last executing test programs: 3m16.197985322s ago: executing program 4 (id=401): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 3m14.819287519s ago: executing program 4 (id=409): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1f, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x20, &(0x7f0000000140)=""/32, 0x41000, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x6, 0x1, 0x7ff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000400)=[{0x0, 0x4, 0x9, 0xa}, {0x4, 0x3, 0xa, 0x4}, {0x3, 0x1, 0xf, 0x9}, {0x2, 0x5, 0x3, 0xb}, {0x4, 0x1, 0xc, 0x7}]}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000540)=r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x18) fcntl$notify(r4, 0x402, 0x300) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) socketpair(0x2b, 0x800, 0x4, &(0x7f0000000580)) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m14.455075886s ago: executing program 4 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 3m14.265355011s ago: executing program 4 (id=414): syz_usb_connect$cdc_ecm(0x1, 0x4d, &(0x7f0000001700)=ANY=[@ANYBLOB="12010102020000202505a1a440000102030109023b0001b239134c090400050302060017052406000005240004000d241f1f05000000000005000709a306f3f00302ff03300707000000000000"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x20}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xe) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") chdir(&(0x7f0000000080)='./file0\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="20006fea66d701020000000000000000000000010c002d3f6d8bb39b0700000000000000000005"], 0x20}}, 0x4000) 3m11.362252494s ago: executing program 4 (id=425): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f0000001100)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 3m10.211691561s ago: executing program 4 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x1b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000073740200ffffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xca, 0x5d, &(0x7f0000000340)=""/93, 0x7031c5b8f3274468, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x7, 0x700, 0x8e, 0x7, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x67, 0x0, 0x5, 0x0, 0x0, @loopback, @loopback, {[@end, @generic={0x83, 0xa, "4827847e6435541e"}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@delqdisc={0xf8, 0x25, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0xf, 0x6}, {0xd, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff2a, 0x1, {0xfd, 0x2be, 0x4, 0x81, 0x1, 0x7ff, 0xd74, 0x1, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xaa}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x3f, 0x1, {0x3, 0x8, 0xfffe, 0x0, 0x2, 0x7, 0x4, 0x1}}, {0x6}}, {{0x1c, 0x1, {0x67, 0x1, 0x6, 0xfffffe01, 0x0, 0x7f, 0x1, 0x9}}, {0x16, 0x2, [0x6, 0x5, 0xcc, 0x5, 0x4, 0x7, 0x1, 0x4, 0x6]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x40, 0x2, 0x7, 0xe}}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0xf8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'tunl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x7a99, 0x1, {{0x1f, 0x4, 0x2, 0x2, 0x7c, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@lsrr={0x83, 0x23, 0x73, [@broadcast, @remote, @loopback, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x1b, 0x9, [@multicast1, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @generic={0x7, 0x3, "f5"}, @generic={0x82, 0x12, "55f3b494eb08ea439a3fb3b3412c1bac"}, @ssrr={0x89, 0x13, 0x23, [@private=0xa010101, @rand_addr=0x64010102, @remote, @empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x3, 0x1, 0x40, @mcast1, @local, 0x10, 0x700, 0x0, 0xffffffff}}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000ac0)={@loopback, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000b40)={@multicast2, @loopback, 0x0}, &(0x7f0000000b80)=0xc) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000d93000000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0x1}}}, 0x24}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000d80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES8=r12, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020069693000000000000000000608000100", @ANYRES32=r5, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r8, @ANYBLOB="14000200622d92f4d7897f72696467653000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f62617461647600140002006e65747063693000000000000000000008000300030000000800030002000000500001801400020070696d367265673100000000000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d726567000000000000000000000800030002000000180001801400020076657468315f746f5f62617461647600"], 0x17c}, 0x1, 0x0, 0x0, 0x40044100}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r14}, 0x18) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070b0000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r16}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r15) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r18}, 0x10) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000180)='-:-%-(\'\xb9^/$]&\x00', 0x0) 3m10.210917292s ago: executing program 32 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x1b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000073740200ffffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200000085000000060000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xca, 0x5d, &(0x7f0000000340)=""/93, 0x7031c5b8f3274468, 0x6a, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'erspan0\x00', 0x0, 0x7, 0x700, 0x8e, 0x7, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x67, 0x0, 0x5, 0x0, 0x0, @loopback, @loopback, {[@end, @generic={0x83, 0xa, "4827847e6435541e"}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=@delqdisc={0xf8, 0x25, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {0xf, 0x6}, {0xd, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff2a, 0x1, {0xfd, 0x2be, 0x4, 0x81, 0x1, 0x7ff, 0xd74, 0x1, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xaa}, @TCA_STAB={0x5c, 0x8, 0x0, 0x1, [{{0x3f, 0x1, {0x3, 0x8, 0xfffe, 0x0, 0x2, 0x7, 0x4, 0x1}}, {0x6}}, {{0x1c, 0x1, {0x67, 0x1, 0x6, 0xfffffe01, 0x0, 0x7f, 0x1, 0x9}}, {0x16, 0x2, [0x6, 0x5, 0xcc, 0x5, 0x4, 0x7, 0x1, 0x4, 0x6]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x40, 0x2, 0x7, 0xe}}}}, @TCA_EGRESS_BLOCK={0x8}]}, 0xf8}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'tunl0\x00', &(0x7f00000006c0)={'sit0\x00', 0x0, 0x8, 0x7, 0x7a99, 0x1, {{0x1f, 0x4, 0x2, 0x2, 0x7c, 0x65, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@lsrr={0x83, 0x23, 0x73, [@broadcast, @remote, @loopback, @remote, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}]}, @rr={0x7, 0x1b, 0x9, [@multicast1, @rand_addr=0x64010102, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0xa}]}, @generic={0x7, 0x3, "f5"}, @generic={0x82, 0x12, "55f3b494eb08ea439a3fb3b3412c1bac"}, @ssrr={0x89, 0x13, 0x23, [@private=0xa010101, @rand_addr=0x64010102, @remote, @empty]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x29, 0xfd, 0x3, 0x1, 0x40, @mcast1, @local, 0x10, 0x700, 0x0, 0xffffffff}}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000ac0)={@loopback, 0x0}, &(0x7f0000000b00)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000b40)={@multicast2, @loopback, 0x0}, &(0x7f0000000b80)=0xc) r10 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000004000d93000000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc, 0x1}}}, 0x24}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000d80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES8=r12, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020069693000000000000000000608000100", @ANYRES32=r5, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="7c00018008000100", @ANYRES32=r7, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r8, @ANYBLOB="14000200622d92f4d7897f72696467653000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468305f746f5f62617461647600140002006e65747063693000000000000000000008000300030000000800030002000000500001801400020070696d367265673100000000000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=r11, @ANYBLOB="1400020070696d726567000000000000000000000800030002000000180001801400020076657468315f746f5f62617461647600"], 0x17c}, 0x1, 0x0, 0x0, 0x40044100}, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r14}, 0x18) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070b0000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r16}, 0x18) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r15) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r18}, 0x10) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000180)='-:-%-(\'\xb9^/$]&\x00', 0x0) 52.517844038s ago: executing program 5 (id=1971): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=@v1={0x1000000, [{0xd5, 0x9}]}, 0xc, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)={0x5, 0x7}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 52.517322137s ago: executing program 5 (id=1973): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80047458, 0x0) 52.457898175s ago: executing program 5 (id=1976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {0x0}, {&(0x7f0000000a00)="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", 0x16e}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf002", 0x58}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856", 0x9e}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b4", 0x37}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.377435386s ago: executing program 5 (id=1977): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x8) 52.376987076s ago: executing program 5 (id=1979): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 52.153675614s ago: executing program 5 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2}, 0x18) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x2c4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xd05, 0x400, 0x2, 0x10, 0x7, 0x400}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x2}}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x9, 0x6, 0x6, 0x8, 0x5, 0x9, 0x615}}}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_red={{0x8}, {0x218, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "c3c073930e58ce40d595fd15da5129cff3dc26757a5e8f345242b0a926ff16f5d9a0320e53ec1732cf3eabbb69e962cd5ce9d982c3bed63936288d6d48f8e2622e1c2b6e16f61e0475c08394633e63ec98e8efe66c2e498a6b2e6a1e03e84cd112123c7ec147ea8e25385004a66244bb196b9291dae28f8473b33d165cdd7581f294ddaaa0850f3fea564780ee9ba96c444ca6ff9443ae8fcaaf13353d53ef6ed775aa9ce8cb9975dbf497a00a2fcc29bb0d2a94c18036f06e1885824b932955e894b0597f021a8e100209d2e024299e343d6df8935e0e3f50aa957338aa0ae28d154c2afee2a48a44991d9dfbd350418320b97ca3ae4660a81bd70c3dada27d"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x1c}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xa0000000, 0x0, 0x80}, 0x20008800) 52.125527618s ago: executing program 33 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000080)='./file0\x00', r2}, 0x18) r3 = socket(0x400000000010, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x2c4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xd05, 0x400, 0x2, 0x10, 0x7, 0x400}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x8, 0x2}}]}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x9, 0x6, 0x6, 0x8, 0x5, 0x9, 0x615}}}}, @TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_red={{0x8}, {0x218, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x1c}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r8, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xa0000000, 0x0, 0x80}, 0x20008800) 27.676019772s ago: executing program 2 (id=2219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) unshare(0x62040200) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="ff00"], 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000380), &(0x7f00000002c0)=r6}, 0x20) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000380)={r6, r2, 0xfffffffc}) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r9 = fsmount(r8, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8, 0xa5f}, 0x8) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4], 0x7c}}, 0x20040000) 26.689961628s ago: executing program 2 (id=2224): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000540)={[{@journal_async_commit}]}, 0x1, 0x775, &(0x7f0000001180)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000540)={[{@journal_async_commit}]}, 0x1, 0x775, &(0x7f0000001180)="$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") keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) (async) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x189) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) (async) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_SET(r4, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x401, 0x7f, 0xddb}) msgctl$IPC_RMID(r4, 0x0) (async) msgctl$IPC_RMID(r4, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000004c0)='\\+\x00', r0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) (async) r7 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000400)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) (async) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r7, 0x1e, &(0x7f0000000000)=[r7], 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESHEX=r3, @ANYRES8=0x0, @ANYRES16=r5], 0x0, 0x1}, 0x94) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESHEX=r3, @ANYRES8=0x0, @ANYRES16=r5], 0x0, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYBLOB="1ee090863856e50dc1398c6f503c084a9221dc91f8b463514f1b8599607adb3d251a2b3ebaf4b5d2610d496a53d483ee3c84702141fcc5c918d3a5646b03c82740ef35dbfaa9edb937263998db3be094140885ed845cabfbdd9376d5160212097fa7e22f46e514b2d0e05cb9c0a2823cc034025554a50277ba", @ANYRES32=r8, @ANYRESDEC=r10, @ANYRESOCT=r9, @ANYRES32=r11, @ANYRES32, @ANYRES8=r3], &(0x7f00000000c0)='GPL\x00'}, 0x94) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000010203", 0x7}, {0x0}], 0x2) (async) writev(r12, &(0x7f0000000000)=[{&(0x7f0000000200)="13000000010203", 0x7}, {0x0}], 0x2) 26.514768981s ago: executing program 2 (id=2229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000000100)={'macvtap0\x00', @link_local}) 26.426939352s ago: executing program 2 (id=2230): keyctl$clear(0x3, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB="05000000020000000400002000"/28], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="f3ffffff00000000b7440800dd1be6014fc61d955eed49a0b4bbdeec58c28efb6a04e6ee27d77fcd846cb32e1933e9752cf9543055fe0d2b6c2f03b379f161d70a"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1b578, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x3, [0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40011}, 0x0) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) io_uring_setup(0x6858, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0x0, 0x14}) 25.657517101s ago: executing program 2 (id=2240): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1be3ffffffffffffff0000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="700000001900010000000000000000001d01000005000d00010000001500030000358456de1cfe4c0ae27d73e948e800000000000085f02d3f6aa0f998570000000015000200000000000000000003ef7506ecbef97003000100080009000000", @ANYRES32=0x0, @ANYBLOB="0c000b00000000000000000008000e", @ANYRES32=0x0, @ANYBLOB="08000500f8000000"], 0x70}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x3, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x5ef, 0x7}, 0x0, 0x0, 0x10000001, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r5 = epoll_create1(0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xc000000b}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r8, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) epoll_pwait2(r5, &(0x7f0000000540)=[{}], 0x1, 0x0, 0x0, 0x0) signalfd4(r6, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) socket$kcm(0x10, 0x2, 0x10) 25.338747332s ago: executing program 2 (id=2245): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6713f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x4, 0x9, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x2c, 0x81, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000a24000000004049b8049470000000000ca01416e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYBLOB="ab9bf2c86f5dbcfa8be2782811fb628ae6648fcf0683c8625a540d418f763678e651585890", @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 25.338440493s ago: executing program 34 (id=2245): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x25, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6713f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x4, 0x9, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x2c, 0x81, 0x0, 0x9}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x2b, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000a24000000004049b8049470000000000ca01416e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYBLOB="ab9bf2c86f5dbcfa8be2782811fb628ae6648fcf0683c8625a540d418f763678e651585890", @ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 14.596209054s ago: executing program 0 (id=2324): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0xbc3}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x899, 0x1]}}, 0x5c) 14.555368199s ago: executing program 0 (id=2326): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="747261c7ad3d756ef0abc528"]) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000000)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 14.505521696s ago: executing program 0 (id=2327): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ipvlan1\x00'}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x3}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000400)={'veth0_to_bridge\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_route(r1, 0x0, 0x8000) 14.419291326s ago: executing program 0 (id=2328): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x202f099, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x8) 14.418755387s ago: executing program 0 (id=2329): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xfff6}], 0x1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x200800, &(0x7f0000000000)={[{@bh}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x477, &(0x7f0000000540)="$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") r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x100, 0x40, 0x20}, 0x18) mkdirat(r3, &(0x7f0000000140)='./file0\x00', 0x13) 14.308455221s ago: executing program 0 (id=2330): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 14.308188211s ago: executing program 35 (id=2330): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 1.316128972s ago: executing program 1 (id=2498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.121393666s ago: executing program 1 (id=2503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 1.063905984s ago: executing program 3 (id=2505): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x80003, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)="0fb3997d", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r0, r0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000380)=""/153, &(0x7f0000000440)=0x99) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00'}, 0x18) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) 1.058440295s ago: executing program 8 (id=2506): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0/../file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x202f099, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(0x0, 0x8) 1.01676907s ago: executing program 1 (id=2507): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@bsdgroups}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noquota}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kfree\x00', r2, 0x0, 0x3}, 0x18) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000380)={0x3fffffffbfb, 0x8, 0x5, 0x7f}) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r4, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x7, 0x2, 0x3, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r6, 0x100}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r6}, 0x20) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x48, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40004) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x7fffffff, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) recvmmsg$unix(r7, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 1.011080291s ago: executing program 3 (id=2508): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 948.094039ms ago: executing program 8 (id=2510): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x100}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfffffffffb}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback={0x6000000}, 0x800, 0x2, 0x0, 0x0, 0x9}, 0x20) 947.867409ms ago: executing program 3 (id=2511): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 937.07566ms ago: executing program 3 (id=2512): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r0, @ANYBLOB="00030200ecfe0000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r0, @ANYBLOB="00030200ecfe0000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x128, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x30ff}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xf25}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8be}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe6b}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x881) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0xffff) (async) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0xffff) write$sndseq(r5, &(0x7f0000000040)=[{0x4, 0x7, 0x0, 0x0, @tick=0xf64b, {0x0, 0xb8}, {0x4, 0x6}, @raw8={"2a1c6fe01a69563d070a1c5c"}}, {0x0, 0x3, 0x0, 0x4, @tick=0x6, {0x2, 0x4}, {0x0, 0x22}, @control={0x8, 0x804, 0x4c8}}], 0x38) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000100)={0x0, 0x0, 0x1, [0x7ff, 0x5, 0x1, 0x1167b5cc], [0x100, 0x800, 0xffffffff, 0x8, 0x3, 0x5, 0x3, 0x400000000000, 0x63, 0xffffffff, 0x6, 0xfffffffffffffffc, 0x2, 0x81, 0x0, 0x6807, 0x8, 0x9, 0x1bb8, 0x10000, 0x935e, 0x9, 0xc5, 0x1, 0x3, 0x400, 0x5, 0x8000000000000000, 0x3, 0x8, 0x9, 0x6, 0xfff, 0x0, 0xf, 0x6, 0x2, 0x0, 0x7, 0x2, 0xf, 0x6, 0x3, 0x9020, 0x8, 0x80, 0x800, 0x7fffffff, 0x8000000000000001, 0x3, 0x8, 0x4, 0x5, 0x8, 0x7, 0x100, 0x8f, 0x7f, 0x1, 0x5, 0x3, 0x2, 0x8392, 0x8000000000000001, 0x9, 0x10, 0x1000, 0x3, 0x9, 0xe86, 0x6, 0x6, 0x7fffffffffffffff, 0x0, 0x3bc, 0x5, 0x0, 0xfa, 0x8, 0x8, 0x7, 0x3, 0x3, 0x22, 0x96c3, 0x9, 0x66, 0xd7f, 0x9, 0xffffffff, 0xe, 0x6, 0x53dcfa61, 0x2, 0x5, 0x3, 0x4, 0xb25b, 0x2, 0xffff, 0x8, 0x7fffffffffffffff, 0x1, 0x110, 0x10, 0x6, 0x0, 0x80, 0x1ff, 0xc7, 0x2, 0x2000000040000, 0x9, 0x5, 0xb, 0x7, 0x3c, 0x6, 0x9, 0x81, 0xffffffff00000000]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000540)={r7, 0x4, 0x2, 0x1}) socket(0x10, 0x6, 0xf) (async) socket(0x10, 0x6, 0xf) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000080)) 935.48778ms ago: executing program 8 (id=2513): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 850.848481ms ago: executing program 8 (id=2514): utime(&(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)={0xa, 0x4}) 835.239253ms ago: executing program 7 (id=2515): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) 809.088237ms ago: executing