last executing test programs: 3m12.354095506s ago: executing program 4 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000a39000/0x1000)=nil, 0x1000, 0x4) 3m12.250906417s ago: executing program 4 (id=1876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x25, 0x0, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) ioctl$FITHAW(r2, 0xc0045878) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x7, &(0x7f0000ffc000/0x2000)=nil, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="249b379086dde0108114001111"], 0x0) 3m12.250403078s ago: executing program 4 (id=1877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) (fail_nth: 4) 3m11.943356553s ago: executing program 4 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x100000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 3m11.942872473s ago: executing program 4 (id=1879): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 3m11.942359243s ago: executing program 4 (id=1880): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x0) ftruncate(r3, 0x7000000) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 2m56.908534887s ago: executing program 32 (id=1880): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x0) ftruncate(r3, 0x7000000) r4 = dup(r3) preadv2(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RLERRORu(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) 1m47.507321819s ago: executing program 0 (id=3496): socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1m47.42263446s ago: executing program 0 (id=3499): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000018000015b097ead85847832383d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1m47.40566959s ago: executing program 0 (id=3502): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) write$binfmt_script(r0, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 1m47.170535595s ago: executing program 0 (id=3504): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x15, 0x101200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x200048c0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, 0x0, 0x4081) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@block_validity}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@dax}, {@auto_da_alloc}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbde, &(0x7f0000000080)={0x0, 0xfd0e, 0x40, 0x1, 0x40000333}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x46, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x3, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16=r7, @ANYRES16=r7, @ANYRESHEX, @ANYRES32=r7], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc007156248396c84, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x7e) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000300)={0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4}, 0xffffffffffffff90) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r9, &(0x7f0000000080)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1000002f, 0xa3, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x1, &(0x7f0000000100)="862154de63b499bf8ee1f29f6c7e041f5160e189d1c6b72a0f397290d7920e2ca05d8819dcc25351df43a3532df8ae8c426c17c31fe26ca2841d622c389d08c61f95c17d4e7840bc5302bd813c1913be390eaff8496d898b627274e038240d49") 1m46.590547826s ago: executing program 0 (id=3511): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880"], 0x21c}}, 0x0) 1m46.170659434s ago: executing program 0 (id=3519): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_load(r1, &(0x7f0000000cc0)={0xf97cff8c, 0x8}, 0x10) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (fail_nth: 3) open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) 1m46.117725395s ago: executing program 33 (id=3519): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_load(r1, &(0x7f0000000cc0)={0xf97cff8c, 0x8}, 0x10) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f0000001140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) (fail_nth: 3) open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) 1m42.853948267s ago: executing program 3 (id=3562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb00740000000000019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac101410ac1414bb44440001000086dd00000000ac1414bb00000000ac14343200000000000000000000004fe0000002000000007f00000100000000ac1414aa00000004e000000100000000"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "14743a5407f067a1cbd916b2d5d19fd85cd82ab61e4eeed84c3ebbbfb8485c1e"}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/153, 0x99}], 0x1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 1m42.849401677s ago: executing program 3 (id=3563): r0 = inotify_init() r1 = syz_clone(0xc000800, &(0x7f0000000500)="095066b207a25d0e333a6fb3a1c4ec72af32a828f3c3c4492a5f4658aa633d9ebd4caa06a651665f8b45663cf720e91bb2ba44a0f383f7e4bf0c2c9c888fd970fc99d5e6d77e59a6429224efdb9cb698c74cfb6b66ea97aac71d12f374fdf7a2dde9de3b6858b42563", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000c80)="a5fc4e6742b3ee086323050bc37132b9c6a51822c2d5c10161e019e2847a3ff59334c7e8995d6bccd225ce5151567125a3c42e2c1e463986c55be2a7429f1a95ba517ad2ec2b97acca80609acac8e04b7bd638713f5eb796c46c67756d5794bd9112fd7174974edcb8ebeb05dea8246be6d937902eda72dda39373964ab1ab") fcntl$setown(r0, 0x8, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009eb4c5d1ae88e022baa832948e1de250783b01eb73526de2a366ec5046ff0d9bd91c18270f9d953de734a3a4ceceb6d760464e3045f9f143cdaa19f014b3e98e32b08b0dc85d9a59d387bf47e16a8d68edd0958b76323b196db96efe059dd00493fed6944b624c99533ccd0ddcc77d01a0602e06f9c310dec30eef82f82ee678f2950942265c3b85f23d082b08625e3e0f7b077120bbb6dc002f0df63c5e7812cd4865c68f88aad803c76567d9048f127bc638aecdb9fe390cd31a3296f1de9a62850ff0335948f134"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x26c841ac7dfb4727}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000001200), 0x10) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x140a, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 1m42.823055897s ago: executing program 3 (id=3564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x65) 1m42.791605048s ago: executing program 3 (id=3565): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x4, 0x80) r4 = getuid() syz_clone3(&(0x7f0000000f80)={0x140200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280)=0x0, {0x28}, &(0x7f0000000ec0)=""/144, 0x90, &(0x7f0000000300)=""/59, &(0x7f0000000480)=[0x0], 0x1}, 0x58) r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r7 = memfd_secret(0x80000) r8 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$netlink(r2, &(0x7f0000001340)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000001240)=[{&(0x7f0000000380)={0xec, 0x3a, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xc, 0xc6, 0x0, 0x1, [@nested={0x4, 0x140}, @nested={0x4, 0x146}]}, @typed={0x10, 0xef, 0x0, 0x0, @binary="0e8e77be5354e20268a1fe04"}, @generic="686acd45149c9b84cf964a72a0edf7462ce987482d905ad3011c3289e8dae864b4694970020179dc865fcddf9782049438efe9e40e362144dfb906d7c5ee749471e89ecd50805fc048bc8d1b00e141ddac96d2d970646576ca2e61166813c9aa9523ff0ec2de95f07737f82dd71bd712a00590b114bb477772496e97445be1bddb8cddf7d977776a9efd48ae5b70f0874b80771839", @generic="3407b0f528a9d97b16d3d5406937ed89248c1c162852a804c20e35d415262b6ceb85f8d78dde6dd153"]}, 0xec}, {&(0x7f0000000b00)={0xfc, 0x3f, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@generic="05ddb51ad9cd3e328239219e061c8f3796087895e60fbb33cc75a70c659ad6acf5ed53040e9d7a0df4067c477f80d17400559ac09e8bc7d9251b4945f5fea44037478bb4d1460d64007098c02b9f5a32f42a8c9f03b20eb3890fede8e094472eb1dbff4de749fe635f1da013d55e53a8927ccf786640d3698c91f2dbfa12fa3041b5c7973d4f5c202d0af37176374d8ccc8062153cfc08cd9885c2e66683ac79c02d5b5db5be5fab2fcd1a337bae8f94a920fb2f4370a053dc92e87126b6364ce5d0cbdfd874d8e4bdf98201958a16ac1d03ff38a8673c325d59b35718a789e0ebfefd0dac03f702607ffd58"]}, 0xfc}, {&(0x7f0000001900)={0x1310, 0xb, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@generic="92f9a77c1bfc7d5f053464861a91985592affb8b4b18682ab5486ffa0198e68868abe724b17448d942f30efc161911fbac5ca654c336dbebca91b8fb1850acc3279914535a938df66d64a6d637e632c93b2ffc66a5961e7c609fe79c10b344a14cec650f95b7f9367b3f2b98bd2e175447fc8b460979883908e399425ed1109a985a81e50808f25726df80be8fcef93e9c9ccae7641b89", @nested={0x1b8, 0xcd, 0x0, 0x1, [@generic="701d41aea4634c5ce4297fbc78fffebc54bed3c51dbd8810bd4a3541aa06d5ef4cd1c32d97b989256ffc99efafe05f69097830c5f81d37", @nested={0x4, 0x36}, @nested={0x4, 0x151}, @generic="c0b7dd82d3b2bfec2e655fdb4114b66afd1c2ecb015da3932a959dbc1e15bda46ea482221469389c40bc044118a7d31829853a7d06608072e519ecb8b6f2c9f4cef9144b0f477182b059c2d2c62142f76f992075257dbed9ce6b859066cb968d7c319412fd9b3ddfb07c19d8f763c9db4ca28416364cdd8964b8523ec6f95a1611fe79b74db42cee57eeb6df0ed6b06253bf7e37ad23d08ae986e1e0a5bf8255a0c81ef7801175e91c6dfdf1aa4f53f752046aec67841f6c884336e83bd325541130160df70cded8b3a2e5fc4b688b4d4799cdd817eecac584e17391072702f940433964e54556a6d111d6ecb8adf8eecc5f9649a497", @generic="04fb33dfa1a05c62efdb69c25e4810bb67bea5c7e968b0de31de93b820988fb70e3ed3b426d1b0edffb2b8e2ad7ba792623e05f851721658c5bd29abf45536994e6808391b07531681c3fc76ec21843c", @generic="2850438f4a044c4ef2c299ffb858932693087485aa23c7a8d84f7065ed65fd7e37e2e6920adb37c87783b5ce77060e"]}, @typed={0x1004, 0xa0, 0x0, 0x0, @binary="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"}, @typed={0x14, 0x4a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}}, @generic="e1209551f3f60d077a024e8090799e22a8c01edad796b2049668cb14f301fdda6462b576e1a0b9b5336e3909654cce2c85771d717dd7382f3f6a588f84e17bd44af0e24f0fc028ab26997185cdb0131f134b54bc169ec18f5fcfba5181ea139f7f543c6bbfbfde3ad2090756395ac7a7d69f5d3669fda5", @nested={0xc, 0x83, 0x0, 0x1, [@nested={0x4, 0xa1}, @nested={0x4, 0xa9}]}, @generic="3b4c6e1245a5977105", @typed={0x9, 0xf9, 0x0, 0x0, @binary="07d3624171"}]}, 0x1310}, {&(0x7f0000000c00)={0x2a0, 0x18, 0x300, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0xa7, 0x0, 0x0, @u32=0xa000}, @generic="111b1ff3078d6975eca1d01b21b46851d4a2465971cfd33ae695fab983a6f2dd0adecd8b360ae51880d33c1c1dac6ccb6fcbc4d55e14edd739386f5ce6c986f321c340", @generic="18ec61f63e6bca84ec83f3b1e64071e59c2fd4a343cedad10878d399cd0dbc600ed6a567fd71cc6e777f05fa", @typed={0x8, 0x8d, 0x0, 0x0, @pid=r3}, @generic="283f1ccc29fac16b9adb7354e3a64e9ba1086702638c43dc3a413d494a3a2556ca5aca743610a18d7e593dcab96061d547bf9eeec43ec87a9dd90f22593ad3347de2c76df5af8d67ecd9e67dd771f8055c511031f8181e43804f5d73", @generic="af4a6c433ba9ad08cb5b8f04ff40a78c0d1ff42b7ec901c20c069255be6ee6cd6c8d44b8d36c2a4c0e9e603dca9ba1e01c547bc26e52d1970a645ab13b0fb9228e072bb22c05b04c21d092c12a6cdc89f9646f542715799e004acde7cd286055e965a36104b08d3a07918770d895ac4def88a75fa1c2c8c0f1e1792fd9992ff190296841dc1ca71b48200c8bfe2ddf028a6f574623f2068b4ef3179bac", @generic="4f3081bd1196c02ecbc28874171dbfa0282351ca78001f7e7493b63292d0ff31d5a7559e240f7f8aff09b038abc68f2be927f7a4dd4c783d438ab7d43d3f2a193f3ab61fba9f04686ef8aac08a0fce545473e9961c98d0897031aff09c7454c57aa8f3eccd6bbc551ac815c30f84345808aa419f657ca959539193f2daef5a3ba30eda9d4881eb9cbf9f1a0bbd12dc6b79e5f9293658ec907a09ab953a7c8e143180d5955b1b71ce3868", @generic="78733f94bbe5211f8303703bc8c6b0f19e1b1d838c54f87b2d8b1039e8d7058fbf03801acb904adf4b727e4863df5c48a9ce779cf091a60b1e86", @generic="404af8c547faef2b755ef9957022c8d3c1338074e6c5c85d3e3d8e36b7b3bb4e6c30c7396951c66586dcb28d05e896acfa74ef"]}, 0x2a0}, {&(0x7f0000001000)={0x224, 0x27, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x120, 0x0, 0x0, @uid=r4}, @typed={0xc, 0xc1, 0x0, 0x0, @u64=0x4}, @nested={0x1fe, 0x8e, 0x0, 0x1, [@typed={0x14, 0x131, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3b}}, @generic="b5d5761e36d8adcf5dab3a51308262adc962874a663a99ae3d64f7e510e95bad671ee5e6547d54ef286dac7494718390068e7339b44f88c570b49d15238a00ff21cacd8bcfcbcaccc5f1992b293c78b8d3c27cef9717cc3d9674758c6f0d5e8364b70998801ca9a0aaf8e98aeacb18b2fff8dcb590", @generic="7b59b2e8d5011adda264a9e191f35a94eca05cfde02a37b2665207d4b8fd89353958288f52b769c78b8d40c80d7a1d1dd3099ccb65ccd3e5163048c530b00e1b72baba70108847f3357bdc5e72d67180316c634c36372db71c15a5eeac791ab3a15e9c23cc21506e4f37b99fd3f11dac36c7e9200f4fce5d08b5e095cecfda7e37d4d3749897bc213406cfe4aea24194b1259d7593b2190752024eb361c18f810c9dd654916b3981686867f0b85fe459384c334b3a84d2f2caffee6e56852d448b9dc172ef3d646f5e724bc9537c654bd5f4e9f51ececba0649e7326de605ebda6b54cd5ce", @typed={0x8, 0x51, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x121}, @typed={0x4, 0x10f}, @generic="d71367565e79f034b6076e64f058143801b4603bfea6eccaecfe264698a400a553291494766a4552cd58aafbe64a7adbc8eeea31a72d21dd3da23580eb919cb33d2d4b95c43cdd0df5af2aba67fb09b65532534af11c5678318549a3d58118fad1654b03aa3da6b661d4b579b6876b8519c72342a9d97bd8719584f0"]}]}, 0x224}], 0x5, &(0x7f0000001300)=[@rights={{0x24, 0x1, 0x1, [r1, r0, r6, r0, r7]}}, @rights={{0x18, 0x1, 0x1, [r8, r1]}}], 0x40, 0x40000}, 0x2001) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r9, 0x0) r10 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r11 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r11, 0x847ba, 0x2000, 0xe, 0x0, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r14) sendmsg$NLBL_UNLABEL_C_STATICADD(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010226bd03002600010004"], 0x4c}, 0x8, 0x3000000000002, 0x0, 0x20000}, 0x844) 1m42.549610943s ago: executing program 3 (id=3570): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4814) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @empty, @local, 0x10, 0x8, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040)=@int=0x8, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES8=r7, @ANYRESOCT=r4, @ANYRES32, @ANYRES64=r4, @ANYRESDEC=r4, @ANYRESHEX=r4, @ANYRESOCT=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000380)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [], {0x4, 0xb}, [], {0x10, 0x1}, {0x20, 0x329cb032c8a0981}}, 0x24, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r10) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r11, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44000) pread64(r10, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 1m42.052034152s ago: executing program 3 (id=3582): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) (fail_nth: 9) 1m42.018786352s ago: executing program 34 (id=3582): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) (fail_nth: 9) 51.714042513s ago: executing program 6 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_init1(0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x4000000, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c001000000762256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000a74d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed31d0153dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575000000003f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 51.710667033s ago: executing program 6 (id=4852): r0 = inotify_init() r1 = syz_clone(0xc000800, &(0x7f0000000500)="095066b207a25d0e333a6fb3a1c4ec72af32a828f3c3c4492a5f4658aa633d9ebd4caa06a651665f8b45663cf720e91bb2ba44a0f383f7e4bf0c2c9c888fd970fc99d5e6d77e59a6429224efdb9cb698c74cfb6b66ea97aac71d12f374fdf7a2dde9de3b6858b42563", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000c80)="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") fcntl$setown(r0, 0x8, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009eb4c5d1ae88e022baa832948e1de250783b01eb73526de2a366ec5046ff0d9bd91c18270f9d953de734a3a4ceceb6d760464e3045f9f143cdaa19f014b3e98e32b08b0dc85d9a59d387bf47e16a8d68edd0958b76323b196db96efe059dd00493fed6944b624c99533ccd0ddcc77d01a0602e06f9c310dec30eef82f82ee678f2950942265c3b85f23d082b08625e3e0f7b077120bbb6dc002f0df63c5e7812cd4865c68f88aad803c76567d9048f127bc638aecdb9fe390cd31a3296f1de9a62850ff0335948f134"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x26c841ac7dfb4727}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000001200), 0x10) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x140a, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 51.658126124s ago: executing program 6 (id=4855): r0 = socket$packet(0x11, 0x3, 0x300) futex(0x0, 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004082) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB, @ANYRES16=r4], 0x20}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) rename(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r7, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000380), &(0x7f0000000400)=0x4) connect$unix(r7, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @remote}, 0x10) 51.617894935s ago: executing program 6 (id=4859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_register(r4, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0xf00, &(0x7f0000000000)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x100000000}, 0x18) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) fcntl$getown(r3, 0x9) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x2, 0x9}}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='xen_mc_flush_reason\x00', r11}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) creat(&(0x7f0000000340)='./file1\x00', 0x1d5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES8=r9], 0x0, 0x28, 0x0, 0xffffffff}, 0x28) 51.252748422s ago: executing program 6 (id=4863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) pread64(r3, &(0x7f0000000000)=""/4096, 0x1000, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)=@newtaction={0x84, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x70, 0x1, [@m_mirred={0x6c, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3, 0x9, 0x3}, 0x3}}]}, {0x1f, 0x6, "c1929c119d73fa5e6023e2269e98084a9efd26d2e4a7a22c618a53"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000010000000000000004000000850000007b00000095a4675ddf914d6bda468d6a68d86318144a61259ec3bac6d19a18f9ec7955bb7689396089ac65a3d6eed617ba4e9ee16bcb9edbc282939344b88eba8e2449aedae79d8c7627c48f2ff3531ff37d235708f589d2ffa3a7fbde1d99f41d96c000064edd915ce107d048292056b3099705ef7c74cbe664dde1945d0bf7a4ebe3eb6f8779775ae327addb"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xb, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000958d2023acb79be519fe5557c5395f021e8dd51889e398a3c4c4f01b03c4bc2f76549e4e583f3e91dac0f8"], &(0x7f0000000040)='GPL\x00', 0xb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r7}, 0x18) syz_clone(0x6200, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="048000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x700, 0x0, [@sadb_key={0x5, 0x9, 0xd8, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x3, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev}}]}, 