last executing test programs: 6m26.079680906s ago: executing program 32 (id=1369): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x2, 0x0, @c}, 0x29, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x1) 6m18.733747717s ago: executing program 33 (id=1445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x110) getdents64(r5, 0xfffffffffffffffe, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x100ef, 0x7fa962bfffff, 0x13012, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010471bc30b00000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00f0"], 0x54}}, 0x40000084) 6m8.862446965s ago: executing program 34 (id=1559): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7ff, 0xe, 0x5, 0x4}, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1402, 0x100, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x80) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) accept4$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80800) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000240)={'dummy0\x00', @ifru_data=&(0x7f0000000200)="58f8cc358fbf79ddda556460f44e5dc37bec98b10cd8b499cfb79a8142ebc57d"}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000280)=0x3d1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008014}, 0x800) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000400)) r5 = open$dir(&(0x7f0000000440)='./file0\x00', 0x40000, 0x102) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000004c0)={0x0, 0x1, 0x3}) ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f00000008c0)={{r6}, {@val={r7}, @actul_num={@void, 0x2d4, 0x4b}}}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000a00)={@initdev, 0x0}, &(0x7f0000000a40)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x14, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xf9}, [@alu={0x4, 0x1, 0xa, 0xb, 0x9, 0x40, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x9, 0x4, 0x5, 0xfffffffffffffff0, 0x1}, @generic={0x2, 0x9, 0x0, 0x3, 0x5}, @call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @generic={0x90, 0xb, 0x4, 0xfff, 0xfffffff6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000009c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x1c, '\x00', r8, @sk_lookup, r2, 0x8, &(0x7f0000000a80)={0x9, 0x1000}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0x4, 0xfffffffb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000b00)=[r1, r1, r2, r2, r2], &(0x7f0000000b40)=[{0x1, 0x2, 0xb, 0xa}, {0x3, 0x5, 0xd, 0x2}, {0x5, 0x5, 0x10, 0x4}, {0x3, 0x5, 0x5}], 0x10, 0xe}, 0x94) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000c40)={0xfffffffb, 'syz1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000001000)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000cc0)={0x2c8, r4, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8e64, 0x52}}}}, [@NL80211_ATTR_NAN_FUNC={0x29c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x62, 0xb, "e764921412380a85333d64b2833b4835b14defdbcb14ab3e2a9cf2b25c152bc90a019ed5cf75049ca33009d12766affe00b7681c5665d9afacc4233fddeb271da124fa08f546eeeb4d92edf75a140f77b7b1c21032c262f9f02882ae1e2f"}, @NL80211_NAN_FUNC_SRF={0x58, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x4c, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x81}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xff, 0xb, "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"}, @NL80211_NAN_FUNC_SERVICE_INFO={0xda, 0xb, "b090d406a2e9d0b87e9c9e20ad26036a02afaafb293227af74f6671e299264ef180cb4ecf9d6ff3bd033f578208f7d145dc2dafc96b0257b7817b4857841324e6c6cdf99f4eb601fd2d3b2e016ecd126fb3c1e935b0a3ee6b91c98d92a6c0da5ddbb26a75923562a91b2dfe123d54d4acc6a8b535e3b0e4f6a0d6cbb1be07d2a223a08ee982b101dd75aeed375fbd6d11fe282351aac0c63002b5ba718de264254be19c121e35ccfdb7cddde9b8bd75bb67b7ea5f106a4127802c388bc22bb8313827f9ae069ebf769a9f90092a6e3397fda424e04bb"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = accept4$nfc_llcp(r1, &(0x7f0000001040), &(0x7f00000010c0)=0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000001100)={'wg1\x00'}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001140), &(0x7f0000001180)=0x4) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000011c0)={0x0, 0x9, 0x8}, 0xc) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000001200)=[{r2, 0x40}, {r2, 0x41}, {r2, 0x1}, {r10, 0x40}, {r3, 0xa0}, {r11, 0xa486}, {r3, 0x100}], 0x7, 0x8) fgetxattr(r10, &(0x7f0000001240)=@random={'system.', '#\x00'}, &(0x7f0000001280)=""/27, 0x1b) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x48, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x95}, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000001440)=0x6) bind$vsock_stream(r2, &(0x7f0000001480)={0x28, 0x0, 0x0, @host}, 0x10) 4m46.549375463s ago: executing program 6 (id=2146): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001340)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100ebff00001c0007800c00018008000140ffffffff0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 4m46.481414269s ago: executing program 6 (id=2147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) lchown(0x0, 0x0, 0x0) 4m46.213372181s ago: executing program 6 (id=2158): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000900004000000044e15ab21100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) timer_delete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='net/llc/socket\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2e, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r12, 0x0, 0x8001}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0xd, 0x0, 0x0) 4m46.129860178s ago: executing program 6 (id=2149): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sco\x00') ioctl$SNAPSHOT_FREE(r0, 0x3305) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7ce", 0x58}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x9, 0x9, 0x1c, 0x6}, {0x1, 0x6, 0x0, 0x80000000}, {0xff01, 0x5, 0x2, 0x3}]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 4m46.010447487s ago: executing program 6 (id=2151): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sco\x00') ioctl$SNAPSHOT_FREE(r1, 0x3305) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7ce", 0x58}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x9, 0x9, 0x1c, 0x6}, {0x1, 0x6, 0x0, 0x80000000}, {0xff01, 0x5, 0x2, 0x3}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="8b33000000feffffff0005000000080003"], 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x5, 0x813, &(0x7f0000000380)="$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") mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xe3, 0x10010, 0x0, 0x16, 0x1, 0x20ac, 0x3, 0xa}) 4m45.146342669s ago: executing program 6 (id=2155): ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 4m29.660723931s ago: executing program 35 (id=2155): ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='asymmetric\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 3m47.403715293s ago: executing program 8 (id=2389): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x8, 0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xb35, 0x4, 0x6, 0x9}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x36, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x2}}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000010000100"/20, @ANYRES32=r1, @ANYBLOB="620400000040000004001a80"], 0x24}}, 0x0) 3m46.840753329s ago: executing program 8 (id=2391): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xeb6206ded92ca3e2, 0x720, 0x0, 0xfffffffffffffd25) fchmod(0xffffffffffffffff, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 3m46.689780502s ago: executing program 4 (id=2392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x60002, &(0x7f0000000040)={[{@noauto_da_alloc}, {@norecovery}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUvyMZ/KYYUgyMAlkIPMglh8MsWdmM6uZWQSGCXTTQuraiutatowlp7EJ1Gl3WXRRWlooXXRZ6D/QbppVQ6F03e5LFiWlTV1oCwUVXUmO/JArGjsC398PbnTuOTf6zrH4jq+OrnUDSK1ztX8yEUMR8UlEHKvvbj3gXP1h48HN6dqWiWr1yleZ5LjafvPQ5v87GhHrEdEfEf//d8QzmZ1xy6tr81PFYmG5sZ+vLCzly6trF+cWpmYLs4XF0YlLk5MTI+Njk/s21tsvP3f78vv/7X33u5fu333lww9q3RpqtLWOYz/Vh94TJ1rqjkTEPw8iWBfkGuMZ6HZH+EVqr99vIuJ8kv/HIpe8mkAaVKvV6o/VvnbN61Xg0Mom58CZ7HBE1MvZ7PBw/Rz+tzGYLZbKlb9eK60sztTPlY9HT/baXLEw0nivcDx6MrX90aT8cH9s2/54RHIO/GpuINkfni4VZx7vVAdsc3Rb/n+bq+c/kBLe8kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rJf0gv+Q+p9L/Ll2tbtfn37zPXV1fmS9cvzhTK88MLK9PD06XlGJ4t9b3X2fMVS6Wl0b/Fyo18pVCu5Mura1cXSiuLlatzC1OzvVHoOeDxAJ07cfbOZ5mIWP/7QLLV9Dba5CocbtUX6t8BAKRPrtsTENA1lv4gvbzHB3b5it4t+ts1LD1S1J8LCxygbLc7AHTNhdM+/4O0sv4P6WX9H9Jr6zm+swFIo+6s/wPdZP0f0muo5f4/mZb7f/2q5d5dIxHx64j4NNfT17zXF3AYZL/INHL/wrE/Dm1v7c18nywK9EbE829eef3GVKWyPFqr/3qzvvJGvb63G90HOpbk71jj0S9yAEi1jQc3p5vbZuXxg4/75b/qFyHsjH+ksTbZn3xGObiR2XKtQmafrl1YvxURp3aLn2nc77z+ycfgRm5H/JONx0z9KZL+Hknum/4o8e+902n80y3x/9AS/8wj/1QgHe7U5p+R3fI/m+R0bObf1vlnaJ+uj24//2U3579cm/nvbIcxnn3rxXtt49+KOLNr/Ga8/iTW9vi1vl3oMP79p574Xbu26tv159ktflOtlK8sLOXLq2sX5xamZguzhcXRiUuTkxMj42OT+WSNOt9cqd7pH6c+vrvX+AfbxN9r/LW6P3c4/h9+/9GT5/aI/6fzu7/+J/eIPxARf+kw/jdjnz/drq0Wf6bN+LPb47cs8NXqxjuMX37tP30dHgoAPAbl1bX5qWKxsKygoKCwWej2zAQctIdJ3+2eAAAAAAAAAAAAAJ16HJcTd3uMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHwU8BAAD//zAx0oQ=") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3m46.620287758s ago: executing program 4 (id=2393): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000900004000000044e15ab21100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) timer_delete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='net/llc/socket\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r9}, 0x10) r10 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2e, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r11, 0x0, 0x8001}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0xd, 0x0, 0x0) 3m46.530928695s ago: executing program 4 (id=2394): mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x40) 3m45.990761809s ago: executing program 8 (id=2395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) getdents64(r1, 0xfffffffffffffffe, 0x64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "d1b126f1921bd50634f1af03"}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0xffffff45, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 3m45.921932335s ago: executing program 8 (id=2396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) umount2(0x0, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x98, 0x4, 0x60, @empty, @local, 0x20, 0x8, 0xa, 0x93b}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0xe8, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x96}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3800000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r12, 0x0, 0x29, 0x0, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) 3m45.778802707s ago: executing program 8 (id=2397): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2410, 0x0, 0xffffffff, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3m45.7374028s ago: executing program 8 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3m45.710597252s ago: executing program 4 (id=2399): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340), &(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000900004000000044e15ab21100", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) timer_delete(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = syz_open_procfs(r6, &(0x7f00000000c0)='net/llc/socket\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) link(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x2e, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x8001}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0xd, 0x0, 0x0) 3m45.626683859s ago: executing program 4 (id=2400): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b002200"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r5, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000a90000b7080000000000007b8af8ff00000000bfa2ff0f0000000007020000eaffffffb703000008000000b70400000000000000000001ffffffff9500000000000000ee7e6ccc23c2eb2383417aea246e6bfb2b1db50f9c5a12ed1819c6c563650004b25383130e4e1c53412cf69b68330c845770cbbdaca21ca1c89f5d087b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r9 = socket$tipc(0x1e, 0x2, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) 3m45.585428583s ago: executing program 4 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") 3m30.661766559s ago: executing program 36 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 3m29.590789037s ago: executing program 37 (id=2401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$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") 1m40.891432529s ago: executing program 9 (id=3432): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") creat(0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa4, r2, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x402}}, {0x8}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1m40.847735362s ago: executing program 9 (id=3433): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c042) 1m40.734852002s ago: executing program 9 (id=3435): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="151ced89d723ac4ecf56df76", @ANYRES32=r2, @ANYBLOB, @ANYRES64=0x0], 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x401, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 1m40.651567229s ago: executing program 9 (id=3436): socketpair(0x1f, 0x1, 0x7, &(0x7f00000002c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='f2fs_write_begin\x00', r1, 0x0, 0x20000000}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_clone(0x0, &(0x7f0000000240)="6a0db91d86a750b6e0e6598c2ac004c5f5577d47ed221d6de34f95c1d1230e956e03385af41af591f583d9b4c2c5e16b9b12f314a8cdd38659a46257254ec8bf7159d8398e7c5acb2c92c7c624ba6839052a5ef894d213e94f38aeae2aea66", 0x5f, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000400)="4267217980afbe0f2908ab6343504ea025c06ee86114716c4624330220407d86d41f8819869b2251a3086d8e11285763d73cbc6a657c920a28214cba3290e6e10f5d14176badbf09b122d4358b92b8a5739d8b4327848fbd98d6f442a372") getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r3 = socket(0x15, 0x5, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r3, 0x0, &(0x7f0000000240)) 1m40.27478887s ago: executing program 9 (id=3441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0xe0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c000280"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4008050) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) umount2(0x0, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000005c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34}, 0x94) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe3a) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x98, 0x4, 0x60, @empty, @local, 0x20, 0x8, 0xa, 0x93b}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000640)={0xb4, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x96}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3800000}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) r11 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) 1m39.067697029s ago: executing program 9 (id=3455): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010200000000000000000000000016742c707e02742c6e2f08ce45eebb0850000000000005000400000000070000020072797abb47203e5f440331ccb031000000000500010007000000510fe3361cded325145405ee"], 0x50}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1216, &(0x7f0000002480)="$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") r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) 1m39.067503899s ago: executing program 38 (id=3455): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x100000}], 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010200000000000000000000000016742c707e02742c6e2f08ce45eebb0850000000000005000400000000070000020072797abb47203e5f440331ccb031000000000500010007000000510fe3361cded325145405ee"], 0x50}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1216, &(0x7f0000002480)="$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") r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000009c0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000500, 0x0, 0x0, 0x200000000530, 0x200000000560], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000001000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x138) 1m38.404366814s ago: executing program 7 (id=3468): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sco\x00') ioctl$SNAPSHOT_FREE(r1, 0x3305) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b7c0140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01", 0x56}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x9, 0x9, 0x1c, 0x6}, {0x1, 0x6, 0x0, 0x80000000}, {0xff01, 0x5, 0x2, 0x3}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="8b33000000feffffff0005000000080003"], 0x38}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC], 0x5, 0x813, &(0x7f0000000380)="$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") mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0xe3, 0x10010, 0x0, 0x16, 0x1, 0x20ac, 0x3, 0xa}) 1m38.197615481s ago: executing program 7 (id=3475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = dup2(r1, r2) getsockopt$inet_pktinfo(r3, 0x3a, 0x8, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) fcntl$getflags(r5, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20219}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_CARRIER={0x5, 0x21, 0xd}]}, 0x50}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) getpid() r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x10d, 0x70bd2a, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffe0, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000009c0)={0x3f0, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x390, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8a, 0x4, "8b789088e0f972d944cf28d67a597183bb54e85f4805367a2f85d2f0f8e2ea9c163ec5bda2632f1c5aa6ba106269917b8a0a8467b1a1d52b24fd96d0af6371b3ed4973905e0c96f10cb60badd1f5390446ef6a76dc75385b21403bc4c2d760e9c83a544620b951e1f9ae0b76127d6a95841aaa4515819f70edddf8e8298bc0ac2bf220db8824"}, @ETHTOOL_A_BITSET_BITS={0x130, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'security.selinux\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x29, 0x2, 'system_u:object_r:netutils_exec_t:s0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'security.selinux\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x29, 0x2, 'system_u:object_r:netutils_exec_t:s0\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xe2!),!