program 6 (id=2516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r0}, &(0x7f0000000f00), &(0x7f0000000f40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x7000000000000000, 0x40000}, 0x20) 765.925772ms ago: executing program 8 (id=2517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x16c4, &(0x7f0000000380)={0x0, 0x5121, 0x80, 0x3, 0x258}, &(0x7f0000000280)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 758.508583ms ago: executing program 7 (id=2518): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 656.079686ms ago: executing program 3 (id=2519): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 655.879786ms ago: executing program 6 (id=2520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) ioperm(0x5, 0x90b, 0x9) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xd2, 0x0, 0x80, 0xc, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000140)}, 0xaa, 0x7ff, 0x0, 0x7, 0x1, 0x80, 0x3, 0x0, 0xb89, 0x0, 0x5}, r3, 0xc, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x0, './file0\x00'}}) 645.224078ms ago: executing program 3 (id=2521): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 595.086614ms ago: executing program 7 (id=2522): open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 560.446469ms ago: executing program 7 (id=2523): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 560.047589ms ago: executing program 6 (id=2524): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 552.61891ms ago: executing program 7 (id=2525): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000440)) (fail_nth: 1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 545.41003ms ago: executing program 8 (id=2526): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}, 0x1f, 0x4, 0x1}, {{}, 0x13, 0x8000, 0xff}, {{}, 0x15, 0x2, 0x7f}], 0x48) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000009500"/24], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x3e, 0x1000, 0x80000001, 0xf1}) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r3) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10008, 0x7819, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 403.379409ms ago: executing program 7 (id=2527): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20040004) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x54167854}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4081) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x28, 0x26, 0x1, 0x0, 0xfffffffe, {0x1}, [@typed={0x8, 0xd5, 0x0, 0x0, @uid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x80, 0x10, 0x72c, 0x9, {{0xc, 0x4, 0x1, 0x25, 0x30, 0x65, 0x0, 0x13, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, {[@end, @rr={0x7, 0x1b, 0x6c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @remote, @broadcast, @broadcast]}]}}}}}) 397.78222ms ago: executing program 6 (id=2528): utime(&(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000001c0)={0xa, 0x4}) 272.827646ms ago: executing program 6 (id=2529): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x15, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/150, 0x96}, {&(0x7f0000000500)=""/85, 0x55}], 0x3, &(0x7f0000000a40)=""/166, 0xa6}, 0x0, 0x40, 0x1, {0x1}}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 242.99372ms ago: executing program 6 (id=2530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000401"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@version_9p2000}]}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r10, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x0) 142.900312ms ago: executing program 1 (id=2531): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x44f0) 92.346179ms ago: executing program 1 (id=2532): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xd4d}, 0x18) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000085) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200000000000000001b000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x240001c1}, 0x20004004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x100c2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f00000002c0)={0x7, 0x6, 0x3, {0x9, 0x10}, 0x4, 0x3527}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r8, &(0x7f0000001680)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0, 0x0) setuid(0xee00) write$cgroup_int(r8, &(0x7f0000000080)=0x1, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2533): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x1ffffffffffffe47, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000000640)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24689f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb6121e63f45f3dceb6e1c0c410d799168ffc4b64675af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xf2}, {0x0}, {&(0x7f0000000a00)="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", 0x16e}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf002", 0x58}, {&(0x7f0000001d00)="425d01202e24be5080824df8f03955b152c26ff780ae50bf4310f40514e89a2e7e3743a0c54b1ebdae377e00b376c097a5a1177d96c558fdc88e5d092f9c4ee29801393d0b6365bb4f86cca898b6fee05d12420470228e07aa5a2047a4391883cdd86acf0d83021778eb7b5c656c244265c8", 0x72}], 0x6}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856", 0x9e}, {&(0x7f0000000940)="f1099f021bb0a10f58009b79864b25967510efdafaeedc78b6a20e93aee5006de49a2dc90ed191e37723a2348348dcb279b737c26250b4", 0x37}], 0x3}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): 0745] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 233.730561][T10776] loop3: detected capacity change from 0 to 512 [ 233.759500][ T29] audit: type=1400 audit(1768554803.461:40665): avc: denied { prog_run } for pid=10769 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.778817][ T29] audit: type=1400 audit(1768554803.501:40666): avc: denied { create } for pid=10769 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.798633][ T29] audit: type=1400 audit(1768554803.501:40667): avc: denied { create } for pid=10769 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.819331][ T29] audit: type=1400 audit(1768554803.501:40668): avc: denied { write } for pid=10769 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.839937][ T29] audit: type=1400 audit(1768554803.501:40669): avc: denied { create } for pid=10769 comm="syz.3.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 233.860365][ T29] audit: type=1400 audit(1768554803.521:40670): avc: denied { allowed } for pid=10771 comm="syz.1.2153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 233.880454][ T29] audit: type=1400 audit(1768554803.531:40671): avc: denied { read } for pid=10742 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 233.900228][ T29] audit: type=1400 audit(1768554803.531:40672): avc: denied { create } for pid=10742 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.919803][ T29] audit: type=1400 audit(1768554803.531:40673): avc: denied { write } for pid=10742 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 233.962010][T10776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.163429][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2156'. [ 234.223837][T10788] netlink: 'syz.1.2156': attribute type 21 has an invalid length. [ 234.231762][T10788] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2156'. [ 234.243623][T10788] loop1: detected capacity change from 0 to 512 [ 234.266904][T10788] EXT4-fs (loop1): 1 truncate cleaned up [ 234.273455][T10788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.308066][T10788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.404585][T10793] loop0: detected capacity change from 0 to 164 [ 234.424105][T10793] lo speed is unknown, defaulting to 1000 [ 234.440555][T10795] netlink: 'syz.6.2157': attribute type 1 has an invalid length. [ 234.458547][T10795] bond1: entered promiscuous mode [ 234.474530][T10795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.498521][T10798] loop0: detected capacity change from 0 to 2048 [ 234.524578][T10795] netlink: 'syz.6.2157': attribute type 1 has an invalid length. [ 234.532416][T10795] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2157'. [ 234.560408][T10803] usb usb9: usbfs: process 10803 (syz.2.2161) did not claim interface 0 before use [ 234.567436][T10770] syz.3.2152 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 234.583787][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.3.2152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.583816][T10770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.583829][T10770] Call Trace: [ 234.583836][T10770] [ 234.583844][T10770] __dump_stack+0x1d/0x30 [ 234.583868][T10770] dump_stack_lvl+0x95/0xd0 [ 234.583904][T10770] dump_stack+0x15/0x1b [ 234.583987][T10770] dump_header+0x81/0x240 [ 234.584009][T10770] oom_kill_process+0x295/0x350 [ 234.584034][T10770] out_of_memory+0x97b/0xb80 [ 234.584062][T10770] try_charge_memcg+0x610/0xa10 [ 234.584115][T10770] obj_cgroup_charge_pages+0xa6/0x150 [ 234.584143][T10770] __memcg_kmem_charge_page+0x9f/0x170 [ 234.584217][T10770] __alloc_frozen_pages_noprof+0x18f/0x360 [ 234.584246][T10770] alloc_pages_mpol+0xb3/0x260 [ 234.584285][T10770] alloc_pages_noprof+0x90/0x130 [ 234.584316][T10770] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 234.584392][T10770] __kvmalloc_node_noprof+0x492/0x6b0 [ 234.584441][T10770] ? ip_set_alloc+0x24/0x30 [ 234.584472][T10770] ? ip_set_alloc+0x24/0x30 [ 234.584539][T10770] ip_set_alloc+0x24/0x30 [ 234.584569][T10770] hash_netiface_create+0x282/0x740 [ 234.584605][T10770] ? __pfx_hash_netiface_create+0x10/0x10 [ 234.584689][T10770] ip_set_create+0x3cc/0x970 [ 234.584712][T10770] ? _raw_spin_unlock+0x26/0x50 [ 234.584794][T10770] nfnetlink_rcv_msg+0x4c6/0x590 [ 234.584852][T10770] netlink_rcv_skb+0x123/0x220 [ 234.584912][T10770] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 234.584968][T10770] nfnetlink_rcv+0x167/0x16c0 [ 234.585051][T10770] ? kmem_cache_free+0xe3/0x3a0 [ 234.585082][T10770] ? __kfree_skb+0x109/0x150 [ 234.585107][T10770] ? nlmon_xmit+0x4f/0x60 [ 234.585149][T10770] ? consume_skb+0x49/0x150 [ 234.585191][T10770] ? nlmon_xmit+0x4f/0x60 [ 234.585212][T10770] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 234.585288][T10770] ? __dev_queue_xmit+0x13a8/0x1ee0 [ 234.585313][T10770] ? __dev_queue_xmit+0x148/0x1ee0 [ 234.585338][T10770] ? ref_tracker_free+0x37d/0x3e0 [ 234.585378][T10770] ? __netlink_deliver_tap+0x4dc/0x500 [ 234.585408][T10770] netlink_unicast+0x5c0/0x690 [ 234.585434][T10770] netlink_sendmsg+0x58b/0x6b0 [ 234.585491][T10770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.585592][T10770] __sock_sendmsg+0x145/0x180 [ 234.585610][T10770] ____sys_sendmsg+0x31e/0x4a0 [ 234.585637][T10770] ___sys_sendmsg+0x17b/0x1d0 [ 234.585732][T10770] __x64_sys_sendmsg+0xd4/0x160 [ 234.585828][T10770] x64_sys_call+0x17ba/0x3000 [ 234.585851][T10770] do_syscall_64+0xca/0x2b0 [ 234.585869][T10770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.585889][T10770] RIP: 0033:0x7f18a0f4f749 [ 234.585904][T10770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.585938][T10770] RSP: 002b:00007f189f9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.585955][T10770] RAX: ffffffffffffffda RBX: 00007f18a11a5fa0 RCX: 00007f18a0f4f749 [ 234.585965][T10770] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e [ 234.586048][T10770] RBP: 00007f18a0fd3f91 R08: 0000000000000000 R09: 0000000000000000 [ 234.586106][T10770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.586116][T10770] R13: 00007f18a11a6038 R14: 00007f18a11a5fa0 R15: 00007ffe5ef9fc08 [ 234.586134][T10770] [ 234.586158][T10770] memory: usage 307200kB, limit 307200kB, failcnt 12408 [ 234.649409][T10806] loop2: detected capacity change from 0 to 128 [ 234.654827][T10770] memory+swap: usage 308052kB, limit 9007199254740988kB, failcnt 0 [ 234.929489][T10770] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 234.936770][T10770] Memory cgroup stats for /syz3: [ 234.937735][T10770] cache 12288 [ 234.946069][T10770] rss 0 [ 234.948811][T10770] shmem 0 [ 234.951757][T10770] mapped_file 0 [ 234.952899][T10798] Alternate GPT is invalid, using primary GPT. [ 234.955198][T10770] dirty 0 [ 234.955207][T10770] writeback 0 [ 234.955214][T10770] workingset_refault_anon 1980 [ 234.955222][T10770] workingset_refault_file 8667 [ 234.955231][T10770] swap 872448 [ 234.955238][T10770] swapcached 4096 [ 234.955246][T10770] pgpgin 286017 [ 234.961579][T10798] loop0: p2 p3 p7 [ 234.964314][T10770] pgpgout 286004 [ 234.994815][T10770] pgfault 311957 [ 234.998358][T10770] pgmajfault 955 [ 235.001915][T10770] inactive_anon 0 [ 235.005549][T10770] active_anon 4096 [ 235.009259][T10770] inactive_file 0 [ 235.012901][T10770] active_file 49152 [ 235.016704][T10770] unevictable 0 [ 235.020163][T10770] hierarchical_memory_limit 314572800 [ 235.025552][T10770] hierarchical_memsw_limit 9223372036854771712 [ 235.031741][T10770] total_cache 12288 [ 235.035549][T10770] total_rss 0 [ 235.038831][T10770] total_shmem 0 [ 235.042384][T10770] total_mapped_file 0 [ 235.046487][T10770] total_dirty 0 [ 235.049998][T10770] total_writeback 0 [ 235.053840][T10770] total_workingset_refault_anon 1980 [ 235.059117][T10770] total_workingset_refault_file 8667 [ 235.064443][T10770] total_swap 872448 [ 235.068256][T10770] total_swapcached 4096 [ 235.072426][T10770] total_pgpgin 286017 [ 235.076398][T10770] total_pgpgout 286004 [ 235.080520][T10770] total_pgfault 311957 [ 235.084612][T10770] total_pgmajfault 955 [ 235.088658][T10770] total_inactive_anon 0 [ 235.092812][T10770] total_active_anon 4096 [ 235.097050][T10770] total_inactive_file 0 [ 235.101213][T10770] total_active_file 49152 [ 235.105526][T10770] total_unevictable 0 [ 235.109589][T10770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2152,pid=10769,uid=0 [ 235.124312][T10770] Memory cgroup out of memory: Killed process 10769 (syz.3.2152) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 235.228106][T10815] loop0: detected capacity change from 0 to 1024 [ 235.240178][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.278498][T10815] EXT4-fs: inline encryption not supported [ 235.331288][T10819] FAULT_INJECTION: forcing a failure. [ 235.331288][T10819] name failslab, interval 1, probability 0, space 0, times 0 [ 235.344075][T10819] CPU: 1 UID: 0 PID: 10819 Comm: syz.6.2169 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.344136][T10819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.344151][T10819] Call Trace: [ 235.344157][T10819] [ 235.344165][T10819] __dump_stack+0x1d/0x30 [ 235.344186][T10819] dump_stack_lvl+0x95/0xd0 [ 235.344206][T10819] dump_stack+0x15/0x1b [ 235.344233][T10819] should_fail_ex+0x265/0x280 [ 235.344255][T10819] should_failslab+0x8c/0xb0 [ 235.344274][T10819] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 235.344368][T10819] ? __alloc_skb+0x2ff/0x4b0 [ 235.344391][T10819] __alloc_skb+0x2ff/0x4b0 [ 235.344418][T10819] ? __alloc_skb+0x228/0x4b0 [ 235.344492][T10819] audit_log_start+0x3a0/0x720 [ 235.344511][T10819] ? kstrtouint+0x76/0xc0 [ 235.344596][T10819] audit_seccomp+0x48/0x100 [ 235.344705][T10819] ? __seccomp_filter+0x832/0x1260 [ 235.344729][T10819] __seccomp_filter+0x843/0x1260 [ 235.344754][T10819] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.344793][T10819] ? vfs_write+0x7e8/0x960 [ 235.344819][T10819] __secure_computing+0x82/0x150 [ 235.344903][T10819] syscall_trace_enter+0xcf/0x1e0 [ 235.344935][T10819] do_syscall_64+0xa4/0x2b0 [ 235.344954][T10819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.344998][T10819] RIP: 0033:0x7fd798faf749 [ 235.345012][T10819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.345029][T10819] RSP: 002b:00007fd797a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 235.345046][T10819] RAX: ffffffffffffffda RBX: 00007fd799205fa0 RCX: 00007fd798faf749 [ 235.345058][T10819] RDX: 0000200000000080 RSI: 00000000c0185502 RDI: 0000000000000005 [ 235.345069][T10819] RBP: 00007fd797a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 235.345081][T10819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.345098][T10819] R13: 00007fd799206038 R14: 00007fd799205fa0 R15: 00007fff233b0b08 [ 235.345115][T10819] [ 235.345203][T10819] usb usb9: usbfs: process 10819 (syz.6.2169) did not claim interface 0 before use [ 235.470819][T10827] loop6: detected capacity change from 0 to 128 [ 235.559514][T10831] loop1: detected capacity change from 0 to 128 [ 235.627316][T10834] netlink: 'syz.6.2173': attribute type 21 has an invalid length. [ 235.637657][T10835] FAULT_INJECTION: forcing a failure. [ 235.637657][T10835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.650886][T10835] CPU: 0 UID: 0 PID: 10835 Comm: syz.0.2172 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.650913][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.650925][T10835] Call Trace: [ 235.650930][T10835] [ 235.650939][T10835] __dump_stack+0x1d/0x30 [ 235.650963][T10835] dump_stack_lvl+0x95/0xd0 [ 235.650990][T10835] dump_stack+0x15/0x1b [ 235.651008][T10835] should_fail_ex+0x265/0x280 [ 235.651034][T10835] should_fail+0xb/0x20 [ 235.651057][T10835] should_fail_usercopy+0x1a/0x20 [ 235.651131][T10835] _copy_from_user+0x1c/0xb0 [ 235.651157][T10835] ___sys_sendmsg+0xc1/0x1d0 [ 235.651202][T10835] __x64_sys_sendmsg+0xd4/0x160 [ 235.651284][T10835] x64_sys_call+0x17ba/0x3000 [ 235.651312][T10835] do_syscall_64+0xca/0x2b0 [ 235.651332][T10835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.651432][T10835] RIP: 0033:0x7fd676aef749 [ 235.651449][T10835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.651466][T10835] RSP: 002b:00007fd675536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 235.651484][T10835] RAX: ffffffffffffffda RBX: 00007fd676d46090 RCX: 00007fd676aef749 [ 235.651572][T10835] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 235.651583][T10835] RBP: 00007fd675536090 R08: 0000000000000000 R09: 0000000000000000 [ 235.651648][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.651734][T10835] R13: 00007fd676d46128 R14: 00007fd676d46090 R15: 00007fff174584e8 [ 235.651756][T10835] [ 235.681879][T10834] __nla_validate_parse: 1 callbacks suppressed [ 235.681913][T10834] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2173'. [ 235.833507][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2173'. [ 235.923095][T10843] delete_channel: no stack [ 236.238540][T10857] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20000 [ 236.278285][T10858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2177'. [ 236.619427][T10877] bridge0: port 4(macvtap1) entered blocking state [ 236.626023][T10877] bridge0: port 4(macvtap1) entered disabled state [ 236.632782][T10877] macvtap1: entered allmulticast mode [ 236.638292][T10877] bridge0: entered allmulticast mode [ 236.710454][T10877] macvtap1: left allmulticast mode [ 236.715642][T10877] bridge0: left allmulticast mode [ 236.812090][ T3416] hid_parser_main: 19 callbacks suppressed [ 236.812110][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 236.825497][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 236.833020][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x0 [ 236.839584][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2187'. [ 236.840469][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.851193][T10883] tipc: Enabling of bearer rejected, already enabled [ 236.856640][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x7 [ 236.871524][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.878933][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.886432][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.893828][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.901278][ T3416] hid-generic 00A0:0006:0003.0002: unknown main item tag 0x3 [ 236.963911][T10887] loop6: detected capacity change from 0 to 1024 [ 236.973799][ T3416] hid-generic 00A0:0006:0003.0002: hidraw0: HID v0.05 Device [syz1] on syz0 [ 237.011038][T10887] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.070238][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.106610][T10905] FAULT_INJECTION: forcing a failure. [ 237.106610][T10905] name failslab, interval 1, probability 0, space 0, times 0 [ 237.119355][T10905] CPU: 0 UID: 0 PID: 10905 Comm: syz.2.2194 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.119463][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.119478][T10905] Call Trace: [ 237.119554][T10905] [ 237.119562][T10905] __dump_stack+0x1d/0x30 [ 237.119589][T10905] dump_stack_lvl+0x95/0xd0 [ 237.119688][T10905] dump_stack+0x15/0x1b [ 237.119710][T10905] should_fail_ex+0x265/0x280 [ 237.119736][T10905] should_failslab+0x8c/0xb0 [ 237.119761][T10905] kmem_cache_alloc_noprof+0x69/0x4b0 [ 237.119784][T10905] ? io_submit_one+0xbc/0x1210 [ 237.119887][T10905] io_submit_one+0xbc/0x1210 [ 237.119923][T10905] __se_sys_io_submit+0xfb/0x280 [ 237.119952][T10905] __x64_sys_io_submit+0x43/0x50 [ 237.120008][T10905] x64_sys_call+0x2e40/0x3000 [ 237.120070][T10905] do_syscall_64+0xca/0x2b0 [ 237.120102][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.120126][T10905] RIP: 0033:0x7f299458f749 [ 237.120143][T10905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.120162][T10905] RSP: 002b:00007f2992ff7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 237.120184][T10905] RAX: ffffffffffffffda RBX: 00007f29947e5fa0 RCX: 00007f299458f749 [ 237.120246][T10905] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f2992fb3000 [ 237.120263][T10905] RBP: 00007f2992ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 237.120277][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.120290][T10905] R13: 00007f29947e6038 R14: 00007f29947e5fa0 R15: 00007ffd87f3a388 [ 237.120311][T10905] [ 237.289657][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.298741][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.322597][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.331604][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.363505][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.372531][T10909] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2195'. [ 237.511382][T10920] lo speed is unknown, defaulting to 1000 [ 237.618057][T10925] lo speed is unknown, defaulting to 1000 [ 238.613572][T10939] loop3: detected capacity change from 0 to 764 [ 238.621405][ T29] kauditd_printk_skb: 1029 callbacks suppressed [ 238.621417][ T29] audit: type=1326 audit(1768554808.471:41701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd676aef749 code=0x7ffc0000 [ 238.651310][ T29] audit: type=1326 audit(1768554808.471:41702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd676aef749 code=0x7ffc0000 [ 238.674982][ T29] audit: type=1326 audit(1768554808.471:41703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd676ae65e7 code=0x7ffc0000 [ 238.698484][ T29] audit: type=1326 audit(1768554808.471:41704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd676a8b829 code=0x7ffc0000 [ 238.722133][ T29] audit: type=1326 audit(1768554808.471:41705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd676aef749 code=0x7ffc0000 [ 238.745691][ T29] audit: type=1326 audit(1768554808.471:41706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd676aef749 code=0x7ffc0000 [ 238.769276][ T29] audit: type=1326 audit(1768554808.471:41707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd676aef749 