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='f2fs_direct_IO_exit\x00', r6, 0x0, 0x8}, 0x18) 51.030572846s ago: executing program 6 (id=4868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$inet6(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c4c16abafc83d2756cf9317d41466f5dbe82a9b308f322cb69eb020875599b7aaf63b4c974d4822eddc842788a0d3e0ec77f49279aa4463fe960bc2a0e99337a6d7ecd396dc53d520e98e4cc1e67dccab21d5d4a15994c4a49b8e91cf5ea5f3aeab4e8719016a058f87c02c9f9198c5f037d661ce36e22b2bbfdac356174a737c64cfb68a148bf0263beb6ef7541dfc568", 0x91}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20, 0x20000000}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x350, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0xfffffffffffffe8c}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x64, 0x1, @lb_tx_hash_to_port_mapping}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x81, 0x4, 0x3}, {0x3, 0x7a, 0x6, 0xf}, {0x5, 0x2, 0x2, 0x8001}, {0x0, 0x52, 0x1, 0x8f}, {0xd8, 0x1, 0xf, 0x1}, {0x630d, 0x9, 0x8, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe57) 51.010251946s ago: executing program 35 (id=4868): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socket$inet6(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) r1 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000001880)={'#! ', './file0', [], 0xa, "cd7d"}, 0xd) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="c4c16abafc83d2756cf9317d41466f5dbe82a9b308f322cb69eb020875599b7aaf63b4c974d4822eddc842788a0d3e0ec77f49279aa4463fe960bc2a0e99337a6d7ecd396dc53d520e98e4cc1e67dccab21d5d4a15994c4a49b8e91cf5ea5f3aeab4e8719016a058f87c02c9f9198c5f037d661ce36e22b2bbfdac356174a737c64cfb68a148bf0263beb6ef7541dfc568", 0x91}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x20, 0x20000000}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x2, 0xf}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000a00)={0x350, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0xfffffffffffffe8c}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x64, 0x1, @lb_tx_hash_to_port_mapping}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6, 0x81, 0x4, 0x3}, {0x3, 0x7a, 0x6, 0xf}, {0x5, 0x2, 0x2, 0x8001}, {0x0, 0x52, 0x1, 0x8f}, {0xd8, 0x1, 0xf, 0x1}, {0x630d, 0x9, 0x8, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x800}, 0x50) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffe57) 4.23167701s ago: executing program 8 (id=5859): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3a}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x110, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r11) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES8=r4, @ANYBLOB="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", @ANYRES32=r12, @ANYRES8=r1], 0x10e0}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) syz_emit_ethernet(0x2a, &(0x7f0000003000)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1}, {0x0, 0x0, 0x8}}}}}, 0x0) 4.189987721s ago: executing program 8 (id=5861): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000902000000000000000002"], 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x340108a0, &(0x7f00000000c0)={0xa, 0x4e20, 0x44, @loopback, 0x8}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 4.027380864s ago: executing program 8 (id=5869): r0 = syz_open_dev$mouse(&(0x7f0000000300), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8a2195600000021982d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x82}, 'port1\x00', 0xe6, 0x811, 0x3, 0x8000007, 0x806, 0xfffffffa, 0x1, 0x0, 0x7cce8c743ee810dc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000007c0)={0x800100, 0xfffffffd, 0x22, 0x9, 0x1101, 0x1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080)=[0x554, 0x5], 0x2) r2 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$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") close_range(r2, r2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fstatfs(r3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8000000000000001, 0x1, 0x246, 0x7fffffffffffffff, 0x80000000, 0xffffffffffffffff, 0x2, 0x7fff, 0x9b}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000600)=0x4) sendmsg$nl_route(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@bridge_delvlan={0x30, 0x71, 0x20, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2, 0x2}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4008000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r10}, 0x18) r11 = epoll_create(0x5) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r8, &(0x7f0000000100)={0x10000011}) epoll_wait(r11, &(0x7f0000000500)=[{}], 0x1, 0x20400000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tgkill(0x0, 0x0, 0x20) write$P9_RVERSION(r9, 0x0, 0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) 3.132977791s ago: executing program 8 (id=5881): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x587, &(0x7f0000000f80)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) getdents64(r0, &(0x7f00000004c0)=""/55, 0x37) 3.046900192s ago: executing program 8 (id=5885): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r6, &(0x7f0000000080), 0x8) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x75}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x58, &(0x7f0000000040)=""/88, 0x41100, 0x20, '\x00', r5, @fallback=0x16, r6, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x6, 0xf8}, 0x10, r8, r9, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5, 0x9}], 0x10, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r10, 0x0, 0x8000000000}, 0x18) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) write$binfmt_elf64(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2000000000000000100"/376], 0x178) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xc7f}, 0x18) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.962198883s ago: executing program 5 (id=5917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x7, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2007, 0x0, 0x69, 0x3ffc0006}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000940)=[{&(0x7f00000025c0)=""/4102, 0x1000}, {&(0x7f0000000380)=""/102, 0x6a}, {&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000a80)=""/146, 0x92}], 0x37) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000001540)=""/70, 0x46}], 0x1, &(0x7f0000008640)=[{&(0x7f0000000040)=""/120, 0x78}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@acl}, {@block_validity}, {@journal_path={'journal_path', 0x3d, './file0'}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x82}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@noacl}, {@noblock_validity}, {@noinit_itable}]}, 0xf9, 0x587, &(0x7f0000000f80)="$eJzs3U1rG9caAOB3ZMn5cO6NAyHcexeXQBZNSSPHdj9SKDRdljY00O5TYSsmWI6CJYfYDTRZNJtuSiiU0kDpD+i+y9A/0F8RaAOhBNMuSkFl5JGt2JIdOzJSoueBSc6ZD595feY9PqORUABD62T6Ty7ivxHxVRJxtG1bPrKNJ9f2W31yayZdkmg0Pv49iSRb19o/yf4fyyr/iYifv4g4k9vabm15Zb5UqZQXs/pEfeH6RG155ezVhdJcea58bWp6+vwb01Nvv/Vmz2J99dKf33704P3zX55a/ebHR8fuJXEhjmTb2uN4DrfbKydLf2elQlzYtONkDxobJEm/T4A9GcnyvBDpGHA0RrKsB15+n0dEY02uAQyZpJn/YxvjADAkWvOA1r19j+6DXxiP31u7AWrGPtoef37ttZE42Lw3OryaPHVnlN7vjveg/bSNn367fy9dYvvXIQ7tUAfYldt3IuJcPr91/E+y8W/vzjVfPN7e5jaG7e8P9NODdP7zWqf5X259/hMd5j9jHXJ3L3bO/9yjHjTTVTr/e6fj/Hd96BofyWr/as75CsmVq5XyuYj4d0ScjsKBtL7d85zzqw8b3ba1z//SJW2/NRfMzuNR/sDTx8yW6qWIGH2euFse34n4X75T/Ml6/ycd+j/9fVzq+BMLW9acKN//f7f2d45/fzV+iHilY/9vPNFKtn8+OdG8HiZaV8VWf9w98Uu39vsdf9r/h7ePfzxpf15b230b3x/8q9xt216v/9Hkk2a5lQQ3S/X64mTEaPJhs36wff3UxrGtemv/NP7Tp7Yf/zpd/+nN16fPGP/d43e77joI/T+7q/7ffeHhB5991639Z+v/15ul09mabPzrLLtWnvUEn/f3BwAAAAAAAIMkFxFHIskV18u5XLG49v6O43E4V6nW6meuVJeuzUbzs7LjUci1nnQfbXs/xGT2fthWfWpTfToijkXE1yOHmvXiTLUy2+/gAQAAAAAAAAAAAAAAAAAAYECMdfn8f+rXkX6fHbDvml9scKDfZwH0w45f+d+Lb3oCBtKO+Q+8tOQ/DC/5D8NL/sPwkv8wvOQ/DC/5D8NL/gMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXbp4MV0aq09uzaT12RvLS/PVG2dny7X54sLSTHGmuni9OFetzlXKxZnqwk4/r1KtXp+ciqWbE/VyrT5RW165vFBdula/fHWhNFe+XC5s7Jrb38gAAAAAAAAAAAAAAAAAAADgxVFbXpkvVSrlRYWuhXdjIE5jPwNcs6fD84MShUKXwp2se3d3VB8HJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY5J8AAAD//9ybLZI=") chdir(&(0x7f00000001c0)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xc2, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800440000b400000000000190787f000001ac1414aa070f7aac1e01010a010100ac1414bb443467810a0101000000fe10ac1414bb0027ff009707b8f2411f356e8e000001ac1414aa7fffffff6401010000000001e000000200000fffe0000002fffffffb07070ae0000002070b8d64010101000000004404a453830ff77f000001ac1414bb7f000001441093900000063900000009000000ff940401000b029078128900007f00000100"/194], 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) syz_usbip_server_init(0x3) sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000a40)={&(0x7f0000000400), 0xc, &(0x7f00000008c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="71983c270400501b1aedcd916c140000c79e7676068e09201f08cde929abf97f67258108e792e6840a9f12e095e7a43c0b457000d7508fc70cdb5ba4766de999b0376ef64a59c82430c06937915a338919915881da5f33e42af7c4acfbb986000000000000bb4157821c4b0603e68023ed21725b9963535b1a1e46", @ANYRES16=0x0, @ANYBLOB="010326bd7000fcdbdf250700000008000a0004000000060003000900000014002000fe8000000000000000000000000000bb05002200000000000c001600d47d0000000000001400080068737230000000000000000000000000050007000300000006001d0000000000"], 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x40) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000007000088024000780080006"], 0x164}}, 0x1) getdents64(r3, &(0x7f00000004c0)=""/55, 0x37) epoll_create1(0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) 1.593473309s ago: executing program 2 (id=5924): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/46, 0x8d) 1.544618981s ago: executing program 2 (id=5927): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 1.544282561s ago: executing program 2 (id=5928): socket$nl_route(0x10, 0x3, 0x0) unshare(0x4040600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000080)={'system_u:object_r:tmpfs_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0xab}, 0x50) 1.528715591s ago: executing program 2 (id=5930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.487484131s ago: executing program 2 (id=5932): r0 = socket$caif_stream(0x25, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x14, &(0x7f00000019c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000380)='.log\x00', 0x400100, 0x142) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001a00)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001000)={r3, 0x9403, 0x401}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000d80)={r3, 0x9, 0x200, 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r7, @ANYBLOB="08002200ac14140335979c961fb7a404d2d94883aabe77bb426ba78bb556ac8fc12267e9a2cacc440925ec157d720f49a997c8529b43918796577f3ba7ffe68a95ca5dd29207f883b1c2550a8ba8313cec7dfba7978093c964a65f50a4acb02484c029fd87f1aa75b4d96328d18aa18b3f07dd1a2db27b09b602c200fb503c2ed6d6e7968e971ae35f75f6eeb6120b342dabbce861a3e6cb49ccf09013b6fb74fffa0c1edcee1e03ecb6c3400c0b295f644dfb96f31d98cb19532567ab3c993f7dc083ec48e00947af609efdc5de40ce3e13ed3b412e640942e6eba5a8b0ada647d2734b09516d43844905e1a8180bb11c70e6a7af9a591f"], 0x20}}, 0x0) socket$inet(0x2, 0x3, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r8, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/225, 0xe1}], 0x2, &(0x7f0000000600)=""/231, 0xe7}, 0x275a}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/2, 0x2}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000000880)}, {&(0x7f0000000880)=""/41, 0x29}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/22, 0x16}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x8, &(0x7f0000000b00)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/123, 0x7b}, {&(0x7f0000001540)=""/152, 0x98}], 0x2}, 0xc}], 0x3, 0x60010020, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) 1.233013297s ago: executing program 7 (id=5939): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) 1.219286317s ago: executing program 7 (id=5940): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x2, 0x4004040) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)=ANY=[@ANYBLOB="6e720000008c37fad14cea71a104d49e215441813d80"]) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffe37, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) capget(&(0x7f0000000000)={0x20071026}, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000e0300000000000000000000610000000000001b2e0000000000009f907ccf483020ccf5b210a4f3ac479f186d8bd96fa7e4445a08379cc94ffae810872fb8cd7d33926251792cf34219ba116c105099bd5b46584360513de94191de13de41f58079"], 0x0, 0x2d}, 0x28) 1.0697603s ago: executing program 7 (id=5941): r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x14008047}, 0x4000084) 1.069487119s ago: executing program 7 (id=5942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = socket$packet(0x11, 0x2, 0x300) connect$packet(r1, &(0x7f0000000040)={0x11, 0x11, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 906.504263ms ago: executing program 7 (id=5943): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x200000000000027e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x85) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d6974000000240002800800044000000001"], 0x118}}, 0x0) (fail_nth: 7) 565.343539ms ago: executing program 1 (id=5944): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, 0x0, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 559.952059ms ago: executing program 2 (id=5945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x2000000, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xc2000, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, r4, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003a00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000003a40)={0x6, 0x118, 0xfa00, {{0x5, 0x2, "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", 0x10, 0x5, 0xff, 0x4, 0xfd, 0x6, 0xe0, 0x1}}}, 0x120) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r7}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r7, &(0x7f0000000140)="049c16b213efe599cdb6bc20a279d67ee17dbfce4ef544cda9e0fea425510360b7b99c", 0x23, 0xc000, &(0x7f0000000180)={0xa, 0x4e23, 0x100, @mcast1, 0x10001}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000002000)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d72656c6178656400696f636861727365743d69736f383835392d332c7362736563746f723d3078303030303030303030303030303030352c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f6354982c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/46, 0x8d) r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x5, 0x80000) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000300)) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r6, &(0x7f0000000080)="00000000000000830000", 0xa, 0x20040051, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r9, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)=':*\x00') write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) 551.677029ms ago: executing program 1 (id=5946): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) 537.81082ms ago: executing program 1 (id=5947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) 522.16235ms ago: executing program 1 (id=5948): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0xfa, 0x69f, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/46, 0x8d) 464.277271ms ago: executing program 1 (id=5949): r0 = inotify_init() r1 = syz_clone(0xc000800, &(0x7f0000000500)="095066b207a25d0e333a6fb3a1c4ec72af32a828f3c3c4492a5f4658aa633d9ebd4caa06a651665f8b45663cf720e91bb2ba44a0f383f7e4bf0c2c9c888fd970fc99d5e6d77e59a6429224efdb9cb698c74cfb6b66ea97aac71d12f374fdf7a2dde9de3b6858b42563", 0x69, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000c80)="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") fcntl$setown(r0, 0x8, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="170000000000000004000000fd00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009eb4c5d1ae88e022baa832948e1de250783b01eb73526de2a366ec5046ff0d9bd91c18270f9d953de734a3a4ceceb6d760464e3045f9f143cdaa19f014b3e98e32b08b0dc85d9a59d387bf47e16a8d68edd0958b76323b196db96efe059dd00493fed6944b624c99533ccd0ddcc77d01a0602e06f9c310dec30eef82f82ee678f2950942265c3b85f23d082b08625e3e0f7b077120bbb6dc002f0df63c5e7812cd4865c68f88aad803c76567d9048f127bc638aecdb9fe390cd31a3296f1de9a62850ff0335948f134"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x26c841ac7dfb4727}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000001200), 0x10) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4}, './bus\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r11, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x40, 0x140a, 0x800, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x845}, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 463.760711ms ago: executing program 1 (id=5950): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000080)=r4}, 0x20) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000040)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000180)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000a00)={'syztnl0\x00', r9, 0x8000, 0x7, 0x8001, 0x5, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @remote, {[@rr={0x7, 0x1f, 0x44, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @rand_addr=0x64010100, @rand_addr=0x64010100, @remote, @local]}, @ssrr={0x89, 0x23, 0xdf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010101]}, @ssrr={0x89, 0x2f, 0x3c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @loopback, @remote, @private=0xa010102, @multicast2, @local, @local, @rand_addr=0x64010100, @remote, @loopback]}]}}}}}) r10 = semget$private(0x0, 0x6, 0x0) semtimedop(r10, &(0x7f00000002c0)=[{0x1, 0xfffe, 0x1000}], 0x1, 0x0) semctl$SETALL(r10, 0x0, 0x11, &(0x7f0000000200)=[0x8, 0xb2b]) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf2507000000050033000000000008000b000800000005002a000000000005003300020000000500330002000000050037000000000008003c00070000000800390006000000"], 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x48001) 322.617423ms ago: executing program 5 (id=5951): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbb00740000000000019078ac1e0001ac1414aa03019078036100004600000000004000002f0009ac101410ac1414bb44440001000086dd00"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_PHYS_PORT_ID={0x24, 0x22, "14743a5407f067a1cbd916b2d5d19fd85cd82ab61e4eeed84c3ebbbfb8485c1e"}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x20030004) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/153, 