\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "b5414c4e50ea43edf87b827b112ac54a68b43e53a25280f00f8a2e07e3f8163b69d627d1d8d1a45841343999ac9afb94aa07254c3d79de855ac797c107dd189268a839a863fd0b921c2325e329090982847bd038743ef4fabebbfe5ef12be59568cda0ac221278a0f1b238ff2ffe69b72c6a4cc1fcd49bb790ad51197c6ef2a0bbd28b9bcf5f084acd0223702b1f36152556d7868af89da7a5e0aafe387b8671fef05064cb39d9177ec792cbd4b60ffa4026148078"}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf2, 0x4, "46edadd5246a72cc8bb61ce542a340e0cf32c1da6faf4a61f44f563d14c408865b4a1ceecf9188f36af08638ff893120d71b6618a62901b741829ba3f570bc9f7db99b900dc7adf18045e097c11988c21e47bcd759d551f58fcda6a679a7fb74adda672c9d15e3defda67c3bbeeea5e830a2da6dc1434881cd7a905ad9e85fbd6c0af0ee8792c0ff3faba9917013542b0fd33ebdc30e432113bb9412c122f2330e4528fc2b951a7c1ed8f00b35431c8f9599b612508056875eed75dad3168cc633bff093cca946d3745253622fa1d15510c7fd0ff608ac2afbb13beaa10000647d61b30b4b3a83a451b0a34eac14"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x14}, 0x4) 1m38.075166621s ago: executing program 7 (id=3478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r2, 0x0, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1m38.007509006s ago: executing program 7 (id=3479): socketpair(0x1f, 0x1, 0x7, &(0x7f00000002c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000004c0)='f2fs_write_begin\x00', r1, 0x0, 0x20000000}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_clone(0x0, &(0x7f0000000240)="6a0db91d86a750b6e0e6598c2ac004c5f5577d47ed221d6de34f95c1d1230e956e03385af41af591f583d9b4c2c5e16b9b12f314a8cdd38659a46257254ec8bf7159d8398e7c5acb2c92c7c624ba6839052a5ef894d213e94f38aeae2aea66", 0x5f, &(0x7f0000000080), &(0x7f0000000300), &(0x7f0000000400)="4267217980afbe0f2908ab6343504ea025c06ee86114716c4624330220407d86d41f8819869b2251a3086d8e11285763d73cbc6a657c920a28214cba3290e6e10f5d14176badbf09b122d4358b92b8a5739d8b4327848fbd98d6f442a372") getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) r3 = socket(0x15, 0x5, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e) getsockname$packet(r3, 0x0, &(0x7f0000000240)) 1m37.792523384s ago: executing program 7 (id=3480): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff7}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0xffffff18}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004) timer_getoverrun(0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xb64c3, 0x118) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x4000001) getpeername$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) inotify_add_watch(r5, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r6 = getpid() syz_pidfd_open(r6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000840000000000000000000000000000cd87c0efbb880fd094e3e576000000b4cc4f7100000000000000"], 0x28}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) 1m37.615325889s ago: executing program 7 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x8041, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000000000000000000000010000000000006719e1ab1cf13f3589c94663e7b88a03be9f4493116ecef37280fd9d30cf9ea913ddd4ba16216091f71a19c0ae27a86d309b9b14fb2a61ed662a7db9c5f3b49410685f9773aefe1f21d734643f3427db8a460cb137ef4865b2c301e4094125233bd33dfda051eaff45e10640eabb0f863a50fa7c8d3cc6aa8f143e43af9e64f8e1a9448b1273142f867ba527841282d37b97f917539ec908da7ec42f5cea37f489", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x8, 0x6, 0xfffe}, 0x20) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x1ad74b4ab3a0a3ca) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) chroot(&(0x7f0000000240)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='[ue\xcbih,\x17i\xacP\xe6lNnux?\x18linux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB]) 1m37.577327781s ago: executing program 39 (id=3483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x8041, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000000000000000000000010000000000006719e1ab1cf13f3589c94663e7b88a03be9f4493116ecef37280fd9d30cf9ea913ddd4ba16216091f71a19c0ae27a86d309b9b14fb2a61ed662a7db9c5f3b49410685f9773aefe1f21d734643f3427db8a460cb137ef4865b2c301e4094125233bd33dfda051eaff45e10640eabb0f863a50fa7c8d3cc6aa8f143e43af9e64f8e1a9448b1273142f867ba527841282d37b97f917539ec908da7ec42f5cea37f489", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x8, 0x6, 0xfffe}, 0x20) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x1ad74b4ab3a0a3ca) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) chroot(&(0x7f0000000240)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='[ue\xcbih,\x17i\xacP\xe6lNnux?\x18linux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB]) 4.200214634s ago: executing program 3 (id=4726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r3}, 0x18) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001440)={[{@noinit_itable}, {@usrquota}, {@jqfmt_vfsv0}, {@abort}, {@nodelalloc}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") 2.30917654s ago: executing program 3 (id=4735): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@resgid}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x497, &(0x7f0000001540)="$eJzs3MtvG8UfAPDvrvPoO/n1Vx59QAMFEVFImrRAD0gIBFIvSEhwgGNIQ1XqtqgJEq0q2iJUjoi/ADgi8RdwggsCTiCucEdIFeqlhQMyWns3cWLXuHYdh/rzkdaZ2dfM7OxkZ3e8DmBgTWQfScS2iPglIsZq0dUrTNT+3Lx+cf7P6xfnk6hUXv1jtLrejesX54tVi+225pHJNCL9MIm9TdJdPH/h1Fy5vHAuj08vnX5nevH8hSdPnp47sXBi4czs0aNHDs888/TsU3eknFm5bux5/+y+3cfe+OTl+Uq8+f2XWX635cvry1Ez3nWaEzERlUqlkq6aO1L9fLTrvW8s2yPiSh5OhvqcGdpWioisuoar7X8sSrFSeWPx0gd9zRzQU9n1abRhbin/O5RkyzfVrQvcTRLtGgZUccXP7n+Lab36HhvBteezz4Vq+W/mU23JUGT37cl47Y691KP0t0XE65f/+jSboulzCACAO+vrrP/zRLP+Xxr31q23Ix9DGY+IgxGxMyL+HxG7IuKeiOq690XE/beZfnX86cpKvLH/89PmjgvXhqz/92w+trW6/7c8ajNeymPbq+UfTt46WV44lB+TyRgezeIzLdL45sWfP77Vsom6/l82ZekXfcE8H78PrXlAd3xuaa6bMte7diViz1Cz8ifLIwFJROyOiD0d7D87Zicf/2JfFt6xtXH5v5e/lcsd5Gi1yucRj9Xq/3KsKX8hqQ2R3Gp8cnpTlBcOTRdnRaMffrz6Sn18uC7cXfm7l9X/lqbnf17+ohkU47WLbe54ZCV49deP8n02NuVOz/+R5LVVybw3t7R0biZiZCQa58+ubFvEi/Wz8k8eiLiaDwTXt/+dEX9/lm+3NyKyk/iBiHgwIvbneX8oIh6OiAMtDsV3LzzyduuD1d/6P96q/iPGk/rx+g4CpVPfflXsbLkq838u7dX/kWpoMp/Tzv+/djN4J44hAAAAbHRpdQw6SaeWw2k6NVX7Dv+u2JKWzy4uHZyId88cr41Vj8dwWjzpGqt7HjqTPxsu4rNr4ocj4n/Vbxptrsan5s+Wt/e78DDgtt6i/Wd+69WXXoCN47be10p6lw9g/XlfEwZX2+1/uLf5ANaf6z8MLu0fBlez9n8p4mYfsgKss9u6/j/Xu3wA669V+/fID+5u7v9hcGn/MJAaX4kvfqOhkzf9VwI7j3W1+QAFSj3ac9T/aEcPApH2/dB1Hkg3Qjb254HRiGh3q0s9rdO15w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/3z8BAAD//yxO2No=") socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ab4bd97ea4f51851000000000000000000000000c877c94926ac38a6f68064b66aee92f61b9fc5c9fd8abfa16eb2d6baeed39cc264020975323764b759b0f0d62a4b481d3f48b151643a47e757fd29e3bb698ed06f8fac884ece1320e7f78d4a55b43263f3d45939f8770ae388861188a2dfbbb4e8e866bba9b439a3d9d09ea42871985630ba791605ebab51964ee5304100"/156, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0xc0000000}], 0x1, 0x24005805) 2.142460104s ago: executing program 3 (id=4737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x40) 2.088557728s ago: executing program 3 (id=4738): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1.930387851s ago: executing program 3 (id=4741): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x8, 0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x145842, 0x0) mount$nfs(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000006c0)={[{'udp\x00'}]}) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x2, 0xb35, 0x4, 0x6, 0x9}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9001}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, 0xffffffffffffffff, 0x36, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x2}}, 0x30) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000010000100"/20, @ANYRES32=r1, @ANYBLOB="620400000040000004001a80"], 0x24}}, 0x0) 1.887774304s ago: executing program 5 (id=4742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1.887308075s ago: executing program 5 (id=4743): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pptp(0x18, 0x1, 0x2) r0 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5100}}) io_uring_enter(r0, 0x75fa, 0xe478, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r4, 0x0, 0x4ab}, 0x18) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.310962342s ago: executing program 0 (id=4745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000140)=""/59, 0x3b, 0x0, &(0x7f0000001240)=""/4096, 0x1000}}, 0x10) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = dup(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000540)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee3, 0x8031, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) 1.310593562s ago: executing program 1 (id=4746): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 1.190124812s ago: executing program 0 (id=4747): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/226}, 0xea, 0x0, 0x3000) msgctl$IPC_SET(r0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef0000000000"], 0xe, 0x0) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000009c0)=""/213) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.080621811s ago: executing program 1 (id=4748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000001200)={0x280, &(0x7f00000003c0), &(0x7f0000000a80), &(0x7f0000000ac0), {0x11}, &(0x7f0000001080)=""/50, 0x32, &(0x7f00000010c0)=""/225, &(0x7f00000011c0)=[0x0], 0x1}, 0x58) 998.848338ms ago: executing program 0 (id=4749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 987.964419ms ago: executing program 1 (id=4750): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x40, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) 985.221689ms ago: executing program 5 (id=4751): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b002200"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) 908.454795ms ago: executing program 2 (id=4753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (fail_nth: 3) 881.222867ms ago: executing program 5 (id=4754): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@resgid}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x497, &(0x7f0000001540)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ab4bd97ea4f51851000000000000000000000000c877c94926ac38a6f68064b66aee92f61b9fc5c9fd8abfa16eb2d6baeed39cc264020975323764b759b0f0d62a4b481d3f48b151643a47e757fd29e3bb698ed06f8fac884ece1320e7f78d4a55b43263f3d45939f8770ae388861188a2dfbbb4e8e866bba9b439a3d9d09ea42871985630ba791605ebab51964ee5304100"/156, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000003200)=[{{0x0, 0x0, 0x0}, 0xc0000000}], 0x1, 0x24005805) 873.360378ms ago: executing program 0 (id=4755): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b002200"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) 826.990012ms ago: executing program 2 (id=4756): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r3, 0x4) 826.753822ms ago: executing program 2 (id=4757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 653.787136ms ago: executing program 1 (id=4758): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0x1, 0x5, 0x0, 0x5, 0x0, 0xa54, [{0x3, 0x0, 0x6}, {0x6, 0x5, 0x7}, {0x9}, {0xe, 0x1, 0x2}, {0x9, 0x2, 0xfffffffa}]}]}, {0x0, [0x30, 0x30, 0x5f, 0x0, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000080)=""/177, 0x6a, 0xb1, 0x0, 0x4, 0x10000}, 0x28) readv(r0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/191, 0xbf}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/30, 0x1e}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000480)=""/19, 0x13}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/45, 0x2d}, {&(0x7f0000000580)=""/223, 0xdf}], 0x9) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000740)=0x7fffffff, 0x4) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg(r2, &(0x7f00000008c0)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x4}}, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[{0xb0, 0x104, 0x4b, "c1e7d2f63dc0046190a6589dcbec8109a31e7bc486eb0900a5199e9c840fbbb191cc74cddd924f2596168d5cd94821ea69b19f7214638ccb7690044a06a6b006dcf138f60225d596170a14bcca1e3da5928d4696e06a41485e66c27a64f259ecce878c24773b219c1da187c1c9bfc52245f22b011fab6b2d799ca5722bd7b5a6b6fd4abbb0f3d95bd0b1abfafd0ba39c2a18369f465839f93d8086"}], 0xb0}, 0x24000000) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000900), &(0x7f0000000940)=0x10, 0x80000) recvmmsg(r3, &(0x7f0000002c40)=[{{&(0x7f0000000980)=@generic, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/187, 0xbb}, {&(0x7f0000000ac0)=""/32, 0x20}, {&(0x7f0000000b00)=""/72, 0x48}, {&(0x7f0000000b80)=""/127, 0x7f}, {&(0x7f0000000c00)=""/15, 0xf}], 0x5, &(0x7f0000000cc0)=""/187, 0xbb}, 0x8}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/136, 0x88}, {&(0x7f0000000e40)=""/163, 0xa3}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/174, 0xae}], 0x4, &(0x7f0000002000)=""/81, 0x51}, 0x3}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/148, 0x94}, {&(0x7f0000002180)=""/117, 0x75}], 0x3, &(0x7f0000002240)=""/73, 0x49}, 0x7}, {{&(0x7f00000022c0)=@phonet, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002340)=""/1, 0x1}, {&(0x7f0000002380)=""/239, 0xef}, {&(0x7f0000002480)=""/94, 0x5e}, {&(0x7f0000002500)=""/173, 0xad}], 0x4, &(0x7f0000002600)=""/178, 0xb2}, 0x5}, {{&(0x7f00000026c0)=@caif, 0x80, &(0x7f0000002b00)=[{&(0x7f0000002740)=""/130, 0x82}, {&(0x7f0000002800)=""/130, 0x82}, {&(0x7f00000028c0)=""/36, 0x24}, {&(0x7f0000002900)=""/5, 0x5}, {&(0x7f0000002940)=""/32, 0x20}, {&(0x7f0000002980)=""/83, 0x53}, {&(0x7f0000002a00)=""/148, 0x94}, {&(0x7f0000002ac0)}], 0x8, &(0x7f0000002b80)=""/154, 0x9a}, 0x400}], 0x5, 0x40, &(0x7f0000002d80)={0x0, 0x989680}) (async) pipe2$watch_queue(&(0x7f0000002dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$SOCK_DESTROY(r5, &(0x7f0000002f80)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002e40)={0xcc, 0x15, 0x8, 0x70bd28, 0x25dfdbfb, {0x8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "6cb466b6bd166670cfddaa68ae49a420372fd4d046fbe0c61e9d0107b5d5e3adbd7bfa12bdf2cc66b08844832cd29fb3983c4128de4e88c1f85d7f8becf5131b6cee615c24e41ed74173816e55dda0aeac7d49d4fb9a6818391dcd08a44a6bd7f257c61eaa9295ec25596d853586789b517b787563d570ec94ac9a426bbd4d6d51d5606a80c9c0b314cc2c1a8f55c9f370fd197be073c603301cb55a379b3363e25bb197a780d84d89aefc6dfa3a51db149563e6"}]}, 0xcc}}, 0x8000) (async, rerun: 32) ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000002fc0)={0x9, 0x1}) (async, rerun: 32) r6 = creat(&(0x7f0000003000)='./file0\x00', 0x104) recvmmsg(r6, &(0x7f0000005140)=[{{&(0x7f0000003040)=@nl=@proc, 0x80, &(0x7f0000003500)=[{&(0x7f00000030c0)=""/247, 0xf7}, {&(0x7f00000031c0)=""/241, 0xf1}, {0xfffffffffffffffd}, {&(0x7f00000032c0)=""/93, 0x5d}, {&(0x7f0000003340)=""/181, 0xb5}, {&(0x7f0000003400)=""/196, 0xc4}], 0x6, &(0x7f0000003580)=""/96, 0x60}, 0xc940}, {{&(0x7f0000003600)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003680)=""/197, 0xc5}, {&(0x7f0000003780)=""/176, 0xb0}], 0x2, &(0x7f0000003880)=""/37, 0x25}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000038c0)=""/8, 0x8}, {&(0x7f0000003900)=""/249, 0xf9}], 0x2, &(0x7f0000003a40)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004ac0)=""/59, 0x3b}, {&(0x7f0000004b00)=""/242, 0xf2}, {&(0x7f0000004c00)=""/171, 0xab}, {&(0x7f0000004cc0)=""/106, 0x6a}], 0x4}, 0x200}, {{&(0x7f0000004d80)=@caif=@dbg, 0x80, &(0x7f0000005080)=[{&(0x7f0000004e00)=""/197, 0xc5}, {&(0x7f0000004f00)=""/27, 0x1b}, {&(0x7f0000004f40)=""/98, 0x62}, {&(0x7f0000004fc0)=""/164, 0xa4}], 0x4, &(0x7f00000050c0)=""/70, 0x46}, 0xe}], 0x5, 0x4000, &(0x7f0000005280)) (async) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000052c0), 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r4, 0x40046721, &(0x7f0000005300)={r7}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000005340)={0x0, 0x9, 0x1, [0x9, 0x8, 0x0, 0x2, 0xffffffff], [0x8000000000000000, 0x3ff, 0x200, 0x8000000000000000, 0x6, 0x5, 0x3, 0x100000, 0x7, 0x7fff, 0x9, 0x7, 0x75, 0x4, 0xfffffffffffffff3, 0xb6a0, 0x0, 0x80, 0x6, 0x0, 0x1, 0x7, 0x8, 0x6, 0x6, 0x9, 0x1ff, 0x6, 0x1ff, 0x9, 0x5, 0x65f, 0x0, 0x5, 0x7ff, 0x0, 0x88d, 0x10001, 0x5, 0x7, 0xdff, 0x2, 0x3, 0x7, 0x800, 0xc, 0xffffffffffffff01, 0x9, 0x8000000000000000, 0x6, 0x3, 0x7, 0x3, 0x8000, 0x1000, 0x0, 0x8, 0xfffffffffffffffa, 0x1, 0x40, 0xfffffffffffffff9, 0x7, 0x8fc, 0x4acc, 0x4, 0x0, 0x2, 0x0, 0x9, 0xe4e, 0x3, 0x9, 0x1, 0x0, 0x400, 0x7, 0x700000000000000, 0xd17, 0xc2c8, 0x8, 0x1, 0x8, 0x4, 0x4, 0x9, 0x2, 0x9, 0x8, 0x2, 0x800, 0x313, 0x9, 0x7, 0xe000000000, 0x1d, 0x434, 0x0, 0x6, 0x6, 0x1ff, 0x7, 0x7ff80000000, 0xa, 0x2, 0x3, 0x7f, 0x1c80, 0x7, 0x34a, 0x7fffffff, 0x2, 0x7, 0x194d, 0xd09, 0x2, 0x800, 0x9, 0x7, 0x9, 0x4]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000005780)={0x2, 0x44, @start={r8, 0x0, "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", "04a398da8383b57a56180ca5e87291d1af3ac752f040decb857295b771a7d0f134b3f396c502f8c63ce3daa472c8087e5c8c98f18a28d298c80f863ea15e502e3a8bfb20285f89ec0ff6ff7d526a7e6b23baecc633b561c7713172a6105a73d69a85b11136b808ab385e08fbba5547cb6638db3253444cb891f49cb330f7d5c0cecdea078beed32a4d040d98c356b62a632f28f3fad27a8da0ee26a9b83f8c4724c040e268f2c07c955819eed6493230eee866a7913d1826da805070e357e5154f9d82b52748e52dc2be3606af7afb9cf9adc66c808b60c75c15f97ff85fc1d75877c2377f4c2b04d6f9b438ad402743416229d5eedab5cd764748f51ce19c7d2873d4d008c2e3bbb666327ea2c1548a4c15cce0113dbda6f44151a898a140ccbb842c8cdccee27af6da811c6bf730819bb5c13618ac74365ac5850f53048b2d2175c21898e1fbf2257f3027f90bc9903b0338fc3256d3a1e2024e7485492d97e99dd204a7960d77d43472cb66f114b6186a9b56d838df770757c2b19ec1e985a60066daebbfaa84370a35217dae6b4900f13e78b74084c98ffb1ce31aa323e02b5e979a625a247fddedc7af35fa6ec7fa61ae834338d1f7eb8e3e4e78b51ef251d233cd503e5b410341a13f11c66957971ba851803f682d3d36daf7b2017cd5e0c34759455b434ad103b6fb88a948b29106e9eca75e5d9ecdf1ea9eb962376fe1352bbee6dd35d24eb8e287c630e48f05b7894c17b9dbf6351dc7193930f9f37bb7189502bcf1279a635e2941b4d9c378e31c6eeb572b69c382c94c163a6aceaaffac7f729e86891a081f8779102f3abc0e041fd0ed09a41ddad01daae6b8ce33d3ddbc7fe7d12ab9efa836e7161adcd1b0efc344856292e96aece37236e349690b006059d1ff1b5be1fb3579a64045113ef1f003bd577394be49d77fcddda5d4fc1167d8412c93bf8e786f4d990f479a1725cb4fc32195b14f93d709a8d0094cac73e53b4be30955f389f9a3c081852a2c0487119df7ed35a0f5d137e68637248122343f536ab6324acf9d4d692ce00409b7422bbfe9e338f7ad6f3a14f06d73d1e951df67dbf3f7e7e0c1e8eb93255847dcbdfcff040f539e28c5dfab45342c886cb095fde69db46c24769334ccf3a14124992162844e3c93e25688028b323b3b1b9bba165c016377bb768c3e7dab30d3d59b59276bfcd063fe3c69158d58ae91df0de1b4a9bf0a4f5973dffe7005e3ffb3eff93d8dc56c0b9840d828e2d661fd3ccb9127ff586d6b8658dba3b77ffe2b42190dcd0859e1e0f04f3905d462bbd35789d2feb07df2c4e542e2485d18a80df943bdabe20f950e03fdb97a30f8e46d1ccc615d3af5ca231afac91d5fe873e7024c1d1ac2ea6118a528bb8c4527869107f046bc222ff76bc17280a230872863fada74c41cf9b14f2dea417149573e"}, [0x0, 