unregistering): Released all slaves [ 208.769411][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.780663][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.824432][T14227] team0: Port device team_slave_0 added [ 208.830931][ T12] tipc: Left network mode [ 208.831809][T14227] team0: Port device team_slave_1 added [ 208.867800][ T12] hsr_slave_0: left promiscuous mode [ 208.887014][ T12] hsr_slave_1: left promiscuous mode [ 208.908145][ T12] veth1_macvtap: left promiscuous mode [ 208.919210][ T12] veth0_macvtap: left promiscuous mode [ 208.925463][ T12] veth1_vlan: left promiscuous mode [ 208.930941][ T12] veth0_vlan: left promiscuous mode [ 208.930959][T14327] loop4: detected capacity change from 0 to 512 [ 208.931229][T14327] ext4: Unknown parameter 'uid' [ 208.951190][T14327] siw: device registration error -23 [ 209.055032][ T12] team0 (unregistering): Port device team_slave_1 removed [ 209.073811][ T12] team0 (unregistering): Port device team_slave_0 removed [ 209.124241][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.131262][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.157341][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.169052][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.176064][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.182270][ T29] audit: type=1326 audit(1763786824.762:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.4.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 209.202032][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.237210][ T29] audit: type=1326 audit(1763786824.822:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14334 comm="syz.4.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdee6fcf749 code=0x7ffc0000 [ 209.271771][ T3421] lo speed is unknown, defaulting to 1000 [ 209.277526][ T3421] infiniband syz2: ib_query_port failed (-19) [ 209.312537][T14227] hsr_slave_0: entered promiscuous mode [ 209.318972][T14227] hsr_slave_1: entered promiscuous mode [ 209.324963][T14227] debugfs: 'hsr0' already exists in 'hsr' [ 209.330761][T14227] Cannot create hsr debugfs directory [ 209.433983][T14358] loop9: detected capacity change from 0 to 512 [ 209.442398][T14358] ext4: Unknown parameter 'uid' [ 209.461904][T14358] lo speed is unknown, defaulting to 1000 [ 209.484748][T14358] lo speed is unknown, defaulting to 1000 [ 209.490771][T14358] lo speed is unknown, defaulting to 1000 [ 209.497614][T14358] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 209.509723][T14358] lo speed is unknown, defaulting to 1000 [ 209.516207][T14358] lo speed is unknown, defaulting to 1000 [ 209.522850][T14358] lo speed is unknown, defaulting to 1000 [ 209.538290][T14358] lo speed is unknown, defaulting to 1000 [ 209.561507][T14358] lo speed is unknown, defaulting to 1000 [ 209.570906][T14358] lo speed is unknown, defaulting to 1000 [ 209.610754][T14374] binfmt_misc: register: failed to install interpreter file ./file0 [ 209.624004][T14375] loop9: detected capacity change from 0 to 164 [ 209.635105][T14375] ISOFS: unable to read i-node block [ 209.646294][T14375] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 209.708361][T14382] syzkaller0: entered promiscuous mode [ 209.714009][T14382] syzkaller0: entered allmulticast mode [ 209.774092][T14371] SELinux: failed to load policy [ 209.838008][T14397] siw: device registration error -23 [ 209.879994][T14227] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.890207][T14227] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.901952][T14399] loop5: detected capacity change from 0 to 1764 [ 209.934225][T14227] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.977139][T14227] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 210.058364][T14420] lo speed is unknown, defaulting to 1000 [ 210.060553][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.093798][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.103128][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.110262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.142815][T14227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.153241][T14227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.174654][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.181773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.313009][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.331650][T14437] siw: device registration error -23 [ 210.615742][T14227] veth0_vlan: entered promiscuous mode [ 210.665568][T14227] veth1_vlan: entered promiscuous mode [ 210.756643][T14227] veth0_macvtap: entered promiscuous mode [ 210.849476][T14227] veth1_macvtap: entered promiscuous mode [ 210.972796][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.984365][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.995523][T10646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.006000][T14468] FAULT_INJECTION: forcing a failure. [ 211.006000][T14468] name failslab, interval 1, probability 0, space 0, times 0 [ 211.008135][T10646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.018688][T14468] CPU: 1 UID: 0 PID: 14468 Comm: syz.5.4256 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.018718][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.018731][T14468] Call Trace: [ 211.018782][T14468] [ 211.018790][T14468] __dump_stack+0x1d/0x30 [ 211.018863][T14468] dump_stack_lvl+0xe8/0x140 [ 211.018884][T14468] dump_stack+0x15/0x1b [ 211.018901][T14468] should_fail_ex+0x265/0x280 [ 211.018940][T14468] should_failslab+0x8c/0xb0 [ 211.019048][T14468] __kvmalloc_node_noprof+0x12e/0x670 [ 211.019135][T14468] ? bpf_test_run_xdp_live+0x119/0x11c0 [ 211.019168][T14468] bpf_test_run_xdp_live+0x119/0x11c0 [ 211.019199][T14468] ? __pfx_autoremove_wake_function+0x10/0x10 [ 211.019222][T14468] ? 