0x99}], 0x1) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 289.119854ms ago: executing program 5 (id=5952): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@abort}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@nogrpid}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r3, 0x0) syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000f00)=ANY=[], 0xfe, 0x875, &(0x7f0000001000)="$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") openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 154.036997ms ago: executing program 5 (id=5953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100009800a7d90000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r1, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 121.622868ms ago: executing program 5 (id=5954): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000200000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd1728738adf250c000000400005800800010075647000340002800800030000800000080003007800000008000400a8"], 0x54}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xc3300, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd']) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) unshare(0x2040400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r8, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) 42.677729ms ago: executing program 8 (id=5955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000001880)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x853}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nodioread_nolock}, {@dax_never}, {@inlinecrypt}]}, 0x3, 0x487, &(0x7f0000001d80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6400000002070103000000000000000002000007240007800800024000000003080001400000000408000240e0cc"], 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000001280)='./file0\x00', 0x1000, &(0x7f0000000f80)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESDEC=r8, @ANYRESHEX=r3, @ANYRESHEX=0x0, @ANYRES8=r2, @ANYRES8, @ANYRES16=r5, @ANYRESOCT=r5], 0xfe, 0x679, &(0x7f0000002240)="$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") r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r9, &(0x7f0000000040)={0x11, 0x1, r10, 0x1, 0x9}, 0x6) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r12 = fsmount(r7, 0x1, 0x4) r13 = openat$cgroup_subtree(r12, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 732.58µs ago: executing program 7 (id=5956): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) fcntl$setpipe(r2, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/mcfilter\x00') read$eventfd(r5, &(0x7f0000000080), 0x8) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x24, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x75}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x58, &(0x7f0000000040)=""/88, 0x41100, 0x20, '\x00', r4, @fallback=0x16, r5, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xb, 0x6, 0xf8}, 0x10, r7, r8, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x3, 0x5, 0x9}], 0x10, 0x6}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2000000000000000100"/376], 0x178) close(r0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 5 (id=5957): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) kernel console output (not intermixed with test programs): A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.798818][T17714] EXT4-fs error (device loop5): ext4_quota_enable:7128: inode #4: comm syz.5.5315: iget: bogus i_mode (4200) [ 279.841627][T17714] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5315: Bad quota inode: 4, type: 1 [ 279.863836][T17720] ALSA: seq fatal error: cannot create timer (-19) [ 279.883979][T17714] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 279.910501][T17714] EXT4-fs (loop5): mount failed [ 279.912426][T17729] netlink: 'syz.7.5318': attribute type 1 has an invalid length. [ 279.944883][T17714] loop5: detected capacity change from 0 to 1024 [ 279.956735][T17714] EXT4-fs: Ignoring removed bh option [ 279.965621][T17714] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 279.976236][T17735] loop7: detected capacity change from 0 to 1024 [ 279.987232][T17714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 279.987322][T17735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.997386][T17714] System zones: 0-1, 3-12 [ 280.013289][T17741] sg_write: data in/out 115/238 bytes for SCSI command 0xb-- guessing data in; [ 280.013289][T17741] program syz.2.5320 not setting count and/or reply_len properly [ 280.039400][T17714] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.5315: lblock 1 mapped to illegal pblock 1 (length 1) [ 280.054150][T17735] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.055458][T17714] __quota_error: 357 callbacks suppressed [ 280.055513][T17714] Quota error (device loop5): write_blk: dquota write failed [ 280.077180][T17714] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 280.091402][T17714] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5315: Failed to acquire dquot type 0 [ 280.113926][T17714] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.5315: Freeing blocks not in datazone - block = 0, count = 4096 [ 280.132115][T17714] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.5315: Invalid inode bitmap blk 0 in block_group 0 [ 280.147542][T17714] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 280.156836][ T31] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 280.158712][T17714] EXT4-fs (loop5): 1 orphan inode deleted [ 280.181895][ T31] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 280.182446][T17714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.190441][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 280.219235][ T29] audit: type=1400 audit(280.190:11745): avc: denied { accept } for pid=17743 comm="syz.2.5324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 280.278801][ T29] audit: type=1326 audit(280.250:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.301859][ T29] audit: type=1326 audit(280.250:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.324815][ T29] audit: type=1326 audit(280.250:11748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.347773][ T29] audit: type=1326 audit(280.250:11749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.370821][ T29] audit: type=1326 audit(280.250:11750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.393886][ T29] audit: type=1326 audit(280.250:11751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17756 comm="syz.7.5330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 280.486625][T17772] ALSA: seq fatal error: cannot create timer (-19) [ 280.544534][T17781] sd 0:0:1:0: device reset [ 280.592329][T17795] loop8: detected capacity change from 0 to 128 [ 280.606058][T17795] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 280.614033][T17795] FAT-fs (loop8): Filesystem has been set read-only [ 280.621609][T17795] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 280.629632][T17795] syz.8.5345: attempt to access beyond end of device [ 280.629632][T17795] loop8: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 280.655634][T17795] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.672241][T17798] pimreg: entered allmulticast mode [ 280.678378][T17798] pimreg: left allmulticast mode [ 280.738596][T17814] loop7: detected capacity change from 0 to 512 [ 280.745382][T17812] ALSA: seq fatal error: cannot create timer (-19) [ 280.762226][T17795] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.775469][T17814] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 280.793863][T17814] EXT4-fs (loop7): mount failed [ 280.832195][T17795] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.875345][T17827] FAULT_INJECTION: forcing a failure. [ 280.875345][T17827] name failslab, interval 1, probability 0, space 0, times 0 [ 280.888005][T17827] CPU: 1 UID: 0 PID: 17827 Comm: syz.7.5357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.888045][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.888073][T17827] Call Trace: [ 280.888145][T17827] [ 280.888151][T17827] __dump_stack+0x1d/0x30 [ 280.888173][T17827] dump_stack_lvl+0xe8/0x140 [ 280.888215][T17827] dump_stack+0x15/0x1b [ 280.888250][T17827] should_fail_ex+0x265/0x280 [ 280.888273][T17827] ? tipc_nametbl_lookup_mcast_sockets+0x37d/0x680 [ 280.888301][T17827] should_failslab+0x8c/0xb0 [ 280.888465][T17827] __kmalloc_cache_noprof+0x4c/0x320 [ 280.888493][T17827] tipc_nametbl_lookup_mcast_sockets+0x37d/0x680 [ 280.888525][T17827] tipc_sk_mcast_rcv+0x384/0x920 [ 280.888638][T17827] tipc_mcast_xmit+0x769/0xcb0 [ 280.888729][T17827] ? tipc_msg_build+0x2fd/0x840 [ 280.888757][T17827] tipc_send_group_bcast+0x5d9/0x6c0 [ 280.888861][T17827] ? __pfx_woken_wake_function+0x10/0x10 [ 280.888887][T17827] __tipc_sendmsg+0x186/0x1b00 [ 280.888906][T17827] ? obj_cgroup_charge_account+0xba/0x1a0 [ 280.888942][T17827] ? __rcu_read_unlock+0x4f/0x70 [ 280.888976][T17827] ? avc_has_perm_noaudit+0x1b1/0x200 [ 280.889020][T17827] ? __rcu_read_unlock+0x4f/0x70 [ 280.889043][T17827] __tipc_sendstream+0xa23/0xb30 [ 280.889069][T17827] ? selinux_socket_sendmsg+0x175/0x1b0 [ 280.889101][T17827] ? _raw_spin_unlock_bh+0x36/0x40 [ 280.889150][T17827] tipc_send_packet+0x65/0x80 [ 280.889169][T17827] ? __pfx_tipc_send_packet+0x10/0x10 [ 280.889188][T17827] __sock_sendmsg+0x145/0x180 [ 280.889230][T17827] ____sys_sendmsg+0x31e/0x4e0 [ 280.889277][T17827] ___sys_sendmsg+0x17b/0x1d0 [ 280.889308][T17827] __x64_sys_sendmsg+0xd4/0x160 [ 280.889337][T17827] x64_sys_call+0x191e/0x2ff0 [ 280.889358][T17827] do_syscall_64+0xd2/0x200 [ 280.889510][T17827] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.889534][T17827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 280.889581][T17827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.889609][T17827] RIP: 0033:0x7f7cb428eba9 [ 280.889626][T17827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.889670][T17827] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.889687][T17827] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 280.889698][T17827] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000003 [ 280.889709][T17827] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 280.889722][T17827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.889785][T17827] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 280.889805][T17827] [ 281.202900][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.248255][T17795] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.260486][T17838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.283101][T17838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.497738][ T7653] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.516662][ T7653] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.529570][ T7653] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.547993][ T7653] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.848472][T17829] Set syz1 is full, maxelem 65536 reached [ 281.874401][T17875] loop8: detected capacity change from 0 to 1024 [ 281.888870][T17871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.904249][T17875] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.943238][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.971593][T17885] loop8: detected capacity change from 0 to 512 [ 281.982544][T17885] loop8: detected capacity change from 0 to 512 [ 282.040695][T17893] ALSA: seq fatal error: cannot create timer (-19) [ 282.052808][T17896] loop8: detected capacity change from 0 to 512 [ 282.064049][T17898] __nla_validate_parse: 8 callbacks suppressed [ 282.064062][T17898] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5386'. [ 282.077036][T17896] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5385: bg 0: block 16: invalid block bitmap [ 282.093370][T17896] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 282.110603][T17896] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5385: attempt to clear invalid blocks 1669132790 len 1 [ 282.111706][T17901] siw: device registration error -23 [ 282.124888][T17896] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5385: invalid indirect mapped block 4294967295 (level 1) [ 282.144891][T17896] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5385: invalid indirect mapped block 4294967295 (level 2) [ 282.154484][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5388'. [ 282.159754][T17896] EXT4-fs (loop8): 1 truncate cleaned up [ 282.173635][T17896] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.175442][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5388'. [ 282.206611][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.313619][T17920] pimreg: entered allmulticast mode [ 282.321265][T17920] pimreg: left allmulticast mode [ 282.501214][T17946] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.640098][T17969] FAULT_INJECTION: forcing a failure. [ 282.640098][T17969] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.653444][T17969] CPU: 0 UID: 0 PID: 17969 Comm: syz.2.5412 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.653483][T17969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.653496][T17969] Call Trace: [ 282.653504][T17969] [ 282.653513][T17969] __dump_stack+0x1d/0x30 [ 282.653536][T17969] dump_stack_lvl+0xe8/0x140 [ 282.653580][T17969] dump_stack+0x15/0x1b [ 282.653594][T17969] should_fail_ex+0x265/0x280 [ 282.653622][T17969] should_fail_alloc_page+0xf2/0x100 [ 282.653650][T17969] __alloc_frozen_pages_noprof+0xff/0x360 [ 282.653702][T17969] alloc_pages_mpol+0xb3/0x250 [ 282.653796][T17969] vma_alloc_folio_noprof+0x1aa/0x300 [ 282.653822][T17969] handle_mm_fault+0xec2/0x2c20 [ 282.653902][T17969] do_user_addr_fault+0x636/0x1090 [ 282.653995][T17969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 282.654050][T17969] exc_page_fault+0x62/0xa0 [ 282.654079][T17969] asm_exc_page_fault+0x26/0x30 [ 282.654096][T17969] RIP: 0033:0x7f075ef0c1db [ 282.654109][T17969] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 282.654123][T17969] RSP: 002b:00007f075d9bce10 EFLAGS: 00010246 [ 282.654215][T17969] RAX: 00007f075d9bef30 RBX: 00007f075f177640 RCX: 0000000000000000 [ 282.654229][T17969] RDX: 00007f075d9bef78 RSI: 00007f075efbeca8 RDI: 00007f075d9bce30 [ 282.654243][T17969] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 282.654296][T17969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.654306][T17969] R13: 00007f075f1a6038 R14: 00007f075f1a5fa0 R15: 00007ffefde1ade8 [ 282.654323][T17969] [ 282.654331][T17969] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 282.878771][T17980] loop7: detected capacity change from 0 to 164 [ 282.887707][T17980] syz.7.5416: attempt to access beyond end of device [ 282.887707][T17980] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 282.899140][T17981] pimreg: entered allmulticast mode [ 282.902315][T17980] syz.7.5416: attempt to access beyond end of device [ 282.902315][T17980] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 282.909053][T17981] pimreg: left allmulticast mode [ 282.955197][T17985] loop7: detected capacity change from 0 to 164 [ 283.049802][T17999] ALSA: seq fatal error: cannot create timer (-19) [ 283.213412][T18017] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.248230][T18023] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.249561][T18007] lo speed is unknown, defaulting to 1000 [ 283.394105][T18033] ALSA: seq fatal error: cannot create timer (-19) [ 283.411541][T18007] chnl_net:caif_netlink_parms(): no params data found [ 283.439042][ T7653] bridge_slave_1: left allmulticast mode [ 283.445581][ T7653] bridge_slave_1: left promiscuous mode [ 283.451405][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.460931][ T7653] bridge_slave_0: left allmulticast mode [ 283.466617][ T7653] bridge_slave_0: left promiscuous mode [ 283.472534][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.533894][T18048] FAULT_INJECTION: forcing a failure. [ 283.533894][T18048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 283.547421][T18048] CPU: 0 UID: 0 PID: 18048 Comm: syz.5.5441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 283.547440][T18048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.547447][T18048] Call Trace: [ 283.547451][T18048] [ 283.547457][T18048] __dump_stack+0x1d/0x30 [ 283.547471][T18048] dump_stack_lvl+0xe8/0x140 [ 283.547524][T18048] dump_stack+0x15/0x1b [ 283.547533][T18048] should_fail_ex+0x265/0x280 [ 283.547556][T18048] should_fail_alloc_page+0xf2/0x100 [ 283.547572][T18048] __alloc_frozen_pages_noprof+0xff/0x360 [ 283.547659][T18048] alloc_pages_mpol+0xb3/0x250 [ 283.547682][T18048] vma_alloc_folio_noprof+0x1aa/0x300 [ 283.547719][T18048] do_wp_page+0x5db/0x24e0 [ 283.547733][T18048] ? css_rstat_updated+0xb7/0x240 [ 283.547749][T18048] ? __rcu_read_lock+0x37/0x50 [ 283.547764][T18048] handle_mm_fault+0x77d/0x2c20 [ 283.547839][T18048] ? __rcu_read_unlock+0x4f/0x70 [ 283.547856][T18048] do_user_addr_fault+0x3fe/0x1090 [ 283.547878][T18048] exc_page_fault+0x62/0xa0 [ 283.547966][T18048] asm_exc_page_fault+0x26/0x30 [ 283.547977][T18048] RIP: 0010:__put_user_4+0xd/0x20 [ 283.548054][T18048] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 283.548064][T18048] RSP: 0018:ffffc9000ea47d18 EFLAGS: 00050206 [ 283.548120][T18048] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000002000 [ 283.548128][T18048] RDX: ffff88810c2a0000 RSI: 00000000fffffff2 RDI: 0000000000000000 [ 283.548135][T18048] RBP: ffffc9000ea47ec0 R08: 0001888113f72207 R09: 0000000000000000 [ 283.548142][T18048] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 283.548149][T18048] R13: 0000000000000800 R14: 0000000000000000 R15: 00000000fffffff2 [ 283.548160][T18048] __se_sys_move_pages+0xa2f/0x1360 [ 283.548178][T18048] ? get_pid_task+0x96/0xd0 [ 283.548243][T18048] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 283.548262][T18048] ? __fget_files+0x184/0x1c0 [ 283.548277][T18048] ? fput+0x8f/0xc0 [ 283.548293][T18048] ? ksys_write+0x192/0x1a0 [ 283.548340][T18048] __x64_sys_move_pages+0x78/0x90 [ 283.548421][T18048] x64_sys_call+0x2f78/0x2ff0 [ 283.548433][T18048] do_syscall_64+0xd2/0x200 [ 283.548450][T18048] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 283.548463][T18048] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 283.548542][T18048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.548553][T18048] RIP: 0033:0x7f8fcff6eba9 [ 283.548562][T18048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.548572][T18048] RSP: 