0xff, 0x0, 0x4, 0x5, 0x9, 0x0, 0x1, 0x7741, 0x100000000000, 0x5, 0x639, 0x6, 0xf, 0xf9c6, 0x1, 0x4, 0x13f8, 0x0, 0x2, 0xf, 0x7, 0x9, 0x5, 0x4, 0x2, 0x2, 0x40, 0xb80f, 0x1, 0x770, 0xff, 0xffffffffffffffff, 0x200, 0x7, 0x5, 0x3, 0x6, 0xffff, 0x0, 0x9, 0xfffffffffffff0cb, 0x4, 0x6, 0x62, 0x4, 0xfffffffffffffff8, 0x4, 0x1ff, 0x99, 0x931, 0x8cc5, 0x4, 0x100000001, 0x6, 0x4, 0x1, 0x1, 0x3, 0x6, 0x6, 0xffffffffffffffc0, 0x6, 0x5]}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000061c0)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x2}, @in6={0xa, 0x4e23, 0xdbe, @private2, 0x3}, @in6={0xa, 0x4e20, 0x7, @loopback, 0x4}], 0x54) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000006280)={{0x0, 0x3938700}, {r9, r10+60000000}}, &(0x7f00000062c0)) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f0000006300)) (async) futex(&(0x7f0000006340), 0x1, 0x0, &(0x7f0000006380)={0x0, 0x3938700}, &(0x7f00000063c0)=0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000006400)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000006440)={'vcan0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000006540)={&(0x7f0000006480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000006500)={&(0x7f00000064c0)=@gettaction={0x14, 0x32, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) syz_io_uring_setup(0x37a, &(0x7f0000006580)={0x0, 0x62ac, 0x400, 0x1, 0x3d, 0x0, r5}, &(0x7f0000006600), &(0x7f0000006640)) (async) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000006680)=0x0) tkill(r12, 0x1f) (async) recvmmsg$unix(r5, &(0x7f0000007000)=[{{&(0x7f00000066c0)=@abs, 0x6e, &(0x7f0000006900)=[{&(0x7f0000006740)=""/221, 0xdd}, {&(0x7f0000006840)=""/113, 0x71}, {&(0x7f00000068c0)=""/32, 0x20}], 0x3, &(0x7f0000006940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000069c0), 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006a40)=""/219, 0xdb}, {&(0x7f0000006b40)=""/132, 0x84}, {&(0x7f0000006c00)=""/38, 0x26}, {&(0x7f0000006c40)=""/175, 0xaf}], 0x4, &(0x7f0000006d40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006d80), 0x6e, &(0x7f0000006e40)=[{&(0x7f0000006e00)=""/54, 0x36}], 0x1, &(0x7f0000006e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x170}}], 0x3, 0x2000, &(0x7f00000070c0)={0x0, 0x3938700}) futimesat(r13, &(0x7f0000007100)='./file0\x00', &(0x7f0000007140)={{0x77359400}}) 631.662118ms ago: executing program 0 (id=4759): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 626.302548ms ago: executing program 5 (id=4760): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 514.942378ms ago: executing program 2 (id=4761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone3(&(0x7f0000001200)={0x280, &(0x7f00000003c0), &(0x7f0000000a80), &(0x7f0000000ac0), {0x11}, &(0x7f0000001080)=""/50, 0x32, &(0x7f00000010c0)=""/225, &(0x7f00000011c0)=[0x0], 0x1}, 0x58) 503.961278ms ago: executing program 0 (id=4762): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3}, 0x0, 0x0) 493.718499ms ago: executing program 5 (id=4763): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) close_range(r0, 0xffffffffffffffff, 0x0) 435.374284ms ago: executing program 1 (id=4764): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b002200"/15, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050003"], 0x48}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x0) 434.952814ms ago: executing program 2 (id=4765): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x80000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) (fail_nth: 1) 361.72785ms ago: executing program 3 (id=4766): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0xfc, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0xd}]}, 0x10) io_uring_setup(0x77bb, &(0x7f00000000c0)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000180)) 190.957084ms ago: executing program 2 (id=4767): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1}, {0x4}, {0x6, 0x40, 0x0, 0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x12200, 0x80000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) 0s ago: executing program 1 (id=4768): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x40, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRES8=0x0], &(0x7f0000000000)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) kernel console output (not intermixed with test programs): 00000000000012b [ 519.519967][T16379] RAX: ffffffffffffffda RBX: 00007f10bdd65fa0 RCX: 00007f10bdb3eb69 [ 519.519978][T16379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 519.520020][T16379] RBP: 00007f10bc1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 519.520033][T16379] R10: 0000000000002060 R11: 0000000000000246 R12: 0000000000000001 [ 519.520047][T16379] R13: 0000000000000000 R14: 00007f10bdd65fa0 R15: 00007ffd4248e7a8 [ 519.520065][T16379] [ 519.776853][T16378] loop1: detected capacity change from 0 to 8192 [ 519.792848][T16386] loop0: detected capacity change from 0 to 512 [ 519.800735][T16378] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.801498][T16386] journal_path: Lookup failure for './file0/../file0' [ 519.818698][T16386] EXT4-fs: error: could not find journal device path [ 519.851234][T16387] netlink: 420 bytes leftover after parsing attributes in process `syz.5.4093'. [ 519.930140][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4097'. [ 519.959013][T16396] loop2: detected capacity change from 0 to 764 [ 519.976021][T16396] rock: directory entry would overflow storage [ 519.982201][T16396] rock: sig=0x4654, size=5, remaining=4 [ 520.006096][T16396] rock: directory entry would overflow storage [ 520.012339][T16396] rock: sig=0x4f50, size=4, remaining=3 [ 520.017994][T16396] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 520.086680][T16398] loop2: detected capacity change from 0 to 1024 [ 520.107964][T16398] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4098: Failed to acquire dquot type 0 [ 520.126354][T16398] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 520.141105][T16398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4098: corrupted inode contents [ 520.165622][T16398] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.4098: mark_inode_dirty error [ 520.256353][T16398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4098: corrupted inode contents [ 520.286596][T16398] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.4098: mark_inode_dirty error [ 520.315985][T16398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4098: corrupted inode contents [ 520.329784][T16398] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 520.338557][T16398] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4098: corrupted inode contents [ 520.352906][T16398] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.4098: mark_inode_dirty error [ 520.364995][T16398] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 520.374305][T16398] EXT4-fs (loop2): 1 truncate cleaned up [ 520.403873][T16400] SELinux: ebitmap: truncated map [ 520.415491][T16400] SELinux: failed to load policy [ 520.555154][T16418] loop0: detected capacity change from 0 to 8192 [ 520.566433][ T29] kauditd_printk_skb: 712 callbacks suppressed [ 520.566446][ T29] audit: type=1326 audit(1754171920.349:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.601151][T16418] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 520.609095][T16418] FAT-fs (loop0): Filesystem has been set read-only [ 520.619962][ T29] audit: type=1326 audit(1754171920.389:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.644507][ T29] audit: type=1326 audit(1754171920.389:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.668198][ T29] audit: type=1326 audit(1754171920.389:11309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.692780][ T29] audit: type=1326 audit(1754171920.389:11310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.717168][ T29] audit: type=1326 audit(1754171920.389:11311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.740789][ T29] audit: type=1326 audit(1754171920.389:11312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.765286][ T29] audit: type=1326 audit(1754171920.389:11313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.788983][ T29] audit: type=1326 audit(1754171920.389:11314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.813401][ T29] audit: type=1326 audit(1754171920.389:11315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16424 comm="syz.2.4107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 520.863547][T16434] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 520.931220][T16437] loop1: detected capacity change from 0 to 1024 [ 520.940272][T16437] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4112: Failed to acquire dquot type 0 [ 520.954049][T16437] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 520.972844][T16437] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.4112: corrupted inode contents [ 520.990806][T16437] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.4112: mark_inode_dirty error [ 521.015470][T16437] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.4112: corrupted inode contents [ 521.077466][T16442] loop2: detected capacity change from 0 to 1024 [ 521.154084][T16437] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.4112: mark_inode_dirty error [ 521.259057][T16437] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.4112: corrupted inode contents [ 521.379777][T16437] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 521.458439][T16437] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.4112: corrupted inode contents [ 521.570514][T16437] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.4112: mark_inode_dirty error [ 521.826852][T16437] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 521.857129][T16462] loop3: detected capacity change from 0 to 1024 [ 521.866808][T16437] EXT4-fs (loop1): 1 truncate cleaned up [ 521.884215][T16462] EXT4-fs: inline encryption not supported [ 521.900933][T16462] ext4: Unknown parameter 'appraise_type' [ 521.966393][T16471] tc_dump_action: action bad kind [ 522.050412][T16481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4124'. [ 522.061330][T16482] FAULT_INJECTION: forcing a failure. [ 522.061330][T16482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.074470][T16482] CPU: 0 UID: 0 PID: 16482 Comm: +}[@ Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 522.074495][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.074509][T16482] Call Trace: [ 522.074516][T16482] [ 522.074530][T16482] __dump_stack+0x1d/0x30 [ 522.074547][T16482] dump_stack_lvl+0xe8/0x140 [ 522.074563][T16482] dump_stack+0x15/0x1b [ 522.074576][T16482] should_fail_ex+0x265/0x280 [ 522.074609][T16482] should_fail+0xb/0x20 [ 522.074670][T16482] should_fail_usercopy+0x1a/0x20 [ 522.074691][T16482] _copy_from_iter+0xcf/0xe40 [ 522.074768][T16482] ? __build_skb_around+0x1a0/0x200 [ 522.074803][T16482] ? __alloc_skb+0x223/0x320 [ 522.074832][T16482] netlink_sendmsg+0x471/0x6b0 [ 522.074864][T16482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.074892][T16482] __sock_sendmsg+0x142/0x180 [ 522.074995][T16482] ____sys_sendmsg+0x31e/0x4e0 [ 522.075105][T16482] ___sys_sendmsg+0x17b/0x1d0 [ 522.075164][T16482] __x64_sys_sendmsg+0xd4/0x160 [ 522.075252][T16482] x64_sys_call+0x191e/0x2ff0 [ 522.075275][T16482] do_syscall_64+0xd2/0x200 [ 522.075326][T16482] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 522.075357][T16482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 522.075377][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.075445][T16482] RIP: 0033:0x7f10bdb3eb69 [ 522.075464][T16482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.075487][T16482] RSP: 002b:00007f10bc1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.075577][T16482] RAX: ffffffffffffffda RBX: 00007f10bdd65fa0 RCX: 00007f10bdb3eb69 [ 522.075589][T16482] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 522.075708][T16482] RBP: 00007f10bc1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 522.075720][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.075731][T16482] R13: 0000000000000000 R14: 00007f10bdd65fa0 R15: 00007ffd4248e7a8 [ 522.075751][T16482] [ 522.298362][T16481] loop5: detected capacity change from 0 to 764 [ 522.370913][T16481] rock: directory entry would overflow storage [ 522.377164][T16481] rock: sig=0x4654, size=5, remaining=4 [ 522.426009][T16481] rock: directory entry would overflow storage [ 522.432215][T16481] rock: sig=0x4f50, size=4, remaining=3 [ 522.437791][T16481] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 522.510218][T16496] loop3: detected capacity change from 0 to 2048 [ 522.558147][T16500] loop5: detected capacity change from 0 to 2048 [ 522.565895][T16496] netlink: 'syz.3.4130': attribute type 4 has an invalid length. [ 522.573831][T16505] loop1: detected capacity change from 0 to 512 [ 522.581288][T16505] EXT4-fs: Ignoring removed mblk_io_submit option [ 522.592083][T16505] EXT4-fs (loop1): failed to initialize system zone (-117) [ 522.592527][T16496] netlink: 'syz.3.4130': attribute type 4 has an invalid length. [ 522.607833][T16505] EXT4-fs (loop1): mount failed [ 522.609452][T16500] loop5: p1 < > p4 [ 522.617624][T16500] loop5: p4 size 8388608 extends beyond EOD, truncated [ 522.693471][T16509] tc_dump_action: action bad kind [ 522.751281][T16516] netlink: 'syz.5.4133': attribute type 39 has an invalid length. [ 523.035384][T16526] siw: device registration error -23 [ 523.344853][T16534] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4141'. [ 523.611505][T16541] loop3: detected capacity change from 0 to 512 [ 523.619494][T16541] EXT4-fs: Ignoring removed bh option [ 523.647463][T16541] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 523.656598][T16541] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 523.726321][T16541] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 523.740713][T16546] loop0: detected capacity change from 0 to 512 [ 523.749375][T16546] journal_path: Lookup failure for './file0/../file0' [ 523.756313][T16546] EXT4-fs: error: could not find journal device path [ 523.766380][T16541] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 523.776603][T16543] tc_dump_action: action bad kind [ 523.795149][T16541] EXT4-fs mount: 28 callbacks suppressed [ 523.795162][T16541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.876687][T16550] loop2: detected capacity change from 0 to 8192 [ 523.889032][T16550] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 523.897051][T16550] FAT-fs (loop2): Filesystem has been set read-only [ 523.968219][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.992198][T16558] loop3: detected capacity change from 0 to 512 [ 523.999170][T16558] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 524.011292][T16558] EXT4-fs (loop3): 1 truncate cleaned up [ 524.017886][T16558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.121831][T16561] loop0: detected capacity change from 0 to 1024 [ 524.128752][T16561] ext4: Unknown parameter 'uid<00000000000000000000' [ 524.165191][T16565] loop0: detected capacity change from 0 to 512 [ 524.176424][T16565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 524.191166][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.218258][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.419917][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 524.422890][T16582] tc_dump_action: action bad kind [ 524.428959][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'. [ 524.442967][T16578] netlink: 'syz.0.4156': attribute type 20 has an invalid length. [ 524.457382][T16284] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.572915][T16578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4156'. [ 524.581834][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'. [ 524.591472][T16578] netlink: 'syz.0.4156': attribute type 20 has an invalid length. [ 524.811023][T16284] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.819400][T16284] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.827633][T16284] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.889092][T16599] loop0: detected capacity change from 0 to 764 [ 524.897707][T16599] rock: directory entry would overflow storage [ 524.903886][T16599] rock: sig=0x4654, size=5, remaining=4 [ 524.922690][T16602] loop5: detected capacity change from 0 to 1024 [ 524.930513][T16602] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 524.947188][T16602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.346098][T16622] tc_dump_action: action bad kind [ 525.465788][T16632] loop2: detected capacity change from 0 to 1024 [ 525.486712][T16632] EXT4-fs: inline encryption not supported [ 525.496749][T16632] ext4: Unknown parameter 'appraise_type' [ 525.536575][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 525.545613][T16638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 525.579880][T16640] loop3: detected capacity change from 0 to 1024 [ 525.609721][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 525.609753][ T29] audit: type=1326 audit(1754171925.399:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.648586][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 525.651976][T16640] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 525.658901][T16644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16644 comm=syz.2.4178 [ 525.666604][T16640] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 525.666625][T16640] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4176: Failed to acquire dquot type 0 [ 525.700153][T16640] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 525.716020][T16640] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.4176: corrupted inode contents [ 525.729714][ T29] audit: type=1326 audit(1754171925.439:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.753325][ T29] audit: type=1326 audit(1754171925.439:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.765771][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 525.777742][ T29] audit: type=1326 audit(1754171925.439:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.787402][T16652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4179'. [ 525.810087][ T29] audit: type=1326 audit(1754171925.439:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.837840][T16313] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.842632][ T29] audit: type=1326 audit(1754171925.439:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.850750][T16313] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.874058][ T29] audit: type=1326 audit(1754171925.439:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.874090][ T29] audit: type=1326 audit(1754171925.439:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16643 comm="syz.2.