last executing test programs: 6m9.095710279s ago: executing program 32 (id=261): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 5m42.895350462s ago: executing program 33 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4004000) 4m44.307803128s ago: executing program 34 (id=1796): r0 = getpgrp(0x0) capget(&(0x7f0000000740)={0x20080522, r0}, &(0x7f0000000780)={0xb9, 0x2, 0xfffffffd, 0x4, 0x8, 0x4}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000001000000070000000c"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) pipe(&(0x7f00000000c0)) syz_emit_ethernet(0x72, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x3c, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty, [], "a6a888be7eec07d28d8b29c5"}}}}}}}, 0x0) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x200000ffc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="6c0100001700010025bd7000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000004000000000006400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a"], 0x16c}}, 0x0) r8 = inotify_init1(0x80000) inotify_add_watch(r8, &(0x7f0000000040)='.\x00', 0xaa) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 3m58.329906056s ago: executing program 35 (id=2368): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="5e0cdb556c175c8cb75b7724c489cb7f001f7e222c74c39fd3034b7e71f1e154d5103202000000106eaa"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x10, 0xe98}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r2 = io_uring_setup(0x62d2, &(0x7f00000004c0)={0x0, 0x1396, 0x20, 0x1, 0x237}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100000000008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x26d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f00007e1000/0x2000)=nil, 0x2000, 0x1) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c00e6262d0f73fc82dad55dbd898b92fe702b5d6e91985be3bb4fabacf83ada18934ca100d4127e1d20bd1a3fd7f1c5b66210e07dc0734556deb2e8d9bbf5eb9c65"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) mprotect(&(0x7f0000916000/0x2000)=nil, 0x2000, 0x8) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x51b540, 0x0) ioctl$TCSBRKP(r8, 0x5425, 0x0) gettid() 2m34.402993429s ago: executing program 36 (id=3651): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = syz_io_uring_setup(0x2085, &(0x7f0000000380)={0x0, 0x86f7, 0x10000, 0x3, 0x188}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0) io_uring_enter(r5, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x1, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x70}}, 0x20040000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r10, 0x4b3d, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9], 0x90}}, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r14}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) unshare(0x22020600) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x7, 0x0, 0xce35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r16}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m29.156214416s ago: executing program 8 (id=3975): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a50350014060000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 2m29.070095212s ago: executing program 8 (id=3979): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000c14, &(0x7f0000000280)={[{@usrquota}, {@dax_never}]}, 0xff, 0x261, &(0x7f00000007c0)="$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") r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES8=r1, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000001dc0)='kmem_cache_free\x00', r3}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m29.023327096s ago: executing program 8 (id=3980): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m29.002411767s ago: executing program 8 (id=3981): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000580)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRES8], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$rxrpc(0x21, 0x2, 0x2) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_clone(0x40000, 0x0, 0x28, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setpipe(r0, 0x407, 0x7fff) 2m28.566637121s ago: executing program 8 (id=3993): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000002180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdef}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff040000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r3 = io_uring_setup(0x258d, &(0x7f0000000640)={0x0, 0x4008272, 0x1, 0x3, 0x288}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x123000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) r8 = pidfd_getfd(r4, r6, 0x0) setns(r8, 0x66020000) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x44601, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB], 0x48) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pivot_root(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='./cgroup/file0\x00') r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x18) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x7}, 0x0) 2m27.907695633s ago: executing program 8 (id=4011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES64=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4040814) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_io_uring_setup(0x1c9d, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xafdfff9c}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = open$dir(&(0x7f0000000300)='./file0\x00', 0xc0000, 0x1) getdents64(r9, &(0x7f0000000640)=""/247, 0xf7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x6}, 0x18) r11 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000100)=0x19) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x81) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x32d7, 0x0, 0x46, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = dup(r14) fsetxattr$security_selinux(r15, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x5, 0x4}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000400), 0x2000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0xd66}, 0x18) 2m27.907334513s ago: executing program 37 (id=4011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES64=r1], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES16=r3, @ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4040814) r4 = socket(0x1e, 0x1, 0x0) r5 = syz_io_uring_setup(0x1c9d, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xafdfff9c}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r9 = open$dir(&(0x7f0000000300)='./file0\x00', 0xc0000, 0x1) getdents64(r9, &(0x7f0000000640)=""/247, 0xf7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x6}, 0x18) r11 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r13, 0x5423, &(0x7f0000000100)=0x19) ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0x81) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r5, 0x32d7, 0x0, 0x46, 0x0, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = dup(r14) fsetxattr$security_selinux(r15, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) connect$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x5, 0x4}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000400), 0x2000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0xd66}, 0x18) 2m18.536937509s ago: executing program 9 (id=4192): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r3}, 0x18) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r0, 0x4, 0x0) 2m18.53572658s ago: executing program 9 (id=4193): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0xdc88d33619b927fa}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfff9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x885}, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4ca, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2400c005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0) 2m18.443381017s ago: executing program 9 (id=4195): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, 0x0, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f00000004c0)) openat$cgroup_subtree(r3, &(0x7f00000003c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0xe8bf, 0x2000, 0x40206, 0x40100039}, &(0x7f0000000540)=0x0, &(0x7f0000000f80)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x100, &(0x7f0000000040), 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r13}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x9, 0x1, 0xffffffffffffffff, 0x0}) write$P9_ROPEN(r11, &(0x7f0000000500)={0x18, 0x71, 0x3, {{0x8, 0x1, 0x6}, 0x800}}, 0x18) io_uring_enter(r8, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m17.463398303s ago: executing program 9 (id=4214): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000140), 0x4, 0x4f2, &(0x7f0000000a40)="$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") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000140), 0x4, 0x4f2, &(0x7f0000000a40)="$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") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc4100, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f00000001c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) (async) pwrite64(r3, &(0x7f0000000180)="f7", 0x1, 0x200980) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f00000001c0)) flock(r1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) alarm(0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'dh\x00', 0x1, 0x4, 0x72}, 0x2c) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.123867599s ago: executing program 9 (id=4217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0xfffffffffffffffd, 0x4}, 0x7f, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03002745a9c542bd700002000000800000000500ec21eeb5e7d3c0abcc9d92a3e9b14b1779773a68f6be32e89d3ffd3b91916c814d56666b50d7398752e968ad5e809a622c4ff0918eb482bc052b67c739ba02c3ab2d91db"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100200000000000000a0000000800074000000001eafe12d4a80f7806000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) 2m15.82891597s ago: executing program 9 (id=4233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x80, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "9b216dd3dda72c853dde2aac6f8e1d4c2f3e0e39d001a6d5c8ab8b4d1982b0c432b0118fa017c7388e85c8b9c2d2d572a0110869ebe6c2e2b456853cc7e1c7f3a7e86650487d653c876056b93a8b848613697b2e8a8504dec83020d5ca0615fa9f015dee25fc8afd9428a3486882", ["", "", "", ""]}, 0x80}}, 0x8000) 2m15.801346592s ago: executing program 38 (id=4233): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x527d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000580)={0x80, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "9b216dd3dda72c853dde2aac6f8e1d4c2f3e0e39d001a6d5c8ab8b4d1982b0c432b0118fa017c7388e85c8b9c2d2d572a0110869ebe6c2e2b456853cc7e1c7f3a7e86650487d653c876056b93a8b848613697b2e8a8504dec83020d5ca0615fa9f015dee25fc8afd9428a3486882", ["", "", "", ""]}, 0x80}}, 0x8000) 2m6.856125806s ago: executing program 5 (id=4389): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) symlinkat(0x0, r0, &(0x7f0000000000)='./file1\x00') 2m6.825834879s ago: executing program 5 (id=4391): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000002c0), 0x4) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x193c02, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r10, 0x2, &(0x7f0000000400)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x5, r8, &(0x7f0000001d00)="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", 0xc00, 0x10001, 0x0, 0x2, r9}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x6, 0x0, 0x2, r9}]) fsmount(r7, 0x0, 0x0) 2m6.03073588s ago: executing program 5 (id=4404): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x5d, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f00000007c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/164, 0xa4}, {&(0x7f0000000440)=""/39, 0x27}], 0x6, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f0000000480)=""/37, 0x25}, {&(0x7f0000000b00)=""/54, 0x36}, {&(0x7f0000000b40)=""/164, 0xa4}, {&(0x7f0000000c00)=""/51, 0x33}, {&(0x7f0000000c40)=""/211, 0xd3}], 0x6, &(0x7f0000000dc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/41, 0x29}, {&(0x7f0000000ec0)=""/136, 0x88}], 0x2}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000002100)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/172, 0xac}], 0x2, &(0x7f0000002140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000003200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, &(0x7f0000003240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f00000033c0)=""/132, 0x84}, {&(0x7f0000003480)=""/172, 0xac}], 0x2, &(0x7f0000003580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004800)=[{&(0x7f0000003700)=""/206, 0xce}, {&(0x7f0000003800)=""/4096, 0x1000}], 0x2, &(0x7f0000004840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}], 0x7, 0x40006020, &(0x7f0000004b40)) 2m5.922737259s ago: executing program 5 (id=4405): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") ioperm(0x3, 0x5, 0x7) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0x7fffffff, 0x2000402) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @remote, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB='\b\x00'/15], &(0x7f00000003c0)='GPL\x00'}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6(0xa, 0x800, 0xffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x10) io_cancel(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f00000002c0)=0x2090, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x73b, &(0x7f0000000fc0)="$eJzs3U9rXFUbAPDn3GTeydvmfRNBxT8gFYuKpZMmVkpXtivdFAsFt21IpjFm0omZmdoJXbQrtyKKggj6Hdwrrv0AfgUF/5S4qKuR+ds2yaRjm2Qk8/vBnXvOvROe52TCeSDnMieAkXWs+ZJFPBsRF1PE1LZ3jEeca79v887NheaRotG49HuK1LnWfWfqnI9GxK2IeCYifshFnMi2x63UN1bmS6Xieqc/U11dm6nUN04ur84vFZeK186ePj13+swbZ8/u3Vhfe+fdpwvdJGd//jbFuZjsdO8fx15qh8s1f4UPeGs/gg1RGnYCPJLxiBjrnJ+KqRhrtQCAw6yRj2gAACMmqf8AMGK6/wforu3t1zpYP7+ej4iJneKPd9bMJiIXEUc20wMrEykipg8yUQ6lW7cj4sr0se1/f2nbmu0/dWovEmRffd+cf87tNP9kvfkndph/JrrPTjym/vPfvfhjfea/iwPGePv5Wrlv/NsRz6XxHeKnXvzUJ/6VAeN/d3fxr373Gt9EvLy1/ozFA08UpF2fD5m5ulwqnmq/7hzjWO3m+7uN/8iO9S+1nmHZbfxrA45/8pMXf7y1S/xXX9r9808Rv53vrNF3NWvixwPG/yj35mf97jXjL3bH/9Xx++48/PP/+r3B4p954YONAVMFAAAAAAAAAAAAAAAAAAAAAAAAAACAQyGLiMlIWaHXzrJCob2H95NxJCuVK9UTV8u1a4vR2it7OnJZ96uWp9r91OzPdr6Pv9ufa7U3e/3XI+KJiPg0/99Wv7BQLi0Oe/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HF0y/7/f+bb+/8DAIfcxLATAAAOnPoPAKNH/QeA0aP+A8DoUf8BYPSo/wAweh6h/uf3Iw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARsbFCxeaR2Pzzs2FZn/xer22Ur5+crFYWSms1hYKC+X1tcJSubxUKhYWyqtbfz5t6ZfK5bW5uajdmKkWK9WZSn3j8mq5dq16eXl1fql4uZg7sJEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOAmW0fKChGRtdpZVihE/C8ipiOXri6Xiqci4v8R8VM+l2/2Z4edNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssUp9Y2W+VCqua2hoaPQaw56ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ODd2/R72JkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDBlv6SIaB6vTB2f3Hr3P+luvnWOiA+/vPT5jflqNTfbvP5H73r1i/b19blh5A8APEy3TrfOs8POBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/q0p9Y2W+VCquV+opIu422tpXercerzHsMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsHf+DgAA//8bQMxr") r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYRESOCT=r4, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 2m5.742311733s ago: executing program 5 (id=4408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000580)={{{@in=@private=0xa010101, @in6=@local, 0x4e24, 0x7, 0x4e23, 0xe, 0xa, 0x80, 0x0, 0x3b}, {0x7fff, 0xec, 0x4, 0x8000000000000001, 0x0, 0x7, 0x9, 0x5}, {0xe, 0x4, 0xfffffffffffffffd, 0x4}, 0x7f, 0x6e6bb9, 0x1, 0x0, 0x2}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0xa, @in6=@local, 0x3503, 0x3, 0x3, 0x89, 0xa, 0x81, 0x7f0000}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), r5) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="03002745a9c542bd700002000000800000000500ec21eeb5e7d3c0abcc9d92a3e9b14b1779773a68f6be32e89d3ffd3b91916c814d56666b50d7398752e968ad5e809a622c4ff0918eb482bc052b67c739ba02c3ab2d91db"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000014) sendmsg$NFT_BATCH(r3, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100200000000000000a0000000800074000000001eafe12d4a80f7806000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) 2m5.493763172s ago: executing program 5 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpid() fsync(0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m5.492264042s ago: executing program 39 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpid() fsync(0xffffffffffffffff) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m36.295233958s ago: executing program 2 (id=5010): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100001", @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 1m36.25984478s ago: executing program 2 (id=5011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) msgctl$IPC_SET(0x0, 0x1, 0x0) brk(0x400000ffc020) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m35.412096086s ago: executing program 2 (id=5025): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x7ff}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pB \x00'}, 0x20) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000200)={r1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r9 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid={'resgid', 0x3d, r8}}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r9}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 1m34.369890457s ago: executing program 2 (id=5042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r0}, 0x18) 1m34.285152604s ago: executing program 2 (id=5045): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="62747266732e2f00005e9509e2264578bccef6f76f00000000f8ffe00007756e642f7365712f636c69656e747300"], &(0x7f00000002c0)='kfree\x00', 0x6, 0x3) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000200), &(0x7f0000000600)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) 1m34.284224634s ago: executing program 2 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d0000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, 0x2, 0x0, 0x3e}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="983f8a9eab19e8c051c41fecef8013a3307dc33cab2ed3a6617a291e7f1682334a990978274179fb7a11bacd61f6af0c83a4c7498adb630b61e19ee23e0b95fc2556f549e1a4bda3198db75d8be73bf405cfe7d6308b57c4fd28ae068fdfdfba9776cc4f1d71d02d775def486c06e6d9c0842c6d47d20b4aba85c654422b68620bf76cb50b4b96967ab3e13d40e1e651d1712ed8b9bcb3b05374d57bf799ce5a563b5b6ed70e2d6a8f8a0b9bd73867826ac5e9b473f1255aebe275beae36f2a9d1de3cce4d5cb027b2612a93e0fa1221b6205ae55a4afa3664e7ce10cea0e46ee7743a96c9ab438c42a65bf59c", 0xed}, {&(0x7f0000000240)="b7e6905bdc6c21a59bf6bc08ad02fce8106d3e32ad1775be709c7ad096cd3180a3cb1e8ff695e77d750b87eed82bda8e376a01c21bb4b480cb9c040fdecfb191c947d592364c37e948c437ca0fcf3a8e3246a1c276a7", 0x56}, {&(0x7f0000000640)="403365c893acff84b8d344974fdeabb0d01aa587083d142e3b6ac1b0b6d17d66af0bef2fa7e54be881e50c4b3d734b3c3e429ce42e62284b7239f1bd6af2289c143fcf7592d8b6d6049b13122cbf556b94d501878d6d", 0x56}], 0x3, 0x0, 0x0, 0x4000}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) r9 = fsmount(r5, 0x0, 0x2) syz_usb_connect(0x0, 0x6c7, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x9, 0x63, 0xc2, 0x20, 0x19d2, 0xff72, 0x6657, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b5, 0x4, 0x7, 0x3, 0x0, 0xbd, [{{0x9, 0x4, 0x97, 0x8, 0xa, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0xe, 0x3, 0x40, 0x2, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xce, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xcb, 0x6, 0x3, [@generic={0x76, 0x0, "39c001ccc575e4f697778c46c49ecdee71d83720dece77299a117a034e157bb757f2750ee91b4c8891ecf20ec8690c606b35625fd4ccd33f44293a6c2d30cdcd1af7faf4f5533c8f90fa8ad7137555b6f63903fedcb135207ded0bb7efe88987bfb91ae0481cdbfc13e657d1983a9400846e1196"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x6a, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x3c, 0x2, 0x1, [@generic={0xa3, 0xd, "cffc9fac5bb742a477ba842f5985ae82b193c11b73cc226d2c6dd5326ca3d1cd943da0bf11870a13b6df11e5cc957c80a8fec9796926d7b1aede4447df322fbdf00d36f6680c728c2051f1c4439f8b7ed94375e82ae6bccb252f2b7e6cbeed11f83566ec1f1e7a75d18a85eb64df343a0bfe9b980871f3af3aaf2d4d0851c1b30cb9d833db15bd81374826a5778277b68ecfc2d7e15e9f3d208813b1241d66245e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xa3ce}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x5, 0x9, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x9d62}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x4, 0xb7, [@generic={0xa6, 0x9, "08ef13159469a326f435cc3c65274dbe983ca7433c577e195e3f897c8ce874e5e7077c65cc88dee1f4f89fe212f74cf0b341f6ae1c87421f073cbb34b7185efd5f845c8ae46632d1d78fff5e92c2fad37aff5b7eb42967b04d52e6b91d789093cc466b62119577e18adf7799015cbbd565f11a6567faec501aeb5f0a737c041ad5a3a4e4ddec6995b821d9a125e36938ea96a9cf931db691ee34ea3ead2926f2846f970e"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x400, 0x3, 0x8, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x81, 0x68, [@generic={0x2b, 0x11, "7cc37d7b20b7dea6bf5a72b4636102e50ffb3df13cf96cfd58b9bedad0643424ec6bf4f3eae7b31102"}]}}, {{0x9, 0x5, 0xc, 0x12, 0x10, 0x1, 0x9, 0x4, [@generic={0x50, 0x23, "cf30cae20bcd0bd47a587590f17237f7bc057bf72d282d37c5a360f69d65aafa9122c2840f94db3984723b7fca93447e7b9fb3de149794179b97e2c0729a54329d426cc5ac6751ca65dc3765b761"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0xe6, 