002b:00007f8fce9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 283.548583][T18048] RAX: ffffffffffffffda RBX: 00007f8fd01b5fa0 RCX: 00007f8fcff6eba9 [ 283.548618][T18048] RDX: 0000200000000040 RSI: 00000000000020a0 RDI: 0000000000000000 [ 283.548625][T18048] RBP: 00007f8fce9cf090 R08: 0000200000000000 R09: 0000000000000000 [ 283.548631][T18048] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 283.548639][T18048] R13: 00007f8fd01b6038 R14: 00007f8fd01b5fa0 R15: 00007ffdf388b6e8 [ 283.548649][T18048] [ 284.118376][T18064] ALSA: seq fatal error: cannot create timer (-19) [ 284.422689][ T7653] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.431645][ T7653] bond_slave_0: left promiscuous mode [ 284.437674][ T7653] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.446547][ T7653] bond_slave_1: left promiscuous mode [ 284.452372][ T7653] $Hÿ (unregistering): Released all slaves [ 284.486816][T18007] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.494685][T18007] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.501911][T18007] bridge_slave_0: entered allmulticast mode [ 284.508569][T18007] bridge_slave_0: entered promiscuous mode [ 284.515584][T18007] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.523357][T18007] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.531013][T18007] bridge_slave_1: entered allmulticast mode [ 284.537642][T18007] bridge_slave_1: entered promiscuous mode [ 284.558206][T18076] loop8: detected capacity change from 0 to 512 [ 284.571486][T18076] EXT4-fs error (device loop8): ext4_quota_enable:7128: inode #4: comm syz.8.5451: iget: bogus i_mode (4200) [ 284.590653][T18007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.601622][T18076] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.5451: Bad quota inode: 4, type: 1 [ 284.612865][ T7653] hsr_slave_0: left promiscuous mode [ 284.618869][ T7653] hsr_slave_1: left promiscuous mode [ 284.626781][T18076] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 284.658955][T18076] EXT4-fs (loop8): mount failed [ 284.687152][T18076] loop8: detected capacity change from 0 to 1024 [ 284.695116][ T7653] team0 (unregistering): Port device team_slave_1 removed [ 284.704707][ T7653] team0 (unregistering): Port device team_slave_0 removed [ 284.711684][T18076] EXT4-fs: Ignoring removed bh option [ 284.726017][T18076] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 284.754948][T18076] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 284.761874][T18007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.764725][T18076] System zones: 0-1, 3-12 [ 284.778651][T18076] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #3: block 1: comm syz.8.5451: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.800725][T18076] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.5451: Failed to acquire dquot type 0 [ 284.813871][T18007] team0: Port device team_slave_0 added [ 284.826259][T18007] team0: Port device team_slave_1 added [ 284.834515][T18076] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.5451: Freeing blocks not in datazone - block = 0, count = 4096 [ 284.855727][T18076] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.5451: Invalid inode bitmap blk 0 in block_group 0 [ 284.870165][T18007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.877213][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.903862][T18007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.915239][T18076] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 284.925562][ T7669] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:55: lblock 1 mapped to illegal pblock 1 (length 1) [ 284.942816][T18076] EXT4-fs (loop8): 1 orphan inode deleted [ 284.949244][ T7669] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:55: Failed to release dquot type 0 [ 284.963128][T18007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.963195][T18076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.970240][T18007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.009528][T18007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.052229][T18007] hsr_slave_0: entered promiscuous mode [ 285.058454][T18007] hsr_slave_1: entered promiscuous mode [ 285.088482][T18007] debugfs: 'hsr0' already exists in 'hsr' [ 285.094470][T18007] Cannot create hsr debugfs directory [ 285.147063][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 285.147077][ T29] audit: type=1326 audit(285.120:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.179860][ T29] audit: type=1326 audit(285.120:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.202969][ T29] audit: type=1326 audit(285.120:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.226005][ T29] audit: type=1326 audit(285.120:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.249284][ T29] audit: type=1326 audit(285.120:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.272355][ T29] audit: type=1326 audit(285.120:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.295392][ T29] audit: type=1326 audit(285.120:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.300263][T18076] validate_nla: 3 callbacks suppressed [ 285.300277][T18076] netlink: 'syz.8.5451': attribute type 21 has an invalid length. [ 285.318347][ T29] audit: type=1326 audit(285.120:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.354845][ T29] audit: type=1326 audit(285.120:12003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.377797][ T29] audit: type=1326 audit(285.120:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18090 comm="syz.5.5454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 285.410736][T18094] pimreg: entered allmulticast mode [ 285.416324][T18076] netlink: 156 bytes leftover after parsing attributes in process `syz.8.5451'. [ 285.425414][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5451'. [ 285.437338][T18090] pimreg: left allmulticast mode [ 285.447305][ T7653] IPVS: stop unused estimator thread 0... [ 285.746005][T18007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.759512][T18007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.768826][T18007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.780363][T18007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.834393][T18126] ALSA: seq fatal error: cannot create timer (-19) [ 285.886879][T18007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.914095][T18129] ALSA: seq fatal error: cannot create timer (-19) [ 285.927874][T18007] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.947772][ T7653] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.955017][ T7653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.980790][ T7636] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.987894][ T7636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.008743][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.022187][T18007] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 286.032678][T18007] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.071419][T18137] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5469'. [ 286.085111][T18007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.095513][T18144] loop8: detected capacity change from 0 to 1024 [ 286.112434][T18144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.137175][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.172532][T18156] ALSA: seq fatal error: cannot create timer (-19) [ 286.175352][T18007] veth0_vlan: entered promiscuous mode [ 286.190993][T18007] veth1_vlan: entered promiscuous mode [ 286.208231][T18007] veth0_macvtap: entered promiscuous mode [ 286.215533][T18007] veth1_macvtap: entered promiscuous mode [ 286.225896][T18007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.236637][T18007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.247433][ T7669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.257097][ T7669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.269009][ T7669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.280108][ T7669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.350502][T18168] ALSA: seq fatal error: cannot create timer (-19) [ 286.372502][T18171] FAULT_INJECTION: forcing a failure. [ 286.372502][T18171] name failslab, interval 1, probability 0, space 0, times 0 [ 286.385721][T18171] CPU: 0 UID: 0 PID: 18171 Comm: syz.2.5476 Not tainted syzkaller #0 PREEMPT(voluntary) [ 286.385752][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.385795][T18171] Call Trace: [ 286.385802][T18171] [ 286.385809][T18171] __dump_stack+0x1d/0x30 [ 286.385829][T18171] dump_stack_lvl+0xe8/0x140 [ 286.385840][T18171] dump_stack+0x15/0x1b [ 286.385908][T18171] should_fail_ex+0x265/0x280 [ 286.386011][T18171] should_failslab+0x8c/0xb0 [ 286.386026][T18171] kmem_cache_alloc_node_noprof+0x57/0x320 [ 286.386043][T18171] ? __alloc_skb+0x101/0x320 [ 286.386105][T18171] __alloc_skb+0x101/0x320 [ 286.386159][T18171] netlink_ack+0xfd/0x500 [ 286.386174][T18171] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 286.386191][T18171] netlink_rcv_skb+0x192/0x220 [ 286.386267][T18171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.386300][T18171] genl_rcv+0x28/0x40 [ 286.386327][T18171] netlink_unicast+0x5bd/0x690 [ 286.386341][T18171] netlink_sendmsg+0x58b/0x6b0 [ 286.386368][T18171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.386384][T18171] __sock_sendmsg+0x145/0x180 [ 286.386413][T18171] ____sys_sendmsg+0x31e/0x4e0 [ 286.386441][T18171] ___sys_sendmsg+0x17b/0x1d0 [ 286.386488][T18171] __x64_sys_sendmsg+0xd4/0x160 [ 286.386504][T18171] x64_sys_call+0x191e/0x2ff0 [ 286.386517][T18171] do_syscall_64+0xd2/0x200 [ 286.386615][T18171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.386654][T18171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 286.386745][T18171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.386759][T18171] RIP: 0033:0x7fd31f47eba9 [ 286.386768][T18171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.386779][T18171] RSP: 002b:00007fd31dee7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.386790][T18171] RAX: ffffffffffffffda RBX: 00007fd31f6c5fa0 RCX: 00007fd31f47eba9 [ 286.386798][T18171] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 286.386858][T18171] RBP: 00007fd31dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 286.386865][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.386872][T18171] R13: 00007fd31f6c6038 R14: 00007fd31f6c5fa0 R15: 00007ffebf0890a8 [ 286.386883][T18171] [ 286.722818][T18181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5481'. [ 286.763327][T18183] ALSA: seq fatal error: cannot create timer (-19) [ 286.812773][T18188] ALSA: seq fatal error: cannot create timer (-19) [ 286.857451][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5486'. [ 287.063317][T18204] loop5: detected capacity change from 0 to 512 [ 287.098279][T18208] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5492'. [ 287.113992][T18211] loop7: detected capacity change from 0 to 512 [ 287.121508][T18204] EXT4-fs warning (device loop5): ext4_xattr_inode_get:542: inode #11: comm syz.5.5489: ea_inode file size=4 entry size=6 [ 287.135719][T18211] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5493: bg 0: block 16: invalid block bitmap [ 287.151532][T18211] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 287.159324][T18204] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.5489: corrupted inode contents [ 287.173382][T18211] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5493: attempt to clear invalid blocks 1669132790 len 1 [ 287.173671][T18204] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #15: comm syz.5.5489: mark_inode_dirty error [ 287.208946][T18211] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5493: invalid indirect mapped block 4294967295 (level 1) [ 287.226701][T18204] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #15: comm syz.5.5489: corrupted inode contents [ 287.241186][T18211] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5493: invalid indirect mapped block 4294967295 (level 2) [ 287.258959][T18204] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #15: comm syz.5.5489: mark_inode_dirty error [ 287.273061][T18211] EXT4-fs (loop7): 1 truncate cleaned up [ 287.283433][T18204] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #15: comm syz.5.5489: mark inode dirty (error -117) [ 287.297637][T18211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.315764][T18204] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 287.331659][T18204] EXT4-fs (loop5): 1 orphan inode deleted [ 287.337952][T18204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.353162][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.372136][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5498'. [ 287.467007][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5501'. [ 287.484751][T18234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.500639][T18234] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.508119][T18234] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 287.522251][T18234] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 287.523776][T18241] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5504'. [ 287.621659][T18250] loop7: detected capacity change from 0 to 512 [ 287.632050][T18250] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5508: bg 0: block 16: invalid block bitmap [ 287.646073][T18250] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 287.657074][T18250] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5508: attempt to clear invalid blocks 1669132790 len 1 [ 287.671596][T18250] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5508: invalid indirect mapped block 4294967295 (level 1) [ 287.686057][T18250] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5508: invalid indirect mapped block 4294967295 (level 2) [ 287.704970][T18250] EXT4-fs (loop7): 1 truncate cleaned up [ 287.715340][T18250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.743473][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.779832][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5510'. [ 287.827937][T18260] pimreg: entered allmulticast mode [ 287.833992][T18260] pimreg: left allmulticast mode [ 287.881386][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.925286][T18270] ALSA: seq fatal error: cannot create timer (-19) [ 288.017304][T18284] loop7: detected capacity change from 0 to 764 [ 288.026529][T18284] iso9660: Unknown parameter '00000000000000000000001ÀÚ[t' [ 288.042347][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 288.078524][T18288] FAULT_INJECTION: forcing a failure. [ 288.078524][T18288] name failslab, interval 1, probability 0, space 0, times 0 [ 288.092081][T18288] CPU: 0 UID: 0 PID: 18288 Comm: syz.7.5523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.092156][T18288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 288.092169][T18288] Call Trace: [ 288.092176][T18288] [ 288.092184][T18288] __dump_stack+0x1d/0x30 [ 288.092204][T18288] dump_stack_lvl+0xe8/0x140 [ 288.092224][T18288] dump_stack+0x15/0x1b [ 288.092240][T18288] should_fail_ex+0x265/0x280 [ 288.092279][T18288] ? proc_do_submiturb+0x83d/0x1d20 [ 288.092301][T18288] should_failslab+0x8c/0xb0 [ 288.092322][T18288] __kmalloc_cache_noprof+0x4c/0x320 [ 288.092424][T18288] proc_do_submiturb+0x83d/0x1d20 [ 288.092442][T18288] ? proc_do_submiturb+0x161/0x1d20 [ 288.092464][T18288] ? should_fail_ex+0xdb/0x280 [ 288.092488][T18288] proc_submiturb+0x7b/0xa0 [ 288.092517][T18288] usbdev_ioctl+0xcc2/0x1710 [ 288.092570][T18288] ? __pfx_usbdev_ioctl+0x10/0x10 [ 288.092592][T18288] __se_sys_ioctl+0xce/0x140 [ 288.092635][T18288] __x64_sys_ioctl+0x43/0x50 [ 288.092654][T18288] x64_sys_call+0x1816/0x2ff0 [ 288.092675][T18288] do_syscall_64+0xd2/0x200 [ 288.092724][T18288] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 288.092790][T18288] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.092835][T18288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.092915][T18288] RIP: 0033:0x7f7cb428eba9 [ 288.092924][T18288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.092934][T18288] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.092946][T18288] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 288.092953][T18288] RDX: 0000200000000000 RSI: 000000008038550a RDI: 0000000000000004 [ 288.093039][T18288] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.093046][T18288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.093053][T18288] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 288.093064][T18288] [ 288.317018][T18291] siw: device registration error -23 [ 288.621192][T18302] ALSA: seq fatal error: cannot create timer (-19) [ 288.772164][T18276] Set syz1 is full, maxelem 65536 reached [ 289.024124][T18313] loop7: detected capacity change from 0 to 512 [ 289.034239][T18313] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5533: bg 0: block 16: invalid block bitmap [ 289.055683][T18313] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 289.070484][T18314] loop5: detected capacity change from 0 to 512 [ 289.082297][T18313] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.5533: attempt to clear invalid blocks 1669132790 len 1 [ 289.100809][T18314] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 289.110199][T18314] EXT4-fs (loop5): orphan cleanup on readonly fs [ 289.117076][T18313] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5533: invalid indirect mapped block 4294967295 (level 1) [ 289.135212][T18314] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.152695][T18313] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.5533: invalid indirect mapped block 4294967295 (level 2) [ 289.167538][T18314] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 289.169348][T18313] EXT4-fs (loop7): 1 truncate cleaned up [ 289.180638][T18314] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5532: bg 0: block 40: padding at end of block bitmap is not set [ 289.196021][T18314] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 289.199573][T18313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.205208][T18314] EXT4-fs (loop5): 1 truncate cleaned up [ 289.241677][T18314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.290788][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.322969][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.343786][T18320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5534'. [ 289.403707][T18326] loop5: detected capacity change from 0 to 764 [ 