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 525.889988][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4178'. [ 525.930661][T16640] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.4176: mark_inode_dirty error [ 525.961614][T16313] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.963517][T16648] loop1: detected capacity change from 0 to 764 [ 525.971807][T16313] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.985559][T16640] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.4176: corrupted inode contents [ 525.999047][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.008485][T16640] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.4176: mark_inode_dirty error [ 526.021353][T16648] rock: directory entry would overflow storage [ 526.027569][T16648] rock: sig=0x4654, size=5, remaining=4 [ 526.028160][T16640] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.4176: corrupted inode contents [ 526.051029][T16656] loop0: detected capacity change from 0 to 764 [ 526.058392][T16640] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 526.068368][T16648] rock: directory entry would overflow storage [ 526.074638][T16648] rock: sig=0x4f50, size=4, remaining=3 [ 526.080230][T16648] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 526.085578][T16640] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.4176: corrupted inode contents [ 526.092146][T16656] rock: directory entry would overflow storage [ 526.105746][T16656] rock: sig=0x4654, size=5, remaining=4 [ 526.111931][T16640] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.4176: mark_inode_dirty error [ 526.123863][T16656] rock: directory entry would overflow storage [ 526.126168][T16658] tc_dump_action: action bad kind [ 526.130101][T16656] rock: sig=0x4f50, size=4, remaining=3 [ 526.140704][T16656] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 526.158735][T16665] loop5: detected capacity change from 0 to 512 [ 526.169149][T16665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 526.174804][T16640] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 526.190593][T16640] EXT4-fs (loop3): 1 truncate cleaned up [ 526.205010][T16640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.205444][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.246292][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.271014][T16672] loop2: detected capacity change from 0 to 512 [ 526.280701][T16672] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 526.298621][T16672] loop2: detected capacity change from 0 to 512 [ 526.306200][T16672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 526.336999][T16672] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 526.345572][T16672] System zones: 0-2, 18-18, 34-34 [ 526.357197][T16672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.370531][T16672] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.373210][T16684] loop3: detected capacity change from 0 to 8192 [ 526.399887][T16684] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 526.408475][T16684] FAT-fs (loop3): Filesystem has been set read-only [ 526.468870][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.740810][T16699] SELinux: ebitmap: truncated map [ 526.758320][T16699] SELinux: failed to load policy [ 526.858120][T16706] loop5: detected capacity change from 0 to 2048 [ 526.914934][T16706] loop5: p1 < > p4 [ 526.919259][T16706] loop5: p4 size 8388608 extends beyond EOD, truncated [ 526.928934][T16711] loop3: detected capacity change from 0 to 2048 [ 526.985094][T16711] loop3: p1 < > p4 [ 526.989672][T16711] loop3: p4 size 8388608 extends beyond EOD, truncated [ 527.040060][T16713] netlink: 'syz.5.4200': attribute type 39 has an invalid length. [ 527.046580][T16694] SELinux: ebitmap: truncated map [ 527.061452][T16694] SELinux: failed to load policy [ 527.109225][T16719] netlink: 'syz.3.4202': attribute type 39 has an invalid length. [ 527.213042][T16730] loop2: detected capacity change from 0 to 512 [ 527.230146][T16730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 527.241658][T16730] EXT4-fs (loop2): 1 truncate cleaned up [ 527.248177][T16730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.316890][T16739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16739 comm=syz.1.4213 [ 527.380818][T16742] loop1: detected capacity change from 0 to 1024 [ 527.402929][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.405707][T16742] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 527.422871][T16742] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 527.434818][T16742] JBD2: no valid journal superblock found [ 527.440545][T16742] EXT4-fs (loop1): Could not load journal inode [ 527.546692][T16765] FAULT_INJECTION: forcing a failure. [ 527.546692][T16765] name failslab, interval 1, probability 0, space 0, times 0 [ 527.559572][T16765] CPU: 0 UID: 0 PID: 16765 Comm: syz.3.4222 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 527.559603][T16765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.559641][T16765] Call Trace: [ 527.559646][T16765] [ 527.559652][T16765] __dump_stack+0x1d/0x30 [ 527.559670][T16765] dump_stack_lvl+0xe8/0x140 [ 527.559687][T16765] dump_stack+0x15/0x1b [ 527.559779][T16765] should_fail_ex+0x265/0x280 [ 527.559806][T16765] should_failslab+0x8c/0xb0 [ 527.559827][T16765] kmem_cache_alloc_node_noprof+0x57/0x320 [ 527.559945][T16765] ? __alloc_skb+0x101/0x320 [ 527.559970][T16765] __alloc_skb+0x101/0x320 [ 527.560074][T16765] netlink_alloc_large_skb+0xba/0xf0 [ 527.560104][T16765] netlink_sendmsg+0x3cf/0x6b0 [ 527.560162][T16765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 527.560192][T16765] __sock_sendmsg+0x142/0x180 [ 527.560211][T16765] ____sys_sendmsg+0x31e/0x4e0 [ 527.560292][T16765] ___sys_sendmsg+0x17b/0x1d0 [ 527.560338][T16765] __x64_sys_sendmsg+0xd4/0x160 [ 527.560428][T16765] x64_sys_call+0x191e/0x2ff0 [ 527.560446][T16765] do_syscall_64+0xd2/0x200 [ 527.560469][T16765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 527.560563][T16765] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 527.560581][T16765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.560604][T16765] RIP: 0033:0x7f5a25deeb69 [ 527.560620][T16765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.560639][T16765] RSP: 002b:00007f5a2444f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.560702][T16765] RAX: ffffffffffffffda RBX: 00007f5a26015fa0 RCX: 00007f5a25deeb69 [ 527.560715][T16765] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 527.560747][T16765] RBP: 00007f5a2444f090 R08: 0000000000000000 R09: 0000000000000000 [ 527.560761][T16765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.560774][T16765] R13: 0000000000000000 R14: 00007f5a26015fa0 R15: 00007ffe403131a8 [ 527.560834][T16765] [ 527.833315][T16777] loop2: detected capacity change from 0 to 764 [ 527.850262][T16776] loop1: detected capacity change from 0 to 1024 [ 527.857189][T16776] EXT4-fs: inline encryption not supported [ 527.863071][T16776] ext4: Unknown parameter 'appraise_type' [ 527.925018][T16777] rock: directory entry would overflow storage [ 527.931393][T16777] rock: sig=0x4654, size=5, remaining=4 [ 528.036296][T16789] loop5: detected capacity change from 0 to 1024 [ 528.112983][T16789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.436686][T16812] loop1: detected capacity change from 0 to 512 [ 528.462164][T16812] journal_path: Lookup failure for './file0/../file0' [ 528.469156][T16812] EXT4-fs: error: could not find journal device path [ 528.960990][T16820] loop2: detected capacity change from 0 to 8192 [ 528.978140][T16820] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 528.986388][T16820] FAT-fs (loop2): Filesystem has been set read-only [ 529.433184][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.641675][T16834] __nla_validate_parse: 14 callbacks suppressed [ 529.641694][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4245'. [ 529.656978][T16834] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4245'. [ 529.777510][T16839] random: crng reseeded on system resumption [ 529.788042][T16839] Restarting kernel threads ... [ 529.793144][T16839] Done restarting kernel threads. [ 530.033090][T16843] loop3: detected capacity change from 0 to 8192 [ 530.045012][T16843] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 530.052926][T16843] FAT-fs (loop3): Filesystem has been set read-only [ 530.066650][T16845] FAULT_INJECTION: forcing a failure. [ 530.066650][T16845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.079816][T16845] CPU: 1 UID: 0 PID: 16845 Comm: syz.1.4251 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 530.079887][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.079903][T16845] Call Trace: [ 530.079912][T16845] [ 530.079921][T16845] __dump_stack+0x1d/0x30 [ 530.079944][T16845] dump_stack_lvl+0xe8/0x140 [ 530.079964][T16845] dump_stack+0x15/0x1b [ 530.080001][T16845] should_fail_ex+0x265/0x280 [ 530.080066][T16845] should_fail+0xb/0x20 [ 530.080236][T16845] should_fail_usercopy+0x1a/0x20 [ 530.080259][T16845] _copy_from_user+0x1c/0xb0 [ 530.080300][T16845] __sys_bpf+0x178/0x7b0 [ 530.080344][T16845] __x64_sys_bpf+0x41/0x50 [ 530.080386][T16845] x64_sys_call+0x2aea/0x2ff0 [ 530.080406][T16845] do_syscall_64+0xd2/0x200 [ 530.080494][T16845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 530.080535][T16845] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 530.080559][T16845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.080579][T16845] RIP: 0033:0x7eff3fdeeb69 [ 530.080594][T16845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.080671][T16845] RSP: 002b:00007eff3e457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 530.080688][T16845] RAX: ffffffffffffffda RBX: 00007eff40015fa0 RCX: 00007eff3fdeeb69 [ 530.080702][T16845] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 530.080716][T16845] RBP: 00007eff3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 530.080763][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.080775][T16845] R13: 0000000000000000 R14: 00007eff40015fa0 R15: 00007ffec0a58258 [ 530.080797][T16845] [ 530.539581][T16852] loop1: detected capacity change from 0 to 1024 [ 530.712983][T16852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.201339][T16851] loop3: detected capacity change from 0 to 8192 [ 531.251194][T16851] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 531.259086][T16851] FAT-fs (loop3): Filesystem has been set read-only [ 531.749424][T16866] loop5: detected capacity change from 0 to 1024 [ 531.909280][T16866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.941367][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 531.941379][ T29] audit: type=1400 audit(1754171931.719:12072): avc: denied { execute } for pid=16864 comm="syz.0.4257" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=53432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 531.972915][ T29] audit: type=1326 audit(1754171931.729:12073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 531.997070][ T29] audit: type=1326 audit(1754171931.729:12074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.020679][ T29] audit: type=1326 audit(1754171931.729:12075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.044968][ T29] audit: type=1326 audit(1754171931.729:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.068555][ T29] audit: type=1326 audit(1754171931.729:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.092666][ T29] audit: type=1326 audit(1754171931.729:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.116751][ T29] audit: type=1326 audit(1754171931.729:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.140340][ T29] audit: type=1326 audit(1754171931.729:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.164551][ T29] audit: type=1326 audit(1754171931.729:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16864 comm="syz.0.4257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 532.384709][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.585201][T16878] loop3: detected capacity change from 0 to 8192 [ 532.711988][T16878] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 532.720448][T16878] FAT-fs (loop3): Filesystem has been set read-only [ 532.804597][T16885] loop1: detected capacity change from 0 to 512 [ 532.812977][T16885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.903389][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.939940][T16888] loop1: detected capacity change from 0 to 1024 [ 532.951151][T16888] EXT4-fs: inline encryption not supported [ 532.957037][T16888] ext4: Unknown parameter 'appraise_type' [ 533.037972][T16893] loop3: detected capacity change from 0 to 512 [ 533.057169][T16893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 533.081062][T16893] EXT4-fs (loop3): 1 truncate cleaned up [ 533.097290][T16893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.222036][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.328935][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.344638][T16910] netlink: 270 bytes leftover after parsing attributes in process `syz.3.4271'. [ 533.359935][T16911] loop1: detected capacity change from 0 to 512 [ 533.377915][T16911] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 533.404633][T16911] EXT4-fs (loop1): 1 truncate cleaned up [ 533.410672][T16911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.432430][T16918] loop5: detected capacity change from 0 to 1024 [ 533.439604][T16918] EXT4-fs: inline encryption not supported [ 533.445469][T16918] ext4: Unknown parameter 'appraise_type' [ 533.470366][T16923] loop2: detected capacity change from 0 to 256 [ 533.502354][T16925] loop5: detected capacity change from 0 to 764 [ 533.510048][T16925] rock: directory entry would overflow storage [ 533.516904][T16925] rock: sig=0x4654, size=5, remaining=4 [ 533.545457][T16926] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4278'. [ 533.680607][T16932] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 533.700449][T16934] loop2: detected capacity change from 0 to 1024 [ 533.725796][T16934] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4282: Failed to acquire dquot type 0 [ 533.755313][T16934] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 533.760430][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.794791][T16934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4282: corrupted inode contents [ 533.807364][T16934] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.4282: mark_inode_dirty error [ 533.833824][T16934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4282: corrupted inode contents [ 533.850098][T16941] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4283'. [ 533.854477][T16934] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.4282: mark_inode_dirty error [ 533.872206][T16934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4282: corrupted inode contents [ 533.886322][T16943] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4284'. [ 533.894820][T16934] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 533.904303][T16934] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.4282: corrupted inode contents [ 533.935074][T16934] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.4282: mark_inode_dirty error [ 533.954730][T16934] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 533.969322][T16934] EXT4-fs (loop2): 1 truncate cleaned up [ 533.984766][T16934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.032775][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.047368][T16949] loop1: detected capacity change from 0 to 512 [ 534.065807][T16949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 534.131812][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.148619][T16955] loop2: detected capacity change from 0 to 1024 [ 534.153299][T16958] loop1: detected capacity change from 0 to 764 [ 534.175775][T16955] EXT4-fs: inline encryption not supported [ 534.181805][T16955] ext4: Unknown parameter 'appraise_type' [ 534.189072][T16958] rock: directory entry would overflow storage [ 534.195283][T16958] rock: sig=0x4654, size=5, remaining=4 [ 534.310603][T16966] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4293'. [ 534.323273][T16964] loop2: detected capacity change from 0 to 1024 [ 534.330917][T16964] EXT4-fs: inline encryption not supported [ 534.344651][T16964] ext4: Unknown parameter 'appraise_type' [ 534.393631][T16976] loop3: detected capacity change from 0 to 512 [ 534.405768][T16976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 