0xffffffffa0205040 [ 211.019268][T14468] ? synchronize_rcu+0x45/0x320 [ 211.019309][T14468] ? 0xffffffffa0205040 [ 211.019322][T14468] ? 0xffffffffa0205040 [ 211.019363][T14468] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 211.019389][T14468] ? 0xffffffffa0205040 [ 211.019413][T14468] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 211.019489][T14468] bpf_prog_test_run_xdp+0x525/0x970 [ 211.019591][T14468] ? kstrtouint+0x41/0xc0 [ 211.019619][T14468] ? __rcu_read_unlock+0x4f/0x70 [ 211.019647][T14468] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 211.019676][T14468] bpf_prog_test_run+0x22a/0x390 [ 211.019728][T14468] __sys_bpf+0x4c0/0x7c0 [ 211.019755][T14468] __x64_sys_bpf+0x41/0x50 [ 211.019791][T14468] x64_sys_call+0x2aee/0x3000 [ 211.019812][T14468] do_syscall_64+0xd2/0x200 [ 211.019836][T14468] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.019862][T14468] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.019893][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.019914][T14468] RIP: 0033:0x7f4557e7f749 [ 211.019930][T14468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.019974][T14468] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.019994][T14468] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 211.020007][T14468] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 211.020020][T14468] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.020032][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.020044][T14468] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 211.020064][T14468] [ 211.164510][T14475] loop4: detected capacity change from 0 to 1764 [ 211.282619][T10646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.305245][T10646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.548073][T14502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4269'. [ 211.560935][T14504] loop4: detected capacity change from 0 to 164 [ 211.569394][T14504] ISOFS: unable to read i-node block [ 211.574698][T14504] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 211.783804][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4277'. [ 211.862115][T14520] SELinux: failed to load policy [ 211.898114][T14534] netlink: 'wÞ£ÿ': attribute type 1 has an invalid length. [ 211.905737][T14534] netlink: 224 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 212.123679][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 212.123697][ T29] audit: type=1326 audit(1763786827.712:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.153419][ T29] audit: type=1326 audit(1763786827.712:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.178217][ T29] audit: type=1326 audit(1763786827.762:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.201952][ T29] audit: type=1326 audit(1763786827.762:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.211565][T14564] loop4: detected capacity change from 0 to 164 [ 212.225630][ T29] audit: type=1326 audit(1763786827.762:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.259172][ T29] audit: type=1326 audit(1763786827.842:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.282790][ T29] audit: type=1326 audit(1763786827.842:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.306334][ T29] audit: type=1326 audit(1763786827.842:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14557 comm="syz.0.4291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e4a98f749 code=0x7ffc0000 [ 212.331070][T14564] ISOFS: unable to read i-node block [ 212.345635][T14564] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 212.363029][T14568] loop5: detected capacity change from 0 to 512 [ 212.392944][T14568] ext4: Unknown parameter 'euid>00000000000000000000' [ 212.474790][T14584] loop5: detected capacity change from 0 to 512 [ 212.481625][T14584] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 212.518939][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4304'. [ 212.534351][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4305'. [ 212.543281][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4305'. [ 212.548678][T14590] loop5: detected capacity change from 0 to 512 [ 212.552233][T14588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.575017][T14590] EXT4-fs: inline encryption not supported [ 212.580951][T14590] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.588667][ T29] audit: type=1400 audit(1763786828.172:8385): avc: denied { read } for pid=14587 comm="syz.4.