289.412205][T18326] Symlink component flag not implemented [ 289.417979][T18326] Symlink component flag not implemented [ 289.425463][T18326] Symlink component flag not implemented (128) [ 289.431727][T18326] Symlink component flag not implemented (122) [ 289.463398][T18329] loop5: detected capacity change from 0 to 512 [ 289.482050][T18329] EXT4-fs error (device loop5): ext4_quota_enable:7128: inode #4: comm syz.5.5538: iget: bogus i_mode (4200) [ 289.525753][T18329] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5538: Bad quota inode: 4, type: 1 [ 289.550737][T18329] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 289.578535][T18334] pimreg: entered allmulticast mode [ 289.585558][T18333] pimreg: left allmulticast mode [ 289.592365][T18329] EXT4-fs (loop5): mount failed [ 289.604434][T18329] loop5: detected capacity change from 0 to 1024 [ 289.612574][T18329] EXT4-fs: Ignoring removed bh option [ 289.618333][T18329] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 289.629852][T18329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 289.639214][T18329] System zones: 0-1, 3-12 [ 289.645528][T18329] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.5538: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.660089][T18329] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5538: Failed to acquire dquot type 0 [ 289.693043][T18329] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.5538: Freeing blocks not in datazone - block = 0, count = 4096 [ 289.795553][T18329] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.5538: Invalid inode bitmap blk 0 in block_group 0 [ 289.819444][ T7629] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 289.846108][T18340] netlink: 'syz.7.5540': attribute type 13 has an invalid length. [ 289.854016][T18340] netlink: 'syz.7.5540': attribute type 17 has an invalid length. [ 289.869797][T18329] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 289.878769][ T7629] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:20: Failed to release dquot type 0 [ 289.909593][T18329] EXT4-fs (loop5): 1 orphan inode deleted [ 289.915689][T18329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.938447][T18340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.138900][T18344] FAULT_INJECTION: forcing a failure. [ 290.138900][T18344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.152743][T18344] CPU: 0 UID: 0 PID: 18344 Comm: syz.7.5542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 290.152806][T18344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.152820][T18344] Call Trace: [ 290.152828][T18344] [ 290.152835][T18344] __dump_stack+0x1d/0x30 [ 290.152854][T18344] dump_stack_lvl+0xe8/0x140 [ 290.152922][T18344] dump_stack+0x15/0x1b [ 290.152940][T18344] should_fail_ex+0x265/0x280 [ 290.152980][T18344] should_fail+0xb/0x20 [ 290.153001][T18344] should_fail_usercopy+0x1a/0x20 [ 290.153027][T18344] _copy_from_user+0x1c/0xb0 [ 290.153054][T18344] ___sys_sendmsg+0xc1/0x1d0 [ 290.153166][T18344] __x64_sys_sendmsg+0xd4/0x160 [ 290.153267][T18344] x64_sys_call+0x191e/0x2ff0 [ 290.153286][T18344] do_syscall_64+0xd2/0x200 [ 290.153338][T18344] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.153364][T18344] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 290.153391][T18344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.153464][T18344] RIP: 0033:0x7f7cb428eba9 [ 290.153480][T18344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.153498][T18344] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.153554][T18344] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 290.153566][T18344] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000008 [ 290.153576][T18344] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.153655][T18344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.153668][T18344] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 290.153688][T18344] [ 290.338644][T18329] netlink: 'syz.5.5538': attribute type 21 has an invalid length. [ 290.346748][T18329] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5538'. [ 290.355847][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5538'. [ 290.425382][T18353] loop7: detected capacity change from 0 to 512 [ 290.447652][T18355] loop8: detected capacity change from 0 to 764 [ 290.454939][T18355] iso9660: Unknown parameter '00000000000000000000001ÀÚ[t' [ 290.479825][T18353] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 290.504030][T18361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.516760][T18353] EXT4-fs (loop7): orphan cleanup on readonly fs [ 290.534866][T18353] __quota_error: 300 callbacks suppressed [ 290.534883][T18353] Quota error (device loop7): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 290.561304][T18353] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 290.578430][T18361] netlink: 'syz.8.5549': attribute type 3 has an invalid length. [ 290.601748][T18353] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 290.616603][T18353] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5546: bg 0: block 40: padding at end of block bitmap is not set [ 290.644478][T18353] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 290.667057][T18353] EXT4-fs (loop7): 1 truncate cleaned up [ 290.682276][T18353] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.730276][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.790369][ T29] audit: type=1326 audit(290.770:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.841002][ T29] audit: type=1326 audit(290.770:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.864369][ T29] audit: type=1326 audit(290.770:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.888105][ T29] audit: type=1326 audit(290.770:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.911981][ T29] audit: type=1326 audit(290.770:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.921729][T18367] loop7: detected capacity change from 0 to 1024 [ 290.935008][ T29] audit: type=1326 audit(290.770:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.935036][ T29] audit: type=1326 audit(290.770:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 290.988565][ T29] audit: type=1326 audit(290.770:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 291.012297][ T29] audit: type=1326 audit(290.770:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18364 comm="syz.7.5550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb428eba9 code=0x7ffc0000 [ 291.050140][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.061411][T18367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.129618][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.176783][T18384] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5558'. [ 291.178686][T18382] loop5: detected capacity change from 0 to 512 [ 291.195287][T18382] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 291.207714][T18382] EXT4-fs (loop5): 1 truncate cleaned up [ 291.215109][T18382] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.260095][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.313680][T18396] loop5: detected capacity change from 0 to 512 [ 291.331927][T18396] EXT4-fs error (device loop5): ext4_quota_enable:7128: inode #4: comm syz.5.5562: iget: bogus i_mode (4200) [ 291.359182][T18396] EXT4-fs error (device loop5): ext4_quota_enable:7131: comm syz.5.5562: Bad quota inode: 4, type: 1 [ 291.375113][T18396] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 291.391617][T18396] EXT4-fs (loop5): mount failed [ 291.407739][T18403] ALSA: seq fatal error: cannot create timer (-19) [ 291.486915][T18396] loop5: detected capacity change from 0 to 1024 [ 291.522382][T18396] EXT4-fs: Ignoring removed bh option [ 291.531119][T18396] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 291.605450][T18396] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 291.617086][T18396] System zones: 0-1, 3-12 [ 291.624149][T18396] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.5562: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.655687][T18396] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.5562: Failed to acquire dquot type 0 [ 291.667365][T18396] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.5562: Freeing blocks not in datazone - block = 0, count = 4096 [ 291.686148][T18396] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.5562: Invalid inode bitmap blk 0 in block_group 0 [ 291.700242][ T7629] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.787124][T18396] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 291.806134][T18396] EXT4-fs (loop5): 1 orphan inode deleted [ 291.812144][ T7629] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:20: Failed to release dquot type 0 [ 291.826974][T18396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.983187][T18419] ALSA: seq fatal error: cannot create timer (-19) [ 292.079266][T18396] netlink: 'syz.5.5562': attribute type 21 has an invalid length. [ 292.175969][T18407] Set syz1 is full, maxelem 65536 reached [ 292.311413][T18432] netlink: 'syz.8.5575': attribute type 13 has an invalid length. [ 292.319393][T18432] netlink: 'syz.8.5575': attribute type 17 has an invalid length. [ 292.342134][T18432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.357661][T18433] __nla_validate_parse: 2 callbacks suppressed [ 292.357675][T18433] netlink: 188 bytes leftover after parsing attributes in process `syz.7.5576'. [ 292.418664][T18435] ALSA: seq fatal error: cannot create timer (-19) [ 292.651513][T18438] netlink: 'syz.2.5578': attribute type 21 has an invalid length. [ 292.659489][T18438] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5578'. [ 292.668623][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5578'. [ 292.708072][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.132926][T18449] ALSA: seq fatal error: cannot create timer (-19) [ 293.217817][T18460] ALSA: seq fatal error: cannot create timer (-19) [ 293.273868][T18467] netlink: 112 bytes leftover after parsing attributes in process `syz.7.5590'. [ 293.305941][T18463] netlink: 'syz.2.5588': attribute type 13 has an invalid length. [ 293.314668][T18463] netlink: 'syz.2.5588': attribute type 17 has an invalid length. [ 293.327510][T18469] loop8: detected capacity change from 0 to 512 [ 293.350408][T18473] FAULT_INJECTION: forcing a failure. [ 293.350408][T18473] name failslab, interval 1, probability 0, space 0, times 0 [ 293.353770][T18469] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 293.363960][T18473] CPU: 0 UID: 0 PID: 18473 Comm: syz.7.5593 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.364007][T18473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.364020][T18473] Call Trace: [ 293.364027][T18473] [ 293.364043][T18473] __dump_stack+0x1d/0x30 [ 293.364064][T18473] dump_stack_lvl+0xe8/0x140 [ 293.364083][T18473] dump_stack+0x15/0x1b [ 293.364100][T18473] should_fail_ex+0x265/0x280 [ 293.364140][T18473] should_failslab+0x8c/0xb0 [ 293.364165][T18473] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 293.364193][T18473] ? snd_timer_instance_new+0x31/0x160 [ 293.364285][T18473] ? snd_timer_instance_new+0x4a/0x160 [ 293.364341][T18473] ? should_failslab+0x8c/0xb0 [ 293.364365][T18473] kstrdup+0x3e/0xd0 [ 293.364431][T18473] snd_timer_instance_new+0x4a/0x160 [ 293.364498][T18473] snd_seq_timer_open+0x12b/0x360 [ 293.364519][T18473] ? snd_timer_instance_free+0x5f/0x70 [ 293.364547][T18473] ? kfree+0xd9/0x320 [ 293.364610][T18473] snd_seq_queue_timer_open+0xaf/0x120 [ 293.364630][T18473] snd_seq_ioctl_set_queue_timer+0x14b/0x170 [ 293.364660][T18473] snd_seq_ioctl+0x17d/0x2e0 [ 293.364693][T18473] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 293.364757][T18473] __se_sys_ioctl+0xce/0x140 [ 293.364776][T18473] __x64_sys_ioctl+0x43/0x50 [ 293.364794][T18473] x64_sys_call+0x1816/0x2ff0 [ 293.364815][T18473] do_syscall_64+0xd2/0x200 [ 293.364894][T18473] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.364983][T18473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.365011][T18473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.365032][T18473] RIP: 0033:0x7f7cb428eba9 [ 293.365052][T18473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.365069][T18473] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.365134][T18473] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 293.365148][T18473] RDX: 0000200000000400 RSI: 0000000040605346 RDI: 0000000000000005 [ 293.365159][T18473] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 293.365232][T18473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.365245][T18473] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 293.365262][T18473] [ 293.420236][T18469] EXT4-fs (loop8): orphan cleanup on readonly fs [ 293.427947][T18469] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.452583][T18477] ALSA: seq fatal error: cannot create timer (-19) [ 293.455205][T18469] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 293.464049][T18469] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5591: bg 0: block 40: padding at end of block bitmap is not set [ 293.490783][T18469] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 293.495082][T18463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.676164][T18469] EXT4-fs (loop8): 1 truncate cleaned up [ 293.682422][T18469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.699762][T18489] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18489 comm=syz.5.5599 [ 293.723497][T18480] erspan1: entered allmulticast mode [ 293.730641][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.739615][T18489] ALSA: seq fatal error: cannot create timer (-19) [ 293.768702][T18497] loop5: detected capacity change from 0 to 1024 [ 293.784588][T18504] siw: device registration error -23 [ 293.792016][T18497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.818089][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.872580][T18484] netlink: 'syz.2.5597': attribute type 21 has an invalid length. [ 293.880540][T18484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5597'. [ 293.889634][T18484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5597'. [ 293.906276][T18516] FAULT_INJECTION: forcing a failure. [ 293.906276][T18516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.919450][T18516] CPU: 1 UID: 0 PID: 18516 Comm: syz.8.5608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.919479][T18516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.919490][T18516] Call Trace: [ 293.919497][T18516] [ 293.919504][T18516] __dump_stack+0x1d/0x30 [ 293.919524][T18516] dump_stack_lvl+0xe8/0x140 [ 293.919540][T18516] dump_stack+0x15/0x1b [ 293.919620][T18516] should_fail_ex+0x265/0x280 [ 293.919675][T18516] should_fail+0xb/0x20 [ 293.919696][T18516] should_fail_usercopy+0x1a/0x20 [ 293.919797][T18516] _copy_to_user+0x20/0xa0 [ 293.919826][T18516] simple_read_from_buffer+0xb5/0x130 [ 293.919845][T18516] proc_fail_nth_read+0x10e/0x150 [ 293.919941][T18516] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.919962][T18516] vfs_read+0x1a5/0x770 [ 293.919982][T18516] ? __rcu_read_unlock+0x4f/0x70 [ 293.920010][T18516] ? __fget_files+0x184/0x1c0 [ 293.920056][T18516] ksys_read+0xda/0x1a0 [ 293.920076][T18516] __x64_sys_read+0x40/0x50 [ 293.920094][T18516] x64_sys_call+0x27bc/0x2ff0 [ 293.920180][T18516] do_syscall_64+0xd2/0x200 [ 293.920207][T18516] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.920235][T18516] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.920262][T18516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.920348][T18516] RIP: 0033:0x7fcb089bd5bc [ 293.920362][T18516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 293.920425][T18516] RSP: 002b:00007fcb07427030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 293.920442][T18516] RAX: ffffffffffffffda RBX: 00007fcb08c05fa0 RCX: 00007fcb089bd5bc [ 293.920453][T18516] RDX: 000000000000000f RSI: 00007fcb074270a0 RDI: 0000000000000005 [ 293.920464][T18516] RBP: 00007fcb07427090 R08: 0000000000000000 R09: 0000000000000000 [ 293.920475][T18516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.920485][T18516] R13: 00007fcb08c06038 R14: 00007fcb08c05fa0 R15: 00007ffd887483f8 [ 293.920505][T18516] [ 293.926353][T18518] netlink: 'syz.5.5605': attribute type 13 has an invalid length. [ 294.082942][T18521] loop8: detected capacity change from 0 to 164 [ 294.159583][T18518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 294.233520][T18534] loop8: detected capacity change from 0 to 1024 [ 294.254869][T18534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.293146][T18541] ALSA: seq fatal error: cannot create timer (-19) [ 294.301473][T16448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.333698][T18546] ALSA: seq fatal error: cannot create timer (-19) [ 294.361562][T18553] siw: device registration error -23 [ 294.438913][T18558] loop8: detected capacity change from 0 to 164 [ 294.591931][T18574] ALSA: seq fatal error: cannot create timer (-19) [ 294.647769][T18581] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5634'. [ 294.882083][T18583] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5635'. [ 294.891890][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5635'. [ 294.939237][T18611] ALSA: seq fatal error: cannot create timer (-19) [ 294.964769][T18615] siw: device registration error -23 [ 295.021001][T18617] ALSA: seq fatal error: cannot create timer (-19) [ 295.087921][T18624] loop5: detected capacity change from 0 to 512 [ 295.102284][T18624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.118959][T18624] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5650: corrupted xattr block 19: overlapping e_value [ 295.134242][T18624] EXT4-fs (loop5): Remounting filesystem read-only [ 295.140790][T18624] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 295.151382][T18624] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 295.160608][T18624] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 295.323906][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.498976][T18635] loop5: detected capacity change from 0 to 1024 [ 295.543061][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 295.543075][ T29] audit: type=1326 audit(295.520:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.592998][T18635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.625306][ T29] audit: type=1326 audit(295.560:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.649436][ T29] audit: type=1326 audit(295.560:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.672466][ T29] audit: type=1326 