534.477890][T16976] EXT4-fs (loop3): 1 truncate cleaned up [ 534.486507][T16976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.596984][T16988] loop2: detected capacity change from 0 to 1024 [ 534.608477][T16991] loop1: detected capacity change from 0 to 512 [ 534.615346][T16988] EXT4-fs: inline encryption not supported [ 534.621293][T16988] ext4: Unknown parameter 'appraise_type' [ 534.647074][T16991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 534.678043][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.688529][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.758959][T17004] loop1: detected capacity change from 0 to 1024 [ 534.771768][T17009] ref_ctr_offset mismatch. inode: 0x7cb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 534.784117][T17004] EXT4-fs: inline encryption not supported [ 534.791585][T17004] ext4: Unknown parameter 'appraise_type' [ 534.800429][T17011] SELinux: ebitmap: truncated map [ 534.806824][T17011] SELinux: failed to load policy [ 534.861134][T17024] loop3: detected capacity change from 0 to 512 [ 534.863308][T17020] loop1: detected capacity change from 0 to 1024 [ 534.869572][T17024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 534.875457][T17020] EXT4-fs: inline encryption not supported [ 534.894664][T17020] ext4: Unknown parameter 'appraise_type' [ 534.915956][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.992203][T17033] loop3: detected capacity change from 0 to 2048 [ 535.058195][T17039] loop2: detected capacity change from 0 to 512 [ 535.066384][T17039] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 535.077516][T17039] EXT4-fs (loop2): 1 truncate cleaned up [ 535.079449][T17037] netlink: 420 bytes leftover after parsing attributes in process `syz.5.4321'. [ 535.084924][T17039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.186237][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.217187][T17043] loop3: detected capacity change from 0 to 1024 [ 535.225511][T17043] EXT4-fs: inline encryption not supported [ 535.231542][T17043] ext4: Unknown parameter 'appraise_type' [ 535.289865][T17055] team0: Port device gre1 added [ 535.446867][T17064] loop2: detected capacity change from 0 to 512 [ 535.454652][T17064] journal_path: Lookup failure for './file0/../file0' [ 535.461445][T17064] EXT4-fs: error: could not find journal device path [ 535.513933][T17068] loop3: detected capacity change from 0 to 1024 [ 535.590515][T17072] loop2: detected capacity change from 0 to 164 [ 535.687543][T17068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.069047][T17077] loop5: detected capacity change from 0 to 8192 [ 536.512993][T17081] loop5: detected capacity change from 0 to 1024 [ 536.536773][T17081] EXT4-fs: inline encryption not supported [ 536.553387][T17088] loop1: detected capacity change from 0 to 512 [ 536.562879][T17081] ext4: Unknown parameter 'appraise_type' [ 536.573408][T17088] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 536.616073][T17088] EXT4-fs (loop1): 1 truncate cleaned up [ 536.622169][T17088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.685223][T17088] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.737596][T17103] loop2: detected capacity change from 0 to 512 [ 536.757295][T17103] journal_path: Lookup failure for './file0/../file0' [ 536.764067][T17103] EXT4-fs: error: could not find journal device path [ 536.902866][T17111] loop5: detected capacity change from 0 to 8192 [ 536.969531][T17115] loop2: detected capacity change from 0 to 2048 [ 537.044922][T17115] loop2: p1 < > p4 [ 537.074789][T17115] loop2: p4 size 8388608 extends beyond EOD, truncated [ 537.202975][T17122] netlink: 'syz.2.4349': attribute type 39 has an invalid length. [ 537.334752][T17124] tc_dump_action: action bad kind [ 537.360183][T17127] FAULT_INJECTION: forcing a failure. [ 537.360183][T17127] name failslab, interval 1, probability 0, space 0, times 0 [ 537.372907][T17127] CPU: 1 UID: 0 PID: 17127 Comm: syz.5.4353 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 537.372983][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.372994][T17127] Call Trace: [ 537.373055][T17127] [ 537.373063][T17127] __dump_stack+0x1d/0x30 [ 537.373088][T17127] dump_stack_lvl+0xe8/0x140 [ 537.373111][T17127] dump_stack+0x15/0x1b [ 537.373131][T17127] should_fail_ex+0x265/0x280 [ 537.373210][T17127] should_failslab+0x8c/0xb0 [ 537.373233][T17127] kmem_cache_alloc_node_noprof+0x57/0x320 [ 537.373314][T17127] ? __alloc_skb+0x101/0x320 [ 537.373352][T17127] ? __rtnl_unlock+0x95/0xb0 [ 537.373378][T17127] __alloc_skb+0x101/0x320 [ 537.373428][T17127] netlink_ack+0xfd/0x500 [ 537.373471][T17127] netlink_rcv_skb+0x192/0x220 [ 537.373539][T17127] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 537.373598][T17127] rtnetlink_rcv+0x1c/0x30 [ 537.373639][T17127] netlink_unicast+0x5c0/0x690 [ 537.373746][T17127] netlink_sendmsg+0x58b/0x6b0 [ 537.373792][T17127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 537.373893][T17127] __sock_sendmsg+0x142/0x180 [ 537.373916][T17127] ____sys_sendmsg+0x31e/0x4e0 [ 537.374016][T17127] ___sys_sendmsg+0x17b/0x1d0 [ 537.374079][T17127] __x64_sys_sendmsg+0xd4/0x160 [ 537.374220][T17127] x64_sys_call+0x191e/0x2ff0 [ 537.374329][T17127] do_syscall_64+0xd2/0x200 [ 537.374356][T17127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 537.374386][T17127] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 537.374404][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.374423][T17127] RIP: 0033:0x7efc3714eb69 [ 537.374465][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.374487][T17127] RSP: 002b:00007efc357af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 537.374509][T17127] RAX: ffffffffffffffda RBX: 00007efc37375fa0 RCX: 00007efc3714eb69 [ 537.374524][T17127] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 537.374539][T17127] RBP: 00007efc357af090 R08: 0000000000000000 R09: 0000000000000000 [ 537.374553][T17127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.374632][T17127] R13: 0000000000000000 R14: 00007efc37375fa0 R15: 00007ffff3bf0ac8 [ 537.374655][T17127] [ 537.375437][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.629756][ T29] kauditd_printk_skb: 972 callbacks suppressed [ 537.629784][ T29] audit: type=1400 audit(1754171937.419:13052): avc: denied { unmount } for pid=11486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 537.680105][ T29] audit: type=1326 audit(1754171937.449:13053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.703936][ T29] audit: type=1326 audit(1754171937.449:13054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.727699][ T29] audit: type=1326 audit(1754171937.449:13055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.746028][T17141] loop1: detected capacity change from 0 to 2048 [ 537.751521][ T29] audit: type=1326 audit(1754171937.449:13056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.781583][ T29] audit: type=1326 audit(1754171937.449:13057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.805417][ T29] audit: type=1326 audit(1754171937.449:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.829103][ T29] audit: type=1326 audit(1754171937.449:13059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.841274][T17149] loop3: detected capacity change from 0 to 512 [ 537.852893][ T29] audit: type=1326 audit(1754171937.449:13060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.852986][ T29] audit: type=1326 audit(1754171937.449:13061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17132 comm="syz.3.4354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 537.893860][T17152] loop0: detected capacity change from 0 to 512 [ 537.911309][T17149] journal_path: Lookup failure for './file0/../file0' [ 537.918270][T17152] journal_path: Lookup failure for './file0/../file0' [ 537.920535][T17149] EXT4-fs: error: could not find journal device path [ 537.927281][T17152] EXT4-fs: error: could not find journal device path [ 537.975931][T17141] loop1: p1 < > p4 [ 537.980326][T17141] loop1: p4 size 8388608 extends beyond EOD, truncated [ 538.008457][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4367'. [ 538.103139][T17163] netlink: 'syz.1.4360': attribute type 39 has an invalid length. [ 538.174959][T17165] loop2: detected capacity change from 0 to 1024 [ 538.254861][T17167] loop3: detected capacity change from 0 to 2048 [ 538.272411][T17165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.315839][T17167] loop3: p1 < > p4 [ 538.335196][T17167] loop3: p4 size 8388608 extends beyond EOD, truncated [ 538.436635][T16257] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.513023][T17173] netlink: 'syz.3.4369': attribute type 39 has an invalid length. [ 538.588484][T16257] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.758565][T16257] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.962117][T16257] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.988231][T17179] loop1: detected capacity change from 0 to 8192 [ 539.007305][T17179] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 539.015380][T17179] FAT-fs (loop1): Filesystem has been set read-only [ 539.074795][T16257] bridge_slave_1: left allmulticast mode [ 539.080714][T16257] bridge_slave_1: left promiscuous mode [ 539.086696][T16257] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.097442][T16257] bridge_slave_0: left allmulticast mode [ 539.103254][T16257] bridge_slave_0: left promiscuous mode [ 539.109164][T16257] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.181387][T16257] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 539.190225][T16257] geneve1 (unregistering): left allmulticast mode [ 539.205075][T16257] bridge0 (unregistering): left promiscuous mode [ 539.258424][T16257] bond0 (unregistering): left promiscuous mode [ 539.264818][T16257] bond_slave_0: left promiscuous mode [ 539.270410][T16257] bond_slave_1: left promiscuous mode [ 539.281572][T16257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.291767][T16257] bond_slave_0: left allmulticast mode [ 539.317413][T16257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 539.338227][T16257] bond_slave_1: left allmulticast mode [ 539.351450][T16257] bond0 (unregistering): Released all slaves [ 539.412742][T16257] hsr_slave_0: left promiscuous mode [ 539.426493][T16257] hsr_slave_1: left promiscuous mode [ 539.438913][T16257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.446366][T16257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.464664][T16257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.472096][T16257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.505071][T16257] veth1_macvtap: left promiscuous mode [ 539.520716][T16257] veth0_macvtap: left promiscuous mode [ 539.532433][T16257] veth1_vlan: left promiscuous mode [ 539.546009][T16257] veth0_vlan: left promiscuous mode [ 539.617819][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.668639][T16257] team0 (unregistering): Port device team_slave_1 removed [ 539.683335][T16257] team0 (unregistering): Port device team_slave_0 removed [ 539.752690][T17204] loop3: detected capacity change from 0 to 1024 [ 539.804860][T17204] EXT4-fs: Ignoring removed orlov option [ 539.839214][T17204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.858754][T17213] loop2: detected capacity change from 0 to 512 [ 539.892745][T17205] netlink: 420 bytes leftover after parsing attributes in process `syz.5.4383'. [ 539.894749][T17213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=684ec018, mo2=0002] [ 539.910049][T17213] System zones: 0-2, 18-18, 34-34 [ 539.915423][T17213] EXT4-fs (loop2): orphan cleanup on readonly fs [ 539.926642][T17213] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.4388: bad orphan inode 13 [ 539.934225][T17196] SELinux: ebitmap: truncated map [ 539.942051][T17196] SELinux: failed to load policy [ 539.964471][T17213] ext4_test_bit(bit=12, block=18) = 1 [ 539.969255][T17217] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 539.969867][T17213] is_bad_inode(inode)=0 [ 539.982326][T17213] NEXT_ORPHAN(inode)=2130706432 [ 539.987366][T17213] max_ino=32 [ 539.990643][T17213] i_nlink=1 [ 540.017251][T17222] team_slave_0: entered promiscuous mode [ 540.023022][T17222] team_slave_1: entered promiscuous mode [ 540.023282][T17221] loop1: detected capacity change from 0 to 1024 [ 540.037292][T17222] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 540.054962][T17213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.071562][T17222] team_slave_0: left promiscuous mode [ 540.076999][T17222] team_slave_1: left promiscuous mode [ 540.083885][T17221] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 540.184474][T17227] loop5: detected capacity change from 0 to 512 [ 540.193630][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.221958][T17231] loop2: detected capacity change from 0 to 512 [ 540.239817][T17227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.266094][T17231] EXT4-fs: Ignoring removed mblk_io_submit option [ 540.287623][T17231] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 540.297538][T17227] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.324682][T17231] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 540.332887][T17231] EXT4-fs (loop2): orphan cleanup on readonly fs [ 540.339832][T17231] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4393: Invalid block bitmap block 0 in block_group 0 [ 540.371649][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.380649][T17231] EXT4-fs (loop2): Remounting filesystem read-only [ 540.387599][T17231] EXT4-fs (loop2): 1 orphan inode deleted [ 540.409089][T17242] lo speed is unknown, defaulting to 1000 [ 540.437751][T17231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.461390][T17238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4394'. [ 540.478593][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.490509][T17246] loop1: detected capacity change from 0 to 512 [ 540.503391][T17231] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 540.515203][T17246] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4396: bg 0: block 16: invalid block bitmap [ 540.534708][T17246] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 540.543600][T17246] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4396: invalid indirect mapped block 5 (level 0) [ 540.558818][T17246] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4396: invalid indirect mapped block 4294967295 (level 1) [ 540.573015][T17246] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4396: invalid indirect mapped block 4294967295 (level 2) [ 540.588979][T17246] EXT4-fs (loop1): 1 truncate cleaned up [ 540.595206][T17246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.609436][T17246] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.727364][T17261] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 540.748854][T17265] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 540.765634][T17266] loop1: detected capacity change from 0 to 512 [ 540.795177][T17266] journal_path: Lookup failure for './file0/../file0' [ 540.801986][T17266] EXT4-fs: error: could not find journal device path [ 540.833886][T17269] random: crng reseeded on system resumption [ 540.912249][T17269] Restarting kernel threads ... [ 540.956460][T17269] Done restarting kernel threads. [ 540.977088][T17280] netlink: 420 bytes leftover after parsing attributes in process `syz.3.4409'. [ 541.004739][T17281] loop0: detected capacity change from 0 to 1024 [ 541.019963][T17281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.366667][T17285] loop3: detected capacity change from 0 to 512 [ 541.398469][T17285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 541.487917][T17285] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 541.495914][T17285] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 541.537443][T17285] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 541.547109][T17285] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 541.623038][T17285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 541.776566][T17285] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.4410: dx entry: limit 65535 != root limit 120 [ 541.788752][T17285] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.4410: Corrupt directory, running e2fsck is recommended [ 541.877731][T17285] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.4410: path /299/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 541.958533][T17291] SELinux: ebitmap: truncated map [ 541.963845][T17291] SELinux: failed to load policy [ 542.023409][T13007] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 3: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 542.112043][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.139894][T17295] loop1: detected capacity change from 0 to 512 [ 542.174283][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.195629][T17297] ip6gre1: entered allmulticast mode [ 542.203180][T17295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 542.219629][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.256445][T17304] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4415'. [ 542.275902][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.311709][T17312] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 542.351570][T17319] loop5: detected capacity change from 0 to 512 [ 542.365898][T17323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4424'. [ 542.392954][T17319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4422: corrupted inode contents [ 542.434778][T17319] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.4422: mark_inode_dirty error [ 542.446981][T17319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4422: corrupted inode contents [ 542.530341][T17319] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.4422: mark_inode_dirty error [ 542.542035][T17319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4422: corrupted inode contents [ 542.555208][T17319] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 542.574902][T17319] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.4422: corrupted inode contents [ 542.588748][T17319] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.4422: mark_inode_dirty error [ 542.600576][T17319] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 542.610438][T17319] EXT4-fs (loop5): 1 truncate cleaned up [ 542.617679][T17319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.648163][T17333] loop1: detected capacity change from 0 to 1024 [ 542.664765][T16265] __quota_error: 142 callbacks suppressed [ 542.664780][T16265] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 542.680878][T16265] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 1 [ 542.700446][T17319] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.720188][T17333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.763411][T17338] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4427'. [ 542.776891][T17319] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4422'. [ 542.823729][ T29] audit: type=1326 audit(1754171942.609:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 542.913326][ T29] audit: type=1326 audit(1754171942.609:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 542.937673][ T29] audit: type=1326 audit(1754171942.609:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 542.961269][ T29] audit: type=1326 audit(1754171942.619:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 542.985621][ T29] audit: type=1326 audit(1754171942.619:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 543.009252][ T29] audit: type=1326 audit(1754171942.619:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 543.033397][ T29] audit: type=1326 audit(1754171942.639:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 543.057640][ T29] audit: type=1326 audit(1754171942.669:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 543.124561][T17340] loop5: detected capacity change from 0 to 512 [ 543.153446][T17338] netlink: 'syz.3.4427': attribute type 21 has an invalid length. [ 543.164658][T17338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4427'. [ 543.193149][T17343] loop2: detected capacity change from 0 to 2048 [ 543.202496][ T29] audit: type=1326 audit(1754171942.939:13209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17337 comm="syz.3.