code=0x7ffc0000 [ 238.874693][T10939] rock: directory entry would overflow storage [ 238.880905][T10939] rock: sig=0x4f50, size=4, remaining=3 [ 238.886458][T10939] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 239.047499][T10948] loop3: detected capacity change from 0 to 1024 [ 239.064443][T10952] loop6: detected capacity change from 0 to 764 [ 239.082652][T10948] EXT4-fs: inline encryption not supported [ 239.102952][T10952] FAULT_INJECTION: forcing a failure. [ 239.102952][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 239.115607][T10952] CPU: 1 UID: 0 PID: 10952 Comm: syz.6.2206 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.115635][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 239.115686][T10952] Call Trace: [ 239.115694][T10952] [ 239.115720][T10952] __dump_stack+0x1d/0x30 [ 239.115748][T10952] dump_stack_lvl+0x95/0xd0 [ 239.115769][T10952] dump_stack+0x15/0x1b [ 239.115786][T10952] should_fail_ex+0x265/0x280 [ 239.115810][T10952] should_failslab+0x8c/0xb0 [ 239.115884][T10952] kmem_cache_alloc_noprof+0x69/0x4b0 [ 239.115905][T10952] ? getname_flags+0x80/0x3b0 [ 239.116005][T10952] getname_flags+0x80/0x3b0 [ 239.116027][T10952] do_sys_openat2+0x60/0x150 [ 239.116060][T10952] __x64_sys_openat+0xf2/0x120 [ 239.116093][T10952] x64_sys_call+0x2b07/0x3000 [ 239.116146][T10952] do_syscall_64+0xca/0x2b0 [ 239.116165][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.116187][T10952] RIP: 0033:0x7fd798faf749 [ 239.116204][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.116234][T10952] RSP: 002b:00007fd797a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.116252][T10952] RAX: ffffffffffffffda RBX: 00007fd799205fa0 RCX: 00007fd798faf749 [ 239.116263][T10952] RDX: 0000000000200002 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 239.116274][T10952] RBP: 00007fd797a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 239.116286][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.116298][T10952] R13: 00007fd799206038 R14: 00007fd799205fa0 R15: 00007fff233b0b08 [ 239.116395][T10952] [ 239.285259][ T29] audit: type=1400 audit(1768554808.641:41708): avc: denied { create } for pid=10940 comm="syz.6.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 239.306156][ T29] audit: type=1400 audit(1768554808.641:41709): avc: denied { create } for pid=10940 comm="syz.6.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 239.326033][ T29] audit: type=1326 audit(1768554808.651:41710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10935 comm="syz.0.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd676ae65e7 code=0x7ffc0000 [ 239.372489][T10948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.411108][T10959] netlink: 'syz.6.2208': attribute type 1 has an invalid length. [ 239.438545][T10959] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 239.509392][T10965] bond0: entered promiscuous mode [ 239.514575][T10965] bond_slave_0: entered promiscuous mode [ 239.520461][T10965] bond_slave_1: entered promiscuous mode [ 239.543174][T10965] bond0: left promiscuous mode [ 239.548045][T10965] bond_slave_0: left promiscuous mode [ 239.553753][T10965] bond_slave_1: left promiscuous mode [ 239.647479][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.675362][T10975] loop3: detected capacity change from 0 to 512 [ 239.701161][T10975] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 239.732050][T10981] tipc: Enabling of bearer rejected, already enabled [ 239.821320][T10975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 239.842441][T10975] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2214: Block bitmap for bg 0 marked uninitialized [ 240.072360][T10975] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 240.087173][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.096445][T10975] EXT4-fs (loop3): 1 orphan inode deleted [ 240.102387][T10988] lo speed is unknown, defaulting to 1000 [ 240.109165][T10975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 240.170676][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.192012][T10993] lo speed is unknown, defaulting to 1000 [ 240.604768][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.644763][T11004] program syz.3.2222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.682395][T11006] FAULT_INJECTION: forcing a failure. [ 240.682395][T11006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.695598][T11006] CPU: 0 UID: 0 PID: 11006 Comm: syz.3.2223 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.695753][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.695765][T11006] Call Trace: [ 240.695771][T11006] [ 240.695778][T11006] __dump_stack+0x1d/0x30 [ 240.695801][T11006] dump_stack_lvl+0x95/0xd0 [ 240.695867][T11006] dump_stack+0x15/0x1b [ 240.695963][T11006] should_fail_ex+0x265/0x280 [ 240.696060][T11006] should_fail+0xb/0x20 [ 240.696082][T11006] should_fail_usercopy+0x1a/0x20 [ 240.696107][T11006] strncpy_from_user+0x27/0x260 [ 240.696139][T11006] getname_flags+0xae/0x3b0 [ 240.696217][T11006] do_sys_openat2+0x60/0x150 [ 240.696243][T11006] __x64_sys_openat+0xf2/0x120 [ 240.696296][T11006] x64_sys_call+0x2b07/0x3000 [ 240.696324][T11006] do_syscall_64+0xca/0x2b0 [ 240.696356][T11006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.696377][T11006] RIP: 0033:0x7f18a0f4df90 [ 240.696391][T11006] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 240.696411][T11006] RSP: 002b:00007f189f9b6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 240.696428][T11006] RAX: ffffffffffffffda RBX: 0000000000022c01 RCX: 00007f18a0f4df90 [ 240.696488][T11006] RDX: 0000000000022c01 RSI: 00007f189f9b6c10 RDI: 00000000ffffff9c [ 240.696563][T11006] RBP: 00007f189f9b6c10 R08: 0000000000000000 R09: 002367732f766564 [ 240.696576][T11006] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 240.696590][T11006] R13: 00007f18a11a6038 R14: 00007f18a11a5fa0 R15: 00007ffe5ef9fc08 [ 240.696610][T11006] [ 240.956796][T11009] loop2: detected capacity change from 0 to 2048 [ 240.989287][T11016] loop3: detected capacity change from 0 to 1024 [ 241.008855][T11016] EXT4-fs: inline encryption not supported [ 241.124647][T11016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.126871][T11026] macvtap0: refused to change device tx_queue_len [ 241.237142][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.254096][T11030] loop2: detected capacity change from 0 to 1024 [ 241.277333][T11030] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2230: bad orphan inode 134217728 [ 241.289395][T11030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.426899][T11039] loop6: detected capacity change from 0 to 128 [ 241.691839][T11049] __nla_validate_parse: 2 callbacks suppressed [ 241.691856][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2234'. [ 241.722248][T11050] macvtap0: refused to change device tx_queue_len [ 241.780366][T11049] bond0: entered promiscuous mode [ 241.785464][T11049] bond_slave_0: entered promiscuous mode [ 241.791320][T11049] bond_slave_1: entered promiscuous mode [ 241.825623][T11049] ipvlan1: entered promiscuous mode [ 241.831418][T11049] ipvlan1: left promiscuous mode [ 241.836707][T11049] bond0: left promiscuous mode [ 241.841520][T11049] bond_slave_0: left promiscuous mode [ 241.847072][T11049] bond_slave_1: left promiscuous mode [ 241.942242][T11063] loop1: detected capacity change from 0 to 164 [ 241.949401][T11063] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 241.973529][ T3314] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 241.988539][ T3314] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: bad e_name length [ 242.005276][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.020998][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.030620][ T4479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.042055][T11066] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2242'. [ 242.071928][T11066] loop0: detected capacity change from 0 to 512 [ 242.240759][T11072] EXT4-fs: inline encryption not supported [ 242.276724][T11072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.409817][T11079] lo speed is unknown, defaulting to 1000 [ 242.465973][T11091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.514506][T11091] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 242.529569][ T42] bridge_slave_1: left allmulticast mode [ 242.535273][ T42] bridge_slave_1: left promiscuous mode [ 242.541044][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.565486][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.587330][ T42] bridge_slave_0: left allmulticast mode [ 242.593054][ T42] bridge_slave_0: left promiscuous mode [ 242.598726][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.610367][T11091] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 242.622916][T11091] EXT4-fs (loop6): This should not happen!! Data will be lost [ 242.622916][T11091] [ 242.632644][T11091] EXT4-fs (loop6): Total free blocks count 0 [ 242.638694][T11091] EXT4-fs (loop6): Free/Dirty block details [ 242.644674][T11091] EXT4-fs (loop6): free_blocks=2415919104 [ 242.650527][T11091] EXT4-fs (loop6): dirty_blocks=32 [ 242.655704][T11091] EXT4-fs (loop6): Block reservation details [ 242.661707][T11091] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 242.684270][T11096] msdos: Bad value for 'tz' [ 242.732301][ T42] bond3 (unregistering): (slave macvlan2): Removing an active aggregator [ 242.749160][ T42] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 242.773095][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.783364][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.791327][T11099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2249'. [ 242.802288][ T42] bond0 (unregistering): Released all slaves [ 242.811264][ T42] bond1 (unregistering): Released all slaves [ 242.825874][ T42] bond2 (unregistering): Released all slaves [ 242.837400][ T42] bond3 (unregistering): Released all slaves [ 242.867921][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.916263][ T42] tipc: Disabling bearer [ 242.921368][ T42] tipc: Disabling bearer [ 242.926333][ T42] tipc: Left network mode [ 242.960878][ T42] hsr_slave_0: left promiscuous mode [ 242.967574][ T42] hsr_slave_1: left promiscuous mode [ 243.142488][ T42] team0 (unregistering): Port device team_slave_1 removed [ 243.156858][ T42] team0 (unregistering): Port device team_slave_0 removed [ 243.385657][ T9225] smc: removing ib device !yz! [ 243.390941][T11079] chnl_net:caif_netlink_parms(): no params data found [ 243.569609][T11079] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.576753][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.592425][T11079] bridge_slave_0: entered allmulticast mode [ 243.599138][T11079] bridge_slave_0: entered promiscuous mode [ 243.606116][T11079] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.613184][T11079] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.620406][T11079] bridge_slave_1: entered allmulticast mode [ 243.626822][T11079] bridge_slave_1: entered promiscuous mode [ 243.651150][ T29] kauditd_printk_skb: 1431 callbacks suppressed [ 243.651165][ T29] audit: type=1400 audit(1768554813.501:43142): avc: denied { open } for pid=11121 comm="syz.3.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.677021][ T29] audit: type=1400 audit(1768554813.501:43143): avc: denied { kernel } for pid=11121 comm="syz.3.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.737892][T11079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.767977][ T29] audit: type=1400 audit(1768554813.511:43144): avc: denied { prog_run } for pid=11123 comm="syz.1.