0x8, 0x0, 0xd, 0x5, 0x12, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "a170ad"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x47, 0x4, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0xfff, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x269a, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x5}]}]}}, {{0x9, 0x4, 0x33, 0x9, 0x5, 0xd4, 0x70, 0xe0, 0x81, [@generic={0x7a, 0x4, "4d03ac6c86ab6160579649e3e0c5c26aaf982505c61e178ade3e9ddfb838abe4f328566941686c7126472489eed898fe0d7e5aacdda40df75df9b10c19b99bffd9af5df6ea4464b8332c1b1d588baef6b482aca27cda230f68f8fec6e97227e21f055d4f051742c7446190b87bb32f1d1fd5da84cfc62f35"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'v:'}, {0x5, 0x24, 0x0, 0xac}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x5, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2d6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xf801, 0x2, 0x9, 0x837b, 0x12}, @mdlm_detail={0xaa, 0x24, 0x13, 0x9, "b8dd8c629a6ededd6366fefee5088ef9970da6debb91dcc47b8d8eb52aeaef6f0518c6566a5772d7ecc516cb824e0e0b4310f7155d18fcde2ccacee94a29dc800f74f0a33b3877ce109a0b14c15c08c7d7aa9b3772f786b5585d7a56ac5d605c0efb358c37905d360bbdd7e2deffe29631f2a8bf2d19386f895692e39a092db9f4ff82715d5e812f69e3c2caf2a3ce43a48a423c0129e9103b872d80cffa4e954f350a11f043"}, @obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0xee, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xf}, @generic={0x5b, 0xb, "28df2871447868d02d64ca837b970ac83d151dd4f44cdc67a6be1434040b1b6d0516b4de21698958e06a28731d5e81a3003fa3d7999b14f34cb4f2f24d7fa12cf69e12a23f8d12f99e34a40e46cc66a587571b9302b87fc577"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x1, 0xa2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x4, 0xdc, 0x8, [@generic={0x6a, 0x5, "1e4284c45d5a00a9b88e8e655aabb17bb5c965808ea7161902c1c64d802e31e2d35789fde941c5cd61c2f6395f185bdd29967614b45905fd7f1ceee09700ed54eebc9e3f7dce3174463f209563f43e8e151ab01fe636ce3ea80c06b1e96f1250dcebebe2c42a1ba1"}, @generic={0x85, 0xb, "a8b938a20422bdf82da799ed74cc4721251715951d6af1a813a1f3d48c4920cb8b5093bee734de7af30bdbc31f43966d5cff6151ebee3f34fd8a9305ebdf2767217b7037f37c1c80ab961eb460836b3ee94458b67dbab6736d9b756ee1fb76f34d9e2f91ef665b7407265c5cc1e5883a7bd84c49b7c15d643a4594535144bf050c84b6"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x5, 0x34, 0xd7, [@generic={0x80, 0x6, "67632b0005fb41c063f711e4b0175841e1d9315f261fcf77faf574275c5bd7b6399583f4f06b58eb7721617e8cf869a12dd114fb80af743f14c9e4e2fa503dd0c6ce34e5da5ab48ab8ac1950ac47a6b3ace22ba977cbb1508f0f5ff6b73827c8139aacafa152edb1ab7ef77fbd90874f2ab7a1327863e3bbdf7f9d47b1da"}]}}]}}, {{0x9, 0x4, 0x25, 0x9, 0x1, 0xff, 0x2, 0x1, 0xf6, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0xc, 0x2, 0x6}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x6, 0x8, 0x8, 0x80}, 0x4c, &(0x7f0000000e80)={0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0xf00f, 0x3f, [0x3f00, 0x30, 0xffc030, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x40, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x1, 0x4}]}, 0x9, [{0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "06d74fdd3d0534de892652838d22a715b2a642e4"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x418}}, {0xc7, &(0x7f0000000f40)=@string={0xc7, 0x3, "b90cb8146b08c0945f7b4d6a58f7aa35d6067a0ba98b286fc92bf28a8f07a89a4675686699fb361e7737b9ac082971ba738b5cd23a261f61f0c7f4cd8e71f812d679da830ac13098e6b773d1e308e69037bcfa31aa8a51a309f1e5201f5ab79f24afccf85efddfa89343a970da3be729c0b6b42e24d06d6a151733539ca0033dc9f65b670658d1a3bd8d21b056cca080f4275a19e9b3f6e1a80243aa914aa3d05a2d806f27726f3c69f76aaf087a1ffdcfc84a6eb690329fa345ccb49bf607c2ba7298d4bb"}}, {0x54, &(0x7f0000001040)=@string={0x54, 0x3, "ac459e72cb0c29bce5a966c5463226d774d35875c199f915403079e189933affc2d2a61047be9950c367d62d67bcd611028a353f6da1445d6381c442a9fa9bb99d109b2bcde5184e02b14a77a263a5499ccc"}}, {0x7, &(0x7f00000010c0)=@string={0x7, 0x3, "0661f7d78f"}}, {0x79, &(0x7f0000001100)=@string={0x79, 0x3, "6ca519c319542b62fd582ce6ebb8819a7b445fab657981916fb9c9892490c437d40109c9b3dffca5ae46148da6fa71e7035b9d6fb517c74905ae8335c8361114aede7447768ad09254c1e1ffa78044d5df93f77fe1972c9566465e64d79cfd1d6bd1d62a33608ba3b75e5aaa35c64bb1248b624db0b7dd"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3852}}, {0xd8, &(0x7f00000011c0)=@string={0xd8, 0x3, "98975ef9ea44a2f683327fa81be38ea1d710d8c0eed712ecfedfc500810b2dfbaa3efbe26c14541eb88226550db62b4d58bf6e3be84eb19a477c335cc6bd0d65fd6620c78b0d7eb05179817d917c0f9eb36ca4bcb209db38b97c2e15fd3fc8dbe399efadcdcc85a38523fb3b391d7a0f134c9a72d060adf0c1fed6d1fe1a20597a6ccf1c907cfa6ea107e5bb941f2c7a403a5d61c574ded31e096707c01720c476fd9363c8ecdfdc3f22908482c0971010b606a8ec2148db3ffb06d245bc92d2f390d7f2fff4299ba4b6860e8decf3372b50f7ff77df"}}, {0x73, &(0x7f00000012c0)=@string={0x73, 0x3, "b1f36df4fecf8c65c0549e90caabdcc9e801ad3b0fae798ff291ed391d952c71f2856db20e6ad25ef32e5fc50c678c67c66a625c6c4e9577078d2ded12d1be19a969d298bcc5a87d42d5060a66889ee302c97767950203109fa0fa3605748423a649351145370bb54fe3ea915b2c922003"}}]}) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b637075206a33b7d55c54ffbcf09bacc863acaf2977e3368d08a60d7abfdb4c0c5214f7b2513e65431a809ad6c4c312c80973796f93c3944a1e3a700dbdc7133b73f31de012405ba7335673048be3d28c8d55847b26692bfaee6ac9565c49e3be842b9f4071602b228ad37c6d2bb73fb465c964a3d4b98184590787d8d013826f83351a358e1e1fdeda7d0ff5a79374cb42aacee618bfa1ceccd2b9b78ac8234c9c99c8c037cf8e000000"], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c000000ccad8c49d847ebf21df74072ae93", @ANYRESDEC=r0, @ANYBLOB="1d7b0abd7000ffdbdf250200000018000180140002006205aae302dda2a7556176655f300000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) 1m18.74226996s ago: executing program 40 (id=5046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d0000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$xdp(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, 0x2, 0x0, 0x3e}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000540)="983f8a9eab19e8c051c41fecef8013a3307dc33cab2ed3a6617a291e7f1682334a990978274179fb7a11bacd61f6af0c83a4c7498adb630b61e19ee23e0b95fc2556f549e1a4bda3198db75d8be73bf405cfe7d6308b57c4fd28ae068fdfdfba9776cc4f1d71d02d775def486c06e6d9c0842c6d47d20b4aba85c654422b68620bf76cb50b4b96967ab3e13d40e1e651d1712ed8b9bcb3b05374d57bf799ce5a563b5b6ed70e2d6a8f8a0b9bd73867826ac5e9b473f1255aebe275beae36f2a9d1de3cce4d5cb027b2612a93e0fa1221b6205ae55a4afa3664e7ce10cea0e46ee7743a96c9ab438c42a65bf59c", 0xed}, {&(0x7f0000000240)="b7e6905bdc6c21a59bf6bc08ad02fce8106d3e32ad1775be709c7ad096cd3180a3cb1e8ff695e77d750b87eed82bda8e376a01c21bb4b480cb9c040fdecfb191c947d592364c37e948c437ca0fcf3a8e3246a1c276a7", 0x56}, {&(0x7f0000000640)="403365c893acff84b8d344974fdeabb0d01aa587083d142e3b6ac1b0b6d17d66af0bef2fa7e54be881e50c4b3d734b3c3e429ce42e62284b7239f1bd6af2289c143fcf7592d8b6d6049b13122cbf556b94d501878d6d", 0x56}], 0x3, 0x0, 0x0, 0x4000}, 0x4800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r3]) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close_range(r7, 0xffffffffffffffff, 0x0) r9 = fsmount(r5, 0x0, 0x2) syz_usb_connect(0x0, 0x6c7, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x9, 0x63, 0xc2, 0x20, 0x19d2, 0xff72, 0x6657, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b5, 0x4, 0x7, 0x3, 0x0, 0xbd, [{{0x9, 0x4, 0x97, 0x8, 0xa, 0xff, 0xff, 0xff, 0x3, [], [{{0x9, 0x5, 0xe, 0x3, 0x40, 0x2, 0x0, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xce, 0x4}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0xcb, 0x6, 0x3, [@generic={0x76, 0x0, "39c001ccc575e4f697778c46c49ecdee71d83720dece77299a117a034e157bb757f2750ee91b4c8891ecf20ec8690c606b35625fd4ccd33f44293a6c2d30cdcd1af7faf4f5533c8f90fa8ad7137555b6f63903fedcb135207ded0bb7efe88987bfb91ae0481cdbfc13e657d1983a9400846e1196"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x6a, 0x7}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x3c, 0x2, 0x1, [@generic={0xa3, 0xd, "cffc9fac5bb742a477ba842f5985ae82b193c11b73cc226d2c6dd5326ca3d1cd943da0bf11870a13b6df11e5cc957c80a8fec9796926d7b1aede4447df322fbdf00d36f6680c728c2051f1c4439f8b7ed94375e82ae6bccb252f2b7e6cbeed11f83566ec1f1e7a75d18a85eb64df343a0bfe9b980871f3af3aaf2d4d0851c1b30cb9d833db15bd81374826a5778277b68ecfc2d7e15e9f3d208813b1241d66245e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0xa3ce}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3}]}}, {{0x9, 0x5, 0x0, 0xc, 0x400, 0x5, 0x9, 0xa4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x9d62}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x1, 0x4, 0xb7, [@generic={0xa6, 0x9, "08ef13159469a326f435cc3c65274dbe983ca7433c577e195e3f897c8ce874e5e7077c65cc88dee1f4f89fe212f74cf0b341f6ae1c87421f073cbb34b7185efd5f845c8ae46632d1d78fff5e92c2fad37aff5b7eb42967b04d52e6b91d789093cc466b62119577e18adf7799015cbbd565f11a6567faec501aeb5f0a737c041ad5a3a4e4ddec6995b821d9a125e36938ea96a9cf931db691ee34ea3ead2926f2846f970e"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x400, 0x3, 0x8, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x2, 0x81, 0x68, [@generic={0x2b, 0x11, "7cc37d7b20b7dea6bf5a72b4636102e50ffb3df13cf96cfd58b9bedad0643424ec6bf4f3eae7b31102"}]}}, {{0x9, 0x5, 0xc, 0x12, 0x10, 0x1, 0x9, 0x4, [@generic={0x50, 0x23, "cf30cae20bcd0bd47a587590f17237f7bc057bf72d282d37c5a360f69d65aafa9122c2840f94db3984723b7fca93447e7b9fb3de149794179b97e2c0729a54329d426cc5ac6751ca65dc3765b761"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x8, 0x3, 0x7}}]}}, {{0x9, 0x4, 0xe6, 0x8, 0x0, 0xd, 0x5, 0x12, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "a170ad"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x47, 0x4, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0xfff, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x269a, 0xff}, @call_mgmt={0x5, 0x24, 0x1, 0x3}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x8}, @dmm={0x7, 0x24, 0x14, 0x5}]}]}}, {{0x9, 0x4, 0x33, 0x9, 0x5, 0xd4, 0x70, 0xe0, 0x81, [@generic={0x7a, 0x4, "4d03ac6c86ab6160579649e3e0c5c26aaf982505c61e178ade3e9ddfb838abe4f328566941686c7126472489eed898fe0d7e5aacdda40df75df9b10c19b99bffd9af5df6ea4464b8332c1b1d588baef6b482aca27cda230f68f8fec6e97227e21f055d4f051742c7446190b87bb32f1d1fd5da84cfc62f35"}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, 'v:'}, {0x5, 0x24, 0x0, 0xac}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xd, 0x5, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x6, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x2d6}, @mbim={0xc, 0x24, 0x1b, 0x3, 0xf801, 0x2, 0x9, 0x837b, 0x12}, @mdlm_detail={0xaa, 0x24, 0x13, 0x9, "b8dd8c629a6ededd6366fefee5088ef9970da6debb91dcc47b8d8eb52aeaef6f0518c6566a5772d7ecc516cb824e0e0b4310f7155d18fcde2ccacee94a29dc800f74f0a33b3877ce109a0b14c15c08c7d7aa9b3772f786b5585d7a56ac5d605c0efb358c37905d360bbdd7e2deffe29631f2a8bf2d19386f895692e39a092db9f4ff82715d5e812f69e3c2caf2a3ce43a48a423c0129e9103b872d80cffa4e954f350a11f043"}, @obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x9}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0xee, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xf}, @generic={0x5b, 0xb, "28df2871447868d02d64ca837b970ac83d151dd4f44cdc67a6be1434040b1b6d0516b4de21698958e06a28731d5e81a3003fa3d7999b14f34cb4f2f24d7fa12cf69e12a23f8d12f99e34a40e46cc66a587571b9302b87fc577"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x1, 0xa2, 0xe8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x2}]}}, {{0x9, 0x5, 0x2, 0x4, 0x20, 0x4, 0xdc, 0x8, [@generic={0x6a, 0x5, "1e4284c45d5a00a9b88e8e655aabb17bb5c965808ea7161902c1c64d802e31e2d35789fde941c5cd61c2f6395f185bdd29967614b45905fd7f1ceee09700ed54eebc9e3f7dce3174463f209563f43e8e151ab01fe636ce3ea80c06b1e96f1250dcebebe2c42a1ba1"}, @generic={0x85, 0xb, "a8b938a20422bdf82da799ed74cc4721251715951d6af1a813a1f3d48c4920cb8b5093bee734de7af30bdbc31f43966d5cff6151ebee3f34fd8a9305ebdf2767217b7037f37c1c80ab961eb460836b3ee94458b67dbab6736d9b756ee1fb76f34d9e2f91ef665b7407265c5cc1e5883a7bd84c49b7c15d643a4594535144bf050c84b6"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x10, 0x5, 0x34, 0xd7, [@generic={0x80, 0x6, "67632b0005fb41c063f711e4b0175841e1d9315f261fcf77faf574275c5bd7b6399583f4f06b58eb7721617e8cf869a12dd114fb80af743f14c9e4e2fa503dd0c6ce34e5da5ab48ab8ac1950ac47a6b3ace22ba977cbb1508f0f5ff6b73827c8139aacafa152edb1ab7ef77fbd90874f2ab7a1327863e3bbdf7f9d47b1da"}]}}]}}, {{0x9, 0x4, 0x25, 0x9, 0x1, 0xff, 0x2, 0x1, 0xf6, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0xc, 0x2, 0x6}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x5, 0x6, 0x8, 0x8, 0x80}, 0x4c, &(0x7f0000000e80)={0x5, 0xf, 0x4c, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0xf00f, 0x3f, [0x3f00, 0x30, 0xffc030, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x7, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x5, 0x40, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x3, 0x8001}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x8, 0x1, 0x4}]}, 0x9, [{0x16, &(0x7f00000006c0)=@string={0x16, 0x3, "06d74fdd3d0534de892652838d22a715b2a642e4"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x418}}, {0xc7, &(0x7f0000000f40)=@string={0xc7, 0x3, "b90cb8146b08c0945f7b4d6a58f7aa35d6067a0ba98b286fc92bf28a8f07a89a4675686699fb361e7737b9ac082971ba738b5cd23a261f61f0c7f4cd8e71f812d679da830ac13098e6b773d1e308e69037bcfa31aa8a51a309f1e5201f5ab79f24afccf85efddfa89343a970da3be729c0b6b42e24d06d6a151733539ca0033dc9f65b670658d1a3bd8d21b056cca080f4275a19e9b3f6e1a80243aa914aa3d05a2d806f27726f3c69f76aaf087a1ffdcfc84a6eb690329fa345ccb49bf607c2ba7298d4bb"}}, {0x54, &(0x7f0000001040)=@string={0x54, 0x3, "ac459e72cb0c29bce5a966c5463226d774d35875c199f915403079e189933affc2d2a61047be9950c367d62d67bcd611028a353f6da1445d6381c442a9fa9bb99d109b2bcde5184e02b14a77a263a5499ccc"}}, {0x7, &(0x7f00000010c0)=@string={0x7, 0x3, "0661f7d78f"}}, {0x79, &(0x7f0000001100)=@string={0x79, 0x3, "6ca519c319542b62fd582ce6ebb8819a7b445fab657981916fb9c9892490c437d40109c9b3dffca5ae46148da6fa71e7035b9d6fb517c74905ae8335c8361114aede7447768ad09254c1e1ffa78044d5df93f77fe1972c9566465e64d79cfd1d6bd1d62a33608ba3b75e5aaa35c64bb1248b624db0b7dd"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x3852}}, {0xd8, &(0x7f00000011c0)=@string={0xd8, 0x3, "98975ef9ea44a2f683327fa81be38ea1d710d8c0eed712ecfedfc500810b2dfbaa3efbe26c14541eb88226550db62b4d58bf6e3be84eb19a477c335cc6bd0d65fd6620c78b0d7eb05179817d917c0f9eb36ca4bcb209db38b97c2e15fd3fc8dbe399efadcdcc85a38523fb3b391d7a0f134c9a72d060adf0c1fed6d1fe1a20597a6ccf1c907cfa6ea107e5bb941f2c7a403a5d61c574ded31e096707c01720c476fd9363c8ecdfdc3f22908482c0971010b606a8ec2148db3ffb06d245bc92d2f390d7f2fff4299ba4b6860e8decf3372b50f7ff77df"}}, {0x73, &(0x7f00000012c0)=@string={0x73, 0x3, "b1f36df4fecf8c65c0549e90caabdcc9e801ad3b0fae798ff291ed391d952c71f2856db20e6ad25ef32e5fc50c678c67c66a625c6c4e9577078d2ded12d1be19a969d298bcc5a87d42d5060a66889ee302c97767950203109fa0fa3605748423a649351145370bb54fe3ea915b2c922003"}}]}) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="2b637075206a33b7d55c54ffbcf09bacc863acaf2977e3368d08a60d7abfdb4c0c5214f7b2513e65431a809ad6c4c312c80973796f93c3944a1e3a700dbdc7133b73f31de012405ba7335673048be3d28c8d55847b26692bfaee6ac9565c49e3be842b9f4071602b228ad37c6d2bb73fb465c964a3d4b98184590787d8d013826f83351a358e1e1fdeda7d0ff5a79374cb42aacee618bfa1ceccd2b9b78ac8234c9c99c8c037cf8e000000"], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c000000ccad8c49d847ebf21df74072ae93", @ANYRESDEC=r0, @ANYBLOB="1d7b0abd7000ffdbdf250200000018000180140002006205aae302dda2a7556176655f300000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x42040, 0x0) 58.38025244s ago: executing program 1 (id=5596): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000200)=0x8000, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 58.235462291s ago: executing program 1 (id=5599): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) fsetxattr(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="62747266732e2f00005e9509e2264578bccef6f76f00000000f8ffe00007756e642f7365712f636c69656e747300"], &(0x7f00000002c0)='kfree\x00', 0x6, 0x3) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000200), &(0x7f0000000600)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) 58.227224482s ago: executing program 1 (id=5601): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write$P9_RGETLOCK(r3, &(0x7f0000000200)={0x2a, 0x37, 0x1, {0x2, 0x0, 0x10001, 0xffffffffffffffff, 0xc, '/dev/rfkill\x00'}}, 0x2a) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) write$P9_RGETLOCK(r3, &(0x7f0000000200)={0x2a, 0x37, 0x1, {0x2, 0x0, 0x10001, 0xffffffffffffffff, 0xc, '/dev/rfkill\x00'}}, 0x2a) (async) 57.967469322s ago: executing program 1 (id=5605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@smackfsroot={'smackfsroot', 0x3d, '=+;\x83PI\xca\xbd\x9a\'\xf6/S]\xa9;h\xbf\xb1\x7f\x821Y\x1f Z%2\xc3Y\x86[\x11\xa6\xe2.\x89c\x0f\xfc\xe0\xcbe\xc0\x19\x82\x8a\xd3\xee]\xeb?B\xcbk\xe0y\x96j\x7f\x936\x8c\xc2.\xbe\x81\x9b\x81@>\xc2\xc3\x91\xea\x8a\xafboj\xa9\xac\xc0\x1f\xe1\x7f\xb09E\x82\x05\x94\xf1\x9e\x8f\x94\xae\a\xbf\xa63H\xfbFr\x91\xcd\xea\x7f\xdc2zl\xd0\x17\b\xfcbp'}}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ',]'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x80000000, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xfffffffd, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {0x0, 0x0, 0x3e4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x4000000}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe65}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80, 0x2000000}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x6624}, {0x2}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffc}, {}, {0x400000, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x7fff, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x2000, 0x0, 0x0, 0xe9d, 0x58a}, {0x2, 0xfffffffe}, {0x2, 0x9, 0x20000000}, {0xfffffffc, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe640, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x4, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x108}, {0x0, 0x0, 0x0, 0x2}, {}, {0x40000, 0x1}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x0, 0x0, 0xdf3}, {0x0, 0x0, 0x8000}, {0xfffffffe, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80400000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x82e, 0x0, 0x0, 0xd}, {0xfffffffc}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x2}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xe68}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r5, 0x0, 0x2144}, 0x18) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r4) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = shmget$private(0x0, 0x4000, 0x1, &(0x7f00008fc000/0x4000)=nil) shmat(r8, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(r8, 0xb) syz_clone3(&(0x7f0000000680)={0x923400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) shmctl$SHM_UNLOCK(r8, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a00010073797a30000000005400038008000240000000000800014000000200400003801400010076657468315f746f5f62726964676500140001007767320000000000c50000916e3ef544f5634f3cfcba1816369d1800000000000b00010076657468305f746f5f7465616d000000140000001100010e719320f9cd48d4f622312c137d8a3334fbf2183a6a3d4696103d91b1516df641", @ANYRES16=r3], 0xa8}}, 0x0) listen(0xffffffffffffffff, 0x0) 57.743022889s ago: executing program 1 (id=5607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 57.355422009s ago: executing program 1 (id=5614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x200000000000000, 0x0, 0x0) 57.331702041s ago: executing program 41 (id=5614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x200000000000000, 0x0, 0x0) 4.400999719s ago: executing program 7 (id=6513): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668ae", 0x53}], 0x1}}], 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="021304010400000028bd7000fddbdf250200"], 0x20}}, 0x40800) 4.399880808s ago: executing program 7 (id=6514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4011) (async) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4011) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000100)={@local, @broadcast, 0xffffffffffffffff, "3ad2be0d83b21eeb5a2a0a76d5419e864150b2247a150a3ab019b5f8823584d7", 0x4, 0x4, 0x2, 0x6}, 0x3c) (async) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000100)={@local, @broadcast, 0xffffffffffffffff, "3ad2be0d83b21eeb5a2a0a76d5419e864150b2247a150a3ab019b5f8823584d7", 0x4, 0x4, 0x2, 0x6}, 0x3c) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x90000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x90000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) r5 = signalfd4(r1, &(0x7f00000003c0)={[0x7]}, 0x8, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xa, 0x5, 0xd67}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r3, r4, r5], 0x0, 0x10, 0x4}, 0x94) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000500)) (async) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000500)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000005c0)={{r5}, r6, 0x18, @inherit={0x78, &(0x7f0000000540)={0x1, 0x6, 0x1, 0x3, {0x1b, 0x1, 0x4, 0x8f}, [0x6, 0x7, 0x6, 0x1f24, 0x7, 0x8000000000000000]}}, @subvolid=0x1b}) syz_io_uring_setup(0x10c8, &(0x7f00000015c0)={0x0, 