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 212.608123][ T29] audit: type=1400 audit(1763786828.172:8386): avc: denied { read } for pid=14587 comm="syz.4.4305" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 212.639546][T14590] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.4306: inode #13: comm syz.5.4306: iget: illegal inode # [ 212.706119][T14590] EXT4-fs (loop5): Remounting filesystem read-only [ 212.736259][T14590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.787091][ T7983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.793619][T14608] loop4: detected capacity change from 0 to 1764 [ 212.925002][T14620] lo speed is unknown, defaulting to 1000 [ 213.072548][ T3421] IPVS: starting estimator thread 0... [ 213.138256][T14631] netlink: 'syz.4.4323': attribute type 1 has an invalid length. [ 213.146069][T14631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4323'. [ 213.176977][T14625] IPVS: using max 2832 ests per chain, 141600 per kthread [ 213.237215][T14620] wg2: entered promiscuous mode [ 213.242226][T14620] wg2: entered allmulticast mode [ 213.272967][T14620] lo speed is unknown, defaulting to 1000 [ 213.708053][T14671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.812829][T14684] FAULT_INJECTION: forcing a failure. [ 213.812829][T14684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.825977][T14684] CPU: 1 UID: 0 PID: 14684 Comm: syz.5.4343 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.826080][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.826094][T14684] Call Trace: [ 213.826102][T14684] [ 213.826110][T14684] __dump_stack+0x1d/0x30 [ 213.826136][T14684] dump_stack_lvl+0xe8/0x140 [ 213.826159][T14684] dump_stack+0x15/0x1b [ 213.826179][T14684] should_fail_ex+0x265/0x280 [ 213.826284][T14684] should_fail+0xb/0x20 [ 213.826302][T14684] should_fail_usercopy+0x1a/0x20 [ 213.826325][T14684] _copy_from_user+0x1c/0xb0 [ 213.826353][T14684] ___sys_sendmsg+0xc1/0x1d0 [ 213.826516][T14684] ? arch_irq_work_raise+0x46/0x50 [ 213.826553][T14684] __x64_sys_sendmsg+0xd4/0x160 [ 213.826578][T14684] x64_sys_call+0x191e/0x3000 [ 213.826667][T14684] do_syscall_64+0xd2/0x200 [ 213.826686][T14684] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.826715][T14684] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 213.826814][T14684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.826837][T14684] RIP: 0033:0x7f4557e7f749 [ 213.826855][T14684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.826877][T14684] RSP: 002b:00007f45568e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.826902][T14684] RAX: ffffffffffffffda RBX: 00007f45580d5fa0 RCX: 00007f4557e7f749 [ 213.826917][T14684] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 213.826932][T14684] RBP: 00007f45568e7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.826987][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.827001][T14684] R13: 00007f45580d6038 R14: 00007f45580d5fa0 R15: 00007fffc263d808 [ 213.827021][T14684] [ 213.828579][T14683] loop9: detected capacity change from 0 to 1024 [ 214.009997][T14683] EXT4-fs: Ignoring removed orlov option [ 214.030233][T14683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.097335][T14698] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4349'. [ 214.164953][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 214.243835][T14712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 214.258249][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4344'. [ 214.315224][T14713] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 214.356267][T14722] ================================================================== [ 214.364385][T14722] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 214.371945][T14722] [ 214.374287][T14722] write to 0xffff888103f8c108 of 8 bytes by task 14718 on cpu 1: [ 214.382020][T14722] mas_wr_store_entry+0x11e9/0x2750 [ 214.387233][T14722] mas_store_prealloc+0x760/0xa90 [ 214.392282][T14722] commit_merge+0x6a5/0x730 [ 214.396810][T14722] vma_expand+0x220/0x320 [ 214.401167][T14722] vma_merge_new_range+0x296/0x310 [ 214.406298][T14722] mmap_region+0xa50/0x1620 [ 214.410825][T14722] do_mmap+0x9b3/0xbe0 [ 214.414928][T14722] vm_mmap_pgoff+0x17a/0x2e0 [ 214.419543][T14722] ksys_mmap_pgoff+0xc2/0x310 [ 214.424236][T14722] x64_sys_call+0x14a3/0x3000 [ 214.428942][T14722] do_syscall_64+0xd2/0x200 [ 214.433472][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.439383][T14722] [ 214.441720][T14722] read to 0xffff888103f8c108 of 8 bytes by task 14722 on cpu 0: [ 214.449362][T14722] mas_state_walk+0x28f/0x650 [ 214.454061][T14722] mas_walk+0x60/0x150 [ 214.458146][T14722] lock_vma_under_rcu+0x95/0x170 [ 214.463107][T14722] do_user_addr_fault+0x233/0x1080 [ 214.468237][T14722] exc_page_fault+0x62/0xa0 [ 214.472773][T14722] asm_exc_page_fault+0x26/0x30 [ 214.477644][T14722] [ 214.479977][T14722] value changed: 0x00007f9e4938cfff -> 0x00007f9e4936bfff [ 214.487182][T14722] [ 214.489520][T14722] Reported by Kernel Concurrency Sanitizer on: [ 214.495687][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.0.4356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.505510][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.515583][T14722] ================================================================== [ 214.558801][T13152] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.