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.787210][ T29] audit: type=1400 audit(1768554813.571:43145): avc: denied { create } for pid=11125 comm="syz.1.2257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.792883][T11066] syz.0.2242 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 243.806898][ T29] audit: type=1400 audit(1768554813.601:43146): avc: denied { write } for pid=11121 comm="syz.3.2255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.820964][T11066] CPU: 0 UID: 0 PID: 11066 Comm: syz.0.2242 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.820993][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 243.821061][T11066] Call Trace: [ 243.821069][T11066] [ 243.821077][T11066] __dump_stack+0x1d/0x30 [ 243.821101][T11066] dump_stack_lvl+0x95/0xd0 [ 243.821122][T11066] dump_stack+0x15/0x1b [ 243.821144][T11066] dump_header+0x81/0x240 [ 243.821167][T11066] oom_kill_process+0x295/0x350 [ 243.821205][T11066] out_of_memory+0x97b/0xb80 [ 243.821229][T11066] try_charge_memcg+0x610/0xa10 [ 243.821275][T11066] obj_cgroup_charge_pages+0xa6/0x150 [ 243.821311][T11066] __memcg_kmem_charge_page+0x9f/0x170 [ 243.821422][T11066] __alloc_frozen_pages_noprof+0x18f/0x360 [ 243.821455][T11066] alloc_pages_mpol+0xb3/0x260 [ 243.821550][T11066] alloc_pages_noprof+0x90/0x130 [ 243.821580][T11066] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 243.821631][T11066] __kvmalloc_node_noprof+0x492/0x6b0 [ 243.821658][T11066] ? ip_set_alloc+0x24/0x30 [ 243.821689][T11066] ? ip_set_alloc+0x24/0x30 [ 243.821806][T11066] ip_set_alloc+0x24/0x30 [ 243.821837][T11066] hash_netiface_create+0x282/0x740 [ 243.821871][T11066] ? __pfx_hash_netiface_create+0x10/0x10 [ 243.821913][T11066] ip_set_create+0x3cc/0x970 [ 243.821942][T11066] ? __nla_parse+0x40/0x60 [ 243.821969][T11066] nfnetlink_rcv_msg+0x4c6/0x590 [ 243.822068][T11066] netlink_rcv_skb+0x123/0x220 [ 243.822118][T11066] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 243.822152][T11066] nfnetlink_rcv+0x167/0x16c0 [ 243.822211][T11066] ? mas_wr_walk_descend+0x36e/0x470 [ 243.822245][T11066] ? mas_wr_store_type+0xa75/0xcd0 [ 243.822274][T11066] ? security_compute_sid+0x11da/0x1290 [ 243.822331][T11066] ? mas_prealloc_calc+0x253/0x2a0 [ 243.822376][T11066] ? mas_wr_preallocate+0x2aa/0x370 [ 243.822410][T11066] ? mas_insert+0x1ea/0x330 [ 243.822500][T11066] ? should_fail_ex+0x30/0x280 [ 243.822524][T11066] ? selinux_nlmsg_lookup+0x99/0x890 [ 243.822551][T11066] ? __rcu_read_unlock+0x34/0x70 [ 243.822573][T11066] ? __netlink_lookup+0x266/0x2a0 [ 243.822620][T11066] netlink_unicast+0x5c0/0x690 [ 243.822652][T11066] netlink_sendmsg+0x58b/0x6b0 [ 243.822727][T11066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.822765][T11066] __sock_sendmsg+0x145/0x180 [ 243.822822][T11066] ____sys_sendmsg+0x31e/0x4a0 [ 243.822903][T11066] ___sys_sendmsg+0x17b/0x1d0 [ 243.822946][T11066] __x64_sys_sendmsg+0xd4/0x160 [ 243.823026][T11066] x64_sys_call+0x17ba/0x3000 [ 243.823053][T11066] do_syscall_64+0xca/0x2b0 [ 243.823074][T11066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.823098][T11066] RIP: 0033:0x7fd676aef749 [ 243.823159][T11066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.823178][T11066] RSP: 002b:00007fd675557038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.823198][T11066] RAX: ffffffffffffffda RBX: 00007fd676d45fa0 RCX: 00007fd676aef749 [ 243.823254][T11066] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000d [ 243.823268][T11066] RBP: 00007fd676b73f91 R08: 0000000000000000 R09: 0000000000000000 [ 243.823282][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.823295][T11066] R13: 00007fd676d46038 R14: 00007fd676d45fa0 R15: 00007fff174584e8 [ 243.823319][T11066] [ 243.823327][T11066] memory: usage 307200kB, limit 307200kB, failcnt 15522 [ 244.005570][T11128] set_capacity_and_notify: 4 callbacks suppressed [ 244.005585][T11128] loop3: detected capacity change from 0 to 1024 [ 244.010056][T11066] memory+swap: usage 323804kB, limit 9007199254740988kB, failcnt 0 [ 244.010073][T11066] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 244.024754][T11079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.029919][T11066] Memory cgroup stats for /syz0: [ 244.046409][T11128] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.063371][T11066] cache 0 [ 244.223660][T11066] rss 0 [ 244.226415][T11066] shmem 0 [ 244.229340][T11066] mapped_file 0 [ 244.232838][T11066] dirty 0 [ 244.235764][T11066] writeback 0 [ 244.239038][T11066] workingset_refault_anon 1593 [ 244.243823][T11066] workingset_refault_file 5492 [ 244.248575][T11066] swap 17002496 [ 244.252041][T11066] swapcached 12288 [ 244.255758][T11066] pgpgin 305029 [ 244.259209][T11066] pgpgout 305015 [ 244.262827][T11066] pgfault 328694 [ 244.266433][T11066] pgmajfault 836 [ 244.269969][T11066] inactive_anon 12288 [ 244.273962][T11066] active_anon 0 [ 244.277433][T11066] inactive_file 45056 [ 244.281455][T11066] active_file 0 [ 244.284913][T11066] unevictable 0 [ 244.288359][T11066] hierarchical_memory_limit 314572800 [ 244.293756][T11066] hierarchical_memsw_limit 9223372036854771712 [ 244.299902][T11066] total_cache 0 [ 244.303448][T11066] total_rss 0 [ 244.306722][T11066] total_shmem 0 [ 244.310167][T11066] total_mapped_file 0 [ 244.314155][T11066] total_dirty 0 [ 244.317601][T11066] total_writeback 0 [ 244.321427][T11066] total_workingset_refault_anon 1593 [ 244.326701][T11066] total_workingset_refault_file 5492 [ 244.331999][T11066] total_swap 17002496 [ 244.335974][T11066] total_swapcached 12288 [ 244.340206][T11066] total_pgpgin 305029 [ 244.344209][T11066] total_pgpgout 305015 [ 244.348419][T11066] total_pgfault 328694 [ 244.352521][T11066] total_pgmajfault 836 [ 244.356577][T11066] total_inactive_anon 12288 [ 244.361110][T11066] total_active_anon 0 [ 244.365131][T11066] total_inactive_file 45056 [ 244.369620][T11066] total_active_file 0 [ 244.373647][T11066] total_unevictable 0 [ 244.377618][T11066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2242,pid=11065,uid=0 [ 244.392478][T11066] Memory cgroup out of memory: Killed process 11065 (syz.0.2242) total-vm:94100kB, anon-rss:1136kB, file-rss:22364kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 244.412553][T11132] loop1: detected capacity change from 0 to 128 [ 244.424212][ T29] audit: type=1400 audit(1768554813.891:43147): avc: denied { mounton } for pid=11121 comm="syz.3.2255" path="/458/file1" dev="tmpfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.447178][ T29] audit: type=1400 audit(1768554814.271:43148): avc: denied { mount } for pid=11131 comm="syz.1.2259" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 244.530212][ T29] audit: type=1326 audit(1768554814.361:43149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052fa9f749 code=0x7ffc0000 [ 244.553988][ T29] audit: type=1326 audit(1768554814.361:43150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f052fa9f749 code=0x7ffc0000 [ 244.577525][ T29] audit: type=1326 audit(1768554814.361:43151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11131 comm="syz.1.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052fa9f749 code=0x7ffc0000 [ 244.620471][T11079] team0: Port device team_slave_0 added [ 244.627393][T11079] team0: Port device team_slave_1 added [ 244.642167][T11128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.764054][T11079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.771111][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.797228][T11079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.940886][T11079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.947869][T11079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.973900][T11079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.098406][T11148] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2262'. [ 245.124436][T11148] bond0: entered promiscuous mode [ 245.129502][T11148] bond_slave_0: entered promiscuous mode [ 245.135265][T11148] bond_slave_1: entered promiscuous mode [ 245.178044][T11148] ipvlan1: entered promiscuous mode [ 245.184075][T11148] ipvlan1: left promiscuous mode [ 245.189587][T11148] bond0: left promiscuous mode [ 245.194427][T11148] bond_slave_0: left promiscuous mode [ 245.199861][T11148] bond_slave_1: left promiscuous mode [ 245.350825][T11079] hsr_slave_0: entered promiscuous mode [ 245.357176][T11079] hsr_slave_1: entered promiscuous mode [ 245.367121][T11079] debugfs: 'hsr0' already exists in 'hsr' [ 245.372972][T11079] Cannot create hsr debugfs directory [ 245.391469][T11153] lo speed is unknown, defaulting to 1000 [ 245.485360][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 245.597949][T11161] siw: device registration error -23 [ 245.720426][T11079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 245.764295][T11079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.793013][T11079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.886036][T11079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 246.101953][ T3761] net_ratelimit: 11 callbacks suppressed [ 246.101968][ T3761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.517181][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.809183][T11183] loop6: detected capacity change from 0 to 512 [ 246.826155][T11183] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 246.836664][T11183] EXT4-fs (loop6): orphan cleanup on readonly fs [ 246.850553][T11183] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.2271: Block bitmap for bg 0 marked uninitialized [ 246.872660][T11183] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 246.894394][T11183] EXT4-fs (loop6): 1 orphan inode deleted [ 246.901459][T11183] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 246.912711][T11079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.944307][T11079] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.952930][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.964726][T11192] loop0: detected capacity change from 0 to 128 [ 246.972008][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.987708][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.994812][ T9195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.017953][T11181] loop1: detected capacity change from 0 to 1024 [ 247.025072][T11181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 247.042046][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.049168][ T9195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.067840][T11194] loop6: detected capacity change from 0 to 1024 [ 247.075944][T11181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.090675][T11194] EXT4-fs: inline encryption not supported [ 247.118430][T11194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.172136][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.234393][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.284908][T11209] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 247.304938][T11079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.755412][T11232] lo speed is unknown, defaulting to 1000 [ 248.099052][T11079] veth0_vlan: entered promiscuous mode [ 248.122898][T11079] veth1_vlan: entered promiscuous mode [ 248.238411][ T3495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.252039][T11079] veth0_macvtap: entered promiscuous mode [ 248.281379][T11079] veth1_macvtap: entered promiscuous mode [ 248.690441][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 248.690456][ T29] audit: type=1400 audit(1768554818.531:43463): avc: denied { append } for pid=11241 comm="syz.3.2281" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.815763][ T29] audit: type=1400 audit(1768554818.611:43464): avc: denied { create } for pid=11179 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.836506][ T29] audit: type=1400 audit(1768554818.621:43465): avc: denied { write } for pid=11179 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.857042][ T29] audit: type=1400 audit(1768554818.631:43466): avc: denied { read } for pid=11179 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.877570][ T29] audit: type=1400 audit(1768554818.661:43467): avc: denied { prog_run } for pid=11245 comm="syz.6.