0x19eb, 0x1400, 0x0, 0x108, 0x0, r5}, &(0x7f0000001640), &(0x7f0000001680)) (async) r7 = syz_io_uring_setup(0x10c8, &(0x7f00000015c0)={0x0, 0x19eb, 0x1400, 0x0, 0x108, 0x0, r5}, &(0x7f0000001640)=0x0, &(0x7f0000001680)) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000016c0), 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000001740)={0x10, 0x0, &(0x7f0000001700)=[r9, r5, r3, r4, 0xffffffffffffffff, r4, r3]}, 0x7) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000001740)={0x10, 0x0, &(0x7f0000001700)=[r9, r5, r3, r4, 0xffffffffffffffff, r4, r3]}, 0x7) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000017c0)=@o_path={&(0x7f0000001780)='./file0\x00', 0x0, 0x4000, r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001980)={'vxcan1\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a00)={r3, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a40)={0x0, 0x58}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x9, 0x16, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@generic={0x8, 0x0, 0x6, 0xd8a}, @map_fd={0x18, 0x2, 0x1, 0x0, r10}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @ldst={0x2, 0x2, 0x2, 0x5, 0x1, 0x100, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @generic={0x44, 0x8, 0x4, 0x101, 0xbdec}]}, &(0x7f00000018c0)='GPL\x00', 0xfffffff0, 0x4d, &(0x7f0000001900)=""/77, 0x40f00, 0x30, '\x00', r11, @fallback=0x27, r5, 0x8, &(0x7f00000019c0)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)=[r4, r3, r12, r13, r7], &(0x7f0000001ac0)=[{0x3, 0x3, 0x10, 0x4}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x2, 0x6, 0x6}, {0x1, 0x5, 0x4, 0x9}, {0x2, 0x1, 0xd, 0x7}, {0x4, 0x5, 0x1, 0x3}, {0x1, 0x3, 0xb, 0x6}, {0x1, 0x1, 0x2, 0xc}], 0x10, 0xfff}, 0x94) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c40), r5) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x24, r14, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x3b}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x50, r7, 0x10000000) (async) r15 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000006, 0x50, r7, 0x10000000) syz_io_uring_submit(r8, r15, &(0x7f0000001d40)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index, 0x0, 0x0, 0xadf, 0x1, 0x1}) fcntl$getflags(r2, 0x283d4c9a4710af81) r16 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000001dc0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000001ec0)=0xe8) sendmsg$nl_xfrm(r16, &(0x7f0000002040)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)=@polexpire={0xcc, 0x1b, 0x100, 0x70bd27, 0x25dfdbfd, {{{@in6=@local, @in6=@private0, 0x4e22, 0x9, 0x4e20, 0x9, 0xa, 0x20, 0x20, 0x33, r11, r17}, {0x0, 0xa175, 0x80, 0x9000000000, 0x6, 0xf, 0x5, 0xfffffffffffffff7}, {0x80, 0x8001, 0x81, 0x3}, 0x0, 0x6e6bba, 0x1, 0x0, 0x2, 0x3}, 0x10}, [@policy_type={0xa, 0x10, {0xde9ba240e92ddbd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2000004}, 0x24008000) (async) sendmsg$nl_xfrm(r16, &(0x7f0000002040)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)=@polexpire={0xcc, 0x1b, 0x100, 0x70bd27, 0x25dfdbfd, {{{@in6=@local, @in6=@private0, 0x4e22, 0x9, 0x4e20, 0x9, 0xa, 0x20, 0x20, 0x33, r11, r17}, {0x0, 0xa175, 0x80, 0x9000000000, 0x6, 0xf, 0x5, 0xfffffffffffffff7}, {0x80, 0x8001, 0x81, 0x3}, 0x0, 0x6e6bba, 0x1, 0x0, 0x2, 0x3}, 0x10}, [@policy_type={0xa, 0x10, {0xde9ba240e92ddbd}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x2000004}, 0x24008000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000002080)={'pimreg\x00', {0x2, 0x4e24, @multicast1}}) sched_setscheduler(0x0, 0x6, &(0x7f00000020c0)=0x2) (async) sched_setscheduler(0x0, 0x6, &(0x7f00000020c0)=0x2) 4.311709645s ago: executing program 7 (id=6516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r2}, 0x18) open(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) listxattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0xe, 0x3, 0x8}]}}]}, 0x154}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x8}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000014000100000004fcb62ddafb4266a100c8157c052c109c9b82df74c22e411bd9ee562bb9973e1e2fb80933032f6625cd9b476d140d92c96228971769be3b8346154b02b4c1bcb520ae06a41bff808de3a5caed7edd718ad026045e7fbe88dc7140b70d4fa53361c91d2228cb2f68e8c3b57785c52e0e8d05436960f4d4d7ffe18721834a23d1b523a6657af3651df22a748715e1edb1b3ae04d32e542a02740bbafbdd16a04e19de10361dde23d75d959a488a49030da1b3a609819334cfb2401c67a9f1f7f3a8674f3a2bba17bf5f1aa6614f13075deee883eb194fdc2628527c08a1e0edea59b2b8d39e807984", @ANYRES32=0x0, @ANYBLOB="0800080002040000"], 0x20}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0) 3.47555618s ago: executing program 7 (id=6529): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000006dd2aa89faa96a7b2e4b00000008000000000000f1ffffff000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000580)=ANY=[@ANYRES16=r7, @ANYRES16=r0, @ANYRES32=r6, @ANYRES8, @ANYRESHEX=r4], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000005c3aa7ab0676f32154dfdca181113965573df0000bcfedea63cf080094271", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_SYNC(r8, 0xffffffff80000100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='tlb_flush\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="0000020200e702000000000000000038110000384ac1fe83fcb9b409afc56b562b1c3f142b05c209467ce71e24a18371db8a513e736a27a18787896a27338b092195cdcfb29b927f6335833d401a720755019848d5", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r11}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$qrtrtun(r3, &(0x7f0000000340)="8f52eb24cc8080", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r13}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/locks\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.407716915s ago: executing program 7 (id=6530): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x44}}, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x4, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e40)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xe, 0xfff2}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r4 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x52ac, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x9e, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r4, 0x6686, 0x2936, 0x28, 0x0, 0x0) 3.321371082s ago: executing program 7 (id=6531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000001600)=ANY=[@ANYBLOB="1800008900000000000047070000000000000000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x200005, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x42) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) renameat2(r2, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0xe) fcntl$dupfd(r1, 0x0, r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x610ab, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x5150, 0x32, 0x43a1bd76, 0x1, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000002cbd7000fcdbdf2502000800080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000004d3f600070c0000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r8, 0x11, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000feffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000c7955000ffffffff1846000001000000000000000000000004", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018350000040000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000cc050005080000008500000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x800, 0x1000, &(0x7f0000000500)=""/4096, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000001500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003230000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e0101000000000000100002001000000004d3000004d50000000014001800090d94"], 0x118}, 0x1, 0x7}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r7, 0xffffffff80000302, r12, 0x0) 2.635163655s ago: executing program 4 (id=6533): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x7ff}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pB \x00'}, 0x20) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000200)={r1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r9 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid={'resgid', 0x3d, r8}}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r9}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 1.770991513s ago: executing program 4 (id=6542): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.66876936s ago: executing program 4 (id=6544): io_setup(0x6, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sys_enter\x00'}, 0x18) timer_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r2, &(0x7f00000004c0)={&(0x7f0000000600)=@can, 0x80, &(0x7f0000001f80)=[{&(0x7f00000007c0)="c60ac6f13de60e28ed6966badc708d9362434a38959654df09d5efc755043d2a7c6ceb6e3bc2e9b99878b5259abe6a4e82016f4aa678c7690258eeca64767c7774ea21bfd04fbc9959664071e60b851092db7c9e12580c2c9a4a73ca594bfc62f81d2e138802684973f2ca5e05c903d26cc747d418fd4e4d40cea5c1e83d7698c48213c3cec0b2809f03de92f7dcef4974b114104477c6926383673507f85d3601d44af8f700e86f4c5ad60f510bc91ef26849cfa195fd4623fab556", 0xbc}, {&(0x7f0000001cc0)="e721ab84ca35f6d25b2c815073fa0191a0348947664fb6edb0b97fd2561a18c90eed79601d71889084e5d5abf0ab60ad8d1291edcbdfc1add859e1282351c72b703f9d402387245d88aad95f3d5d72ddbf70b54213a005d4c87811775cc9644bd6ed94945daa782bb0bc139925eeae1ee75160038b5cb02a470bb1ec21e54d78e24cdb6251481ad07f5a8ce5d19038179335b92afcd59286ae85127c9ac23071380ae137adf987d5265de10abe945bb928dfe70254e2b1bdbfc5c2615e4c1032b9d25ac61c8532af266a0ba8a871e99498d5450abdaf3f5e84a07feb3af6433fbadbf0d2e0959638366f74da71d0d54d27fb5f362a05a7c027", 0xf9}, {&(0x7f0000000880)="ad5aad7440efee167c3939315a5fefe1855b7b6985806d2d9e4c185fe9a12567a58e01b2cc66c81c7aa7f2a411e425a0553aaf6f59d8e0785e5870578c6cbaac76ea2ea2c5447d13c7559854996f3a4fe3a74d464b9194c5cb2635807905f2a0fc4b63e8fb4a", 0x66}, {&(0x7f0000001dc0)="0b638c610e3b710a4e09ad886cedc71a386562b1c17ee46fd425de27fe6a2f9c7da1e5a5f025134943fb5e3568d7662b31d0f81f36ecfae653dff5dd9efcaa68e2e4ba7318ebcd590b50c3d37b5419cc434e67dffc4ca85fc3d1853695ca553d16cc6b56387be7fb1cb65eb5bb42a56c954c9cb17e59d50c1eed600883f605da0d6bd8b7eae1f0d2467b53d195588ee539a1c3d380e33e34bdcd3845452973be2d6ef034197d746c765e7fe00836c32e7a8886712805b1c9c2d2142d089330fc5ffe98feec7fb85e817e4a267d7ad860f26d8408954c5aa74e97e5702d", 0xdd}, {&(0x7f0000000940)="5f40e0a4e743c9fe81b34d942d8e4db45c53de78932591e566a03468f7155ffbc2f990adfa56659bfedc031d8491a6bd94f91345e0e0918c2218189b02cc0b38a2c8ea47866c6f90d082b2f1b8ec360e5e2b7a3f86184864116f6c9dd3a9faed508f59a2f9952a5758309e6693e00f4b", 0x70}, {&(0x7f0000001ec0)="32858f4896be5626b16810b1c4456ffe23f29571970ee2b8d7979855b2ee41147708259ccd489498ab901d93ee8665ccf73e642a6645358196c1aef2db6d931a5eca677cb303b8b45db2cc05886c0fc720b48aa2d39076f6172c477e5670eb2eb6f67adcc07ca917523bce53486129aef17dd0ad23b3566be9721251df3bbd82397dd8baaea1c0382617505b6df72ba3f47c70bd2b7c9bbfe0cf644dde17206893ba4ef124abf5f43c83440a", 0xac}], 0x6, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x48}, 0x20000001) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='nmi_handler\x00', r0, 0x0, 0x9}, 0x18) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00'}, 0x10) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, 0x0, 0x5005) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1832c1000000000008262ff60000000000009500000000000020"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r7, r5, 0x25, 0x14, @val=@iter={0x0}}, 0x20) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='signal_deliver\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r9, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) unshare(0x8000000) 1.621495174s ago: executing program 6 (id=6546): syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x99cedc2e69b31b61) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3181, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.54375439s ago: executing program 6 (id=6547): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a310000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.507798033s ago: executing program 6 (id=6548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) 1.325411427s ago: executing program 6 (id=6560): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9658, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd9b, 0x3}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x8f17, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000600)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x109}}, {@quota}]}, 0x5, 0x504, &(0x7f0000002580)="$eJzs3c9rXFsdAPDvzCR5SZtn33uKvFfBFirUHzSTH0gTFcSVuiiIBTcKNSbTWDPphMykNqFgqrsuXIiiIC7c+xe4sStLQVwrbl1Ji9YIVSpcmTtz00kyk041mfHlfj4wnXvnTOd7ziTfkzPnnjs3gNy62PynEDEZEb+PiHOt3f1PuNi62312b6l5K0SSXP9rIX1ecz97avb/zkbETkSMR8RXvxjxrcLhuPWt7dXFarWy0d4vN9bWy/Wt7Su31hZXKiuV2zPzVxcW5qfnZheOra0PfvidB9d+/eWxXz3/wZNHP/rtb5rVmmyXdbbjOLWaPhpvdzw2EhGfO4lgQ1Bqt2di2BXhv9L8+X0wIi6l+X8uSulPsz8vTrRmwElLkiT5d/JGr+KdBDi1iukYuFCciojWdrE4NdUaw38ozhSrtXrjUzdrm7eXW2Plt2K0ePNWtTLd/qzwVowWmvsz6fbL/dkD+3MR6Rj4x6WJdH9qqVZdHmxXBxxw9kD+/6PUyn8gJ/r/yA+cNvIf8kv+Q37Jf8gv+Q/5Jf8hv+Q/5Jf8h/yS/5Bfnfmfncj15pDqAgzWUX//xwZYD2CgvnLtWvOWZOe/L9/Z2lyt3bmyXKmvTq1tLk0t1TbWp1ZqtZX0nJ21V71etVZbn/l0bN4tNyr1Rrm+tX1jrbZ5u3EjPa//RmV0IK0C+vH2hYd/LETEzmcm0lt0/MmXq3C6JUkhhn0OMjAcpWF3QMDQOPQH+fUan/F7fkkY8P7W5St694yf7Vn0+Vg/keoAA1A8qvDF48FVBBi4y+85/gd5Zf4f8sv8P+TXK8b4hgeQA0fN/0f7Wn5d9Tv///z16gOcvCPn/4FTbbLL9b+SJPnemx3X7pqOiA9ExB9Ko29k1/oCToPiXwrt8f/lcx+bPFg6VvhnOgcwFhHf/fn1n95dbDQ2ZpqP/23v8cbP2o/PDqP+QG/7Z/iyPM3yGADIr91n95ay2yDjPv1CaxHC4fgj7bnJ8XQEc2a3sG+tQuGY1i7s3I+Id7vFL7Svd9468nFmt3Qo/jvt+0LrJdL6jqTXTR9M/Pc64n+0I/75//ldgXx42Ox/prvlXzHN6djLv/39z+QxrY/O+r9szXVn/Kz/K/Xo/y70GePbv/h+t8O76WLvp/cjznftf7N442msg/GbdbvcZ/wn3/jah3uVJb9svU63+JnmVrmxtl6ub21fuZXVYv7qwsL89NzsQjmdoy5nM9WHffbd3z3qFb/Z/rYe7f/TofZPtOv0iT7b/6+PPP76xSPif/xS99+/d9L7A+9/kuzV4ZN9xv/77J+/2ausGX+5x/tf7BY/stKIuT7j13/yJecOA8D/kfrW9upitVrZ6LIx2rvIhg0bg94YiQEGfVXPsTOYDgo4MS+Tftg1AQAAAAAAAAAAAPrVa/Xvw2NcTjzsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnAb/CQAA//9AntRF") syz_open_dev$vcsa(&(0x7f00000001c0), 0x10001, 0x2100) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6ffffffff00009e63bdbcefbde78439753abd950100002a001200ff0000000000000000000000000000000000000000000000000000bc00", "b7326736181c208220000000b9000000000000000000f0fffffffff2120100", [0x4, 0x5]}) 1.133227772s ago: executing program 6 (id=6552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668ae", 0x53}], 0x1}}], 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="021304010400000028bd7000fddbdf250200"], 0x20}}, 0x40800) 1.094625775s ago: executing program 3 (id=6553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 999.956672ms ago: executing program 3 (id=6555): getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0xfffffffffffffffc, 0x9, 0x8, 0x9, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000c80)=0x78) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffffffff2e89, 0x4, 0x6, 0x4, 0x101, 0x9]}, &(0x7f0000000200)=0x78) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x30}, 0xf}, 0x1c) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYRESDEC], 0x48}}, 0x20040850) r3 = epoll_create(0x8617) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000001c0)={0x80000000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) 982.419954ms ago: executing program 3 (id=6556): clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/232, 0xe8}, {&(0x7f0000000440)=""/237, 0xed}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000080)=""/20, 0x14}], 0x4, &(0x7f00000007c0)=""/227, 0xe3}, 0xff}, {{&(0x7f0000000280)=@caif=@rfm, 0x80, &(0x7f0000000580)}, 0x6}], 0x2, 0x20, &(0x7f0000000540)={r0, r1+60000000}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8010000170001000000000000000000640101020000000000000000000000000000000032000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302"], 0x1c8}}, 0x4000) 961.512445ms ago: executing program 6 (id=6559): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 960.995435ms ago: executing program 3 (id=6561): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x44, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x44}}, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_enter(r0, 0x47f8, 0x4000, 0x2, 0x0, 0x1f) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x9}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e40)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0xe, 0xfff2}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r4 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x52ac, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x9e, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r4, 0x6686, 0x2936, 0x28, 0x0, 0x0) 933.572518ms ago: executing program 42 (id=6559): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x13) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 705.849325ms ago: executing program 4 (id=6566): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 592.156094ms ago: executing program 3 (id=6568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 575.459465ms ago: executing program 4 (id=6569): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0xfe8e, 0x12) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000140)=0xfffffdfb) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x20, 0x10, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095", @ANYRES32=r0, @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0x1, 0x81c, &(0x7f00000013c0)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 563.170416ms ago: executing program 3 (id=6570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) unshare(0x62040200) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 239.663151ms ago: executing program 0 (id=6571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668ae", 0x53}], 0x1}}], 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="021304010400000028bd7000fddbdf250200"], 0x20}}, 0x40800) 191.776865ms ago: executing program 0 (id=6572): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000408440018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@loopback, @remote, @remote, 0x6, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r5}) 84.554003ms ago: executing program 4 (id=6573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) unshare(0x62040200) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 84.251723ms ago: executing program 0 (id=6574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 43.680576ms ago: executing program 0 (id=6575): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) 29.136987ms ago: executing program 0 (id=6576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c8010000170001000000000000000000640101020000000000000000000000000000000032000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302"], 0x1c8}}, 0x4000) 0s ago: executing program 0 (id=6577): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xcb) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) syz_open_pts(r7, 0x101000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = syz_open_dev$rtc(&(0x7f00000001c0), 0x80, 0x200) poll(&(0x7f0000000280)=[{r9, 0x4212}], 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xf101, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r13, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r13, @ANYBLOB="00082abd700000080004000000000005000500080005000800020006000680080003000000000014000400200100000000000000000000000000000800030000000000060005004e210000140004000000000000fcffffff000000000000000600010002000000000000001c000180060001000a000000080003000a010102060001000a00"/154], 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x4068040) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x54b580) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r14, 0x40bc5311, &(0x7f0000000880)={0x64772bec, 0x0, 'client1\x00', 0x6, "98fc71117496885b", "f754afbd53e7228d7c94c0d38b7e510712360f031214cd2a1b0fb91a9b786743", 0xfffffffb, 0x2}) nanosleep(&(0x7f0000000300), 0x0) kernel console output (not intermixed with test programs): skspace_used:4215: comm syz.6.5932: Allocating blocks 41-42 which overlap fs metadata [ 380.724908][T27037] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5932: Failed to acquire dquot type 1 [ 380.726989][T27041] lo speed is unknown, defaulting to 1000 [ 380.736998][T27037] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 380.762214][T27037] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5932: corrupted inode contents [ 380.774636][T27037] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.5932: mark_inode_dirty error [ 380.778639][T27041] wg1 speed is unknown, defaulting to 1000 [ 380.788050][T27037] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5932: corrupted inode contents [ 380.805331][T27037] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.5932: mark_inode_dirty error [ 380.817729][T27037] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5932: corrupted inode contents [ 380.830813][T27037] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 380.830969][T27037] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5932: corrupted inode contents [ 380.831135][T27037] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.5932: mark_inode_dirty error [ 380.831358][T27037] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 