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 543.318910][T17343] loop2: p1 < > p4 [ 543.337984][T17343] loop2: p4 size 8388608 extends beyond EOD, truncated [ 543.338999][T17353] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 543.384581][T17356] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4435'. [ 543.424308][T17348] loop3: detected capacity change from 0 to 1764 [ 543.461991][T17365] netlink: 'syz.2.4429': attribute type 39 has an invalid length. [ 543.477224][T17364] ref_ctr_offset mismatch. inode: 0x41b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 543.753466][T17375] loop3: detected capacity change from 0 to 512 [ 543.795315][T17378] loop3: detected capacity change from 0 to 512 [ 543.802513][T17378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 543.827812][T17378] EXT4-fs (loop3): 1 truncate cleaned up [ 544.009622][T17386] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 544.483767][T17398] random: crng reseeded on system resumption [ 544.500469][T17398] Restarting kernel threads ... [ 544.508293][T17398] Done restarting kernel threads. [ 544.620042][T17404] loop5: detected capacity change from 0 to 512 [ 544.627665][T17405] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 544.685239][T17405] SELinux: failed to load policy [ 544.834307][T17412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4453'. [ 544.872380][T17412] loop5: detected capacity change from 0 to 764 [ 544.893161][T17412] rock: directory entry would overflow storage [ 544.899542][T17412] rock: sig=0x4654, size=5, remaining=4 [ 544.905541][T17414] loop2: detected capacity change from 0 to 1024 [ 544.907438][T17414] EXT4-fs: inline encryption not supported [ 544.930027][T17414] ext4: Unknown parameter 'appraise_type' [ 544.939412][T17412] rock: directory entry would overflow storage [ 544.946299][T17412] rock: sig=0x4f50, size=4, remaining=3 [ 544.951858][T17412] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 545.500459][T17436] loop3: detected capacity change from 0 to 512 [ 545.530163][T17439] loop1: detected capacity change from 0 to 2048 [ 545.545584][T17439] loop1: p1 < > p4 [ 545.550270][T17439] loop1: p4 size 8388608 extends beyond EOD, truncated [ 545.568771][T17439] netlink: 'syz.1.4464': attribute type 39 has an invalid length. [ 545.729560][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4468'. [ 545.756045][T17450] loop1: detected capacity change from 0 to 1024 [ 545.775105][T17452] loop5: detected capacity change from 0 to 764 [ 545.782437][T17450] EXT4-fs: inline encryption not supported [ 545.792323][T17452] rock: directory entry would overflow storage [ 545.798500][T17452] rock: sig=0x4654, size=5, remaining=4 [ 545.804462][T17450] ext4: Unknown parameter 'appraise_type' [ 545.818434][T17452] rock: directory entry would overflow storage [ 545.825341][T17452] rock: sig=0x4f50, size=4, remaining=3 [ 545.830922][T17452] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 546.147901][T17460] FAULT_INJECTION: forcing a failure. [ 546.147901][T17460] name failslab, interval 1, probability 0, space 0, times 0 [ 546.161161][T17460] CPU: 1 UID: 0 PID: 17460 Comm: syz.2.4472 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 546.161263][T17460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.161277][T17460] Call Trace: [ 546.161284][T17460] [ 546.161293][T17460] __dump_stack+0x1d/0x30 [ 546.161312][T17460] dump_stack_lvl+0xe8/0x140 [ 546.161328][T17460] dump_stack+0x15/0x1b [ 546.161341][T17460] should_fail_ex+0x265/0x280 [ 546.161426][T17460] should_failslab+0x8c/0xb0 [ 546.161447][T17460] kmem_cache_alloc_node_noprof+0x57/0x320 [ 546.161478][T17460] ? __alloc_skb+0x101/0x320 [ 546.161579][T17460] __alloc_skb+0x101/0x320 [ 546.161609][T17460] ? audit_log_start+0x365/0x6c0 [ 546.161639][T17460] audit_log_start+0x380/0x6c0 [ 546.161753][T17460] audit_seccomp+0x48/0x100 [ 546.161781][T17460] ? __seccomp_filter+0x68c/0x10d0 [ 546.161820][T17460] __seccomp_filter+0x69d/0x10d0 [ 546.161846][T17460] ? _raw_spin_unlock+0x26/0x50 [ 546.161923][T17460] __secure_computing+0x82/0x150 [ 546.161947][T17460] syscall_trace_enter+0xcf/0x1e0 [ 546.161981][T17460] do_syscall_64+0xac/0x200 [ 546.162064][T17460] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 546.162088][T17460] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 546.162178][T17460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.162195][T17460] RIP: 0033:0x7f0ef0c6eb69 [ 546.162208][T17460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.162229][T17460] RSP: 002b:00007f0eef2d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000000c [ 546.162254][T17460] RAX: ffffffffffffffda RBX: 00007f0ef0e95fa0 RCX: 00007f0ef0c6eb69 [ 546.162268][T17460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020ffc004 [ 546.162315][T17460] RBP: 00007f0eef2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 546.162327][T17460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.162337][T17460] R13: 0000000000000000 R14: 00007f0ef0e95fa0 R15: 00007fff4afd3498 [ 546.162355][T17460] [ 546.412372][T17463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.422875][T17463] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.464589][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4473'. [ 546.484319][T17463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.495255][T17463] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.506018][T17470] FAULT_INJECTION: forcing a failure. [ 546.506018][T17470] name failslab, interval 1, probability 0, space 0, times 0 [ 546.508362][T17469] loop0: detected capacity change from 0 to 512 [ 546.518784][T17470] CPU: 0 UID: 0 PID: 17470 Comm: syz.3.4474 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 546.518819][T17470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.518835][T17470] Call Trace: [ 546.518890][T17470] [ 546.518900][T17470] __dump_stack+0x1d/0x30 [ 546.518924][T17470] dump_stack_lvl+0xe8/0x140 [ 546.518948][T17470] dump_stack+0x15/0x1b [ 546.518968][T17470] should_fail_ex+0x265/0x280 [ 546.519075][T17470] should_failslab+0x8c/0xb0 [ 546.519105][T17470] kmem_cache_alloc_node_noprof+0x57/0x320 [ 546.519140][T17470] ? __alloc_skb+0x101/0x320 [ 546.519218][T17470] __alloc_skb+0x101/0x320 [ 546.519259][T17470] netlink_alloc_large_skb+0xba/0xf0 [ 546.519294][T17470] netlink_sendmsg+0x3cf/0x6b0 [ 546.519400][T17470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.519438][T17470] __sock_sendmsg+0x142/0x180 [ 546.519507][T17470] ____sys_sendmsg+0x31e/0x4e0 [ 546.519548][T17470] ___sys_sendmsg+0x17b/0x1d0 [ 546.519616][T17470] __x64_sys_sendmsg+0xd4/0x160 [ 546.519735][T17470] x64_sys_call+0x191e/0x2ff0 [ 546.519760][T17470] do_syscall_64+0xd2/0x200 [ 546.519786][T17470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 546.519815][T17470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 546.519886][T17470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.519912][T17470] RIP: 0033:0x7f5a25deeb69 [ 546.519929][T17470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.519951][T17470] RSP: 002b:00007f5a2442e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.519972][T17470] RAX: ffffffffffffffda RBX: 00007f5a26016080 RCX: 00007f5a25deeb69 [ 546.519987][T17470] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 546.520023][T17470] RBP: 00007f5a2442e090 R08: 0000000000000000 R09: 0000000000000000 [ 546.520038][T17470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.520051][T17470] R13: 0000000000000000 R14: 00007f5a26016080 R15: 00007ffe403131a8 [ 546.520072][T17470] [ 546.775436][T17469] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.796235][T17463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.806549][T17463] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.861244][T17463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.871722][T17463] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.884858][T17477] loop5: detected capacity change from 0 to 512 [ 546.897488][T17469] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4471: bg 0: block 328: padding at end of block bitmap is not set [ 546.958659][T17475] loop3: detected capacity change from 0 to 2048 [ 546.984614][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4477'. [ 547.021592][T17481] loop1: detected capacity change from 0 to 764 [ 547.028603][T16308] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.036865][T16308] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.067412][T17475] loop3: p1 < > p4 [ 547.072236][T17475] loop3: p4 size 8388608 extends beyond EOD, truncated [ 547.088152][T16308] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.096344][T16308] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.126580][T16308] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.135032][T16308] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.144121][T16308] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.152516][T16308] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.165004][T17481] rock: directory entry would overflow storage [ 547.171231][T17481] rock: sig=0x4654, size=5, remaining=4 [ 547.189812][T17481] rock: directory entry would overflow storage [ 547.196001][T17481] rock: sig=0x4f50, size=4, remaining=3 [ 547.201577][T17481] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 547.228931][T17487] netlink: 'syz.3.4476': attribute type 39 has an invalid length. [ 547.235622][T17488] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4478'. [ 547.306680][T17492] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4480'. [ 547.650231][T17496] FAULT_INJECTION: forcing a failure. [ 547.650231][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.663415][T17496] CPU: 1 UID: 0 PID: 17496 Comm: syz.3.4482 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 547.663443][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.663454][T17496] Call Trace: [ 547.663460][T17496] [ 547.663468][T17496] __dump_stack+0x1d/0x30 [ 547.663496][T17496] dump_stack_lvl+0xe8/0x140 [ 547.663511][T17496] dump_stack+0x15/0x1b [ 547.663526][T17496] should_fail_ex+0x265/0x280 [ 547.663596][T17496] should_fail+0xb/0x20 [ 547.663627][T17496] should_fail_usercopy+0x1a/0x20 [ 547.663762][T17496] strncpy_from_user+0x25/0x230 [ 547.663785][T17496] ? kmem_cache_alloc_noprof+0x186/0x310 [ 547.663889][T17496] ? getname_flags+0x80/0x3b0 [ 547.663927][T17496] getname_flags+0xae/0x3b0 [ 547.664001][T17496] user_path_at+0x28/0x130 [ 547.664027][T17496] __se_sys_fspick+0xaa/0x240 [ 547.664049][T17496] __x64_sys_fspick+0x43/0x50 [ 547.664143][T17496] x64_sys_call+0x44c/0x2ff0 [ 547.664166][T17496] do_syscall_64+0xd2/0x200 [ 547.664211][T17496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 547.664267][T17496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 547.664288][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.664375][T17496] RIP: 0033:0x7f5a25deeb69 [ 547.664387][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.664401][T17496] RSP: 002b:00007f5a2444f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 547.664426][T17496] RAX: ffffffffffffffda RBX: 00007f5a26015fa0 RCX: 00007f5a25deeb69 [ 547.664520][T17496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 547.664533][T17496] RBP: 00007f5a2444f090 R08: 0000000000000000 R09: 0000000000000000 [ 547.664547][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.664559][T17496] R13: 0000000000000000 R14: 00007f5a26015fa0 R15: 00007ffe403131a8 [ 547.664575][T17496] [ 547.706366][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 547.706384][ T29] audit: type=1326 audit(1754171947.499:13604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 547.885927][ T29] audit: type=1326 audit(1754171947.559:13605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 547.909635][ T29] audit: type=1326 audit(1754171947.559:13606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 547.933226][ T29] audit: type=1326 audit(1754171947.559:13607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 547.956877][ T29] audit: type=1326 audit(1754171947.559:13608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 547.980365][ T29] audit: type=1326 audit(1754171947.559:13609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 548.003991][ T29] audit: type=1326 audit(1754171947.559:13610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 548.027529][ T29] audit: type=1326 audit(1754171947.559:13611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 548.051098][ T29] audit: type=1326 audit(1754171947.559:13612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 548.074604][ T29] audit: type=1326 audit(1754171947.559:13613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17498 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ef0c6eb69 code=0x7ffc0000 [ 548.099401][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4485'. [ 548.113242][T17506] random: crng reseeded on system resumption [ 548.127062][T17506] Restarting kernel threads ... [ 548.132931][T17505] loop2: detected capacity change from 0 to 764 [ 548.141351][T17506] Done restarting kernel threads. [ 548.147826][T17505] rock: directory entry would overflow storage [ 548.154006][T17505] rock: sig=0x4654, size=5, remaining=4 [ 548.163560][T17507] tc_dump_action: action bad kind [ 548.183460][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4487'. [ 548.196195][T17510] loop3: detected capacity change from 0 to 512 [ 548.202759][T17510] EXT4-fs: Ignoring removed oldalloc option [ 548.213325][T17505] rock: directory entry would overflow storage [ 548.220363][T17505] rock: sig=0x4f50, size=4, remaining=3 [ 548.226041][T17505] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 548.238544][T17510] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4487: Parent and EA inode have the same ino 15 [ 548.251246][T17510] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.4487: Parent and EA inode have the same ino 15 [ 548.267147][T17510] EXT4-fs (loop3): 1 orphan inode deleted [ 548.365855][T17514] loop3: detected capacity change from 0 to 512 [ 548.475330][T17517] FAULT_INJECTION: forcing a failure. [ 548.475330][T17517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 548.489241][T17517] CPU: 1 UID: 0 PID: 17517 Comm: syz.3.4489 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 548.489333][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.489347][T17517] Call Trace: [ 548.489353][T17517] [ 548.489360][T17517] __dump_stack+0x1d/0x30 [ 548.489379][T17517] dump_stack_lvl+0xe8/0x140 [ 548.489395][T17517] dump_stack+0x15/0x1b [ 548.489418][T17517] should_fail_ex+0x265/0x280 [ 548.489447][T17517] should_fail_alloc_page+0xf2/0x100 [ 548.489518][T17517] __alloc_frozen_pages_noprof+0xff/0x360 [ 548.489551][T17517] alloc_pages_mpol+0xb3/0x250 [ 548.489649][T17517] vma_alloc_folio_noprof+0x1aa/0x300 [ 548.489679][T17517] do_wp_page+0x5db/0x24e0 [ 548.489700][T17517] ? __rcu_read_lock+0x37/0x50 [ 548.489720][T17517] handle_mm_fault+0x77d/0x2c20 [ 548.489815][T17517] ? __rcu_read_unlock+0x4f/0x70 [ 548.489842][T17517] do_user_addr_fault+0x3fe/0x1090 [ 548.489876][T17517] exc_page_fault+0x62/0xa0 [ 548.489893][T17517] asm_exc_page_fault+0x26/0x30 [ 548.489928][T17517] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 548.490026][T17517] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f f6 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 548.490042][T17517] RSP: 0018:ffffc9000475f9b8 EFLAGS: 00050206 [ 548.490069][T17517] RAX: ffff88812b3e2ba0 RBX: ffff88812fe000c8 RCX: 000000000000f5d0 [ 548.490080][T17517] RDX: 0000000000000000 RSI: ffff88812fe00cc8 RDI: 0000200000001000 [ 548.490096][T17517] RBP: 0000200000000400 R08: 000000000000018a R09: 0000000000000000 [ 548.490106][T17517] R10: 000188812fe000c8 R11: 000188812fe10297 R12: 00002000000105d0 [ 548.490117][T17517] R13: ffffc9000475fe80 R14: 00000000000101d0 R15: 00007ffffffff000 [ 548.490134][T17517] _copy_to_iter+0x13e/0xe30 [ 548.490157][T17517] ? schedule+0x5f/0xd0 [ 548.490247][T17517] ? _raw_spin_unlock_bh+0x36/0x40 [ 548.490297][T17517] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 548.490391][T17517] __skb_datagram_iter+0xc6/0x690 [ 548.490501][T17517] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 548.490533][T17517] skb_copy_datagram_iter+0x3d/0x110 [ 548.490634][T17517] tipc_recvstream+0x4d7/0x780 [ 548.490663][T17517] ? __pfx_tipc_recvstream+0x10/0x10 [ 548.490731][T17517] sock_recvmsg+0x136/0x170 [ 548.490752][T17517] ____sys_recvmsg+0xf5/0x280 [ 548.490788][T17517] ___sys_recvmsg+0x11f/0x370 [ 548.490832][T17517] __x64_sys_recvmsg+0xd1/0x160 [ 548.490894][T17517] x64_sys_call+0x2b42/0x2ff0 [ 548.490912][T17517] do_syscall_64+0xd2/0x200 [ 548.490932][T17517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 548.491031][T17517] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 548.491049][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.491067][T17517] RIP: 0033:0x7f5a25deeb69 [ 548.491080][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.491153][T17517] RSP: 002b:00007f5a2444f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 548.491169][T17517] RAX: ffffffffffffffda RBX: 00007f5a26015fa0 RCX: 00007f5a25deeb69 [ 548.491254][T17517] RDX: 0000000000001f00 RSI: 0000200000000500 RDI: 0000000000000003 [ 548.491265][T17517] RBP: 00007f5a2444f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.491275][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.491285][T17517] R13: 0000000000000000 R14: 00007f5a26015fa0 R15: 00007ffe403131a8 [ 548.491302][T17517] [ 549.033861][T17531] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4492'. [ 549.068072][T17534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4494'. [ 549.080586][T17534] loop2: detected capacity change from 0 to 764 [ 549.087754][T17534] rock: directory entry would overflow storage [ 549.093918][T17534] rock: sig=0x4654, size=5, remaining=4 [ 549.103716][T17534] rock: directory entry would overflow storage [ 549.109943][T17534] rock: sig=0x4f50, size=4, remaining=3 [ 549.115544][T17534] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 549.393812][T17543] lo speed is unknown, defaulting to 1000 [ 549.462389][T17542] tc_dump_action: action bad kind [ 549.622525][T17548] loop5: detected capacity change from 0 to 512 [ 549.822983][T17553] loop5: detected capacity change from 0 to 1024 [ 549.839569][T17553] EXT4-fs: inline encryption not supported [ 549.847254][T17553] ext4: Unknown parameter 'appraise_type' [ 549.863270][T17558] random: crng reseeded on system resumption [ 549.872741][T17558] Restarting kernel threads ... [ 549.877821][T17558] Done restarting kernel threads. [ 550.141921][T17546] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 550.154522][T17546] SELinux: failed to load policy [ 550.268736][T17578] loop2: detected capacity change from 0 to 512 [ 550.302305][T17582] loop5: detected capacity change from 0 to 512 [ 550.313833][T17577] tc_dump_action: action bad kind [ 550.328345][T17578] ext4 filesystem being mounted at /398/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.381161][T17589] loop5: detected capacity change from 0 to 512 [ 550.383694][T17578] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4507: bg 0: block 328: padding at end of block bitmap is not set [ 550.510861][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4515'. [ 550.523802][T17598] loop5: detected capacity change from 0 to 764 [ 550.542763][T17598] rock: directory entry would overflow storage [ 550.549063][T17598] rock: sig=0x4654, size=5, remaining=4 [ 550.565782][T17598] rock: directory entry would overflow storage [ 550.567499][T17596] loop0: detected capacity change from 0 to 1024 [ 550.571966][T17598] rock: sig=0x4f50, size=4, remaining=3 [ 550.583866][T17598] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 550.635244][T17596] EXT4-fs: inline encryption not supported [ 550.663998][T17596] ext4: Unknown parameter 'appraise_type' [ 550.777567][T17608] loop3: detected capacity change from 0 to 512 [ 550.798113][T17608] ext4 filesystem being mounted at /327/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.246473][T17622] loop1: detected capacity change from 0 to 512 [ 551.259784][T17618] SELinux: ebitmap: truncated map [ 551.267108][T17618] SELinux: failed to load policy [ 551.309319][T17625] loop5: detected capacity change from 0 to 512 [ 551.348444][T17628] netlink: 'syz.1.4524': attribute type 10 has an invalid length. [ 551.360147][T17628] team0: Port device dummy0 added [ 551.368714][T17628] netlink: 'syz.1.4524': attribute type 10 has an invalid length. [ 551.377832][T17628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 551.390042][T17628] team0: Failed to send options change via netlink (err -105) [ 551.398553][T17628] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 551.415934][T17628] team0: Port device dummy0 removed [ 551.430692][T17628] dummy0: entered promiscuous mode [ 551.437452][T17628] dummy0: entered allmulticast mode [ 551.443346][T17628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 551.481782][T17635] loop5: detected capacity change from 0 to 1024 [ 551.495296][T17635] EXT4-fs: inline encryption not supported [ 551.543009][T17635] ext4: Unknown parameter 'appraise_type' [ 551.564014][T17638] loop3: detected capacity change from 0 to 1024 [ 551.820975][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4529'. [ 551.829943][T17644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4529'. [ 552.120640][T17647] 9pnet_fd: Insufficient options for proto=fd [ 552.270090][T17652] ref_ctr_offset mismatch. inode: 0x469 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 552.492997][T17661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4535'. [ 552.524198][T17661] loop5: detected capacity change from 0 to 764 [ 552.533290][T17662] loop1: detected capacity change from 0 to 512 [ 552.552479][T17661] rock: directory entry would overflow storage [ 552.558761][T17661] rock: sig=0x4654, size=5, remaining=4 [ 552.599727][T17661] rock: directory entry would overflow storage [ 552.606006][T17661] rock: sig=0x4f50, size=4, remaining=3 [ 552.611639][T17661] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 553.097330][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 553.097345][ T29] audit: type=1326 audit(1754171952.889:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.130541][ T29] audit: type=1326 audit(1754171952.889:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.154216][ T29] audit: type=1326 audit(1754171952.919:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.154591][T17677] loop3: detected capacity change from 0 to 512 [ 553.177849][ T29] audit: type=1326 audit(1754171952.919:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.177879][ T29] audit: type=1326 audit(1754171952.919:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.177953][ T29] audit: type=1326 audit(1754171952.919:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.177979][ T29] audit: type=1326 audit(1754171952.919:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.178053][ T29] audit: type=1326 audit(1754171952.919:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.178082][ T29] audit: type=1326 audit(1754171952.919:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.178110][ T29] audit: type=1326 audit(1754171952.919:13899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17671 comm="syz.3.4539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a25deeb69 code=0x7ffc0000 [ 553.354415][T17677] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 553.363885][T17677] EXT4-fs (loop3): failed to open journal device unknown-block(8,3) -6 [ 553.394145][T17681] random: crng reseeded on system resumption [ 553.404155][T17681] Restarting kernel threads ... [ 553.409334][T17681] Done restarting kernel threads. [ 553.446108][T17687] loop0: detected capacity change from 0 to 512 [ 553.513712][T17690] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 553.526466][T17692] loop5: detected capacity change from 0 to 512 [ 553.534260][T17694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 553.567464][T17690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.637075][T17690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.658121][T17690] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 553.673598][T17690] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 553.691874][T17701] gretap1: entered promiscuous mode [ 553.707943][T17701] bond1: (slave gretap1): making interface the new active one [ 553.717713][T17701] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 553.735868][T17701] macvlan2: entered promiscuous mode [ 553.741200][T17701] macvlan2: entered allmulticast mode [ 553.751595][T17701] bond1: entered promiscuous mode [ 553.758613][T17701] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 553.841355][T17701] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 553.883219][T17701] bond1: left promiscuous mode [ 553.962451][T17712] 9pnet_fd: Insufficient options for proto=fd [ 553.987870][T17713] loop0: detected capacity change from 0 to 512 [ 554.258703][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4556'. [ 554.288532][T17705] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 554.305625][T17713] EXT4-fs mount: 42 callbacks suppressed [ 554.305644][T17713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.330685][T17705] SELinux: failed to load policy [ 554.347829][T17713] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 554.352978][T17726] netlink: 71 bytes leftover after parsing attributes in process `syz.3.4557'. [ 554.387707][T17713] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4553: bg 0: block 328: padding at end of block bitmap is not set [ 554.429585][T17728] loop5: detected capacity change from 0 to 512 [ 554.443140][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4560'. [ 554.487720][T17728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 554.524696][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.536374][T17739] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4563'. [ 554.570993][T17735] netlink: 420 bytes leftover after parsing attributes in process `syz.2.4562'. [ 554.625506][T17741] loop5: detected capacity change from 0 to 8192 [ 554.633547][T17741] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 554.832642][T17747] random: crng reseeded on system resumption [ 554.842461][T17747] Restarting kernel threads ... [ 554.848363][T17747] Done restarting kernel threads. [ 554.966988][T17752] ref_ctr_offset mismatch. inode: 0x8ab offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 555.118915][T17756] loop3: detected capacity change from 0 to 1024 [ 555.189352][T17756] EXT4-fs: inline encryption not supported [ 555.222000][T17756] ext4: Unknown parameter 'appraise_type' [ 555.662182][T17759] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 555.715099][T17759] SELinux: failed to load policy [ 555.822754][T17772] loop5: detected capacity change from 0 to 512 [ 555.832525][T17769] ref_ctr_offset mismatch. inode: 0x85c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 555.861323][T17772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 556.026225][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.119186][T17787] loop2: detected capacity change from 0 to 1024 [ 556.198414][T17788] netlink: 420 bytes leftover after parsing attributes in process `syz.3.4578'. [ 556.284010][T17787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.878127][T17800] random: crng reseeded on system resumption [ 556.904112][T17800] Restarting kernel threads ... [ 556.911703][T17798] loop1: detected capacity change from 0 to 8192 [ 556.928908][T17800] Done restarting kernel threads. [ 556.941332][T17798] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.605966][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.794003][T17815] loop3: detected capacity change from 0 to 512 [ 557.840964][T17815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 557.858518][T17820] random: crng reseeded on system resumption [ 557.967804][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.052664][T17816] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 558.101230][T17828] loop3: detected capacity change from 0 to 512 [ 558.143755][T17827] loop2: detected capacity change from 0 to 512 [ 558.156026][T17816] SELinux: failed to load policy [ 558.162003][T17828] journal_path: Lookup failure for './file0/../file0' [ 558.168908][T17828] EXT4-fs: error: could not find journal device path [ 558.339444][T17827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.431491][T17832] netlink: 420 bytes leftover after parsing attributes in process `syz.3.4594'. [ 558.438751][T17827] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.538090][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.611241][T17827] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4591: bg 0: block 328: padding at end of block bitmap is not set [ 558.859020][T17841] loop3: detected capacity change from 0 to 8192 [ 558.903578][T17848] loop1: detected capacity change from 0 to 512 [ 558.911497][T17841] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 558.934657][T17850] loop0: detected capacity change from 0 to 512 [ 558.941831][T17850] journal_path: Lookup failure for './file0/../file0' [ 558.949333][T17850] EXT4-fs: error: could not find journal device path [ 558.957154][T17848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 559.020840][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 559.020853][ T29] audit: type=1326 audit(1754171958.809:14077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17852 comm="syz.0.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 559.172223][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.207119][T17839] SELinux: ebitmap: truncated map [ 559.222236][T17839] SELinux: failed to load policy [ 559.337439][ T29] audit: type=1326 audit(1754171958.849:14078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17852 comm="syz.0.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 559.361118][ T29] audit: type=1326 audit(1754171958.849:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17852 comm="syz.0.4603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 559.384765][ T29] audit: type=1326 audit(1754171958.849:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17852 comm="syz.0.4603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x0 [ 559.659003][T17862] loop5: detected capacity change from 0 to 1024 [ 559.758500][T17862] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.097268][T17868] netlink: 420 bytes leftover after parsing attributes in process `syz.0.4606'. [ 560.580917][T17871] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4607'. [ 560.624049][T17871] loop1: detected capacity change from 0 to 764 [ 560.673051][T17871] rock: directory entry would overflow storage [ 560.679272][T17871] rock: sig=0x4654, size=5, remaining=4 [ 560.717137][T17871] rock: directory entry would overflow storage [ 560.723336][T17871] rock: sig=0x4f50, size=4, remaining=3 [ 560.728938][T17871] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 561.281143][ T29] audit: type=1326 audit(1754171961.069:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 561.308149][ T29] audit: type=1326 audit(1754171961.099:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 561.332924][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.333261][ T29] audit: type=1326 audit(1754171961.109:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10bdb71425 code=0x7ffc0000 [ 561.366649][ T29] audit: type=1326 audit(1754171961.109:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 561.390210][ T29] audit: type=1326 audit(1754171961.109:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 561.413959][ T29] audit: type=1326 audit(1754171961.109:14086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17887 comm="syz.0.4613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f10bdb3eb69 code=0x7ffc0000 [ 561.463140][T17893] loop5: detected capacity change from 0 to 512 [ 561.480519][T17893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 561.504028][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.563097][T17903] 9pnet_fd: Insufficient options for proto=fd [ 561.859408][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4627'. [ 561.870983][T17926] loop1: detected capacity change from 0 to 512 [ 561.883216][T17926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 561.898131][T17924] hsr_slave_0 (unregistering): left promiscuous mode [ 561.906307][T17928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4625'. [ 561.929520][T17928] loop5: detected capacity change from 0 to 764 [ 561.947213][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.958142][T17928] rock: directory entry would overflow storage [ 561.964290][T17928] rock: sig=0x4654, size=5, remaining=4 [ 561.976777][T17928] rock: directory entry would overflow storage [ 561.983088][T17928] rock: sig=0x4f50, size=4, remaining=3 [ 561.988767][T17928] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 562.101052][T17941] loop1: detected capacity change from 0 to 1024 [ 562.109164][T17941] EXT4-fs: inline encryption not supported [ 562.117235][T17941] ext4: Unknown parameter 'appraise_type' [ 562.302393][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.469885][T17958] loop1: detected capacity change from 0 to 512 [ 562.476913][T17958] journal_path: Lookup failure for './file0/../file0' [ 562.483709][T17958] EXT4-fs: error: could not find journal device path [ 562.551866][T17959] loop2: detected capacity change from 0 to 1024 [ 562.627305][T17959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.955062][T17968] bond0: (slave dummy0): Releasing backup interface [ 563.009697][T17968] dummy0: left promiscuous mode [ 563.044341][T17968] dummy0: left allmulticast mode [ 563.121187][T17968] bridge_slave_0: left allmulticast mode [ 563.126933][T17968] bridge_slave_0: left promiscuous mode [ 563.132607][T17968] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.382915][T17968] bridge_slave_1: left allmulticast mode [ 563.388740][T17968] bridge_slave_1: left promiscuous mode [ 563.394604][T17968] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.435772][T17968] bond0: (slave bond_slave_0): Releasing backup interface [ 563.450596][T17968] bond_slave_0: left promiscuous mode [ 563.456121][T17968] bond_slave_0: left allmulticast mode [ 563.485456][T17968] bond0: (slave bond_slave_1): Releasing backup interface [ 563.504143][T17968] bond_slave_1: left promiscuous mode [ 563.509779][T17968] bond_slave_1: left allmulticast mode [ 563.528323][T17968] team0: Port device team_slave_0 removed [ 563.548535][T17968] team0: Port device team_slave_1 removed [ 563.564250][T17981] loop3: detected capacity change from 0 to 128 [ 563.571288][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.578765][T17968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.601626][T17968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.609143][T17968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.629178][T17968] vlan1: left promiscuous mode [ 563.672865][T17968] vlan2: left promiscuous mode [ 563.678115][T17968] gretap1: left promiscuous mode [ 563.694282][T17968] bond1: (slave gretap1): Releasing active interface [ 563.738802][T17985] SELinux: ebitmap: truncated map [ 563.759126][T17985] SELinux: failed to load policy [ 563.826292][T17983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 563.834156][T17983] FAT-fs (loop3): Filesystem has been set read-only [ 563.889093][T17983] bio_check_eod: 101 callbacks suppressed [ 563.889110][T17983] syz.3.4647: attempt to access beyond end of device [ 563.889110][T17983] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 563.938751][T17992] loop1: detected capacity change from 0 to 512 [ 563.946474][T17983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 563.954302][T17983] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 563.963820][T17992] journal_path: Lookup failure for './file0/../file0' [ 563.970607][T17992] EXT4-fs: error: could not find journal device path [ 563.978674][T17983] syz.3.4647: attempt to access beyond end of device [ 563.978674][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.010650][T17983] syz.3.4647: attempt to access beyond end of device [ 564.010650][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.029353][T17983] syz.3.4647: attempt to access beyond end of device [ 564.029353][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.043490][T17983] syz.3.4647: attempt to access beyond end of device [ 564.043490][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.057358][T17983] syz.3.4647: attempt to access beyond end of device [ 564.057358][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.065231][T12391] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.071589][T17983] syz.3.4647: attempt to access beyond end of device [ 564.071589][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.093721][T17983] syz.3.4647: attempt to access beyond end of device [ 564.093721][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.094186][T17996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4653'. [ 564.107681][T17983] syz.3.4647: attempt to access beyond end of device [ 564.107681][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.121253][T17997] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4651'. [ 564.129593][T17983] syz.3.4647: attempt to access beyond end of device [ 564.129593][T17983] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 564.143505][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 564.143520][ T29] audit: type=1326 audit(1754171963.929:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.185275][ T29] audit: type=1326 audit(1754171963.979:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.208414][ T29] audit: type=1326 audit(1754171963.979:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.231649][ T29] audit: type=1326 audit(1754171963.979:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.254687][ T29] audit: type=1326 audit(1754171963.979:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.292989][T17997] loop1: detected capacity change from 0 to 764 [ 564.306297][T18000] lo speed is unknown, defaulting to 1000 [ 564.324797][T17997] rock: directory entry would overflow storage [ 564.331066][T17997] rock: sig=0x4654, size=5, remaining=4 [ 564.350389][ T29] audit: type=1326 audit(1754171963.979:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.373437][ T29] audit: type=1326 audit(1754171963.979:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.396529][ T29] audit: type=1326 audit(1754171963.979:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.417950][T17997] rock: directory entry would overflow storage [ 564.419638][ T29] audit: type=1326 audit(1754171964.069:14153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.426482][T17997] rock: sig=0x4f50, size=4, remaining=3 [ 564.448782][ T29] audit: type=1326 audit(1754171964.069:14154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17995 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc3714eb69 code=0x7ffc0000 [ 564.454284][T17997] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 564.494867][T18001] loop0: detected capacity change from 0 to 8192 [ 564.501589][T18001] msdos: Unknown parameter 'A' [ 564.536865][T18000] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 564.552769][T18000] team0: entered promiscuous mode [ 564.557862][T18000] team0: entered allmulticast mode [ 565.003167][T18023] loop1: detected capacity change from 0 to 512 [ 565.016184][T18023] journal_path: Lookup failure for './file0/../file0' [ 565.022997][T18023] EXT4-fs: error: could not find journal device path [ 565.160698][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4665'. [ 565.411301][T18040] SELinux: ebitmap: truncated map [ 565.490754][T18046] loop3: detected capacity change from 0 to 1024 [ 565.499198][T18040] SELinux: failed to load policy [ 565.505004][T18046] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 565.706721][T18058] loop3: detected capacity change from 0 to 512 [ 565.713653][T18058] journal_path: Lookup failure for './file0/../file0' [ 565.721033][T18058] EXT4-fs: error: could not find journal device path [ 565.769593][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4677'. [ 566.436892][T18069] loop5: detected capacity change from 0 to 1024 [ 566.443962][T18069] EXT4-fs: inline encryption not supported [ 566.451115][T18069] ext4: Unknown parameter 'appraise_type' [ 566.767368][T18078] tc_dump_action: action bad kind [ 567.036300][T18088] loop2: detected capacity change from 0 to 512 [ 567.045399][T18088] journal_path: Lookup failure for './file0/../file0' [ 567.052235][T18088] EXT4-fs: error: could not find journal device path [ 567.109446][T18094] loop3: detected capacity change from 0 to 1024 [ 567.125144][T18094] EXT4-fs: inline encryption not supported [ 567.134502][T18094] ext4: Unknown parameter 'appraise_type' [ 567.312768][T18105] loop2: detected capacity change from 0 to 764 [ 567.330881][T18105] rock: directory entry would overflow storage [ 567.337095][T18105] rock: sig=0x4654, size=5, remaining=4 [ 567.403676][T18112] loop3: detected capacity change from 0 to 1024 [ 567.510388][T18112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.621065][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.664234][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.171485][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4701'. [ 568.212205][T18126] loop5: detected capacity change from 0 to 2048 [ 568.221585][T18126] EXT4-fs: Invalid want_extra_isize 65536 [ 568.430552][T18111] Set syz1 is full, maxelem 65536 reached [ 568.573727][T18135] loop2: detected capacity change from 0 to 256 [ 568.740386][T18140] loop1: detected capacity change from 0 to 512 [ 568.767518][T18140] journal_path: Lookup failure for './file0/../file0' [ 568.774302][T18140] EXT4-fs: error: could not find journal device path [ 568.847123][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.878487][T18142] loop1: detected capacity change from 0 to 512 [ 568.935140][T18142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 569.016599][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.056498][T18150] loop0: detected capacity change from 0 to 512 [ 569.106023][T18150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 569.129432][T18154] loop1: detected capacity change from 0 to 764 [ 569.143394][T18154] rock: directory entry would overflow storage [ 569.149606][T18154] rock: sig=0x4654, size=5, remaining=4 [ 569.185159][T18150] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.206882][T18146] SELinux: ebitmap: truncated map [ 569.226951][T18146] SELinux: failed to load policy [ 569.574519][T18170] 9pnet_fd: Insufficient options for proto=fd [ 569.809147][T18174] loop5: detected capacity change from 0 to 1024 [ 569.964296][T18174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.241269][T18183] loop1: detected capacity change from 0 to 512 [ 570.331878][T18183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.567881][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.128646][T18198] loop3: detected capacity change from 0 to 1024 [ 571.253259][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.270503][T18198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.306871][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 571.306881][ T29] audit: type=1326 audit(1754171971.099:14367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.628238][ T29] audit: type=1326 audit(1754171971.129:14368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.651917][ T29] audit: type=1326 audit(1754171971.139:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.676153][ T29] audit: type=1326 audit(1754171971.139:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.699825][ T29] audit: type=1326 audit(1754171971.139:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.723995][ T29] audit: type=1326 audit(1754171971.139:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.747991][ T29] audit: type=1326 audit(1754171971.139:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.771600][ T29] audit: type=1326 audit(1754171971.139:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.795866][ T29] audit: type=1326 audit(1754171971.139:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 571.819481][ T29] audit: type=1326 audit(1754171971.139:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.1.4725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff3fdeeb69 code=0x7ffc0000 [ 572.003235][T18211] loop5: detected capacity change from 0 to 8192 [ 572.011306][T18212] loop2: detected capacity change from 0 to 764 [ 572.062450][T18214] loop1: detected capacity change from 0 to 512 [ 572.126177][T18212] rock: directory entry would overflow storage [ 572.132363][T18212] rock: sig=0x4654, size=5, remaining=4 [ 572.187132][T18214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 572.205303][T18215] SELinux: ebitmap: truncated map [ 572.210675][T18215] SELinux: failed to load policy [ 572.284988][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.392635][T18218] loop0: detected capacity change from 0 to 512 [ 572.429963][T18218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 572.511217][T14606] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.537815][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.595396][T18228] loop3: detected capacity change from 0 to 512 [ 572.604399][T18226] loop1: detected capacity change from 0 to 1024 [ 572.613293][T18228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 572.635497][T18226] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 572.685851][T18226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.702479][T13007] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.721140][T18226] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.4736: missing EA_INODE flag [ 572.754729][T18226] EXT4-fs (loop1): Remounting filesystem read-only [ 572.883903][T18237] tc_dump_action: action bad kind [ 573.498768][T11486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.641164][T18259] loop1: detected capacity change from 0 to 512 [ 573.678843][T18259] journal_path: Lookup failure for './file0/../file0' [ 573.685679][T18259] EXT4-fs: error: could not find journal device path [ 573.945500][T18272] tc_dump_action: action bad kind [ 573.992931][T18283] loop5: detected capacity change from 0 to 512 [ 574.021030][T18283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 574.048892][T18285] tc_dump_action: action bad kind [ 574.217447][T18291] loop0: detected capacity change from 0 to 512 [ 574.225148][T14511] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.255597][T18291] journal_path: Lookup failure for './file0/../file0' [ 574.262521][T18291] EXT4-fs: error: could not find journal device path [ 574.285432][T18265] SELinux: ebitmap: truncated map [ 574.330599][T18265] SELinux: failed to load policy [ 574.411096][T18310] FAULT_INJECTION: forcing a failure. [ 574.411096][T18310] name failslab, interval 1, probability 0, space 0, times 0 [ 574.424391][T18310] CPU: 1 UID: 0 PID: 18310 Comm: syz.2.4765 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 574.424423][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.424493][T18310] Call Trace: [ 574.424500][T18310] [ 574.424509][T18310] __dump_stack+0x1d/0x30 [ 574.424535][T18310] dump_stack_lvl+0xe8/0x140 [ 574.424559][T18310] dump_stack+0x15/0x1b [ 574.424580][T18310] should_fail_ex+0x265/0x280 [ 574.424633][T18310] should_failslab+0x8c/0xb0 [ 574.424664][T18310] kmem_cache_alloc_node_noprof+0x57/0x320 [ 574.424700][T18310] ? __alloc_skb+0x101/0x320 [ 574.424763][T18310] __alloc_skb+0x101/0x320 [ 574.424798][T18310] alloc_skb_with_frags+0x7d/0x470 [ 574.424837][T18310] ? selinux_file_open+0x2df/0x330 [ 574.424984][T18310] sock_alloc_send_pskb+0x43a/0x4f0 [ 574.425014][T18310] ? mntput+0x4b/0x80 [ 574.425067][T18310] tun_get_user+0x9b3/0x2680 [ 574.425136][T18310] ? ref_tracker_alloc+0x1f2/0x2f0 [ 574.425180][T18310] ? selinux_file_permission+0x2f0/0x320 [ 574.425214][T18310] tun_chr_write_iter+0x15e/0x210 [ 574.425260][T18310] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 574.425287][T18310] vfs_write+0x4a0/0x8e0 [ 574.425317][T18310] ksys_write+0xda/0x1a0 [ 574.425346][T18310] __x64_sys_write+0x40/0x50 [ 574.425378][T18310] x64_sys_call+0x27fe/0x2ff0 [ 574.425424][T18310] do_syscall_64+0xd2/0x200 [ 574.425477][T18310] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 574.425500][T18310] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 574.425528][T18310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.425601][T18310] RIP: 0033:0x7f0ef0c6eb69 [ 574.425616][T18310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.425638][T18310] RSP: 002b:00007f0eef2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 574.425770][T18310] RAX: ffffffffffffffda RBX: 00007f0ef0e95fa0 RCX: 00007f0ef0c6eb69 [ 574.425786][T18310] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 574.425802][T18310] RBP: 00007f0eef2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 574.425818][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.425834][T18310] R13: 0000000000000000 R14: 00007f0ef0e95fa0 R15: 00007fff4afd3498 [ 574.425859][T18310] [ 574.474289][T18312] tc_dump_action: action bad kind [ 574.854496][ C0] ================================================================== [ 574.862615][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 574.869852][ C0] [ 574.872196][ C0] read-write to 0xffff8881001b24b8 of 8 bytes by interrupt on cpu 1: [ 574.880282][ C0] wq_worker_tick+0x60/0x230 [ 574.884901][ C0] sched_tick+0x11a/0x270 [ 574.889253][ C0] update_process_times+0x15f/0x190 [ 574.894463][ C0] tick_nohz_handler+0x249/0x2d0 [ 574.899411][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 574.904638][ C0] hrtimer_interrupt+0x21a/0x460 [ 574.909605][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 574.915547][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 574.921222][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.927202][ C0] kcsan_setup_watchpoint+0x415/0x430 [ 574.932575][ C0] io_free_region+0xf7/0x160 [ 574.937181][ C0] io_ring_ctx_free+0x1ed/0x3a0 [ 574.942040][ C0] io_ring_exit_work+0x529/0x560 [ 574.946981][ C0] process_scheduled_works+0x4ce/0x9d0 [ 574.952448][ C0] worker_thread+0x582/0x770 [ 574.957047][ C0] kthread+0x489/0x510 [ 574.961143][ C0] ret_from_fork+0xdd/0x150 [ 574.965683][ C0] ret_from_fork_asm+0x1a/0x30 [ 574.970477][ C0] [ 574.972801][ C0] read-write to 0xffff8881001b24b8 of 8 bytes by interrupt on cpu 0: [ 574.980878][ C0] wq_worker_tick+0x60/0x230 [ 574.985571][ C0] sched_tick+0x11a/0x270 [ 574.989933][ C0] update_process_times+0x15f/0x190 [ 574.995155][ C0] tick_nohz_handler+0x249/0x2d0 [ 575.000106][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 575.005309][ C0] hrtimer_interrupt+0x21a/0x460 [ 575.010273][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 575.016201][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 575.021849][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 575.027859][ C0] io_poll_remove_all+0x3e/0x1a0 [ 575.032836][ C0] io_uring_try_cancel_requests+0x275/0x310 [ 575.038746][ C0] io_ring_exit_work+0x195/0x560 [ 575.043688][ C0] process_scheduled_works+0x4ce/0x9d0 [ 575.049157][ C0] worker_thread+0x582/0x770 [ 575.053775][ C0] kthread+0x489/0x510 [ 575.057860][ C0] ret_from_fork+0xdd/0x150 [ 575.062456][ C0] ret_from_fork_asm+0x1a/0x30 [ 575.067235][ C0] [ 575.069564][ C0] value changed: 0x00000000000dbba0 -> 0x00000000000de2b0 [ 575.076694][ C0] [ 575.079030][ C0] Reported by Kernel Concurrency Sanitizer on: [ 575.085187][ C0] CPU: 0 UID: 0 PID: 1736 Comm: kworker/u8:7 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 575.097445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.107522][ C0] Workqueue: iou_exit io_ring_exit_work [ 575.113085][ C0] ================================================================== [ 575.183029][T18321] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4768'.