audit(295.560:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.679869][T18622] Set syz1 is full, maxelem 65536 reached [ 295.696105][ T29] audit: type=1326 audit(295.560:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.724943][ T29] audit: type=1326 audit(295.560:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.748056][ T29] audit: type=1326 audit(295.560:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.771811][ T29] audit: type=1326 audit(295.560:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.795135][ T29] audit: type=1326 audit(295.560:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.818119][ T29] audit: type=1326 audit(295.560:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18638 comm="syz.1.5656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 295.844870][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.938390][T18655] ALSA: seq fatal error: cannot create timer (-19) [ 295.958532][T18667] loop8: detected capacity change from 0 to 512 [ 295.965966][T18667] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 295.987067][T18667] EXT4-fs (loop8): 1 truncate cleaned up [ 295.993763][T18667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.030203][T18674] loop5: detected capacity change from 0 to 1024 [ 296.092538][T18682] validate_nla: 3 callbacks suppressed [ 296.092552][T18682] netlink: 'syz.8.5671': attribute type 13 has an invalid length. [ 296.106016][T18682] netlink: 'syz.8.5671': attribute type 17 has an invalid length. [ 296.128457][T18659] netlink: 'syz.1.5665': attribute type 21 has an invalid length. [ 296.141597][T18682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 296.162607][T18659] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5665'. [ 296.215471][T18693] loop5: detected capacity change from 0 to 256 [ 296.232886][T18696] loop8: detected capacity change from 0 to 512 [ 296.240841][T18696] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5678: bg 0: block 16: invalid block bitmap [ 296.245434][T18693] vlan2: entered promiscuous mode [ 296.258443][T18693] vlan2: entered allmulticast mode [ 296.260180][T18696] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 296.263663][T18693] hsr_slave_1: entered allmulticast mode [ 296.273773][T18696] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.5678: attempt to clear invalid blocks 1669132790 len 1 [ 296.294312][T18696] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5678: invalid indirect mapped block 4294967295 (level 1) [ 296.305700][T18693] syz.5.5677: attempt to access beyond end of device [ 296.305700][T18693] loop5: rw=2049, sector=256, nr_sectors = 68 limit=256 [ 296.308608][T18696] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.5678: invalid indirect mapped block 4294967295 (level 2) [ 296.336333][T18696] EXT4-fs (loop8): 1 truncate cleaned up [ 296.366175][T18699] FAULT_INJECTION: forcing a failure. [ 296.366175][T18699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.380164][T18699] CPU: 0 UID: 0 PID: 18699 Comm: syz.8.5679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 296.380188][T18699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.380212][T18699] Call Trace: [ 296.380218][T18699] [ 296.380226][T18699] __dump_stack+0x1d/0x30 [ 296.380362][T18699] dump_stack_lvl+0xe8/0x140 [ 296.380379][T18699] dump_stack+0x15/0x1b [ 296.380395][T18699] should_fail_ex+0x265/0x280 [ 296.380418][T18699] should_fail+0xb/0x20 [ 296.380476][T18699] should_fail_usercopy+0x1a/0x20 [ 296.380500][T18699] _copy_from_user+0x1c/0xb0 [ 296.380524][T18699] ___sys_sendmsg+0xc1/0x1d0 [ 296.380546][T18699] __x64_sys_sendmsg+0xd4/0x160 [ 296.380569][T18699] x64_sys_call+0x191e/0x2ff0 [ 296.380585][T18699] do_syscall_64+0xd2/0x200 [ 296.380603][T18699] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 296.380617][T18699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 296.380669][T18699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.380682][T18699] RIP: 0033:0x7fcb089beba9 [ 296.380722][T18699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.380786][T18699] RSP: 002b:00007fcb07427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.380798][T18699] RAX: ffffffffffffffda RBX: 00007fcb08c05fa0 RCX: 00007fcb089beba9 [ 296.380805][T18699] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 296.380812][T18699] RBP: 00007fcb07427090 R08: 0000000000000000 R09: 0000000000000000 [ 296.380819][T18699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.380883][T18699] R13: 00007fcb08c06038 R14: 00007fcb08c05fa0 R15: 00007ffd887483f8 [ 296.380893][T18699] [ 296.422706][T18705] loop5: detected capacity change from 0 to 1024 [ 296.612724][T18714] ALSA: seq fatal error: cannot create timer (-19) [ 296.700465][T18720] loop5: detected capacity change from 0 to 164 [ 296.789405][T18725] ALSA: seq fatal error: cannot create timer (-19) [ 296.974467][T18746] netlink: 'syz.5.5696': attribute type 1 has an invalid length. [ 296.987014][T18746] bond1: entered promiscuous mode [ 296.992792][T18746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.033345][T18752] loop5: detected capacity change from 0 to 512 [ 297.047039][T18752] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 297.059853][T18752] EXT4-fs (loop5): 1 truncate cleaned up [ 297.242700][T18767] FAULT_INJECTION: forcing a failure. [ 297.242700][T18767] name failslab, interval 1, probability 0, space 0, times 0 [ 297.255505][T18767] CPU: 0 UID: 0 PID: 18767 Comm: syz.7.5703 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.255530][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.255579][T18767] Call Trace: [ 297.255585][T18767] [ 297.255592][T18767] __dump_stack+0x1d/0x30 [ 297.255614][T18767] dump_stack_lvl+0xe8/0x140 [ 297.255634][T18767] dump_stack+0x15/0x1b [ 297.255651][T18767] should_fail_ex+0x265/0x280 [ 297.255694][T18767] should_failslab+0x8c/0xb0 [ 297.255719][T18767] __kmalloc_noprof+0xa5/0x3e0 [ 297.255841][T18767] ? io_cache_alloc_new+0x2a/0xb0 [ 297.255867][T18767] io_cache_alloc_new+0x2a/0xb0 [ 297.255950][T18767] __io_prep_rw+0xcf/0x6d0 [ 297.255975][T18767] ? __rcu_read_unlock+0x4f/0x70 [ 297.256005][T18767] io_prep_rwv+0x33/0x230 [ 297.256025][T18767] io_prep_writev+0x22/0x30 [ 297.256097][T18767] io_submit_sqes+0x5ec/0x1060 [ 297.256147][T18767] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 297.256172][T18767] ? 0xffffffff81000000 [ 297.256270][T18767] ? __rcu_read_unlock+0x4f/0x70 [ 297.256291][T18767] ? get_pid_task+0x96/0xd0 [ 297.256310][T18767] ? proc_fail_nth_write+0x13b/0x160 [ 297.256334][T18767] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 297.256359][T18767] ? vfs_write+0x7e8/0x960 [ 297.256452][T18767] ? __rcu_read_unlock+0x4f/0x70 [ 297.256476][T18767] ? __fget_files+0x184/0x1c0 [ 297.256501][T18767] ? fput+0x8f/0xc0 [ 297.256581][T18767] __x64_sys_io_uring_enter+0x78/0x90 [ 297.256630][T18767] x64_sys_call+0x2de1/0x2ff0 [ 297.256652][T18767] do_syscall_64+0xd2/0x200 [ 297.256679][T18767] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 297.256701][T18767] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 297.256782][T18767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.256804][T18767] RIP: 0033:0x7f7cb428eba9 [ 297.256818][T18767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.256833][T18767] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 297.256904][T18767] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 297.256933][T18767] RDX: 0000000000000217 RSI: 0000000000003513 RDI: 0000000000000005 [ 297.256946][T18767] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 297.256957][T18767] R10: 00000000000000a1 R11: 0000000000000246 R12: 0000000000000001 [ 297.256970][T18767] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 297.257006][T18767] [ 297.533930][T18771] __nla_validate_parse: 5 callbacks suppressed [ 297.533946][T18771] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5705'. [ 297.603874][T18777] netlink: 'syz.2.5708': attribute type 13 has an invalid length. [ 297.611925][T18777] netlink: 'syz.2.5708': attribute type 17 has an invalid length. [ 297.636436][T18777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 297.715312][T18788] loop7: detected capacity change from 0 to 512 [ 297.723625][T18788] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 297.734979][T18788] EXT4-fs (loop7): 1 truncate cleaned up [ 297.982694][T18809] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5720'. [ 298.008637][T18813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5722'. [ 298.055172][T18819] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5721'. [ 298.116506][T18829] ALSA: seq fatal error: cannot create timer (-19) [ 298.165932][T18837] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5732'. [ 298.245108][T18843] FAULT_INJECTION: forcing a failure. [ 298.245108][T18843] name failslab, interval 1, probability 0, space 0, times 0 [ 298.258367][T18843] CPU: 0 UID: 0 PID: 18843 Comm: syz.1.5735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.258384][T18843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.258392][T18843] Call Trace: [ 298.258396][T18843] [ 298.258402][T18843] __dump_stack+0x1d/0x30 [ 298.258415][T18843] dump_stack_lvl+0xe8/0x140 [ 298.258539][T18843] dump_stack+0x15/0x1b [ 298.258549][T18843] should_fail_ex+0x265/0x280 [ 298.258563][T18843] should_failslab+0x8c/0xb0 [ 298.258603][T18843] kmem_cache_alloc_node_noprof+0x57/0x320 [ 298.258620][T18843] ? __alloc_skb+0x101/0x320 [ 298.258713][T18843] __alloc_skb+0x101/0x320 [ 298.258724][T18843] ? ip_generic_getfrag+0x135/0x1b0 [ 298.258743][T18843] __ip_append_data+0x1935/0x2440 [ 298.258817][T18843] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 298.258914][T18843] ip_append_data+0xd6/0x130 [ 298.258931][T18843] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 298.258949][T18843] udp_sendmsg+0x36e/0x13c0 [ 298.259006][T18843] ? mntput+0x4b/0x80 [ 298.259036][T18843] ? __rcu_read_unlock+0x4f/0x70 [ 298.259048][T18843] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 298.259066][T18843] ? avc_has_perm+0xf7/0x180 [ 298.259095][T18843] ? __pfx_udp_sendmsg+0x10/0x10 [ 298.259123][T18843] inet_sendmsg+0xac/0xd0 [ 298.259143][T18843] __sock_sendmsg+0x102/0x180 [ 298.259286][T18843] __sys_sendto+0x268/0x330 [ 298.259312][T18843] __x64_sys_sendto+0x76/0x90 [ 298.259336][T18843] x64_sys_call+0x2d05/0x2ff0 [ 298.259407][T18843] do_syscall_64+0xd2/0x200 [ 298.259425][T18843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.259482][T18843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 298.259498][T18843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.259560][T18843] RIP: 0033:0x7fd0d707eba9 [ 298.259570][T18843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.259580][T18843] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 298.259599][T18843] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 298.259606][T18843] RDX: 0000000000006200 RSI: 0000200000000c80 RDI: 0000000000000006 [ 298.259613][T18843] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 298.259620][T18843] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.259689][T18843] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 298.259700][T18843] [ 298.544209][T18850] loop8: detected capacity change from 0 to 512 [ 298.551876][T18850] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 298.563073][T18850] EXT4-fs (loop8): 1 truncate cleaned up [ 298.613786][T18855] ALSA: seq fatal error: cannot create timer (-19) [ 298.662543][T18862] loop8: detected capacity change from 0 to 1024 [ 298.703371][T18866] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5744'. [ 298.732601][T18866] lo speed is unknown, defaulting to 1000 [ 298.746210][T18847] netlink: 'syz.1.5737': attribute type 21 has an invalid length. [ 298.754564][T18847] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5737'. [ 298.763687][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5737'. [ 298.806293][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5747'. [ 298.888061][T18877] FAULT_INJECTION: forcing a failure. [ 298.888061][T18877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.901203][T18877] CPU: 0 UID: 0 PID: 18877 Comm: syz.2.5748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 298.901232][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 298.901312][T18877] Call Trace: [ 298.901317][T18877] [ 298.901358][T18877] __dump_stack+0x1d/0x30 [ 298.901381][T18877] dump_stack_lvl+0xe8/0x140 [ 298.901419][T18877] dump_stack+0x15/0x1b [ 298.901559][T18877] should_fail_ex+0x265/0x280 [ 298.901580][T18877] should_fail+0xb/0x20 [ 298.901597][T18877] should_fail_usercopy+0x1a/0x20 [ 298.901694][T18877] _copy_to_user+0x20/0xa0 [ 298.901722][T18877] simple_read_from_buffer+0xb5/0x130 [ 298.901747][T18877] proc_fail_nth_read+0x10e/0x150 [ 298.901840][T18877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.901861][T18877] vfs_read+0x1a5/0x770 [ 298.901879][T18877] ? __rcu_read_unlock+0x4f/0x70 [ 298.901898][T18877] ? __fget_files+0x184/0x1c0 [ 298.901957][T18877] ksys_read+0xda/0x1a0 [ 298.901978][T18877] __x64_sys_read+0x40/0x50 [ 298.901997][T18877] x64_sys_call+0x27bc/0x2ff0 [ 298.902014][T18877] do_syscall_64+0xd2/0x200 [ 298.902073][T18877] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 298.902175][T18877] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 298.902204][T18877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.902301][T18877] RIP: 0033:0x7fd31f47d5bc [ 298.902391][T18877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.902481][T18877] RSP: 002b:00007fd31dee7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.902505][T18877] RAX: ffffffffffffffda RBX: 00007fd31f6c5fa0 RCX: 00007fd31f47d5bc [ 298.902516][T18877] RDX: 000000000000000f RSI: 00007fd31dee70a0 RDI: 0000000000000006 [ 298.902527][T18877] RBP: 00007fd31dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 298.902538][T18877] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 298.902559][T18877] R13: 00007fd31f6c6038 R14: 00007fd31f6c5fa0 R15: 00007ffebf0890a8 [ 298.902579][T18877] [ 299.153806][T18881] loop5: detected capacity change from 0 to 512 [ 299.163072][T18883] ALSA: seq fatal error: cannot create timer (-19) [ 299.172850][T18881] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 299.199679][T18881] EXT4-fs (loop5): 1 truncate cleaned up [ 299.296758][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5758'. [ 299.390563][T18903] loop7: detected capacity change from 0 to 16384 [ 299.434302][T18905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.456815][T18906] pim6reg: entered allmulticast mode [ 299.463602][T18905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.479706][T18906] pim6reg: left allmulticast mode [ 299.487927][T18905] serio: Serial port ptm0 [ 299.670550][T18903] loop7: detected capacity change from 16384 to 16383 [ 299.834198][T18929] vlan2: entered allmulticast mode [ 299.839595][T18929] dummy0: entered allmulticast mode [ 300.115570][T18938] loop5: detected capacity change from 0 to 512 [ 300.122397][T18933] netlink: 'syz.2.5770': attribute type 21 has an invalid length. [ 300.130707][T18938] msdos: Bad value for 'uid' [ 300.135318][T18938] msdos: Bad value for 'uid' [ 300.404452][T18950] 9pnet_fd: Insufficient options for proto=fd [ 300.561784][T18960] FAULT_INJECTION: forcing a failure. [ 300.561784][T18960] name failslab, interval 1, probability 0, space 0, times 0 [ 300.574536][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.1.5781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.574564][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.574577][T18960] Call Trace: [ 300.574584][T18960] [ 300.574593][T18960] __dump_stack+0x1d/0x30 [ 300.574616][T18960] dump_stack_lvl+0xe8/0x140 [ 300.574698][T18960] dump_stack+0x15/0x1b [ 300.574712][T18960] should_fail_ex+0x265/0x280 [ 300.574737][T18960] ? io_drain_req+0x67/0x350 [ 300.574761][T18960] should_failslab+0x8c/0xb0 [ 300.574787][T18960] __kmalloc_cache_noprof+0x4c/0x320 [ 300.574883][T18960] io_drain_req+0x67/0x350 [ 300.574978][T18960] ? io_queue_sqe_fallback+0x12a/0x140 [ 300.575007][T18960] io_queue_sqe_fallback+0x132/0x140 [ 300.575030][T18960] io_submit_sqes+0xc2e/0x1060 [ 300.575060][T18960] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 300.575164][T18960] ? 0xffffffff81000000 [ 300.575177][T18960] ? __rcu_read_unlock+0x4f/0x70 [ 300.575239][T18960] ? get_pid_task+0x96/0xd0 [ 300.575331][T18960] ? proc_fail_nth_write+0x13b/0x160 [ 300.575428][T18960] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.575449][T18960] ? vfs_write+0x7e8/0x960 [ 300.575551][T18960] ? __rcu_read_unlock+0x4f/0x70 [ 300.575571][T18960] ? __fget_files+0x184/0x1c0 [ 300.575598][T18960] ? fput+0x8f/0xc0 [ 300.575626][T18960] __x64_sys_io_uring_enter+0x78/0x90 [ 300.575689][T18960] x64_sys_call+0x2de1/0x2ff0 [ 300.575706][T18960] do_syscall_64+0xd2/0x200 [ 300.575736][T18960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.575761][T18960] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.575820][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.575843][T18960] RIP: 0033:0x7fd0d707eba9 [ 300.575859][T18960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.575877][T18960] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 300.575898][T18960] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 300.575930][T18960] RDX: 000000000000e176 RSI: 0000000000001c3a RDI: 0000000000000005 [ 300.575941][T18960] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 300.575953][T18960] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 300.575967][T18960] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 300.575987][T18960] [ 300.832488][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 300.832503][ T29] audit: type=1326 audit(300.810:12842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.861886][ T29] audit: type=1326 audit(300.820:12843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.885036][ T29] audit: type=1326 audit(300.820:12844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.908002][ T29] audit: type=1326 audit(300.820:12845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.931134][ T29] audit: type=1326 audit(300.820:12846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.954290][ T29] audit: type=1326 audit(300.820:12847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.957828][T18965] FAULT_INJECTION: forcing a failure. [ 300.957828][T18965] name failslab, interval 1, probability 0, space 0, times 0 [ 300.977232][ T29] audit: type=1326 audit(300.820:12848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.977259][ T29] audit: type=1326 audit(300.820:12849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.977300][ T29] audit: type=1326 audit(300.820:12850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.978281][ T29] audit: type=1326 audit(300.910:12851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18964 comm="syz.1.