380.831784][T27037] EXT4-fs (loop6): 1 truncate cleaned up [ 380.941257][T27037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.991808][T27037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.018973][T27059] tmpfs: Bad value for 'huge' [ 381.525949][T19624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.568684][T27083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27083 comm=syz.3.5946 [ 381.606588][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.614163][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.621712][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.640039][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.647571][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.655008][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.662449][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.669838][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.677388][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.684809][ T4832] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 381.703330][T27096] loop3: detected capacity change from 0 to 512 [ 381.710163][T27092] lo speed is unknown, defaulting to 1000 [ 381.718255][T27092] wg1 speed is unknown, defaulting to 1000 [ 381.733898][T27096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.747639][ T4832] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 381.751610][T27096] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.823248][T27096] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.5950: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 381.843670][T27096] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.5950: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 381.864405][T27096] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.5950: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 381.932081][T27103] loop4: detected capacity change from 0 to 512 [ 381.948225][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 381.948240][ T29] audit: type=1326 audit(2000000654.203:37877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 381.979079][T27103] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 382.004698][T27103] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.5952: Allocating blocks 41-42 which overlap fs metadata [ 382.022045][ T29] audit: type=1326 audit(2000000654.203:37878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.045822][ T29] audit: type=1326 audit(2000000654.203:37879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.069495][ T29] audit: type=1326 audit(2000000654.203:37880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.093140][ T29] audit: type=1326 audit(2000000654.203:37881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.116714][ T29] audit: type=1326 audit(2000000654.203:37882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.118768][T27103] Quota error (device loop4): write_blk: dquota write failed [ 382.140420][ T29] audit: type=1326 audit(2000000654.203:37883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.147815][T27103] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 382.171333][ T29] audit: type=1326 audit(2000000654.203:37884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27108 comm="syz.0.5955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 382.181193][T27103] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.5952: Failed to acquire dquot type 1 [ 382.212137][T27096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.5950: corrupted inode contents [ 382.220995][T27103] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 382.227213][T27096] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.5950: mark_inode_dirty error [ 382.241757][T27103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.5952: corrupted inode contents [ 382.252999][T27096] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.5950: corrupted inode contents [ 382.276407][T27103] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.5952: mark_inode_dirty error [ 382.290125][T27103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.5952: corrupted inode contents [ 382.303206][T27103] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.5952: mark_inode_dirty error [ 382.340874][T27103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.5952: corrupted inode contents [ 382.356550][T27119] loop7: detected capacity change from 0 to 512 [ 382.363919][T27103] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 382.379578][T27111] lo speed is unknown, defaulting to 1000 [ 382.381075][T27103] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.5952: corrupted inode contents [ 382.393425][T27111] wg1 speed is unknown, defaulting to 1000 [ 382.399863][T27103] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.5952: mark_inode_dirty error [ 382.424438][T27103] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 382.434593][T27103] EXT4-fs (loop4): 1 truncate cleaned up [ 382.440935][T27103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.471215][T27103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.720192][T27137] lo speed is unknown, defaulting to 1000 [ 382.726909][T27137] wg1 speed is unknown, defaulting to 1000 [ 382.801003][T27141] FAULT_INJECTION: forcing a failure. [ 382.801003][T27141] name failslab, interval 1, probability 0, space 0, times 0 [ 382.814776][T27141] CPU: 1 UID: 0 PID: 27141 Comm: syz.6.5965 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 382.814816][T27141] Tainted: [W]=WARN [ 382.814824][T27141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 382.814839][T27141] Call Trace: [ 382.814848][T27141] [ 382.814857][T27141] __dump_stack+0x1d/0x30 [ 382.814959][T27141] dump_stack_lvl+0xe8/0x140 [ 382.815004][T27141] dump_stack+0x15/0x1b [ 382.815027][T27141] should_fail_ex+0x265/0x280 [ 382.815094][T27141] should_failslab+0x8c/0xb0 [ 382.815123][T27141] kmem_cache_alloc_noprof+0x69/0x4b0 [ 382.815150][T27141] ? __nf_conntrack_alloc+0xba/0x2b0 [ 382.815177][T27141] ? __siphash_unaligned+0x157/0x2d0 [ 382.815216][T27141] __nf_conntrack_alloc+0xba/0x2b0 [ 382.815251][T27141] nf_conntrack_alloc+0x38/0x50 [ 382.815283][T27141] ctnetlink_new_conntrack+0x3a2/0x1280 [ 382.815306][T27141] ? __nla_validate_parse+0x1652/0x1d00 [ 382.815339][T27141] ? __nla_parse+0x40/0x60 [ 382.815381][T27141] nfnetlink_rcv_msg+0x4c6/0x590 [ 382.815428][T27141] netlink_rcv_skb+0x123/0x220 [ 382.815463][T27141] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 382.815552][T27141] nfnetlink_rcv+0x167/0x16c0 [ 382.815657][T27141] ? kmem_cache_free+0xe3/0x3a0 [ 382.815687][T27141] ? __kfree_skb+0x109/0x150 [ 382.815737][T27141] ? nlmon_xmit+0x4f/0x60 [ 382.815755][T27141] ? consume_skb+0x49/0x150 [ 382.815782][T27141] ? nlmon_xmit+0x4f/0x60 [ 382.815832][T27141] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 382.815868][T27141] ? __dev_queue_xmit+0x138d/0x1ec0 [ 382.815936][T27141] ? __dev_queue_xmit+0x148/0x1ec0 [ 382.815970][T27141] ? ref_tracker_free+0x37d/0x3e0 [ 382.816024][T27141] ? __netlink_deliver_tap+0x4dc/0x500 [ 382.816128][T27141] netlink_unicast+0x5c0/0x690 [ 382.816163][T27141] netlink_sendmsg+0x58b/0x6b0 [ 382.816200][T27141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.816280][T27141] __sock_sendmsg+0x145/0x180 [ 382.816318][T27141] ____sys_sendmsg+0x31e/0x4a0 [ 382.816352][T27141] ___sys_sendmsg+0x17b/0x1d0 [ 382.816408][T27141] __x64_sys_sendmsg+0xd4/0x160 [ 382.816447][T27141] x64_sys_call+0x17ba/0x3000 [ 382.816514][T27141] do_syscall_64+0xd8/0x2c0 [ 382.816553][T27141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.816621][T27141] RIP: 0033:0x7ff32ca8f749 [ 382.816639][T27141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.816657][T27141] RSP: 002b:00007ff32b4f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.816679][T27141] RAX: ffffffffffffffda RBX: 00007ff32cce5fa0 RCX: 00007ff32ca8f749 [ 382.816695][T27141] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 382.816711][T27141] RBP: 00007ff32b4f7090 R08: 0000000000000000 R09: 0000000000000000 [ 382.816727][T27141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.816741][T27141] R13: 00007ff32cce6038 R14: 00007ff32cce5fa0 R15: 00007ffc00914a98 [ 382.816761][T27141] [ 383.172256][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.316721][T27163] netlink: 'syz.7.5974': attribute type 29 has an invalid length. [ 383.341779][T27163] netlink: 'syz.7.5974': attribute type 29 has an invalid length. [ 383.403365][T27167] loop6: detected capacity change from 0 to 512 [ 383.425459][T27167] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.466300][T27167] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.5976: Allocating blocks 41-42 which overlap fs metadata [ 383.485808][T27172] loop7: detected capacity change from 0 to 512 [ 383.509261][T27172] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.528902][T27167] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.5976: Allocating blocks 41-42 which overlap fs metadata [ 383.562855][T27172] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.5977: Allocating blocks 41-42 which overlap fs metadata [ 383.589364][T27167] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.5976: Failed to acquire dquot type 1 [ 383.614982][T27172] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.5977: Allocating blocks 41-42 which overlap fs metadata [ 383.639426][T27167] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 383.675472][T27172] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5977: Failed to acquire dquot type 1 [ 383.697623][T27167] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5976: corrupted inode contents [ 383.698749][T27178] __nla_validate_parse: 6 callbacks suppressed [ 383.698764][T27178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 383.710342][T27172] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, [ 383.716892][T27178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5978'. [ 383.726119][T27172] inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 383.760879][T27167] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.5976: mark_inode_dirty error [ 383.772965][T27172] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5977: corrupted inode contents [ 383.785202][T27167] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5976: corrupted inode contents [ 383.797801][T27167] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.5976: mark_inode_dirty error [ 383.809594][T27172] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.5977: mark_inode_dirty error [ 383.821437][T27167] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5976: corrupted inode contents [ 383.835170][T27167] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 383.839497][T27172] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5977: corrupted inode contents [ 383.849652][T27167] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.5976: corrupted inode contents [ 383.874829][T27172] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.5977: mark_inode_dirty error [ 383.901195][T27167] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.5976: mark_inode_dirty error [ 383.928543][T27167] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 383.936395][T27172] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5977: corrupted inode contents [ 383.950561][T27167] EXT4-fs (loop6): 1 truncate cleaned up [ 383.967391][T27172] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 383.981150][T27167] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.986267][T27172] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5977: corrupted inode contents [ 384.018479][T27167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.032100][T27172] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.5977: mark_inode_dirty error [ 384.047074][T27181] lo speed is unknown, defaulting to 1000 [ 384.060900][T27172] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 384.071132][T27181] wg1 speed is unknown, defaulting to 1000 [ 384.085867][T27172] EXT4-fs (loop7): 1 truncate cleaned up [ 384.094923][T27172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.110274][T27172] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.123266][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'. [ 384.132418][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5979'. [ 384.181580][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5981'. [ 384.191004][T27186] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5981'. [ 384.222596][T27189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5984'. [ 384.244183][T27192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5982'. [ 384.253521][T27192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5982'. [ 384.372856][T27204] loop4: detected capacity change from 0 to 512 [ 384.394158][T27191] lo speed is unknown, defaulting to 1000 [ 384.403206][T27205] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5986'. [ 384.420149][T27191] wg1 speed is unknown, defaulting to 1000 [ 384.428391][T27204] EXT4-fs (loop4): 1 orphan inode deleted [ 384.442237][T27204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.468456][T27204] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.543408][T19624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.703167][T27213] lo speed is unknown, defaulting to 1000 [ 384.731820][T27213] wg1 speed is unknown, defaulting to 1000 [ 385.016388][T27222] loop4: detected capacity change from 0 to 128 [ 385.041318][T27222] netlink: 'syz.4.5995': attribute type 29 has an invalid length. [ 385.063862][T27220] loop7: detected capacity change from 0 to 512 [ 385.082205][T27220] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 385.151108][T27220] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.5994: Allocating blocks 41-42 which overlap fs metadata [ 385.173202][T27220] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.5994: Allocating blocks 41-42 which overlap fs metadata [ 385.190203][T27220] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5994: Failed to acquire dquot type 1 [ 385.203139][T27220] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 385.217920][T27220] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5994: corrupted inode contents [ 385.238987][T27220] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.5994: mark_inode_dirty error [ 385.250585][T27220] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5994: corrupted inode contents [ 385.263923][T27220] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.5994: mark_inode_dirty error [ 385.277239][T27220] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5994: corrupted inode contents [ 385.290084][T27220] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 385.302898][T27220] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.5994: corrupted inode contents [ 385.316007][T27220] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.5994: mark_inode_dirty error [ 385.327913][T27220] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 385.337297][T27226] lo speed is unknown, defaulting to 1000 [ 385.354359][T27220] EXT4-fs (loop7): 1 truncate cleaned up [ 385.358898][T27226] wg1 speed is unknown, defaulting to 1000 [ 385.360462][T27220] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.389913][T27220] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.446585][T27251] loop6: detected capacity change from 0 to 1024 [ 385.462335][T27251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 385.483874][T27251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.505948][T27244] lo speed is unknown, defaulting to 1000 [ 385.513413][T27244] wg1 speed is unknown, defaulting to 1000 [ 385.535613][T27258] x_tables: duplicate underflow at hook 1 [ 385.588554][T27262] FAULT_INJECTION: forcing a failure. [ 385.588554][T27262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.601878][T27262] CPU: 0 UID: 0 PID: 27262 Comm: syz.7.6010 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.601924][T27262] Tainted: [W]=WARN [ 385.601932][T27262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.601947][T27262] Call Trace: [ 385.601956][T27262] [ 385.601966][T27262] __dump_stack+0x1d/0x30 [ 385.602045][T27262] dump_stack_lvl+0xe8/0x140 [ 385.602071][T27262] dump_stack+0x15/0x1b [ 385.602095][T27262] should_fail_ex+0x265/0x280 [ 385.602124][T27262] should_fail_alloc_page+0xf2/0x100 [ 385.602171][T27262] __alloc_frozen_pages_noprof+0x109/0x360 [ 385.602209][T27262] alloc_pages_mpol+0xb3/0x260 [ 385.602248][T27262] alloc_pages_noprof+0x90/0x130 [ 385.602340][T27262] get_free_pages_noprof+0xc/0x40 [ 385.602379][T27262] __se_sys_mincore+0xd9/0x490 [ 385.602448][T27262] ? __secure_computing+0x82/0x150 [ 385.602484][T27262] __x64_sys_mincore+0x43/0x50 [ 385.602509][T27262] x64_sys_call+0x2970/0x3000 [ 385.602607][T27262] do_syscall_64+0xd8/0x2c0 [ 385.602691][T27262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.602717][T27262] RIP: 0033:0x7f198210f749 [ 385.602798][T27262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.602819][T27262] RSP: 002b:00007f1980b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 385.602840][T27262] RAX: ffffffffffffffda RBX: 00007f1982365fa0 RCX: 00007f198210f749 [ 385.602854][T27262] RDX: 0000200000000240 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 385.602866][T27262] RBP: 00007f1980b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 385.602934][T27262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.602950][T27262] R13: 00007f1982366038 R14: 00007f1982365fa0 R15: 00007ffe1b94b358 [ 385.602977][T27262] [ 385.642399][T27253] sch_fq: defrate 0 ignored. [ 385.806155][ T4937] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 386.037676][T27282] loop4: detected capacity change from 0 to 512 [ 386.067507][T27282] EXT4-fs (loop4): too many log groups per flexible block group [ 386.079975][T27282] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 386.100340][T27282] EXT4-fs (loop4): mount failed [ 386.153867][T20844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.176886][T27290] loop3: detected capacity change from 0 to 512 [ 386.187732][T27290] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 386.203390][T27290] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.6019: Allocating blocks 41-42 which overlap fs metadata [ 386.221112][T27290] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6019: Failed to acquire dquot type 1 [ 386.233989][T27290] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 386.248725][T27290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6019: corrupted inode contents [ 386.261514][T27290] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.6019: mark_inode_dirty error [ 386.273204][T27290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6019: corrupted inode contents [ 386.287596][T27290] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.6019: mark_inode_dirty error [ 386.299518][T27290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6019: corrupted inode contents [ 386.311618][T27290] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 386.320414][T27290] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6019: corrupted inode contents [ 386.332564][T27290] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.6019: mark_inode_dirty error [ 386.345394][T27290] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 386.354811][T27290] EXT4-fs (loop3): 1 truncate cleaned up [ 386.361081][T27290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.375119][T27290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.503479][T27317] loop3: detected capacity change from 0 to 1024 [ 386.510309][T27317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.522388][T27317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.669276][ T4937] Process accounting resumed [ 386.775915][T27340] netlink: 'syz.7.6037': attribute type 11 has an invalid length. [ 386.777769][T27341] 9p: Bad value for 'rfdno' [ 386.935307][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.104765][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 387.104781][ T29] audit: type=1400 audit(2000000659.363:38156): avc: denied { connect } for pid=27368 comm="syz.3.6049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 387.134323][T27377] xt_hashlimit: max too large, truncated to 1048576 [ 387.141573][T27377] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.263472][T27390] netlink: 'syz.0.6056': attribute type 11 has an invalid length. [ 387.375000][ T1368] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.394087][ T29] audit: type=1400 audit(2000000659.653:38157): avc: denied { accept } for pid=27405 comm="syz.0.6063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 387.395329][T27406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.421839][T27406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.590925][ T29] audit: type=1326 audit(2000000659.853:38158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.6.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 387.614794][ T29] audit: type=1326 audit(2000000659.853:38159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27418 comm="syz.6.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 387.638566][ T29] audit: type=1326 audit(2000000659.873:38160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.662207][ T29] audit: type=1326 audit(2000000659.873:38161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.685764][ T29] audit: type=1326 audit(2000000659.873:38162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.709625][ T29] audit: type=1326 audit(2000000659.873:38163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.733185][ T29] audit: type=1326 audit(2000000659.873:38164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.756808][ T29] audit: type=1326 audit(2000000659.873:38165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27422 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 387.890118][T27428] netlink: 'syz.3.6071': attribute type 11 has an invalid length. [ 387.983946][T27430] lo speed is unknown, defaulting to 1000 [ 387.990009][T27430] wg1 speed is unknown, defaulting to 1000 [ 388.196607][T27446] 9p: Bad value for 'wfdno' [ 388.209342][T27446] loop7: detected capacity change from 0 to 512 [ 388.222520][T27446] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 388.237613][T27446] EXT4-fs (loop7): mount failed [ 388.356416][T27457] bridge_slave_0: left allmulticast mode [ 388.362161][T27457] bridge_slave_0: left promiscuous mode [ 388.368293][T27457] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.382730][T27457] bridge_slave_1: left allmulticast mode [ 388.388417][T27457] bridge_slave_1: left promiscuous mode [ 388.394154][T27457] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.425140][T27466] loop3: detected capacity change from 0 to 2048 [ 388.434308][T27457] bond0: (slave bond_slave_0): Releasing backup interface [ 388.444762][T27457] bond0: (slave bond_slave_1): Releasing backup interface [ 388.458445][T27457] team0: Port device team_slave_0 removed [ 388.469532][T27469] netlink: 'syz.6.6084': attribute type 11 has an invalid length. [ 388.480192][T27457] team0: Port device team_slave_1 removed [ 388.487237][T27457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.494796][T27457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.503942][T27457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.511380][T27457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.521516][T27457] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 388.648366][T27468] lo speed is unknown, defaulting to 1000 [ 388.656962][T27468] wg1 speed is unknown, defaulting to 1000 [ 388.660188][T27493] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 388.660188][T27493] program syz.6.6091 not setting count and/or reply_len properly [ 388.705480][T27495] loop6: detected capacity change from 0 to 512 [ 388.712772][T27495] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.733335][T27495] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6093: Allocating blocks 41-42 which overlap fs metadata [ 388.747723][T27495] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6093: Allocating blocks 41-42 which overlap fs metadata [ 388.762122][T27495] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6093: Failed to acquire dquot type 1 [ 388.773806][T27495] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 388.798946][T27495] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6093: corrupted inode contents [ 388.811178][T27495] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6093: mark_inode_dirty error [ 388.823208][T27495] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6093: corrupted inode contents [ 388.835411][T27495] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6093: mark_inode_dirty error [ 388.847021][T27495] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6093: corrupted inode contents [ 388.859511][T27495] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 388.869197][T27495] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6093: corrupted inode contents [ 388.881831][T27495] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6093: mark_inode_dirty error [ 388.893151][T27495] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 388.902461][T27495] EXT4-fs (loop6): 1 truncate cleaned up [ 388.908698][T27495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.922330][T27495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.421477][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 389.424053][ T3553] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 389.470115][T27517] lo speed is unknown, defaulting to 1000 [ 389.489730][T27517] wg1 speed is unknown, defaulting to 1000 [ 389.577581][T27524] __nla_validate_parse: 30 callbacks suppressed [ 389.577599][T27524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6100'. [ 389.592885][T27524] netlink: 'syz.7.6100': attribute type 11 has an invalid length. [ 389.600748][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6100'. [ 389.666028][T27529] xt_hashlimit: max too large, truncated to 1048576 [ 389.716541][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6106'. [ 389.738831][T27542] macvtap0: refused to change device tx_queue_len [ 389.748832][T27540] loop4: detected capacity change from 0 to 512 [ 389.756684][T27540] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.766032][T27544] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6110'. [ 389.786653][T27540] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6107: Allocating blocks 41-42 which overlap fs metadata [ 389.810025][T27540] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6107: Allocating blocks 41-42 which overlap fs metadata [ 389.824564][T27540] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6107: Failed to acquire dquot type 1 [ 389.836251][T27540] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 389.851259][T27540] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6107: corrupted inode contents [ 389.866254][T27540] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6107: mark_inode_dirty error [ 389.893633][T27540] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6107: corrupted inode contents [ 389.921254][T27540] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6107: mark_inode_dirty error [ 389.922818][T27558] FAULT_INJECTION: forcing a failure. [ 389.922818][T27558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.945618][T27558] CPU: 1 UID: 0 PID: 27558 Comm: syz.7.6115 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.945722][T27558] Tainted: [W]=WARN [ 389.945731][T27558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.945747][T27558] Call Trace: [ 389.945755][T27558] [ 389.945766][T27558] __dump_stack+0x1d/0x30 [ 389.945837][T27558] dump_stack_lvl+0xe8/0x140 [ 389.945864][T27558] dump_stack+0x15/0x1b [ 389.945884][T27558] should_fail_ex+0x265/0x280 [ 389.945923][T27558] should_fail+0xb/0x20 [ 389.945946][T27558] should_fail_usercopy+0x1a/0x20 [ 389.945978][T27558] _copy_from_user+0x1c/0xb0 [ 389.946013][T27558] vmemdup_user+0x5e/0xd0 [ 389.946036][T27558] path_setxattrat+0x1b6/0x310 [ 389.946226][T27558] __x64_sys_fsetxattr+0x6b/0x80 [ 389.946252][T27558] x64_sys_call+0x23c4/0x3000 [ 389.946283][T27558] do_syscall_64+0xd8/0x2c0 [ 389.946327][T27558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.946365][T27558] RIP: 0033:0x7f198210f749 [ 389.946393][T27558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.946412][T27558] RSP: 002b:00007f1980b6f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 389.946434][T27558] RAX: ffffffffffffffda RBX: 00007f1982365fa0 RCX: 00007f198210f749 [ 389.946450][T27558] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 389.946466][T27558] RBP: 00007f1980b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.946517][T27558] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 389.946555][T27558] R13: 00007f1982366038 R14: 00007f1982365fa0 R15: 00007ffe1b94b358 [ 389.946574][T27558] [ 390.120830][T27540] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6107: corrupted inode contents [ 390.134864][T27540] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 390.171033][T27540] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6107: corrupted inode contents [ 390.191947][T27540] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6107: mark_inode_dirty error [ 390.223394][T27565] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.234071][T27540] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 390.244805][T27566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6117'. [ 390.249646][T27540] EXT4-fs (loop4): 1 truncate cleaned up [ 390.253819][T27566] netlink: 'syz.6.6117': attribute type 11 has an invalid length. [ 390.253836][T27566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6117'. [ 390.295094][T27540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.309707][T27540] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.319130][T27567] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6118'. [ 390.336927][T27565] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.351390][T27569] netlink: 'syz.0.6119': attribute type 1 has an invalid length. [ 390.496993][T27565] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.556671][T27581] netlink: 124 bytes leftover after parsing attributes in process `syz.6.6122'. [ 390.588875][T27565] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.606520][T27583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6123'. [ 390.686652][ T4043] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.688878][T27593] netlink: 160 bytes leftover after parsing attributes in process `syz.4.6125'. [ 390.720293][ T4043] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.756956][ T4043] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.780978][ T4043] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.956687][T27605] random: crng reseeded on system resumption [ 391.002762][T27606] loop7: detected capacity change from 0 to 2048 [ 391.014971][T27603] lo speed is unknown, defaulting to 1000 [ 391.016092][T27606] ext4: Unknown parameter 'smackfsfloor' [ 391.035437][T27603] wg1 speed is unknown, defaulting to 1000 [ 391.322698][T27621] loop7: detected capacity change from 0 to 512 [ 391.331693][T27621] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.352550][T27621] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6135: Allocating blocks 41-42 which overlap fs metadata [ 391.366613][T27621] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6135: Allocating blocks 41-42 which overlap fs metadata [ 391.380662][T27621] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.6135: Failed to acquire dquot type 1 [ 391.392451][T27621] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 391.407385][T27621] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6135: corrupted inode contents [ 391.425740][T27621] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.6135: mark_inode_dirty error [ 391.438314][T27621] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6135: corrupted inode contents [ 391.469270][T27621] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6135: mark_inode_dirty error [ 391.495446][T27621] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6135: corrupted inode contents [ 391.524770][T27621] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 391.527024][T27631] loop4: detected capacity change from 0 to 256 [ 391.544609][T27621] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6135: corrupted inode contents [ 391.570228][T27621] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.6135: mark_inode_dirty error [ 391.585198][T27621] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 391.596272][T27621] EXT4-fs (loop7): 1 truncate cleaned up [ 391.602626][T27621] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.616499][T27621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.872320][T27644] netlink: 'syz.0.6143': attribute type 11 has an invalid length. [ 392.059842][T27650] loop6: detected capacity change from 0 to 1024 [ 392.087485][T27650] journal_path: Non-blockdev passed as './file1' [ 392.094267][T27650] EXT4-fs: error: could not find journal device path [ 392.120845][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 392.120861][ T29] audit: type=1326 audit(2000000664.383:38432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff32ca8df90 code=0x7ffc0000 [ 392.190800][ T29] audit: type=1326 audit(2000000664.413:38433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff32ca8f34b code=0x7ffc0000 [ 392.214693][ T29] audit: type=1326 audit(2000000664.413:38434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff32ca8e3aa code=0x7ffc0000 [ 392.238179][ T29] audit: type=1326 audit(2000000664.413:38435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.262007][ T29] audit: type=1326 audit(2000000664.413:38436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.285687][ T29] audit: type=1326 audit(2000000664.413:38437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.309333][ T29] audit: type=1326 audit(2000000664.413:38438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.332946][ T29] audit: type=1326 audit(2000000664.413:38439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.356675][ T29] audit: type=1326 audit(2000000664.413:38440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.380297][ T29] audit: type=1326 audit(2000000664.413:38441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27649 comm="syz.6.6147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff32ca8f749 code=0x7ffc0000 [ 392.454117][T27660] lo speed is unknown, defaulting to 1000 [ 392.460551][T27660] wg1 speed is unknown, defaulting to 1000 [ 392.487162][T27668] loop6: detected capacity change from 0 to 512 [ 392.506576][T27668] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.547657][T27668] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6152: Allocating blocks 41-42 which overlap fs metadata [ 392.552455][T27673] loop4: detected capacity change from 0 to 2048 [ 392.581889][T27668] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6152: Allocating blocks 41-42 which overlap fs metadata [ 392.621404][T27668] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6152: Failed to acquire dquot type 1 [ 392.651334][T27668] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 392.680846][T27668] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6152: corrupted inode contents [ 392.696992][T27668] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6152: mark_inode_dirty error [ 392.708710][T27668] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6152: corrupted inode contents [ 392.720938][T27668] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6152: mark_inode_dirty error [ 392.742302][T27668] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6152: corrupted inode contents [ 392.786049][T27687] netlink: 'syz.4.6159': attribute type 21 has an invalid length. [ 392.794344][T27668] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 392.805962][T27668] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6152: corrupted inode contents [ 392.820913][T27668] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6152: mark_inode_dirty error [ 392.832344][T27668] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 392.841601][T27668] EXT4-fs (loop6): 1 truncate cleaned up [ 392.847732][T27668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.868271][T27668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.064989][T27719] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6174: bad orphan inode 13 [ 393.100382][T27719] ext4_test_bit(bit=12, block=4) = 1 [ 393.105784][T27719] is_bad_inode(inode)=0 [ 393.109928][T27719] NEXT_ORPHAN(inode)=0 [ 393.114102][T27719] max_ino=32 [ 393.117323][T27719] i_nlink=1 [ 393.136631][T27719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.161392][T27724] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 393.176710][T27719] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6174: Unrecognised inode hash code 20 [ 393.188244][T27719] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6174: Corrupt directory, running e2fsck is recommended [ 393.202808][T27719] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.6174: Unrecognised inode hash code 20 [ 393.214256][T27719] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6174: Corrupt directory, running e2fsck is recommended [ 393.241875][T27724] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6175: Allocating blocks 41-42 which overlap fs metadata [ 393.257820][T27724] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6175: Allocating blocks 41-42 which overlap fs metadata [ 393.290593][T27724] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6175: Failed to acquire dquot type 1 [ 393.325318][T27737] hub 2-0:1.0: USB hub found [ 393.336602][T27737] hub 2-0:1.0: 8 ports detected [ 393.350927][T27724] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 393.371770][T22380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.392410][T27724] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6175: corrupted inode contents [ 393.415872][T27724] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6175: mark_inode_dirty error [ 393.433523][T27724] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6175: corrupted inode contents [ 393.448043][T27724] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6175: mark_inode_dirty error [ 393.459559][T27724] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6175: corrupted inode contents [ 393.472041][T27724] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 393.520227][T27724] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6175: corrupted inode contents [ 393.547101][T27747] lo speed is unknown, defaulting to 1000 [ 393.552531][T27724] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6175: mark_inode_dirty error [ 393.561089][T27747] wg1 speed is unknown, defaulting to 1000 [ 393.600991][T27724] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 393.635296][T27724] EXT4-fs (loop6): 1 truncate cleaned up [ 393.649302][T27724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.671202][T27764] netlink: 'syz.3.6188': attribute type 11 has an invalid length. [ 393.696244][T27724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.958623][T27773] hub 2-0:1.0: USB hub found [ 393.972056][T27773] hub 2-0:1.0: 8 ports detected [ 394.174987][T27785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27785 comm=syz.6.6194 [ 394.187570][T27785] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27785 comm=syz.6.6194 [ 394.276230][T27782] infiniband syz1: set down [ 394.280844][T27782] infiniband syz1: added bond0 [ 394.309157][T27782] RDS/IB: syz1: added [ 394.313800][T27782] smc: adding ib device syz1 with port count 1 [ 394.328875][T27782] smc: ib device syz1 port 1 has no pnetid [ 394.455753][T27793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 394.554837][T27799] set_capacity_and_notify: 2 callbacks suppressed [ 394.554857][T27799] loop6: detected capacity change from 0 to 1024 [ 394.614544][T27799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.661391][T27808] __nla_validate_parse: 12 callbacks suppressed [ 394.661409][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6202'. [ 394.687406][T20844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.748460][T27814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.771229][T27814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.808615][T27820] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6203'. [ 394.817648][T27820] netlink: 'syz.6.6203': attribute type 11 has an invalid length. [ 394.825489][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6203'. [ 395.055917][T27840] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6212'. [ 395.070869][T27842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6215'. [ 395.145030][T27849] ip6t_srh: unknown srh invflags 4000 [ 395.254544][T27852] lo speed is unknown, defaulting to 1000 [ 395.261038][T27852] wg1 speed is unknown, defaulting to 1000 [ 395.763366][T27866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6221'. [ 395.772304][T27866] netlink: 'syz.3.6221': attribute type 11 has an invalid length. [ 395.780110][T27866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6221'. [ 395.980047][T27875] loop4: detected capacity change from 0 to 128 [ 396.012834][T27879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6227'. [ 396.030986][T27875] FAT-fs (loop4): bread failed, FSINFO block (sector = 16897) [ 396.144677][T27885] loop4: detected capacity change from 0 to 512 [ 396.183917][T27885] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 396.223868][T27885] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6228: Allocating blocks 41-42 which overlap fs metadata [ 396.292613][T27885] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6228: Allocating blocks 41-42 which overlap fs metadata [ 396.328865][T27885] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6228: Failed to acquire dquot type 1 [ 396.365581][T27896] lo speed is unknown, defaulting to 1000 [ 396.379755][T27885] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 396.406057][T27896] wg1 speed is unknown, defaulting to 1000 [ 396.457493][T27885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6228: corrupted inode contents [ 396.484361][T27907] pimreg: entered allmulticast mode [ 396.499534][T27885] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6228: mark_inode_dirty error [ 396.512242][T27908] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6236'. [ 396.530821][T27907] pimreg: left allmulticast mode [ 396.541549][T27885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6228: corrupted inode contents [ 396.567282][T27885] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6228: mark_inode_dirty error [ 396.600964][T27885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6228: corrupted inode contents [ 396.641482][T27910] netlink: 'syz.6.6238': attribute type 21 has an invalid length. [ 396.649621][T27885] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 396.667746][T27885] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6228: corrupted inode contents [ 396.684313][T27910] netlink: 144 bytes leftover after parsing attributes in process `syz.6.6238'. [ 396.701770][T27911] pimreg: entered allmulticast mode [ 396.709236][T27885] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6228: mark_inode_dirty error [ 396.750300][T27910] pimreg: left allmulticast mode [ 396.756621][T27885] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 396.790569][T27885] EXT4-fs (loop4): 1 truncate cleaned up [ 396.811074][T27885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.870514][T27885] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.958770][T27922] loop7: detected capacity change from 0 to 4096 [ 396.967617][T27922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.981215][T27920] netlink: 'syz.0.6241': attribute type 3 has an invalid length. [ 397.066604][T22380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.212551][ T29] kauditd_printk_skb: 738 callbacks suppressed [ 397.212573][ T29] audit: type=1400 audit(2000000669.473:39166): avc: denied { ioctl } for pid=27938 comm="syz.4.6248" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 397.248474][T27939] lo speed is unknown, defaulting to 1000 [ 397.254852][T27939] wg1 speed is unknown, defaulting to 1000 [ 397.299161][ T29] audit: type=1400 audit(2000000669.513:39167): avc: denied { connect } for pid=27938 comm="syz.4.6248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 397.343183][T27949] wireguard0: entered promiscuous mode [ 397.348683][T27949] wireguard0: entered allmulticast mode [ 397.415842][T27958] loop3: detected capacity change from 0 to 256 [ 397.459610][T27962] loop6: detected capacity change from 0 to 512 [ 397.489178][T27962] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.535264][T27962] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6257: Allocating blocks 41-42 which overlap fs metadata [ 397.582251][T27975] netlink: 'syz.7.6261': attribute type 11 has an invalid length. [ 397.653932][T27962] Quota error (device loop6): write_blk: dquota write failed [ 397.661806][T27962] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 397.682246][T27979] bridge_slave_1: left allmulticast mode [ 397.688331][T27979] bridge_slave_1: left promiscuous mode [ 397.694440][T27979] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.747874][T27979] bridge_slave_0: left allmulticast mode [ 397.753647][T27979] bridge_slave_0: left promiscuous mode [ 397.754607][T27962] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6257: Allocating blocks 41-42 which overlap fs metadata [ 397.759663][T27979] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.833673][T27962] Quota error (device loop6): write_blk: dquota write failed [ 397.855100][T27962] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 397.885577][T27962] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6257: Failed to acquire dquot type 1 [ 397.902018][T27949] lo speed is unknown, defaulting to 1000 [ 397.924251][T27949] wg1 speed is unknown, defaulting to 1000 [ 397.930559][T27962] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 397.971209][T27962] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6257: corrupted inode contents [ 398.004090][T27962] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6257: mark_inode_dirty error [ 398.035645][T27971] loop4: detected capacity change from 0 to 512 [ 398.050904][T27962] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6257: corrupted inode contents [ 398.071353][T27962] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6257: mark_inode_dirty error [ 398.091500][T27971] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6262: bad orphan inode 11862016 [ 398.110902][T27962] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6257: corrupted inode contents [ 398.121457][T27971] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.123804][T27962] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 398.143194][T27962] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6257: corrupted inode contents [ 398.155456][T27962] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6257: mark_inode_dirty error [ 398.167214][T27962] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 398.187301][T27962] EXT4-fs (loop6): 1 truncate cleaned up [ 398.260535][T27995] FAULT_INJECTION: forcing a failure. [ 398.260535][T27995] name failslab, interval 1, probability 0, space 0, times 0 [ 398.273992][T27995] CPU: 1 UID: 0 PID: 27995 Comm: syz.6.6267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.274031][T27995] Tainted: [W]=WARN [ 398.274040][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.274064][T27995] Call Trace: [ 398.274153][T27995] [ 398.274163][T27995] __dump_stack+0x1d/0x30 [ 398.274305][T27995] dump_stack_lvl+0xe8/0x140 [ 398.274382][T27995] dump_stack+0x15/0x1b [ 398.274460][T27995] should_fail_ex+0x265/0x280 [ 398.274497][T27995] should_failslab+0x8c/0xb0 [ 398.274521][T27995] __kvmalloc_node_noprof+0x149/0x6b0 [ 398.274547][T27995] ? xt_alloc_entry_offsets+0x4d/0x60 [ 398.274646][T27995] ? refill_obj_stock+0x254/0x2e0 [ 398.274686][T27995] xt_alloc_entry_offsets+0x4d/0x60 [ 398.274720][T27995] translate_table+0xa9/0x1070 [ 398.274746][T27995] ? __rcu_read_unlock+0x4f/0x70 [ 398.274848][T27995] ? should_fail_ex+0xdb/0x280 [ 398.274875][T27995] ? _copy_from_user+0x89/0xb0 [ 398.274914][T27995] do_ip6t_set_ctl+0x678/0x840 [ 398.274942][T27995] ? __bpf_get_stackid+0x6f6/0x7d0 [ 398.275080][T27995] nf_setsockopt+0x199/0x1b0 [ 398.275107][T27995] ipv6_setsockopt+0x11a/0x130 [ 398.275130][T27995] udpv6_setsockopt+0x99/0xb0 [ 398.275184][T27995] sock_common_setsockopt+0x69/0x80 [ 398.275209][T27995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 398.275232][T27995] __sys_setsockopt+0x184/0x200 [ 398.275324][T27995] __x64_sys_setsockopt+0x64/0x80 [ 398.275358][T27995] x64_sys_call+0x21d5/0x3000 [ 398.275427][T27995] do_syscall_64+0xd8/0x2c0 [ 398.275468][T27995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.275561][T27995] RIP: 0033:0x7ff32ca8f749 [ 398.275635][T27995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.275663][T27995] RSP: 002b:00007ff32b4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 398.275685][T27995] RAX: ffffffffffffffda RBX: 00007ff32cce5fa0 RCX: 00007ff32ca8f749 [ 398.275737][T27995] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 398.275752][T27995] RBP: 00007ff32b4f7090 R08: 0000000000000520 R09: 0000000000000000 [ 398.275808][T27995] R10: 0000200000000e40 R11: 0000000000000246 R12: 0000000000000001 [ 398.275822][T27995] R13: 00007ff32cce6038 R14: 00007ff32cce5fa0 R15: 00007ffc00914a98 [ 398.275842][T27995] [ 398.586284][ T29] audit: type=1400 audit(2000000670.843:39168): avc: denied { mounton } for pid=27970 comm="syz.4.6262" path="/403/file1" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 398.627792][T27971] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.844081][T28020] netlink: 'syz.4.6274': attribute type 11 has an invalid length. [ 398.957893][T28029] loop6: detected capacity change from 0 to 2048 [ 398.993201][T28023] lo speed is unknown, defaulting to 1000 [ 399.025859][T28023] wg1 speed is unknown, defaulting to 1000 [ 399.065834][ T29] audit: type=1400 audit(2000000671.323:39169): avc: denied { map } for pid=28027 comm="syz.6.6281" path="/374/file2/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 399.093896][T28029] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 399.134052][T28036] loop7: detected capacity change from 0 to 164 [ 399.141759][T28036] iso9660: Unknown parameter '0xffffffffffffffff0x00000000000000000xffffffffffffffffÿÿÿÿÿÿÿÿ0000000000000000000000018446744073709551615' [ 399.153700][T28029] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 544 with error 28 [ 399.168985][T28029] EXT4-fs (loop6): This should not happen!! Data will be lost [ 399.168985][T28029] [ 399.179261][T28029] EXT4-fs (loop6): Total free blocks count 0 [ 399.185762][T28029] EXT4-fs (loop6): Free/Dirty block details [ 399.191783][T28029] EXT4-fs (loop6): free_blocks=2415919104 [ 399.197934][T28029] EXT4-fs (loop6): dirty_blocks=560 [ 399.202203][ T29] audit: type=1400 audit(2000000671.453:39170): avc: denied { read } for pid=28035 comm="syz.7.6282" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 399.203367][T28029] EXT4-fs (loop6): Block reservation details [ 399.203382][T28029] EXT4-fs (loop6): i_reserved_data_blocks=35 [ 399.227475][ T29] audit: type=1400 audit(2000000671.453:39171): avc: denied { open } for pid=28035 comm="syz.7.6282" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 399.385779][T28046] FAULT_INJECTION: forcing a failure. [ 399.385779][T28046] name failslab, interval 1, probability 0, space 0, times 0 [ 399.399143][T28046] CPU: 0 UID: 0 PID: 28046 Comm: syz.7.6285 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.399182][T28046] Tainted: [W]=WARN [ 399.399190][T28046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.399202][T28046] Call Trace: [ 399.399210][T28046] [ 399.399220][T28046] __dump_stack+0x1d/0x30 [ 399.399247][T28046] dump_stack_lvl+0xe8/0x140 [ 399.399352][T28046] dump_stack+0x15/0x1b [ 399.399377][T28046] should_fail_ex+0x265/0x280 [ 399.399409][T28046] should_failslab+0x8c/0xb0 [ 399.399437][T28046] kmem_cache_alloc_noprof+0x69/0x4b0 [ 399.399539][T28046] ? security_file_alloc+0x32/0x100 [ 399.399597][T28046] security_file_alloc+0x32/0x100 [ 399.399630][T28046] init_file+0x5c/0x1c0 [ 399.399659][T28046] alloc_empty_file+0x8b/0x200 [ 399.399710][T28046] alloc_file_pseudo+0xc6/0x160 [ 399.399744][T28046] __shmem_file_setup+0x1de/0x210 [ 399.399799][T28046] shmem_file_setup+0x3b/0x50 [ 399.399826][T28046] __se_sys_memfd_create+0x2f7/0x6b0 [ 399.399870][T28046] __x64_sys_memfd_create+0x31/0x40 [ 399.399975][T28046] x64_sys_call+0x28cb/0x3000 [ 399.400052][T28046] do_syscall_64+0xd8/0x2c0 [ 399.400096][T28046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.400155][T28046] RIP: 0033:0x7f198210f749 [ 399.400171][T28046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.400189][T28046] RSP: 002b:00007f1980b6ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 399.400208][T28046] RAX: ffffffffffffffda RBX: 0000000000001059 RCX: 00007f198210f749 [ 399.400222][T28046] RDX: 00007f1980b6edec RSI: 0000000000000000 RDI: 00007f1982194960 [ 399.400236][T28046] RBP: 0000200000000000 R08: 00007f1980b6eb07 R09: 0000000000000000 [ 399.400313][T28046] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 399.400337][T28046] R13: 00007f1980b6edec R14: 00007f1980b6edf0 R15: 00007ffe1b94b358 [ 399.400356][T28046] [ 399.655571][T28051] FAULT_INJECTION: forcing a failure. [ 399.655571][T28051] name failslab, interval 1, probability 0, space 0, times 0 [ 399.669105][T28051] CPU: 1 UID: 0 PID: 28051 Comm: syz.6.6287 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 399.669139][T28051] Tainted: [W]=WARN [ 399.669147][T28051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 399.669187][T28051] Call Trace: [ 399.669196][T28051] [ 399.669205][T28051] __dump_stack+0x1d/0x30 [ 399.669232][T28051] dump_stack_lvl+0xe8/0x140 [ 399.669258][T28051] dump_stack+0x15/0x1b [ 399.669296][T28051] should_fail_ex+0x265/0x280 [ 399.669322][T28051] should_failslab+0x8c/0xb0 [ 399.669351][T28051] kmem_cache_alloc_noprof+0x69/0x4b0 [ 399.669379][T28051] ? prepare_creds+0x39/0x550 [ 399.669478][T28051] prepare_creds+0x39/0x550 [ 399.669503][T28051] join_session_keyring+0x19/0x2a0 [ 399.669529][T28051] lookup_user_key+0x399/0xd10 [ 399.669559][T28051] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 399.669615][T28051] __se_sys_add_key+0x268/0x350 [ 399.669657][T28051] __x64_sys_add_key+0x67/0x80 [ 399.669770][T28051] x64_sys_call+0x2ea3/0x3000 [ 399.669851][T28051] do_syscall_64+0xd8/0x2c0 [ 399.669893][T28051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.669919][T28051] RIP: 0033:0x7ff32ca8f749 [ 399.669937][T28051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.670017][T28051] RSP: 002b:00007ff32b4f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 399.670143][T28051] RAX: ffffffffffffffda RBX: 00007ff32cce5fa0 RCX: 00007ff32ca8f749 [ 399.670159][T28051] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 399.670175][T28051] RBP: 00007ff32b4f7090 R08: fffffffffffffffd R09: 0000000000000000 [ 399.670189][T28051] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 399.670202][T28051] R13: 00007ff32cce6038 R14: 00007ff32cce5fa0 R15: 00007ffc00914a98 [ 399.670223][T28051] [ 399.687257][T28049] lo speed is unknown, defaulting to 1000 [ 399.861300][T28055] loop3: detected capacity change from 0 to 1024 [ 399.895197][T28057] __nla_validate_parse: 16 callbacks suppressed [ 399.895338][T28057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6289'. [ 399.897798][T28055] EXT4-fs: inline encryption not supported [ 399.906027][T28049] wg1 speed is unknown, defaulting to 1000 [ 399.910843][T28055] EXT4-fs: Ignoring removed orlov option [ 399.956722][T28055] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 400.279563][T28083] FAULT_INJECTION: forcing a failure. [ 400.279563][T28083] name failslab, interval 1, probability 0, space 0, times 0 [ 400.292344][T28083] CPU: 1 UID: 0 PID: 28083 Comm: syz.4.6299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 400.292379][T28083] Tainted: [W]=WARN [ 400.292386][T28083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.292400][T28083] Call Trace: [ 400.292408][T28083] [ 400.292418][T28083] __dump_stack+0x1d/0x30 [ 400.292514][T28083] dump_stack_lvl+0xe8/0x140 [ 400.292541][T28083] dump_stack+0x15/0x1b [ 400.292587][T28083] should_fail_ex+0x265/0x280 [ 400.292617][T28083] should_failslab+0x8c/0xb0 [ 400.292645][T28083] kmem_cache_alloc_noprof+0x69/0x4b0 [ 400.292671][T28083] ? getname_flags+0x80/0x3b0 [ 400.292697][T28083] getname_flags+0x80/0x3b0 [ 400.292829][T28083] start_creating_user_path+0x27/0x130 [ 400.292862][T28083] bpf_obj_pin_user+0xe0/0x260 [ 400.292919][T28083] bpf_obj_pin+0xac/0xd0 [ 400.292951][T28083] __sys_bpf+0x6d6/0x7c0 [ 400.292982][T28083] __x64_sys_bpf+0x41/0x50 [ 400.293082][T28083] x64_sys_call+0x28e1/0x3000 [ 400.293113][T28083] do_syscall_64+0xd8/0x2c0 [ 400.293157][T28083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.293233][T28083] RIP: 0033:0x7f8e35dff749 [ 400.293306][T28083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.293340][T28083] RSP: 002b:00007f8e34867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.293362][T28083] RAX: ffffffffffffffda RBX: 00007f8e36055fa0 RCX: 00007f8e35dff749 [ 400.293378][T28083] RDX: 0000000000000018 RSI: 00002000000002c0 RDI: 0000000000000006 [ 400.293393][T28083] RBP: 00007f8e34867090 R08: 0000000000000000 R09: 0000000000000000 [ 400.293406][T28083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.293420][T28083] R13: 00007f8e36056038 R14: 00007f8e36055fa0 R15: 00007ffd32e9bb88 [ 400.293491][T28083] [ 400.540513][T28091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6301'. [ 400.667161][T28104] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6306'. [ 400.676145][T28104] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6306'. [ 400.677669][T28095] lo speed is unknown, defaulting to 1000 [ 400.724442][T28095] wg1 speed is unknown, defaulting to 1000 [ 400.821520][T28113] loop7: detected capacity change from 0 to 256 [ 400.843146][T28111] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6310'. [ 400.961433][T28120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28120 comm=syz.6.6314 [ 400.974774][T28118] loop7: detected capacity change from 0 to 512 [ 401.040059][T28129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6317'. [ 401.110025][T28136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6320'. [ 401.122511][T28140] netlink: 'syz.7.6322': attribute type 21 has an invalid length. [ 401.141239][T28136] netlink: 26 bytes leftover after parsing attributes in process `syz.3.6320'. [ 401.150278][T28140] netlink: 'syz.7.6322': attribute type 1 has an invalid length. [ 401.221664][T28144] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 401.248346][T28136] lo speed is unknown, defaulting to 1000 [ 401.261293][T28136] wg1 speed is unknown, defaulting to 1000 [ 401.360365][T28152] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6326'. [ 401.411318][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6325'. [ 401.420310][T28153] netlink: 'syz.4.6325': attribute type 11 has an invalid length. [ 401.905046][T28196] loop6: detected capacity change from 0 to 512 [ 401.919759][T28196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.939535][T28200] loop3: detected capacity change from 0 to 512 [ 401.947989][T28196] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.6339: invalid block [ 401.980865][T28200] EXT4-fs mount: 8 callbacks suppressed [ 401.980931][T28200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.000657][T28196] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6339: invalid indirect mapped block 4294967295 (level 1) [ 402.033308][T28196] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6339: invalid indirect mapped block 4294967295 (level 1) [ 402.047848][T28200] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.059464][T28196] EXT4-fs (loop6): 2 truncates cleaned up [ 402.065890][T28196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.098846][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.124783][T20844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.232094][T28209] lo speed is unknown, defaulting to 1000 [ 402.232130][T28222] netlink: 'syz.0.6348': attribute type 11 has an invalid length. [ 402.248916][T28223] program syz.4.6344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.271410][T28209] wg1 speed is unknown, defaulting to 1000 [ 402.351608][T20228] hid_parser_main: 20 callbacks suppressed [ 402.351627][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.365170][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.372704][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.380157][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.388214][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.395647][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.400543][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 402.400558][ T29] audit: type=1326 audit(2000000674.653:39464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.403245][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.440880][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.448488][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.455975][T20228] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 402.472999][ T29] audit: type=1326 audit(2000000674.663:39465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.496742][T28230] SELinux: failed to load policy [ 402.497337][ T29] audit: type=1326 audit(2000000674.663:39466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.521037][T20228] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 402.526618][ T29] audit: type=1326 audit(2000000674.663:39467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.560735][ T29] audit: type=1326 audit(2000000674.663:39468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.584845][ T29] audit: type=1326 audit(2000000674.663:39469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.609822][ T29] audit: type=1326 audit(2000000674.693:39470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.633918][ T29] audit: type=1326 audit(2000000674.693:39471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.658295][ T29] audit: type=1326 audit(2000000674.693:39472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.682069][ T29] audit: type=1326 audit(2000000674.693:39473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28208 comm="syz.4.6344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 402.863551][T28242] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 402.975480][T28249] loop6: detected capacity change from 0 to 512 [ 403.007364][T28249] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.081402][T28249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6356: Allocating blocks 41-42 which overlap fs metadata [ 403.123852][T28256] loop3: detected capacity change from 0 to 512 [ 403.150954][T28249] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6356: Allocating blocks 41-42 which overlap fs