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0d707eba9 code=0x7ffc0000 [ 300.990513][T18965] CPU: 0 UID: 0 PID: 18965 Comm: syz.1.5783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 300.990537][T18965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.990555][T18965] Call Trace: [ 300.990562][T18965] [ 300.990570][T18965] __dump_stack+0x1d/0x30 [ 300.990590][T18965] dump_stack_lvl+0xe8/0x140 [ 300.990609][T18965] dump_stack+0x15/0x1b [ 300.990655][T18965] should_fail_ex+0x265/0x280 [ 300.990679][T18965] should_failslab+0x8c/0xb0 [ 300.990703][T18965] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 300.990769][T18965] ? sidtab_sid2str_get+0xa0/0x130 [ 300.990792][T18965] kmemdup_noprof+0x2b/0x70 [ 300.990874][T18965] sidtab_sid2str_get+0xa0/0x130 [ 300.990895][T18965] security_sid_to_context_core+0x1eb/0x2e0 [ 300.990918][T18965] security_sid_to_context+0x27/0x40 [ 300.990970][T18965] selinux_lsmprop_to_secctx+0x67/0xf0 [ 300.990998][T18965] security_lsmprop_to_secctx+0x43/0x80 [ 300.991026][T18965] audit_log_task_context+0x77/0x190 [ 300.991057][T18965] audit_log_task+0xf4/0x250 [ 300.991084][T18965] audit_seccomp+0x61/0x100 [ 300.991189][T18965] ? __seccomp_filter+0x68c/0x10d0 [ 300.991210][T18965] __seccomp_filter+0x69d/0x10d0 [ 300.991234][T18965] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 300.991309][T18965] ? vfs_write+0x7e8/0x960 [ 300.991330][T18965] ? __rcu_read_unlock+0x4f/0x70 [ 300.991422][T18965] ? __fget_files+0x184/0x1c0 [ 300.991448][T18965] __secure_computing+0x82/0x150 [ 300.991482][T18965] syscall_trace_enter+0xcf/0x1e0 [ 300.991505][T18965] do_syscall_64+0xac/0x200 [ 300.991554][T18965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 300.991577][T18965] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 300.991662][T18965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.991698][T18965] RIP: 0033:0x7fd0d707eba9 [ 300.991715][T18965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.991733][T18965] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004b [ 300.991751][T18965] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 300.991769][T18965] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 300.991782][T18965] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 300.991795][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.991807][T18965] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 300.991825][T18965] [ 301.467933][T18996] loop5: detected capacity change from 0 to 512 [ 301.470736][T18999] FAULT_INJECTION: forcing a failure. [ 301.470736][T18999] name failslab, interval 1, probability 0, space 0, times 0 [ 301.486853][T18999] CPU: 1 UID: 0 PID: 18999 Comm: syz.2.5797 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.486881][T18999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.486892][T18999] Call Trace: [ 301.486898][T18999] [ 301.486910][T18999] __dump_stack+0x1d/0x30 [ 301.486929][T18999] dump_stack_lvl+0xe8/0x140 [ 301.486946][T18999] dump_stack+0x15/0x1b [ 301.486963][T18999] should_fail_ex+0x265/0x280 [ 301.486988][T18999] should_failslab+0x8c/0xb0 [ 301.487074][T18999] kmem_cache_alloc_noprof+0x50/0x310 [ 301.487100][T18999] ? getname_flags+0x80/0x3b0 [ 301.487178][T18999] getname_flags+0x80/0x3b0 [ 301.487264][T18999] do_sys_openat2+0x60/0x110 [ 301.487310][T18999] __x64_sys_open+0xe6/0x110 [ 301.487356][T18999] x64_sys_call+0x1457/0x2ff0 [ 301.487376][T18999] do_syscall_64+0xd2/0x200 [ 301.487407][T18999] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.487432][T18999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.487531][T18999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.487549][T18999] RIP: 0033:0x7fd31f47eba9 [ 301.487562][T18999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.487578][T18999] RSP: 002b:00007fd31dee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 301.487599][T18999] RAX: ffffffffffffffda RBX: 00007fd31f6c5fa0 RCX: 00007fd31f47eba9 [ 301.487628][T18999] RDX: 0000000000000104 RSI: 00000000000ca3c0 RDI: 0000200000000000 [ 301.487642][T18999] RBP: 00007fd31dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.487654][T18999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.487667][T18999] R13: 00007fd31f6c6038 R14: 00007fd31f6c5fa0 R15: 00007ffebf0890a8 [ 301.487683][T18999] [ 301.688768][T18996] EXT4-fs mount: 17 callbacks suppressed [ 301.688788][T18996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.711400][T18996] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5796: bg 0: block 328: padding at end of block bitmap is not set [ 301.755693][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.868929][T19017] openvswitch: netlink: Message has 6 unknown bytes. [ 301.881561][T19010] SELinux: Context @ is not valid (left unmapped). [ 301.947558][T19020] FAULT_INJECTION: forcing a failure. [ 301.947558][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 301.961141][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.7.5804 Not tainted syzkaller #0 PREEMPT(voluntary) [ 301.961170][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.961183][T19020] Call Trace: [ 301.961190][T19020] [ 301.961206][T19020] __dump_stack+0x1d/0x30 [ 301.961349][T19020] dump_stack_lvl+0xe8/0x140 [ 301.961366][T19020] dump_stack+0x15/0x1b [ 301.961380][T19020] should_fail_ex+0x265/0x280 [ 301.961427][T19020] ? audit_log_d_path+0x8d/0x150 [ 301.961458][T19020] should_failslab+0x8c/0xb0 [ 301.961487][T19020] __kmalloc_cache_noprof+0x4c/0x320 [ 301.961548][T19020] audit_log_d_path+0x8d/0x150 [ 301.961576][T19020] audit_log_d_path_exe+0x42/0x70 [ 301.961607][T19020] audit_log_task+0x1e9/0x250 [ 301.961638][T19020] audit_seccomp+0x61/0x100 [ 301.961722][T19020] ? __seccomp_filter+0x68c/0x10d0 [ 301.961745][T19020] __seccomp_filter+0x69d/0x10d0 [ 301.961829][T19020] ? proc_pid_attr_read+0x14f/0x1a0 [ 301.961927][T19020] ? __pfx_proc_pid_attr_read+0x10/0x10 [ 301.961952][T19020] ? vfs_read+0x4e6/0x770 [ 301.962029][T19020] ? __fget_files+0x184/0x1c0 [ 301.962093][T19020] __secure_computing+0x82/0x150 [ 301.962116][T19020] syscall_trace_enter+0xcf/0x1e0 [ 301.962210][T19020] do_syscall_64+0xac/0x200 [ 301.962236][T19020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 301.962255][T19020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 301.962279][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.962366][T19020] RIP: 0033:0x7f7cb428d5bc [ 301.962379][T19020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 301.962402][T19020] RSP: 002b:00007f7cb2cf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.962418][T19020] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428d5bc [ 301.962431][T19020] RDX: 000000000000000f RSI: 00007f7cb2cf70a0 RDI: 0000000000000007 [ 301.962444][T19020] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 301.962457][T19020] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 301.962519][T19020] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 301.962538][T19020] [ 302.271702][T19028] SELinux: ebitmap: truncated map [ 302.276939][T19029] loop5: detected capacity change from 0 to 128 [ 302.277125][T19028] SELinux: failed to load policy [ 302.312794][T19029] lo speed is unknown, defaulting to 1000 [ 302.366556][T19037] FAULT_INJECTION: forcing a failure. [ 302.366556][T19037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.379690][T19037] CPU: 0 UID: 0 PID: 19037 Comm: syz.2.5813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.379717][T19037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.379728][T19037] Call Trace: [ 302.379735][T19037] [ 302.379742][T19037] __dump_stack+0x1d/0x30 [ 302.379774][T19037] dump_stack_lvl+0xe8/0x140 [ 302.379810][T19037] dump_stack+0x15/0x1b [ 302.379825][T19037] should_fail_ex+0x265/0x280 [ 302.379851][T19037] should_fail+0xb/0x20 [ 302.379880][T19037] should_fail_usercopy+0x1a/0x20 [ 302.379906][T19037] _copy_from_user+0x1c/0xb0 [ 302.379938][T19037] memdup_user+0x5e/0xd0 [ 302.379959][T19037] autofs_dev_ioctl+0x167/0x6a0 [ 302.380059][T19037] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 302.380136][T19037] __se_sys_ioctl+0xce/0x140 [ 302.380153][T19037] __x64_sys_ioctl+0x43/0x50 [ 302.380168][T19037] x64_sys_call+0x1816/0x2ff0 [ 302.380186][T19037] do_syscall_64+0xd2/0x200 [ 302.380271][T19037] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.380341][T19037] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.380371][T19037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.380390][T19037] RIP: 0033:0x7fd31f47eba9 [ 302.380403][T19037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.380455][T19037] RSP: 002b:00007fd31dee7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.380477][T19037] RAX: ffffffffffffffda RBX: 00007fd31f6c5fa0 RCX: 00007fd31f47eba9 [ 302.380533][T19037] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000005 [ 302.380544][T19037] RBP: 00007fd31dee7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.380555][T19037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.380565][T19037] R13: 00007fd31f6c6038 R14: 00007fd31f6c5fa0 R15: 00007ffebf0890a8 [ 302.380581][T19037] [ 302.723900][T19046] lo speed is unknown, defaulting to 1000 [ 302.740729][T19046] lo speed is unknown, defaulting to 1000 [ 302.747187][T19046] lo speed is unknown, defaulting to 1000 [ 302.795685][T19046] infiniband sz1: set active [ 302.800532][T19046] infiniband sz1: added lo [ 302.805160][ T3390] lo speed is unknown, defaulting to 1000 [ 302.807371][T19053] __nla_validate_parse: 5 callbacks suppressed [ 302.807465][T19053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5817'. [ 302.820247][T19046] RDS/IB: sz1: added [ 302.847856][T19046] smc: adding ib device sz1 with port count 1 [ 302.854107][T19046] smc: ib device sz1 port 1 has pnetid [ 302.860296][T16572] lo speed is unknown, defaulting to 1000 [ 302.885629][T19046] lo speed is unknown, defaulting to 1000 [ 302.892598][T19058] FAULT_INJECTION: forcing a failure. [ 302.892598][T19058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.905739][T19058] CPU: 1 UID: 0 PID: 19058 Comm: syz.1.5820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.905804][T19058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 302.905815][T19058] Call Trace: [ 302.905822][T19058] [ 302.905831][T19058] __dump_stack+0x1d/0x30 [ 302.905853][T19058] dump_stack_lvl+0xe8/0x140 [ 302.905875][T19058] dump_stack+0x15/0x1b [ 302.905897][T19058] should_fail_ex+0x265/0x280 [ 302.905972][T19058] should_fail+0xb/0x20 [ 302.905990][T19058] should_fail_usercopy+0x1a/0x20 [ 302.906010][T19058] _copy_from_user+0x1c/0xb0 [ 302.906040][T19058] bpf_test_init+0xdf/0x160 [ 302.906066][T19058] bpf_prog_test_run_xdp+0x274/0x910 [ 302.906108][T19058] ? kstrtouint+0x76/0xc0 [ 302.906141][T19058] ? __rcu_read_unlock+0x4f/0x70 [ 302.906163][T19058] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 302.906182][T19058] bpf_prog_test_run+0x22a/0x390 [ 302.906239][T19058] __sys_bpf+0x4b9/0x7b0 [ 302.906271][T19058] __x64_sys_bpf+0x41/0x50 [ 302.906369][T19058] x64_sys_call+0x2aea/0x2ff0 [ 302.906391][T19058] do_syscall_64+0xd2/0x200 [ 302.906460][T19058] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 302.906520][T19058] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 302.906598][T19058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.906621][T19058] RIP: 0033:0x7fd0d707eba9 [ 302.906638][T19058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.906655][T19058] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 302.906671][T19058] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 302.906700][T19058] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 302.906711][T19058] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 302.906723][T19058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.906737][T19058] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 302.906758][T19058] [ 302.944796][T19046] lo speed is unknown, defaulting to 1000 [ 303.017971][T19063] loop7: detected capacity change from 0 to 164 [ 303.070418][T19046] lo speed is unknown, defaulting to 1000 [ 303.197907][T19046] lo speed is unknown, defaulting to 1000 [ 303.250396][T19066] lo speed is unknown, defaulting to 1000 [ 303.281434][T19046] lo speed is unknown, defaulting to 1000 [ 303.335839][T19046] lo speed is unknown, defaulting to 1000 [ 303.400459][T19046] lo speed is unknown, defaulting to 1000 [ 303.408524][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5828'. [ 303.472580][T19046] lo speed is unknown, defaulting to 1000 [ 303.666816][T19091] msdos: Unknown parameter '18446744073709551615' [ 303.683542][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5831'. [ 303.692550][T19091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5831'. [ 303.803112][T19107] loop7: detected capacity change from 0 to 1024 [ 303.842782][T19107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.912187][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.039835][T19115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5839'. [ 304.290864][T19134] loop7: detected capacity change from 0 to 164 [ 304.310026][T19136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5850'. [ 304.345588][T19138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19138 comm=syz.1.5851 [ 304.383633][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5842'. [ 304.470909][T19150] loop7: detected capacity change from 0 to 164 [ 304.480579][T19147] ALSA: seq fatal error: cannot create timer (-19) [ 304.634638][T19163] siw: device registration error -23 [ 304.640895][T19167] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5861'. [ 304.683587][T19170] binfmt_misc: register: failed to install interpreter file ./file0 [ 304.755304][T19175] loop7: detected capacity change from 0 to 164 [ 304.773598][T19178] loop5: detected capacity change from 0 to 1024 [ 304.802357][T19181] netlink: 'syz.2.5868': attribute type 10 has an invalid length. [ 304.825077][T19181] team0: Port device dummy0 added [ 304.832611][T19178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.851347][T19181] netlink: 'syz.2.5868': attribute type 10 has an invalid length. [ 304.862379][T19181] team0: Port device dummy0 removed [ 304.870575][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.881740][T19181] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 304.922869][T19192] loop5: detected capacity change from 0 to 1024 [ 304.930710][T19192] EXT4-fs: Ignoring removed nobh option [ 304.936371][T19192] EXT4-fs: Ignoring removed bh option [ 304.961123][T19192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.984702][T19192] msdos: Unknown parameter '00000000000000000000' [ 305.013383][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.013951][T19203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19203 comm=syz.1.5876 [ 305.036399][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5876'. [ 305.053495][T19203] FAULT_INJECTION: forcing a failure. [ 305.053495][T19203] name failslab, interval 1, probability 0, space 0, times 0 [ 305.061824][T19205] ALSA: seq fatal error: cannot create timer (-19) [ 305.066989][T19203] CPU: 0 UID: 0 PID: 19203 Comm: syz.1.5876 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.067041][T19203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.067053][T19203] Call Trace: [ 305.067058][T19203] [ 305.067065][T19203] __dump_stack+0x1d/0x30 [ 305.067086][T19203] dump_stack_lvl+0xe8/0x140 [ 305.067105][T19203] dump_stack+0x15/0x1b [ 305.067122][T19203] should_fail_ex+0x265/0x280 [ 305.067217][T19203] should_failslab+0x8c/0xb0 [ 305.067245][T19203] __kmalloc_node_noprof+0xa9/0x410 [ 305.067271][T19203] ? crypto_create_tfm_node+0x5c/0x250 [ 305.067296][T19203] crypto_create_tfm_node+0x5c/0x250 [ 305.067335][T19203] ? crypto_mod_get+0x5a/0x90 [ 305.067354][T19203] crypto_spawn_tfm2+0x43/0x80 [ 305.067378][T19203] aead_init_geniv+0xe7/0x140 [ 305.067423][T19203] ? __pfx_aead_init_geniv+0x10/0x10 [ 305.067515][T19203] crypto_aead_init_tfm+0x9d/0xc0 [ 305.067605][T19203] crypto_create_tfm_node+0x108/0x250 [ 305.067628][T19203] crypto_alloc_tfm_node+0xdc/0x2b0 [ 305.067650][T19203] ? snprintf+0x86/0xb0 [ 305.067675][T19203] crypto_alloc_aead+0x2d/0x40 [ 305.067745][T19203] esp6_init_state+0x229/0xa00 [ 305.067778][T19203] ? __bpf_get_stack+0x5ff/0x630 [ 305.067812][T19203] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 305.067867][T19203] __xfrm_init_state+0x740/0xbb0 [ 305.067894][T19203] xfrm_add_sa+0x1e4f/0x2430 [ 305.067943][T19203] xfrm_user_rcv_msg+0x563/0x660 [ 305.067969][T19203] ? __kfree_skb+0x109/0x150 [ 305.067991][T19203] ? nlmon_xmit+0x4f/0x60 [ 305.068018][T19203] ? consume_skb+0x49/0x150 [ 305.068086][T19203] netlink_rcv_skb+0x123/0x220 [ 305.068109][T19203] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 305.068139][T19203] xfrm_netlink_rcv+0x48/0x60 [ 305.068163][T19203] netlink_unicast+0x5bd/0x690 [ 305.068269][T19203] netlink_sendmsg+0x58b/0x6b0 [ 305.068294][T19203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.068320][T19203] __sock_sendmsg+0x145/0x180 [ 305.068350][T19203] ____sys_sendmsg+0x31e/0x4e0 [ 305.068439][T19203] ___sys_sendmsg+0x17b/0x1d0 [ 305.068474][T19203] __x64_sys_sendmsg+0xd4/0x160 [ 305.068503][T19203] x64_sys_call+0x191e/0x2ff0 [ 305.068584][T19203] do_syscall_64+0xd2/0x200 [ 305.068655][T19203] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.068687][T19203] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.068754][T19203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.068795][T19203] RIP: 0033:0x7fd0d707eba9 [ 305.068816][T19203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.068833][T19203] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.068852][T19203] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 305.068865][T19203] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 305.068880][T19203] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 305.068892][T19203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.068905][T19203] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 305.069003][T19203] [ 305.131109][T19209] FAULT_INJECTION: forcing a failure. [ 305.131109][T19209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.394141][T19209] CPU: 0 UID: 0 PID: 19209 Comm: syz.1.5878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.394207][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.394214][T19209] Call Trace: [ 305.394219][T19209] [ 305.394303][T19209] __dump_stack+0x1d/0x30 [ 305.394316][T19209] dump_stack_lvl+0xe8/0x140 [ 305.394403][T19209] dump_stack+0x15/0x1b [ 305.394439][T19209] should_fail_ex+0x265/0x280 [ 305.394453][T19209] should_fail+0xb/0x20 [ 305.394537][T19209] should_fail_usercopy+0x1a/0x20 [ 305.394551][T19209] _copy_from_iter+0xd2/0xe80 [ 305.394566][T19209] ? __build_skb_around+0x1a0/0x200 [ 305.394580][T19209] ? __alloc_skb+0x223/0x320 [ 305.394670][T19209] netlink_sendmsg+0x471/0x6b0 [ 305.394692][T19209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.394707][T19209] __sock_sendmsg+0x145/0x180 [ 305.394744][T19209] ____sys_sendmsg+0x31e/0x4e0 [ 305.394820][T19209] ___sys_sendmsg+0x17b/0x1d0 [ 305.394875][T19209] __x64_sys_sendmsg+0xd4/0x160 [ 305.394908][T19209] x64_sys_call+0x191e/0x2ff0 [ 305.394983][T19209] do_syscall_64+0xd2/0x200 [ 305.395001][T19209] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.395015][T19209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.395060][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.395072][T19209] RIP: 0033:0x7fd0d707eba9 [ 305.395140][T19209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.395150][T19209] RSP: 002b:00007fd0d5adf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.395162][T19209] RAX: ffffffffffffffda RBX: 00007fd0d72c5fa0 RCX: 00007fd0d707eba9 [ 305.395170][T19209] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005 [ 305.395177][T19209] RBP: 00007fd0d5adf090 R08: 0000000000000000 R09: 0000000000000000 [ 305.395184][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.395191][T19209] R13: 00007fd0d72c6038 R14: 00007fd0d72c5fa0 R15: 00007ffd03f91678 [ 305.395201][T19209] [ 305.610964][T19214] FAULT_INJECTION: forcing a failure. [ 305.610964][T19214] name failslab, interval 1, probability 0, space 0, times 0 [ 305.623818][T19214] CPU: 1 UID: 0 PID: 19214 Comm: syz.5.5879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 305.623847][T19214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.623860][T19214] Call Trace: [ 305.623866][T19214] [ 305.623874][T19214] __dump_stack+0x1d/0x30 [ 305.623896][T19214] dump_stack_lvl+0xe8/0x140 [ 305.623980][T19214] dump_stack+0x15/0x1b [ 305.624002][T19214] should_fail_ex+0x265/0x280 [ 305.624036][T19214] ? io_drain_req+0x67/0x350 [ 305.624091][T19214] should_failslab+0x8c/0xb0 [ 305.624117][T19214] __kmalloc_cache_noprof+0x4c/0x320 [ 305.624172][T19214] io_drain_req+0x67/0x350 [ 305.624194][T19214] ? io_queue_sqe_fallback+0x12a/0x140 [ 305.624267][T19214] io_queue_sqe_fallback+0x132/0x140 [ 305.624295][T19214] io_submit_sqes+0xc2e/0x1060 [ 305.624325][T19214] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 305.624354][T19214] ? 0xffffffff81000000 [ 305.624367][T19214] ? __rcu_read_unlock+0x4f/0x70 [ 305.624490][T19214] ? get_pid_task+0x96/0xd0 [ 305.624507][T19214] ? proc_fail_nth_write+0x13b/0x160 [ 305.624529][T19214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.624605][T19214] ? vfs_write+0x7e8/0x960 [ 305.624623][T19214] ? __rcu_read_unlock+0x4f/0x70 [ 305.624653][T19214] ? __fget_files+0x184/0x1c0 [ 305.624674][T19214] ? fput+0x8f/0xc0 [ 305.624748][T19214] __x64_sys_io_uring_enter+0x78/0x90 [ 305.624769][T19214] x64_sys_call+0x2de1/0x2ff0 [ 305.624858][T19214] do_syscall_64+0xd2/0x200 [ 305.624884][T19214] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 305.624909][T19214] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 305.624996][T19214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.625014][T19214] RIP: 0033:0x7f8fcff6eba9 [ 305.625026][T19214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.625041][T19214] RSP: 002b:00007f8fce9cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 305.625057][T19214] RAX: ffffffffffffffda RBX: 00007f8fd01b5fa0 RCX: 00007f8fcff6eba9 [ 305.625068][T19214] RDX: 000000000000e176 RSI: 0000000000001c3a RDI: 0000000000000005 [ 305.625082][T19214] RBP: 00007f8fce9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 305.625118][T19214] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 305.625129][T19214] R13: 00007f8fd01b6038 R14: 00007f8fd01b5fa0 R15: 00007ffdf388b6e8 [ 305.625207][T19214] [ 305.628891][T19217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5880'. [ 305.923994][T19240] ALSA: seq fatal error: cannot create timer (-19) [ 305.936317][T19247] siw: device registration error -23 [ 305.971100][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 305.971112][ T29] audit: type=1400 audit(305.950:13065): avc: denied { write } for pid=19252 comm="syz.1.5895" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 306.011559][T19257] siw: device registration error -23 [ 306.016268][T19253] hub 9-0:1.0: USB hub found [ 306.022880][T19253] hub 9-0:1.0: 8 ports detected [ 306.074353][ T29] audit: type=1400 audit(306.050:13066): avc: denied { mount } for pid=19264 comm="syz.2.5901" name="/" dev="ramfs" ino=68739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 306.117716][T19269] ALSA: seq fatal error: cannot create timer (-19) [ 306.184193][ T29] audit: type=1400 audit(306.160:13067): avc: denied { bind } for pid=19281 comm="syz.5.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.204521][ T29] audit: type=1400 audit(306.170:13068): avc: denied { setopt } for pid=19281 comm="syz.5.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 306.232728][ T29] audit: type=1400 audit(306.210:13069): avc: denied { cpu } for pid=19281 comm="syz.5.5908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 306.292726][ T29] audit: type=1326 audit(306.270:13070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.5.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 306.317504][ T29] audit: type=1326 audit(306.270:13071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.5.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 306.340941][ T29] audit: type=1326 audit(306.270:13072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.5.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 306.363870][ T29] audit: type=1400 audit(306.270:13073): avc: denied { block_suspend } for pid=19281 comm="syz.5.5908" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 306.385194][ T29] audit: type=1326 audit(306.270:13074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19281 comm="syz.5.5908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fcff6eba9 code=0x7ffc0000 [ 306.525048][T19293] siw: device registration error -23 [ 306.605899][T19295] loop5: detected capacity change from 0 to 8192 [ 306.615053][T19295] FAULT_INJECTION: forcing a failure. [ 306.615053][T19295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.628641][T19295] CPU: 0 UID: 0 PID: 19295 Comm: syz.5.5914 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.628661][T19295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.628668][T19295] Call Trace: [ 306.628671][T19295] [ 306.628677][T19295] __dump_stack+0x1d/0x30 [ 306.628813][T19295] dump_stack_lvl+0xe8/0x140 [ 306.628824][T19295] dump_stack+0x15/0x1b [ 306.628833][T19295] should_fail_ex+0x265/0x280 [ 306.628847][T19295] should_fail+0xb/0x20 [ 306.628858][T19295] should_fail_usercopy+0x1a/0x20 [ 306.628883][T19295] strncpy_from_user+0x25/0x230 [ 306.628917][T19295] ? kmem_cache_alloc_noprof+0x186/0x310 [ 306.628940][T19295] ? getname_flags+0x80/0x3b0 [ 306.628956][T19295] getname_flags+0xae/0x3b0 [ 306.628971][T19295] __x64_sys_rename+0x40/0x70 [ 306.629097][T19295] x64_sys_call+0x1f9/0x2ff0 [ 306.629119][T19295] do_syscall_64+0xd2/0x200 [ 306.629146][T19295] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.629202][T19295] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.629229][T19295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.629249][T19295] RIP: 0033:0x7f8fcff6eba9 [ 306.629264][T19295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.629281][T19295] RSP: 002b:00007f8fce9cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 306.629325][T19295] RAX: ffffffffffffffda RBX: 00007f8fd01b5fa0 RCX: 00007f8fcff6eba9 [ 306.629333][T19295] RDX: 0000000000000000 RSI: 0000200000001300 RDI: 0000200000000040 [ 306.629340][T19295] RBP: 00007f8fce9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 306.629347][T19295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.629354][T19295] R13: 00007f8fd01b6038 R14: 00007f8fd01b5fa0 R15: 00007ffdf388b6e8 [ 306.629365][T19295] [ 306.844914][T19297] ALSA: seq fatal error: cannot create timer (-19) [ 306.877721][T19306] FAULT_INJECTION: forcing a failure. [ 306.877721][T19306] name failslab, interval 1, probability 0, space 0, times 0 [ 306.890521][T19306] CPU: 1 UID: 0 PID: 19306 Comm: syz.7.5919 Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.890605][T19306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.890616][T19306] Call Trace: [ 306.890623][T19306] [ 306.890633][T19306] __dump_stack+0x1d/0x30 [ 306.890656][T19306] dump_stack_lvl+0xe8/0x140 [ 306.890676][T19306] dump_stack+0x15/0x1b [ 306.890700][T19306] should_fail_ex+0x265/0x280 [ 306.890720][T19306] should_failslab+0x8c/0xb0 [ 306.890741][T19306] kmem_cache_alloc_noprof+0x50/0x310 [ 306.890770][T19306] ? skb_clone+0x151/0x1f0 [ 306.890829][T19306] skb_clone+0x151/0x1f0 [ 306.890897][T19306] nfnetlink_rcv+0x305/0x1690 [ 306.890916][T19306] ? nlmon_xmit+0x4f/0x60 [ 306.890941][T19306] ? consume_skb+0x49/0x150 [ 306.890964][T19306] ? nlmon_xmit+0x4f/0x60 [ 306.891018][T19306] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 306.891047][T19306] ? __dev_queue_xmit+0x1200/0x2000 [ 306.891149][T19306] ? __dev_queue_xmit+0x182/0x2000 [ 306.891176][T19306] ? ref_tracker_free+0x37d/0x3e0 [ 306.891210][T19306] netlink_unicast+0x5bd/0x690 [ 306.891235][T19306] netlink_sendmsg+0x58b/0x6b0 [ 306.891285][T19306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.891311][T19306] __sock_sendmsg+0x145/0x180 [ 306.891378][T19306] ____sys_sendmsg+0x31e/0x4e0 [ 306.891401][T19306] ___sys_sendmsg+0x17b/0x1d0 [ 306.891476][T19306] __x64_sys_sendmsg+0xd4/0x160 [ 306.891500][T19306] x64_sys_call+0x191e/0x2ff0 [ 306.891538][T19306] do_syscall_64+0xd2/0x200 [ 306.891568][T19306] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 306.891592][T19306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 306.891657][T19306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.891758][T19306] RIP: 0033:0x7f7cb428eba9 [ 306.891772][T19306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.891865][T19306] RSP: 002b:00007f7cb2cf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.891882][T19306] RAX: ffffffffffffffda RBX: 00007f7cb44d5fa0 RCX: 00007f7cb428eba9 [ 306.891921][T19306] RDX: 0000000000040800 RSI: 0000200000000380 RDI: 0000000000000003 [ 306.891935][T19306] RBP: 00007f7cb2cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.891987][T19306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.891993][T19306] R13: 00007f7cb44d6038 R14: 00007f7cb44d5fa0 R15: 00007ffc26818338 [ 306.892060][T19306] [ 307.151079][T19307] loop5: detected capacity change from 0 to 1024 [ 307.160772][T19307] journal_path: Lookup failure for './file0' [ 307.166792][T19307] EXT4-fs: error: could not find journal device path [ 307.178392][T19313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19313 comm=syz.1.5921 [ 307.211014][T19307] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 307.217557][T19307] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 307.225223][T19307] vhci_hcd vhci_hcd.0: Device attached [ 307.298941][T19335] 9pnet_fd: p9_fd_create_unix (19335): problem connecting socket: ./file0: -111 [ 307.308794][T19335] ªªªªªª: renamed from vlan0 (while UP) [ 307.490093][T16569] usb 11-1: new high-speed USB device number 2 using vhci_hcd [ 307.555141][T19352] loop7: detected capacity change from 0 to 164 [ 307.624219][T19358] lo speed is unknown, defaulting to 1000 [ 307.650854][T19358] lo speed is unknown, defaulting to 1000 [ 307.663598][T19359] tmpfs: Unknown parameter 'nr' [ 307.671864][T19359] syz_tun: entered allmulticast mode [ 307.690950][T19315] vhci_hcd: connection reset by peer [ 307.696886][ T7636] vhci_hcd: stop threads [ 307.701207][ T7636] vhci_hcd: release socket [ 307.705678][ T7636] vhci_hcd: disconnect device [ 307.720080][T19357] syz_tun: left allmulticast mode [ 307.754165][T19364] loop7: detected capacity change from 0 to 512 [ 307.761699][T19364] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 307.773879][T19364] EXT4-fs (loop7): orphan cleanup on readonly fs [ 307.780604][T19364] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.5942: Failed to acquire dquot type 1 [ 307.792531][T19364] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5942: bg 0: block 40: padding at end of block bitmap is not set [ 307.807585][T19364] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 307.816699][T19364] EXT4-fs (loop7): 1 truncate cleaned up [ 307.822933][T19364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.863357][T13053] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.995402][T19368] FAULT_INJECTION: forcing a failure. [ 307.995402][T19368] name failslab, interval 1, probability 0, space 0, times 0 [ 308.008154][T19368] CPU: 1 UID: 0 PID: 19368 Comm: syz.7.5943 Not tainted syzkaller #0 PREEMPT(voluntary) [ 308.008181][T19368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 308.008194][T19368] Call Trace: [ 308.008202][T19368] [ 308.008210][T19368] __dump_stack+0x1d/0x30 [ 308.008293][T19368] dump_stack_lvl+0xe8/0x140 [ 308.008314][T19368] dump_stack+0x15/0x1b [ 308.008329][T19368] should_fail_ex+0x265/0x280 [ 308.008401][T19368] ? nfnetlink_rcv+0x53d/0x1690 [ 308.008418][T19368] should_failslab+0x8c/0xb0 [ 308.008439][T19368] __kmalloc_cache_noprof+0x4c/0x320 [ 308.008465][T19368] nfnetlink_rcv+0x53d/0x1690 [ 308.008558][T19368] ? nlmon_xmit+0x4f/0x60 [ 308.008670][T19368] ? __dev_queue_xmit+0x1200/0x2000 [ 308.008696][T19368] ? __dev_queue_xmit+0x182/0x2000 [ 308.008739][T19368] ? ref_tracker_free+0x37d/0x3e0 [ 308.008766][T19368] netlink_unicast+0x5bd/0x690 [ 308.008792][T19368] netlink_sendmsg+0x58b/0x6b0 [ 308.008830][T19368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.008852][T19368] __sock_sendmsg+0x145/0x180 [ 308.008958][T19368] ____sys_sendmsg+0x31e/0x4e0 [ 308.009038][T19368] ___sys_sendmsg+0x17b/0x1d0 [ 308.009071][T19368] __x64_sys_sendmsg+0xd4/0x160 [ 308.009103][T19368] x64_sys_call+0x191e/0x2ff0 [ 308.009154][T19368] do_syscall_64+0xd2/0x200 [ 308.009185][T19368] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 308.009211][T19368] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 308.009263][T19368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.009286][T19368] RIP: 0033:0x7f7cb428eba9 [ 308.009301][T19368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.009316][T19368] RSP: 002b:00007f7cb2cd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.009362][T19368] RAX: ffffffffffffffda RBX: 00007f7cb44d6090 RCX: 00007f7cb428eba9 [ 308.009377][T19368] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 308.009390][T19368] RBP: 00007f7cb2cd6090 R08: 0000000000000000 R09: 0000000000000000 [ 308.009404][T19368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.009417][T19368] R13: 00007f7cb44d6128 R14: 00007f7cb44d6090 R15: 00007ffc26818338 [ 308.009488][T19368] [ 308.230218][T19368] __nla_validate_parse: 10 callbacks suppressed [ 308.230229][T19368] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5943'. [ 308.333721][T19380] ALSA: seq fatal error: cannot create timer (-19) [ 308.548379][T19392] loop5: detected capacity change from 0 to 1024 [ 308.557187][T19392] EXT4-fs: Ignoring removed nobh option [ 308.562844][T19392] EXT4-fs: Ignoring removed bh option [ 308.613791][T19392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.662174][T17425] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.706920][T19399] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5954'. [ 308.738899][T19399] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5954'. [ 308.762893][T19399] 9pnet: Could not find request transport: fd [ 308.802184][T19402] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5955'. [ 308.817531][T19402] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5955'. [ 308.837729][T19405] ================================================================== [ 308.842463][T19402] veth0: entered promiscuous mode [ 308.845834][T19405] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 308.854915][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5955'. [ 308.859227][T19405] [ 308.859236][T19405] read-write to 0xffff88810726ba18 of 4 bytes by task 7629 on cpu 1: [ 308.859252][T19405] __writeback_single_inode+0x1e3/0x7c0 [ 308.884153][T19405] writeback_sb_inodes+0x48f/0xa30 [ 308.889284][T19405] __writeback_inodes_wb+0x94/0x1a0 [ 308.894502][T19405] wb_writeback+0x266/0x5c0 [ 308.899023][T19405] wb_workfn+0x4c9/0x910 [ 308.903276][T19405] process_scheduled_works+0x4cb/0x9d0 [ 308.908744][T19405] worker_thread+0x582/0x770 [ 308.913332][T19405] kthread+0x489/0x510 [ 308.917386][T19405] ret_from_fork+0x11f/0x1b0 [ 308.921965][T19405] ret_from_fork_asm+0x1a/0x30 [ 308.926718][T19405] [ 308.929032][T19405] read to 0xffff88810726ba18 of 4 bytes by task 19405 on cpu 0: [ 308.936655][T19405] __mark_inode_dirty+0x191/0x750 [ 308.941672][T19405] mark_buffer_dirty+0x133/0x210 [ 308.946596][T19405] block_page_mkwrite+0x287/0x3d0 [ 308.951615][T19405] ext4_page_mkwrite+0x859/0xb90 [ 308.956693][T19405] handle_mm_fault+0x15cb/0x2c20 [ 308.961618][T19405] do_user_addr_fault+0x636/0x1090 [ 308.966991][T19405] exc_page_fault+0x62/0xa0 [ 308.971580][T19405] asm_exc_page_fault+0x26/0x30 [ 308.976429][T19405] [ 308.978739][T19405] value changed: 0x00010022 -> 0x00000020 [ 308.984448][T19405] [ 308.986760][T19405] Reported by Kernel Concurrency Sanitizer on: [ 308.992901][T19405] CPU: 0 UID: 0 PID: 19405 Comm: syz.5.5957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 309.002695][T19405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 309.012739][T19405] ================================================================== [ 309.343183][T19384] syz.1.5950 (19384) used greatest stack depth: 6360 bytes left [ 312.609421][T16569] vhci_hcd: vhci_device speed not set