metadata [ 403.192566][T28256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.211097][T28249] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6356: Failed to acquire dquot type 1 [ 403.238039][T28256] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.248982][T28249] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 403.250966][T28256] FAULT_INJECTION: forcing a failure. [ 403.250966][T28256] name failslab, interval 1, probability 0, space 0, times 0 [ 403.280059][T28256] CPU: 0 UID: 0 PID: 28256 Comm: syz.3.6357 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 403.280094][T28256] Tainted: [W]=WARN [ 403.280101][T28256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.280149][T28256] Call Trace: [ 403.280157][T28256] [ 403.280166][T28256] __dump_stack+0x1d/0x30 [ 403.280192][T28256] dump_stack_lvl+0xe8/0x140 [ 403.280219][T28256] dump_stack+0x15/0x1b [ 403.280264][T28256] should_fail_ex+0x265/0x280 [ 403.280289][T28256] should_failslab+0x8c/0xb0 [ 403.280312][T28256] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 403.280342][T28256] ? security_context_to_sid_core+0x69/0x3b0 [ 403.280418][T28256] ? __traceiter_kfree+0x2e/0x50 [ 403.280453][T28256] kmemdup_nul+0x36/0xc0 [ 403.280472][T28256] security_context_to_sid_core+0x69/0x3b0 [ 403.280566][T28256] security_context_to_sid_force+0x30/0x40 [ 403.280598][T28256] selinux_inode_setxattr+0x4e3/0x6d0 [ 403.280634][T28256] security_inode_setxattr+0x13a/0x1b0 [ 403.280685][T28256] __vfs_setxattr_locked+0x83/0x1c0 [ 403.280782][T28256] vfs_setxattr+0x132/0x270 [ 403.280807][T28256] file_setxattr+0x139/0x1b0 [ 403.280831][T28256] path_setxattrat+0x290/0x310 [ 403.280902][T28256] __x64_sys_fsetxattr+0x6b/0x80 [ 403.280933][T28256] x64_sys_call+0x23c4/0x3000 [ 403.281031][T28256] do_syscall_64+0xd8/0x2c0 [ 403.281072][T28256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.281094][T28256] RIP: 0033:0x7f88c5b7f749 [ 403.281110][T28256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.281200][T28256] RSP: 002b:00007f88c45e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 403.281223][T28256] RAX: ffffffffffffffda RBX: 00007f88c5dd5fa0 RCX: 00007f88c5b7f749 [ 403.281239][T28256] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000007 [ 403.281255][T28256] RBP: 00007f88c45e7090 R08: 0000000000000000 R09: 0000000000000000 [ 403.281269][T28256] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 403.281281][T28256] R13: 00007f88c5dd6038 R14: 00007f88c5dd5fa0 R15: 00007fffa49a7118 [ 403.281313][T28256] [ 403.494747][T28249] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6356: corrupted inode contents [ 403.509573][T28249] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6356: mark_inode_dirty error [ 403.521727][T28249] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6356: corrupted inode contents [ 403.533933][T28249] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6356: mark_inode_dirty error [ 403.550786][T28249] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6356: corrupted inode contents [ 403.569027][T28249] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 403.579251][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.600276][T28249] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6356: corrupted inode contents [ 403.637553][T28249] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6356: mark_inode_dirty error [ 403.665568][T28262] loop7: detected capacity change from 0 to 2048 [ 403.681240][T28249] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 403.704520][T28249] EXT4-fs (loop6): 1 truncate cleaned up [ 403.720669][T28249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.736394][T28262] Alternate GPT is invalid, using primary GPT. [ 403.742788][T28262] loop7: p2 p3 p7 [ 403.750913][T28249] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.930583][T28281] loop6: detected capacity change from 0 to 512 [ 403.942373][T28281] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.975480][T28281] ext4 filesystem being mounted at /395/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.055850][T28281] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.6368: corrupted xattr block 33: invalid ea_ino [ 404.069616][T28281] EXT4-fs (loop6): Remounting filesystem read-only [ 404.076532][T28281] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 404.100776][T28281] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 404.120599][T28297] loop7: detected capacity change from 0 to 8192 [ 404.128899][T28297] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 404.152718][T20844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.202088][T28308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.225998][T28308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.337386][T28314] FAT-fs (loop3): bogus number of FAT sectors [ 404.343595][T28314] FAT-fs (loop3): Can't find a valid FAT filesystem [ 404.912297][T28325] __nla_validate_parse: 18 callbacks suppressed [ 404.912364][T28325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6381'. [ 404.950592][T28327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.132256][T28345] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6387'. [ 405.148702][T28345] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6387'. [ 405.157803][T28345] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6387'. [ 405.209059][T28347] set_capacity_and_notify: 2 callbacks suppressed [ 405.209078][T28347] loop4: detected capacity change from 0 to 512 [ 405.225933][T28347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 405.239674][T28347] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6388: invalid indirect mapped block 4294967295 (level 0) [ 405.240746][T28347] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6388: invalid indirect mapped block 4294967295 (level 1) [ 405.282683][T28349] tipc: New replicast peer: 255.255.255.83 [ 405.282801][T28349] tipc: Enabled bearer , priority 10 [ 405.301065][T28349] loop6: detected capacity change from 0 to 1024 [ 405.301938][T28349] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 405.301971][T28349] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 405.371814][T28351] lo speed is unknown, defaulting to 1000 [ 405.372536][T28351] wg1 speed is unknown, defaulting to 1000 [ 405.614916][T28349] JBD2: no valid journal superblock found [ 405.614932][T28349] EXT4-fs (loop6): Could not load journal inode [ 405.736139][T28347] EXT4-fs (loop4): 1 orphan inode deleted [ 405.736163][T28347] EXT4-fs (loop4): 1 truncate cleaned up [ 405.737087][T28347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.850551][T28356] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6389'. [ 405.930621][T28349] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 406.044005][T19624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.087370][T28362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6391'. [ 406.146751][T28370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6394'. [ 406.198325][T28376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6405'. [ 406.241525][T28381] netlink: 'syz.6.6397': attribute type 1 has an invalid length. [ 406.249336][T28381] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6397'. [ 406.260506][T28383] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6395'. [ 406.380656][T28389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.400726][ T1039] tipc: Node number set to 3384228865 [ 406.600821][T28404] loop3: detected capacity change from 0 to 512 [ 406.607637][T28404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 406.619632][T28404] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.6402: invalid indirect mapped block 4294967295 (level 0) [ 406.634800][T28404] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.6402: invalid indirect mapped block 4294967295 (level 1) [ 406.649899][T28404] EXT4-fs (loop3): 1 orphan inode deleted [ 406.655768][T28404] EXT4-fs (loop3): 1 truncate cleaned up [ 406.663095][T28404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.750866][T28406] lo speed is unknown, defaulting to 1000 [ 406.757461][T28406] wg1 speed is unknown, defaulting to 1000 [ 407.032888][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.239455][T28414] loop3: detected capacity change from 0 to 512 [ 407.255125][T28420] loop7: detected capacity change from 0 to 512 [ 407.263122][T28414] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 407.292183][T28414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.6403: Allocating blocks 41-42 which overlap fs metadata [ 407.312555][T28420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.353397][T28414] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.6403: Allocating blocks 41-42 which overlap fs metadata [ 407.367333][T28420] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 407.378128][T28414] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.6403: Failed to acquire dquot type 1 [ 407.389551][T28414] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 407.404302][T28414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6403: corrupted inode contents [ 407.408107][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 407.408200][ T29] audit: type=1326 audit(2000000679.663:39551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.438827][T28424] lo speed is unknown, defaulting to 1000 [ 407.476051][T28414] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.6403: mark_inode_dirty error [ 407.487933][T28424] wg1 speed is unknown, defaulting to 1000 [ 407.500416][T22380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.519291][ T29] audit: type=1326 audit(2000000679.683:39552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.542956][ T29] audit: type=1326 audit(2000000679.683:39553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.566690][ T29] audit: type=1326 audit(2000000679.683:39554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.590285][ T29] audit: type=1326 audit(2000000679.683:39555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.606723][T28414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6403: corrupted inode contents [ 407.613978][ T29] audit: type=1326 audit(2000000679.683:39556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.626557][T28414] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.6403: mark_inode_dirty error [ 407.649432][ T29] audit: type=1326 audit(2000000679.683:39557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.684241][ T29] audit: type=1326 audit(2000000679.683:39558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.708052][ T29] audit: type=1326 audit(2000000679.683:39559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.731660][ T29] audit: type=1326 audit(2000000679.683:39560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28423 comm="syz.0.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 407.743404][T28414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6403: corrupted inode contents [ 407.830564][T28440] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.871028][T28414] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 407.910991][T28414] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.6403: corrupted inode contents [ 407.954190][T28414] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.6403: mark_inode_dirty error [ 407.987643][T28414] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 408.024382][T28414] EXT4-fs (loop3): 1 truncate cleaned up [ 408.034951][T28414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.088766][T28414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.273534][T28479] loop4: detected capacity change from 0 to 512 [ 408.280469][T28479] FAT-fs (loop4): bogus number of FAT sectors [ 408.286616][T28479] FAT-fs (loop4): Can't find a valid FAT filesystem [ 408.303232][T28478] loop3: detected capacity change from 0 to 512 [ 408.336561][T28478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.428694][T28483] lo speed is unknown, defaulting to 1000 [ 408.435271][T28483] wg1 speed is unknown, defaulting to 1000 [ 408.679444][T28476] lo speed is unknown, defaulting to 1000 [ 408.686517][T28476] wg1 speed is unknown, defaulting to 1000 [ 408.692825][T28478] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.737616][T28478] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.6426: iget: bad i_size value: 2533274857506816 [ 408.913834][T26078] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.051190][T28507] loop7: detected capacity change from 0 to 512 [ 409.051325][T28505] netlink: 'syz.3.6434': attribute type 1 has an invalid length. [ 409.072525][T28509] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 409.081377][T28507] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 409.091196][T28509] FAULT_INJECTION: forcing a failure. [ 409.091196][T28509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 409.104575][T28509] CPU: 0 UID: 0 PID: 28509 Comm: syz.6.6437 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.104610][T28509] Tainted: [W]=WARN [ 409.104654][T28509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.104750][T28509] Call Trace: [ 409.104758][T28509] [ 409.104768][T28509] __dump_stack+0x1d/0x30 [ 409.104799][T28509] dump_stack_lvl+0xe8/0x140 [ 409.104826][T28509] dump_stack+0x15/0x1b [ 409.104882][T28509] should_fail_ex+0x265/0x280 [ 409.104911][T28509] should_fail_alloc_page+0xf2/0x100 [ 409.104946][T28509] __alloc_frozen_pages_noprof+0x109/0x360 [ 409.104997][T28509] alloc_pages_mpol+0xb3/0x260 [ 409.105034][T28509] folio_alloc_mpol_noprof+0x39/0x80 [ 409.105072][T28509] shmem_get_folio_gfp+0x3cf/0xd50 [ 409.105170][T28509] shmem_fault+0xf6/0x250 [ 409.105202][T28509] __do_fault+0xbc/0x200 [ 409.105261][T28509] handle_mm_fault+0xfab/0x2c60 [ 409.105345][T28509] ? mt_find+0x21b/0x330 [ 409.105375][T28509] do_user_addr_fault+0x3fe/0x1080 [ 409.105453][T28509] exc_page_fault+0x62/0xa0 [ 409.105484][T28509] asm_exc_page_fault+0x26/0x30 [ 409.105506][T28509] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 409.105548][T28509] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 1a 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 409.105569][T28509] RSP: 0018:ffffc90002e5fce8 EFLAGS: 00050202 [ 409.105586][T28509] RAX: ffff888103542b90 RBX: 0000000000000080 RCX: 0000000000000080 [ 409.105623][T28509] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc90002e5fdc0 [ 409.105650][T28509] RBP: ffffc90002e5feb0 R08: 0000000000000d72 R09: 0000000000000000 [ 409.105674][T28509] R10: 0001c90002e5fdc0 R11: 0001c90002e5fe3f R12: ffff88810ac272c0 [ 409.105723][T28509] R13: 0000200000000080 R14: ffffc90002e5fdc0 R15: 0000200000000080 [ 409.105749][T28509] _copy_from_user+0x6f/0xb0 [ 409.105787][T28509] __se_sys_move_pages+0xd4a/0x1360 [ 409.105832][T28509] ? mutex_unlock+0x4f/0x90 [ 409.105872][T28509] ? __bpf_trace_sys_enter+0x10/0x30 [ 409.105914][T28509] ? trace_sys_enter+0xd0/0xf0 [ 409.105942][T28509] __x64_sys_move_pages+0x78/0x90 [ 409.105976][T28509] x64_sys_call+0x27c3/0x3000 [ 409.106008][T28509] do_syscall_64+0xd8/0x2c0 [ 409.106086][T28509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.106113][T28509] RIP: 0033:0x7ff32ca8f749 [ 409.106132][T28509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.106156][T28509] RSP: 002b:00007ff32b4f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 409.106252][T28509] RAX: ffffffffffffffda RBX: 00007ff32cce5fa0 RCX: 00007ff32ca8f749 [ 409.106268][T28509] RDX: 0000200000000080 RSI: 0000000000001efe RDI: 0000000000000000 [ 409.106363][T28509] RBP: 00007ff32b4f7090 R08: 0000200000000040 R09: 0000000000000000 [ 409.106379][T28509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.106395][T28509] R13: 00007ff32cce6038 R14: 00007ff32cce5fa0 R15: 00007ffc00914a98 [ 409.106422][T28509] [ 409.428027][T28507] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6436: Allocating blocks 41-42 which overlap fs metadata [ 409.477449][T28507] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.6436: Allocating blocks 41-42 which overlap fs metadata [ 409.492187][T28519] 9pnet_fd: Insufficient options for proto=fd [ 409.543644][T28507] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.6436: Failed to acquire dquot type 1 [ 409.580983][T28507] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 409.581427][T28507] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6436: corrupted inode contents [ 409.581644][T28507] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.6436: mark_inode_dirty error [ 409.581823][T28507] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6436: corrupted inode contents [ 409.581949][T28507] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.6436: mark_inode_dirty error [ 409.582079][T28507] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6436: corrupted inode contents [ 409.582228][T28507] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 409.582383][T28507] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.6436: corrupted inode contents [ 409.582484][T28507] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.6436: mark_inode_dirty error [ 409.582648][T28507] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 409.582794][T28507] EXT4-fs (loop7): 1 truncate cleaned up [ 409.583249][T28507] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.586141][T28507] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.644840][T28532] tipc: Started in network mode [ 409.644868][T28532] tipc: Node identity ac14140f, cluster identity 4711 [ 409.645146][T28532] tipc: New replicast peer: 255.255.255.83 [ 409.645257][T28532] tipc: Enabled bearer , priority 10 [ 409.663906][T28532] loop4: detected capacity change from 0 to 1024 [ 409.676860][T28532] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 409.676885][T28532] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 409.680960][T28532] JBD2: no valid journal superblock found [ 409.680975][T28532] EXT4-fs (loop4): Could not load journal inode [ 409.705307][T28532] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 409.885224][T28549] FAULT_INJECTION: forcing a failure. [ 409.885224][T28549] name failslab, interval 1, probability 0, space 0, times 0 [ 409.885273][T28549] CPU: 1 UID: 0 PID: 28549 Comm: syz.7.6452 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 409.885304][T28549] Tainted: [W]=WARN [ 409.885311][T28549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.885332][T28549] Call Trace: [ 409.885338][T28549] [ 409.885355][T28549] __dump_stack+0x1d/0x30 [ 409.885385][T28549] dump_stack_lvl+0xe8/0x140 [ 409.885409][T28549] dump_stack+0x15/0x1b [ 409.885429][T28549] should_fail_ex+0x265/0x280 [ 409.885489][T28549] should_failslab+0x8c/0xb0 [ 409.885518][T28549] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 409.885552][T28549] ? sidtab_sid2str_get+0xa0/0x130 [ 409.885622][T28549] ? skb_put+0xa9/0xf0 [ 409.885653][T28549] kmemdup_noprof+0x2b/0x70 [ 409.885677][T28549] sidtab_sid2str_get+0xa0/0x130 [ 409.885784][T28549] security_sid_to_context_core+0x1eb/0x2e0 [ 409.885817][T28549] security_sid_to_context+0x27/0x40 [ 409.885852][T28549] avc_audit_post_callback+0x9d/0x520 [ 409.885927][T28549] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 409.885964][T28549] common_lsm_audit+0x1bb/0x230 [ 409.886105][T28549] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 409.886147][T28549] slow_avc_audit+0x104/0x140 [ 409.886221][T28549] avc_has_perm+0x13a/0x180 [ 409.886301][T28549] sel_write_avc_cache_threshold+0xae/0x1c0 [ 409.886375][T28549] vfs_writev+0x406/0x8b0 [ 409.886454][T28549] ? __pfx_sel_write_avc_cache_threshold+0x10/0x10 [ 409.886487][T28549] do_writev+0xe7/0x210 [ 409.886515][T28549] __x64_sys_writev+0x45/0x50 [ 409.886582][T28549] x64_sys_call+0x1ba5/0x3000 [ 409.886611][T28549] do_syscall_64+0xd8/0x2c0 [ 409.886652][T28549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.886758][T28549] RIP: 0033:0x7f198210f749 [ 409.886845][T28549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.886868][T28549] RSP: 002b:00007f1980b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 409.886891][T28549] RAX: ffffffffffffffda RBX: 00007f1982365fa0 RCX: 00007f198210f749 [ 409.886907][T28549] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 409.886923][T28549] RBP: 00007f1980b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 409.886966][T28549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.886982][T28549] R13: 00007f1982366038 R14: 00007f1982365fa0 R15: 00007ffe1b94b358 [ 409.887072][T28549] [ 410.027238][T28558] lo speed is unknown, defaulting to 1000 [ 410.027920][T28558] wg1 speed is unknown, defaulting to 1000 [ 410.289123][T28557] loop6: detected capacity change from 0 to 512 [ 410.320487][T28557] FAT-fs (loop6): bogus number of FAT sectors [ 410.320505][T28557] FAT-fs (loop6): Can't find a valid FAT filesystem [ 410.401764][T28567] __nla_validate_parse: 14 callbacks suppressed [ 410.401782][T28567] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6456'. [ 410.667473][ T4937] tipc: Node number set to 2886997007 [ 410.894630][T28580] lo speed is unknown, defaulting to 1000 [ 410.903261][T28580] wg1 speed is unknown, defaulting to 1000 [ 410.930137][T28590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6466'. [ 410.989230][T28594] loop6: detected capacity change from 0 to 2048 [ 411.050799][T28594] Alternate GPT is invalid, using primary GPT. [ 411.057221][T28594] loop6: p1 p2 p3 [ 411.172557][T28602] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6470'. [ 411.228094][T28607] loop6: detected capacity change from 0 to 512 [ 411.242545][T28607] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 411.260927][T28607] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 411.333068][T28607] FAT-fs (loop6): FAT read failed (blocknr 128) [ 411.342648][T28612] random: crng reseeded on system resumption [ 411.534876][T28618] lo speed is unknown, defaulting to 1000 [ 411.542642][T28618] wg1 speed is unknown, defaulting to 1000 [ 411.752263][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6479'. [ 411.922886][T28633] xt_HMARK: spi-set and port-set can't be combined [ 412.025401][T28635] lo speed is unknown, defaulting to 1000 [ 412.035492][T28635] wg1 speed is unknown, defaulting to 1000 [ 412.310288][T28653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6488'. [ 412.319309][T28653] netlink: 'syz.7.6488': attribute type 11 has an invalid length. [ 412.327183][T28653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6488'. [ 412.336315][T28651] loop4: detected capacity change from 0 to 1024 [ 412.353884][T28655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6491'. [ 412.367847][T28651] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 412.425558][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6492'. [ 412.468468][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 412.468485][ T29] audit: type=1326 audit(2000000684.723:39866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm="syz.4.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.511445][T28660] gre1: entered promiscuous mode [ 412.516450][T28660] gre1: entered allmulticast mode [ 412.543089][ T29] audit: type=1326 audit(2000000684.753:39867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm="syz.4.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.566960][ T29] audit: type=1326 audit(2000000684.753:39868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.590629][ T29] audit: type=1326 audit(2000000684.753:39869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.614148][ T29] audit: type=1326 audit(2000000684.753:39870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.638108][ T29] audit: type=1326 audit(2000000684.753:39871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.638483][T28668] loop3: detected capacity change from 0 to 764 [ 412.661882][ T29] audit: type=1326 audit(2000000684.753:39872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.692260][ T29] audit: type=1326 audit(2000000684.753:39873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.716428][ T29] audit: type=1326 audit(2000000684.753:39874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.740264][ T29] audit: type=1326 audit(2000000684.753:39875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28659 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8e35dff749 code=0x7ffc0000 [ 412.766173][T28676] FAULT_INJECTION: forcing a failure. [ 412.766173][T28676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.779323][T28676] CPU: 0 UID: 0 PID: 28676 Comm: syz.7.6497 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.779485][T28676] Tainted: [W]=WARN [ 412.779493][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 412.779508][T28676] Call Trace: [ 412.779514][T28676] [ 412.779522][T28676] __dump_stack+0x1d/0x30 [ 412.779547][T28676] dump_stack_lvl+0xe8/0x140 [ 412.779574][T28676] dump_stack+0x15/0x1b [ 412.779638][T28676] should_fail_ex+0x265/0x280 [ 412.779663][T28676] should_fail+0xb/0x20 [ 412.779683][T28676] should_fail_usercopy+0x1a/0x20 [ 412.779750][T28676] _copy_from_user+0x1c/0xb0 [ 412.779786][T28676] vmemdup_user+0x5e/0xd0 [ 412.779865][T28676] con_set_unimap+0x3f/0x700 [ 412.779898][T28676] ? selinux_capable+0x31/0x40 [ 412.779922][T28676] ? should_fail_ex+0xdb/0x280 [ 412.780001][T28676] vt_ioctl+0xfbb/0x18a0 [ 412.780042][T28676] ? tty_jobctrl_ioctl+0x29e/0x810 [ 412.780110][T28676] tty_ioctl+0x7d8/0xb80 [ 412.780136][T28676] ? __pfx_tty_ioctl+0x10/0x10 [ 412.780174][T28676] __se_sys_ioctl+0xce/0x140 [ 412.780258][T28676] __x64_sys_ioctl+0x43/0x50 [ 412.780302][T28676] x64_sys_call+0x14b0/0x3000 [ 412.780333][T28676] do_syscall_64+0xd8/0x2c0 [ 412.780421][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.780444][T28676] RIP: 0033:0x7f198210f749 [ 412.780461][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.780484][T28676] RSP: 002b:00007f1980b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 412.780562][T28676] RAX: ffffffffffffffda RBX: 00007f1982365fa0 RCX: 00007f198210f749 [ 412.780578][T28676] RDX: 0000200000000180 RSI: 0000000000004b67 RDI: 0000000000000003 [ 412.780594][T28676] RBP: 00007f1980b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 412.780610][T28676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.780626][T28676] R13: 00007f1982366038 R14: 00007f1982365fa0 R15: 00007ffe1b94b358 [ 412.780648][T28676] [ 413.035139][T28687] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6501'. [ 413.053088][T28689] loop6: detected capacity change from 0 to 1024 [ 413.090992][T28695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6504'. [ 413.327788][T28700] lo speed is unknown, defaulting to 1000 [ 413.334284][T28700] wg1 speed is unknown, defaulting to 1000 [ 413.741661][T28715] lo speed is unknown, defaulting to 1000 [ 413.747831][T28715] wg1 speed is unknown, defaulting to 1000 [ 413.906673][T28733] loop6: detected capacity change from 0 to 2048 [ 413.952677][T28733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.004249][T20844] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.250634][T28756] loop6: detected capacity change from 0 to 256 [ 414.260335][T28756] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 414.267690][T28756] FAT-fs (loop6): Filesystem has been set read-only [ 414.274394][T28756] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 414.283785][T28756] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 414.320120][T28759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 414.326763][T28759] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 414.328211][T28761] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 414.328211][T28761] program syz.6.6524 not setting count and/or reply_len properly [ 414.334359][T28759] vhci_hcd vhci_hcd.0: Device attached [ 414.405241][T28764] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 414.411866][T28764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.419441][T28764] vhci_hcd vhci_hcd.0: Device attached [ 414.494028][T28759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 414.509633][T28768] lo speed is unknown, defaulting to 1000 [ 414.518181][T28759] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 414.522562][T28768] wg1 speed is unknown, defaulting to 1000 [ 414.532279][ T1039] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 414.545411][T28771] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 414.548081][T28765] vhci_hcd: connection closed [ 414.555366][T28762] vhci_hcd: connection closed [ 414.562964][ T4021] vhci_hcd vhci_hcd.3: stop threads [ 414.572889][ T4021] vhci_hcd vhci_hcd.3: release socket [ 414.578301][ T4021] vhci_hcd vhci_hcd.3: disconnect device [ 414.590837][ T1039] usb 7-1: new high-speed USB device number 3 using vhci_hcd [ 414.606464][T28763] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 414.612534][ T4021] vhci_hcd vhci_hcd.3: stop threads [ 414.617745][ T4021] vhci_hcd vhci_hcd.3: release socket [ 414.623218][ T4021] vhci_hcd vhci_hcd.3: disconnect device [ 415.618924][T28794] loop4: detected capacity change from 0 to 512 [ 415.626307][T28794] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.642369][T28794] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6533: Allocating blocks 41-42 which overlap fs metadata [ 415.656466][T28794] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.6533: Allocating blocks 41-42 which overlap fs metadata [ 415.671000][T28794] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.6533: Failed to acquire dquot type 1 [ 415.682988][T28794] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 415.700313][T28794] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6533: corrupted inode contents [ 415.712726][T28794] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.6533: mark_inode_dirty error [ 415.720012][T28801] __nla_validate_parse: 7 callbacks suppressed [ 415.720027][T28801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6545'. [ 415.739669][T28794] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6533: corrupted inode contents [ 415.753287][T28794] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.6533: mark_inode_dirty error [ 415.765728][T28794] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6533: corrupted inode contents [ 415.779207][T28801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6545'. [ 415.788616][T28794] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 415.797414][T28794] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.6533: corrupted inode contents [ 415.819647][T28794] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.6533: mark_inode_dirty error [ 415.831642][T28794] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 415.842994][T28794] EXT4-fs (loop4): 1 truncate cleaned up [ 415.849855][T28794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.864097][T28794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.919952][T28807] loop3: detected capacity change from 0 to 2048 [ 415.971121][T28807] loop3: p1 < > p4 [ 415.975634][T28807] loop3: p4 size 8388608 extends beyond EOD, truncated [ 416.071370][T28809] netlink: 'syz.3.6537': attribute type 21 has an invalid length. [ 416.080343][T28809] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.089455][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.113490][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.122537][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.132441][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.141460][T28809] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 416.212539][T28814] lo speed is unknown, defaulting to 1000 [ 416.219253][T28814] wg1 speed is unknown, defaulting to 1000 [ 416.486652][T28823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6542'. [ 416.708015][T28833] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6547'. [ 416.938264][T28844] loop6: detected capacity change from 0 to 512 [ 416.962335][T28844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.990844][T28844] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.042537][T28851] loop3: detected capacity change from 0 to 128 [ 417.050901][T28851] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 417.063769][T28851] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.070820][T28844] loop6: detected capacity change from 512 to 2 [ 417.108767][T20844] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Out of memory [ 417.124382][T20844] syz-executor: attempt to access beyond end of device [ 417.124382][T20844] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 417.138222][T20844] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 417.148735][T26078] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.158927][T20844] EXT4-fs (loop6): I/O error while writing superblock [ 417.165918][T20844] EXT4-fs (loop6): Remounting filesystem read-only [ 417.189128][T27651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.199867][T28847] kmmpd-loop6: attempt to access beyond end of device [ 417.199867][T28847] loop6: rw=8402945, sector=34, nr_sectors = 2 limit=2 [ 417.213721][T28847] Buffer I/O error on dev loop6, logical block 17, lost sync page write [ 417.408489][T28873] lo speed is unknown, defaulting to 1000 [ 417.424527][T28873] wg1 speed is unknown, defaulting to 1000 [ 417.541374][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 417.571572][T28887] loop4: detected capacity change from 0 to 128 [ 417.587903][T28887] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 417.602190][T28887] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.669098][T19624] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 417.774286][ T4045] bond0 (unregistering): Released all slaves [ 417.813479][T28898] loop4: detected capacity change from 0 to 2048 [ 417.847197][T28898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 417.863327][ T4045] tipc: Disabling bearer [ 417.868447][ T4045] tipc: Left network mode [ 417.924905][T28898] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 417.940291][T28898] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1738 with error 28 [ 417.952780][T28898] EXT4-fs (loop4): This should not happen!! Data will be lost [ 417.952780][T28898] [ 417.959243][T28875] lo speed is unknown, defaulting to 1000 [ 417.962491][T28898] EXT4-fs (loop4): Total free blocks count 0 [ 417.974208][T28898] EXT4-fs (loop4): Free/Dirty block details [ 417.980110][T28898] EXT4-fs (loop4): free_blocks=2415919104 [ 417.985908][T28898] EXT4-fs (loop4): dirty_blocks=1744 [ 417.991254][T28898] EXT4-fs (loop4): Block reservation details [ 417.995452][T28895] lo speed is unknown, defaulting to 1000 [ 417.997227][T28898] EXT4-fs (loop4): i_reserved_data_blocks=109 [ 418.020926][T28875] wg1 speed is unknown, defaulting to 1000 [ 418.036910][T28895] wg1 speed is unknown, defaulting to 1000 [ 418.166296][T19624] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 418.253936][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 418.253950][ T29] audit: type=1326 audit(2000000690.513:39993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.292846][ T29] audit: type=1326 audit(2000000690.543:39994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.316680][ T29] audit: type=1326 audit(2000000690.543:39995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.340325][ T29] audit: type=1326 audit(2000000690.543:39996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.363876][ T29] audit: type=1326 audit(2000000690.543:39997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.387572][ T29] audit: type=1326 audit(2000000690.543:39998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.411260][ T29] audit: type=1326 audit(2000000690.543:39999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.411383][T28913] ================================================================== [ 418.434854][ T29] audit: type=1326 audit(2000000690.543:40000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.442897][T28913] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 418.466400][ T29] audit: type=1326 audit(2000000690.543:40001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba9e90f749 code=0x7ffc0000 [ 418.472946][T28913] [ 418.472954][T28913] write to 0xffffffff8686eb18 of 8 bytes by task 29 on cpu 0: [ 418.496541][ T29] audit: type=1326 audit(2000000690.543:40002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28919 comm="syz.0.6577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba9e90f34b code=0x7ffc0000 [ 418.498868][T28913] data_alloc+0x31c/0x390 [ 418.534447][T28913] prb_reserve+0x964/0xb60 [ 418.538870][T28913] vprintk_store+0x56d/0x860 [ 418.543491][T28913] vprintk_emit+0x15a/0x610 [ 418.548012][T28913] vprintk_default+0x26/0x30 [ 418.552613][T28913] vprintk+0x1d/0x30 [ 418.556504][T28913] _printk+0x79/0xa0 [ 418.560390][T28913] kauditd_hold_skb+0x1b1/0x1c0 [ 418.565241][T28913] kauditd_send_queue+0x273/0x2c0 [ 418.570262][T28913] kauditd_thread+0x442/0x680 [ 418.574933][T28913] kthread+0x489/0x510 [ 418.579005][T28913] ret_from_fork+0x149/0x290 [ 418.583595][T28913] ret_from_fork_asm+0x1a/0x30 [ 418.588363][T28913] [ 418.590677][T28913] read to 0xffffffff8686eb18 of 8 bytes by task 28913 on cpu 1: [ 418.598295][T28913] prb_reserve+0x249/0xb60 [ 418.602719][T28913] vprintk_store+0x56d/0x860 [ 418.607313][T28913] vprintk_emit+0x15a/0x610 [ 418.611822][T28913] vprintk_default+0x26/0x30 [ 418.616424][T28913] vprintk+0x1d/0x30 [ 418.620321][T28913] _printk+0x79/0xa0 [ 418.624234][T28913] ib_get_eth_speed+0x33d/0x4b0 [ 418.629090][T28913] siw_query_port+0x3a/0x2d0 [ 418.633730][T28913] ib_query_port+0x393/0x3d0 [ 418.638330][T28913] ib_setup_port_attrs+0x14a/0x1430 [ 418.643545][T28913] add_one_compat_dev+0x298/0x390 [ 418.648586][T28913] rdma_dev_init_net+0x1ba/0x250 [ 418.653529][T28913] ops_init+0x22a/0x2e0 [ 418.657675][T28913] setup_net+0x95/0x220 [ 418.661824][T28913] copy_net_ns+0x309/0x460 [ 418.666323][T28913] create_new_namespaces+0x20e/0x400 [ 418.671610][T28913] unshare_nsproxy_namespaces+0xe8/0x120 [ 418.677251][T28913] ksys_unshare+0x3d0/0x6d0 [ 418.681842][T28913] __x64_sys_unshare+0x1f/0x30 [ 418.686708][T28913] x64_sys_call+0x2ae6/0x3000 [ 418.691823][T28913] do_syscall_64+0xd8/0x2c0 [ 418.696455][T28913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.702525][T28913] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 418.704834][T28913] value changed: 0x00000000000832b0 -> 0x000000000012f758 [ 418.711926][T28913] [ 418.714231][T28913] Reported by Kernel Concurrency Sanitizer on: [ 418.720376][T28913] CPU: 1 UID: 0 PID: 28913 Comm: syz.4.6573 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 418.731744][T28913] Tainted: [W]=WARN [ 418.735538][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.745585][T28913] ================================================================== [ 418.411250][T28913] lo speed is unknown, defaulting to 1000 [ 418.776184][ T4045] hsr_slave_0: left promiscuous mode [ 418.791114][ T4045] hsr_slave_1: left promiscuous mode [ 418.932295][T28875] chnl_net:caif_netlink_parms(): no params data found [ 418.941495][T28913] wg1 speed is unknown, defaulting to 1000 [ 419.462295][ T4045] bond0 (unregistering): Released all slaves [ 419.503722][ T4045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.512528][ T4045] bond_slave_0: left promiscuous mode [ 419.518053][ T4045] bond_slave_0: left allmulticast mode [ 419.524665][ T4045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.533465][ T4045] bond_slave_1: left promiscuous mode [ 419.538850][ T4045] bond_slave_1: left allmulticast mode [ 419.544558][ T4045] bond0 (unregistering): Released all slaves [ 419.730789][ T1039] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 419.838370][ T4045] hsr_slave_0: left promiscuous mode [ 419.844902][ T4045] hsr_slave_1: left promiscuous mode [ 420.183569][ T4045] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.252329][ T4045] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.302794][ T4045] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.352766][ T4045] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.593807][ T4045] batadv2: left allmulticast mode [ 420.599111][ T4045] batadv2: left promiscuous mode [ 420.604306][ T4045] bridge0: port 4(batadv2) entered disabled state [ 420.613026][ T4045] batadv1: left allmulticast mode [ 420.618058][ T4045] batadv1: left promiscuous mode [ 420.623114][ T4045] bridge0: port 3(batadv1) entered disabled state [ 420.630562][ T4045] bridge_slave_1: left allmulticast mode [ 420.636311][ T4045] bridge_slave_1: left promiscuous mode [ 420.642036][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.649926][ T4045] bridge_slave_0: left promiscuous mode [ 420.655595][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.691753][T20228] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 420.752866][ T4041] smc: removing ib device syz1 [ 420.753065][ T4045] bond0 (unregistering): Released all slaves [ 420.766156][ T4045] bond1 (unregistering): Released all slaves [ 420.962337][ T4045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.971069][ T4045] bond_slave_0: left promiscuous mode [ 420.976479][ T4045] bond_slave_0: left allmulticast mode [ 420.982405][ T4045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.991324][ T4045] bond_slave_1: left promiscuous mode [ 420.996764][ T4045] bond_slave_1: left allmulticast mode [ 421.002647][ T4045] bond0 (unregistering): Released all slaves [ 421.121503][ T4045] tipc: Disabling bearer [ 421.126481][ T4045] tipc: Left network mode [ 421.195889][ T4045] hsr_slave_0: left promiscuous mode [ 421.201568][ T4045] hsr_slave_1: left promiscuous mode [ 421.208577][ T4045] hsr_slave_0: left promiscuous mode [ 421.215209][ T4045] hsr_slave_1: left promiscuous mode [ 421.221013][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.228550][ T4045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.239196][ T4045] veth1_macvtap: left promiscuous mode [ 421.244758][ T4045] veth0_macvtap: left promiscuous mode [ 421.250425][ T4045] veth1_vlan: left promiscuous mode [ 421.255807][ T4045] veth0_vlan: left promiscuous mode [ 421.360476][ T4045] team_slave_0 (unregistering): left promiscuous mode [ 421.367581][ T4045] team_slave_0 (unregistering): left allmulticast mode [ 421.375190][ T4045] team0 (unregistering): Port device team_slave_0 removed [ 421.382746][ T4041] smc: removing ib device syz! [ 421.944951][ T4045] IPVS: stop unused estimator thread 0...