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 248.913020][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2283'. [ 248.922031][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2283'. [ 248.930981][T11246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2283'. [ 249.037736][T11242] syzkaller0: entered promiscuous mode [ 249.043340][T11242] syzkaller0: entered allmulticast mode [ 249.111558][ T3586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.122374][T11079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.188790][T11242] program syz.3.2281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.191784][T11079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.214798][T11254] loop6: detected capacity change from 0 to 512 [ 249.242017][ T29] audit: type=1400 audit(1768554818.741:43468): avc: denied { write } for pid=11241 comm="syz.3.2281" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.265895][ T29] audit: type=1400 audit(1768554818.741:43469): avc: denied { open } for pid=11241 comm="syz.3.2281" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 249.290105][ T29] audit: type=1400 audit(1768554818.741:43470): avc: denied { map_create } for pid=11241 comm="syz.3.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.309580][ T29] audit: type=1400 audit(1768554818.741:43471): avc: denied { map_read map_write } for pid=11241 comm="syz.3.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.329801][ T29] audit: type=1400 audit(1768554818.761:43472): avc: denied { create } for pid=11245 comm="syz.6.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 249.351542][T11254] EXT4-fs: Ignoring removed nobh option [ 249.461192][T11254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.490510][T11254] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.504914][ T3495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.514339][ T344] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.523122][ T344] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.538954][T11254] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.2285: iget: bad i_size value: 2533274857506816 [ 249.552231][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.562335][ T344] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.588148][ T344] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.611613][T11258] loop0: detected capacity change from 0 to 1024 [ 249.623712][T11260] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 249.632934][T11254] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2285'. [ 249.642246][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.649733][T11254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.657524][T11254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.665081][T11254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.665622][T11258] EXT4-fs: inline encryption not supported [ 249.679388][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.683633][T11263] loop7: detected capacity change from 0 to 512 [ 249.695258][T11264] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.2285: iget: bad i_size value: 2533274857506816 [ 249.712673][T11263] EXT4-fs: Ignoring removed nobh option [ 249.738184][T11264] EXT4-fs error (device loop6): ext4_lookup:1785: inode #12: comm syz.6.2285: iget: bad i_size value: 2533274857506816 [ 249.763352][T11263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.787208][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2289'. [ 249.798452][T11263] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.813340][T11277] tipc: Enabling of bearer rejected, already enabled [ 249.827592][T11263] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.2246: iget: bad i_size value: 2533274857506816 [ 249.848739][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2246'. [ 249.857762][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.865198][T11263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.903777][T11283] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.2246: iget: bad i_size value: 2533274857506816 [ 249.921536][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.952299][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.962135][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.969526][T11263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.994767][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 250.003837][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 250.012849][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 250.116213][T11283] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.2246: iget: bad i_size value: 2533274857506816 [ 250.143095][T11292] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2292'. [ 250.369088][T11308] FAULT_INJECTION: forcing a failure. [ 250.369088][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 250.381833][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.1.2296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.381859][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.381930][T11308] Call Trace: [ 250.381937][T11308] [ 250.381946][T11308] __dump_stack+0x1d/0x30 [ 250.381972][T11308] dump_stack_lvl+0x95/0xd0 [ 250.381996][T11308] dump_stack+0x15/0x1b [ 250.382014][T11308] should_fail_ex+0x265/0x280 [ 250.382039][T11308] should_failslab+0x8c/0xb0 [ 250.382123][T11308] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 250.382148][T11308] ? __alloc_skb+0x2ff/0x4b0 [ 250.382209][T11308] __alloc_skb+0x2ff/0x4b0 [ 250.382234][T11308] ? __alloc_skb+0x228/0x4b0 [ 250.382256][T11308] audit_log_start+0x3a0/0x720 [ 250.382302][T11308] ? __rcu_read_unlock+0x4f/0x70 [ 250.382324][T11308] audit_seccomp+0x48/0x100 [ 250.382353][T11308] ? __seccomp_filter+0x832/0x1260 [ 250.382384][T11308] __seccomp_filter+0x843/0x1260 [ 250.382492][T11308] ? __schedule+0x85f/0xcd0 [ 250.382517][T11308] __secure_computing+0x82/0x150 [ 250.382602][T11308] syscall_trace_enter+0xcf/0x1e0 [ 250.382629][T11308] do_syscall_64+0xa4/0x2b0 [ 250.382652][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.382672][T11308] RIP: 0033:0x7f052fa9f749 [ 250.382730][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.382750][T11308] RSP: 002b:00007f052e4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.382852][T11308] RAX: ffffffffffffffda RBX: 00007f052fcf5fa0 RCX: 00007f052fa9f749 [ 250.382863][T11308] RDX: 0000000000000000 RSI: 00000000c0185502 RDI: 0000000000000003 [ 250.382875][T11308] RBP: 00007f052e4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 250.382888][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.382899][T11308] R13: 00007f052fcf6038 R14: 00007f052fcf5fa0 R15: 00007ffebf40fda8 [ 250.382916][T11308] [ 250.587377][ T3495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.732624][T11319] loop0: detected capacity change from 0 to 1024 [ 250.752973][T11319] EXT4-fs: inline encryption not supported [ 250.778788][T11323] loop3: detected capacity change from 0 to 1024 [ 250.800475][T11323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.816996][T11323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.820170][T11320] loop6: detected capacity change from 0 to 512 [ 251.063126][T11320] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 251.095919][T11336] lo speed is unknown, defaulting to 1000 [ 251.632048][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.854720][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.046677][T11357] loop3: detected capacity change from 0 to 128 [ 252.359265][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.477402][T11377] siw: device registration error -23 [ 252.511499][T11380] FAULT_INJECTION: forcing a failure. [ 252.511499][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.524807][T11380] CPU: 0 UID: 0 PID: 11380 Comm: syz.0.2317 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.524843][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.524854][T11380] Call Trace: [ 252.524860][T11380] [ 252.524867][T11380] __dump_stack+0x1d/0x30 [ 252.524890][T11380] dump_stack_lvl+0x95/0xd0 [ 252.524909][T11380] dump_stack+0x15/0x1b [ 252.524927][T11380] should_fail_ex+0x265/0x280 [ 252.524994][T11380] should_fail+0xb/0x20 [ 252.525034][T11380] should_fail_usercopy+0x1a/0x20 [ 252.525060][T11380] strncpy_from_user+0x27/0x260 [ 252.525153][T11380] getname_flags+0x230/0x3b0 [ 252.525179][T11380] __se_sys_quotactl+0x16a/0x670 [ 252.525252][T11380] __x64_sys_quotactl+0x55/0x70 [ 252.525355][T11380] x64_sys_call+0x19a4/0x3000 [ 252.525381][T11380] do_syscall_64+0xca/0x2b0 [ 252.525403][T11380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.525427][T11380] RIP: 0033:0x7fd676aef749 [ 252.525461][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.525486][T11380] RSP: 002b:00007fd675557038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 252.525507][T11380] RAX: ffffffffffffffda RBX: 00007fd676d45fa0 RCX: 00007fd676aef749 [ 252.525522][T11380] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: ffffffff80000200 [ 252.525566][T11380] RBP: 00007fd675557090 R08: 0000000000000000 R09: 0000000000000000 [ 252.525580][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.525593][T11380] R13: 00007fd676d46038 R14: 00007fd676d45fa0 R15: 00007fff174584e8 [ 252.525612][T11380] [ 252.692463][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.700582][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.700660][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.716951][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.873311][T11392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.882431][T11392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.904257][T11394] loop6: detected capacity change from 0 to 1024 [ 252.911888][T11394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.930979][T11394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.932041][T11392] loop7: detected capacity change from 0 to 512 [ 252.961485][T11399] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 252.972348][T11392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.064082][T11408] loop3: detected capacity change from 0 to 128 [ 253.076833][T11411] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 253.094904][T11404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.310569][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.339912][T11426] siw: device registration error -23 [ 253.412669][T11423] lo speed is unknown, defaulting to 1000 [ 253.486591][T11423] chnl_net:caif_netlink_parms(): no params data found [ 253.538634][T11423] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.545796][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.553092][T11423] bridge_slave_0: entered allmulticast mode [ 253.559576][T11423] bridge_slave_0: entered promiscuous mode [ 253.566943][T11423] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.574017][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.581289][T11423] bridge_slave_1: entered allmulticast mode [ 253.587764][T11423] bridge_slave_1: entered promiscuous mode [ 253.607971][T11423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.630651][ T3586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.630965][T11423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.661953][T11423] team0: Port device team_slave_0 added [ 253.669178][T11423] team0: Port device team_slave_1 added [ 253.691567][T11423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.698563][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.724629][T11423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.735652][ T3761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.735939][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.743858][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.769100][T11423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.776106][T11423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.802099][T11423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.830455][T11446] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 253.843211][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 253.843226][ T29] audit: type=1400 audit(1768554823.691:43786): avc: denied { tracepoint } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.873569][T11423] hsr_slave_0: entered promiscuous mode [ 253.879718][T11423] hsr_slave_1: entered promiscuous mode [ 253.889685][T11423] debugfs: 'hsr0' already exists in 'hsr' [ 253.895480][T11423] Cannot create hsr debugfs directory [ 253.937206][ T29] audit: type=1400 audit(1768554823.721:43787): avc: denied { create } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.957000][ T29] audit: type=1400 audit(1768554823.721:43788): avc: denied { setopt } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 253.960242][T11389] syz.6.2320 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 253.976681][ T29] audit: type=1400 audit(1768554823.751:43789): avc: denied { create } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 253.990669][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.6.2320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.990697][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.990710][T11389] Call Trace: [ 253.990718][T11389] [ 253.990727][T11389] __dump_stack+0x1d/0x30 [ 253.990815][T11389] dump_stack_lvl+0x95/0xd0 [ 253.990838][T11389] dump_stack+0x15/0x1b [ 253.990878][T11389] dump_header+0x81/0x240 [ 253.990900][T11389] oom_kill_process+0x295/0x350 [ 253.990924][T11389] out_of_memory+0x97b/0xb80 [ 253.990989][T11389] try_charge_memcg+0x610/0xa10 [ 253.991032][T11389] obj_cgroup_charge_pages+0xa6/0x150 [ 253.991063][T11389] __memcg_kmem_charge_page+0x9f/0x170 [ 253.991163][T11389] __alloc_frozen_pages_noprof+0x18f/0x360 [ 253.991196][T11389] alloc_pages_mpol+0xb3/0x260 [ 253.991286][T11389] alloc_pages_noprof+0x90/0x130 [ 253.991316][T11389] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 253.991428][T11389] __kvmalloc_node_noprof+0x492/0x6b0 [ 253.991454][T11389] ? ip_set_alloc+0x24/0x30 [ 253.991491][T11389] ? ip_set_alloc+0x24/0x30 [ 253.991622][T11389] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 253.991649][T11389] ip_set_alloc+0x24/0x30 [ 253.991731][T11389] hash_netiface_create+0x282/0x740 [ 253.991766][T11389] ? __pfx_hash_netiface_create+0x10/0x10 [ 253.991801][T11389] ip_set_create+0x3cc/0x970 [ 253.991839][T11389] ? __nla_parse+0x40/0x60 [ 253.991868][T11389] nfnetlink_rcv_msg+0x4c6/0x590 [ 253.991929][T11389] netlink_rcv_skb+0x123/0x220 [ 253.991960][T11389] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 253.992049][T11389] nfnetlink_rcv+0x167/0x16c0 [ 253.992076][T11389] ? kmem_cache_free+0xe3/0x3a0 [ 253.992103][T11389] ? __kfree_skb+0x109/0x150 [ 253.992157][T11389] ? nlmon_xmit+0x4f/0x60 [ 253.992178][T11389] ? consume_skb+0x49/0x150 [ 253.992205][T11389] ? nlmon_xmit+0x4f/0x60 [ 253.992226][T11389] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 253.992259][T11389] ? __dev_queue_xmit+0x13a8/0x1ee0 [ 253.992289][T11389] ? __dev_queue_xmit+0x148/0x1ee0 [ 253.992320][T11389] ? ref_tracker_free+0x37d/0x3e0 [ 253.992434][T11389] ? __netlink_deliver_tap+0x4dc/0x500 [ 253.992518][T11389] netlink_unicast+0x5c0/0x690 [ 253.992576][T11389] netlink_sendmsg+0x58b/0x6b0 [ 253.992675][T11389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.992747][T11389] __sock_sendmsg+0x145/0x180 [ 253.992769][T11389] ____sys_sendmsg+0x31e/0x4a0 [ 253.992803][T11389] ___sys_sendmsg+0x17b/0x1d0 [ 253.992905][T11389] __x64_sys_sendmsg+0xd4/0x160 [ 253.992939][T11389] x64_sys_call+0x17ba/0x3000 [ 253.992966][T11389] do_syscall_64+0xca/0x2b0 [ 253.992988][T11389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.993012][T11389] RIP: 0033:0x7fd798faf749 [ 253.993029][T11389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.993055][T11389] RSP: 002b:00007fd797a0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.993075][T11389] RAX: ffffffffffffffda RBX: 00007fd799205fa0 RCX: 00007fd798faf749 [ 253.993088][T11389] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 253.993102][T11389] RBP: 00007fd799033f91 R08: 0000000000000000 R09: 0000000000000000 [ 253.993145][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.993157][T11389] R13: 00007fd799206038 R14: 00007fd799205fa0 R15: 00007fff233b0b08 [ 253.993177][T11389] [ 253.993184][T11389] memory: usage 307200kB, limit 307200kB, failcnt 801 [ 254.011027][ T29] audit: type=1400 audit(1768554823.751:43790): avc: denied { write } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.020794][T11389] memory+swap: usage 307908kB, limit 9007199254740988kB, failcnt 0 [ 254.020808][T11389] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 254.020820][T11389] Memory cgroup stats for /syz6: [ 254.022497][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.030990][ T29] audit: type=1400 audit(1768554823.751:43791): avc: denied { nlmsg_write } for pid=11447 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 254.034421][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.037154][ T29] audit: type=1400 audit(1768554823.761:43792): avc: denied { execute } for pid=11450 comm="syz.3.2337" path="/472/file0" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.045605][T11389] cache 32768 [ 254.073429][T11451] lo speed is unknown, defaulting to 1000 [ 254.074190][T11389] rss 4096 [ 254.306562][T11456] __nla_validate_parse: 5 callbacks suppressed [ 254.306578][T11456] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 254.311070][T11389] shmem 0 [ 254.311080][T11389] mapped_file 0 [ 254.311088][T11389] dirty 0 [ 254.311106][T11389] writeback 8192 [ 254.311113][T11389] workingset_refault_anon 112 [ 254.489123][T11389] workingset_refault_file 6 [ 254.493620][T11389] swap 724992 [ 254.496889][T11389] swapcached 8192 [ 254.500508][T11389] pgpgin 28571 [ 254.503867][T11389] pgpgout 28559 [ 254.507300][T11389] pgfault 36070 [ 254.510864][T11389] pgmajfault 44 [ 254.514335][T11389] inactive_anon 8192 [ 254.518203][T11389] active_anon 0 [ 254.521716][T11389] inactive_file 28672 [ 254.525735][T11389] active_file 12288 [ 254.529554][T11389] unevictable 0 [ 254.533023][T11389] hierarchical_memory_limit 314572800 [ 254.538385][T11389] hierarchical_memsw_limit 9223372036854771712 [ 254.544525][T11389] total_cache 32768 [ 254.548306][T11389] total_rss 4096 [ 254.551847][T11389] total_shmem 0 [ 254.555306][T11389] total_mapped_file 0 [ 254.559264][T11389] total_dirty 0 [ 254.562717][T11389] total_writeback 8192 [ 254.566807][T11389] total_workingset_refault_anon 112 [ 254.571991][T11389] total_workingset_refault_file 6 [ 254.577070][T11389] total_swap 724992 [ 254.580859][T11389] total_swapcached 8192 [ 254.584988][T11389] total_pgpgin 28571 [ 254.588854][T11389] total_pgpgout 28559 [ 254.592836][T11389] total_pgfault 36070 [ 254.596802][T11389] total_pgmajfault 44 [ 254.600771][T11389] total_inactive_anon 8192 [ 254.605207][T11389] total_active_anon 0 [ 254.609164][T11389] total_inactive_file 28672 [ 254.613654][T11389] total_active_file 12288 [ 254.617957][T11389] total_unevictable 0 [ 254.621924][T11389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2320,pid=11388,uid=0 [ 254.636557][T11389] Memory cgroup out of memory: Killed process 11388 (syz.6.2320) total-vm:94100kB, anon-rss:1264kB, file-rss:22376kB, shmem-rss:108kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 254.654532][ T29] audit: type=1400 audit(1768554824.501:43793): avc: denied { cpu } for pid=11450 comm="syz.3.2337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 254.735052][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.822782][ T29] audit: type=1400 audit(1768554824.671:43794): avc: denied { map } for pid=11463 comm="syz.6.2339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.847360][ T29] audit: type=1400 audit(1768554824.671:43795): avc: denied { read write } for pid=11463 comm="syz.6.2339" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=32729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.895389][T11423] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.917619][T11423] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 254.920708][T11468] loop6: detected capacity change from 0 to 128 [ 254.942114][T11423] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 254.949253][T11392] syz.7.2321 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 254.963395][T11392] CPU: 0 UID: 0 PID: 11392 Comm: syz.7.2321 Not tainted syzkaller #0 PREEMPT(voluntary) [ 254.963467][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.963480][T11392] Call Trace: [ 254.963488][T11392] [ 254.963496][T11392] __dump_stack+0x1d/0x30 [ 254.963521][T11392] dump_stack_lvl+0x95/0xd0 [ 254.963542][T11392] dump_stack+0x15/0x1b [ 254.963560][T11392] dump_header+0x81/0x240 [ 254.963695][T11392] oom_kill_process+0x295/0x350 [ 254.963811][T11392] out_of_memory+0x97b/0xb80 [ 254.963836][T11392] try_charge_memcg+0x610/0xa10 [ 254.963880][T11392] obj_cgroup_charge_pages+0xa6/0x150 [ 254.963913][T11392] __memcg_kmem_charge_page+0x9f/0x170 [ 254.964024][T11392] __alloc_frozen_pages_noprof+0x18f/0x360 [ 254.964105][T11392] alloc_pages_mpol+0xb3/0x260 [ 254.964135][T11392] alloc_pages_noprof+0x90/0x130 [ 254.964167][T11392] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 254.964243][T11392] __kvmalloc_node_noprof+0x492/0x6b0 [ 254.964339][T11392] ? ip_set_alloc+0x24/0x30 [ 254.964369][T11392] ? ip_set_alloc+0x24/0x30 [ 254.964463][T11392] ip_set_alloc+0x24/0x30 [ 254.964492][T11392] hash_netiface_create+0x282/0x740 [ 254.964595][T11392] ? __pfx_hash_netiface_create+0x10/0x10 [ 254.964626][T11392] ip_set_create+0x3cc/0x970 [ 254.964672][T11392] ? __mutex_lock_slowpath+0xa/0x10 [ 254.964705][T11392] nfnetlink_rcv_msg+0x4c6/0x590 [ 254.964783][T11392] ? queue_work_on+0xca/0x130 [ 254.964830][T11392] netlink_rcv_skb+0x123/0x220 [ 254.964865][T11392] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 254.964965][T11392] nfnetlink_rcv+0x167/0x16c0 [ 254.965126][T11392] ? kmem_cache_free+0xe3/0x3a0 [ 254.965207][T11392] ? __kfree_skb+0x109/0x150 [ 254.965233][T11392] ? nlmon_xmit+0x4f/0x60 [ 254.965256][T11392] ? consume_skb+0x49/0x150 [ 254.965285][T11392] ? nlmon_xmit+0x4f/0x60 [ 254.965378][T11392] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 254.965410][T11392] ? __dev_queue_xmit+0x13a8/0x1ee0 [ 254.965464][T11392] ? __dev_queue_xmit+0x148/0x1ee0 [ 254.965498][T11392] ? ref_tracker_free+0x37d/0x3e0 [ 254.965533][T11392] ? __netlink_deliver_tap+0x4dc/0x500 [ 254.965568][T11392] netlink_unicast+0x5c0/0x690 [ 254.965597][T11392] netlink_sendmsg+0x58b/0x6b0 [ 254.965680][T11392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.965716][T11392] __sock_sendmsg+0x145/0x180 [ 254.965753][T11392] ____sys_sendmsg+0x31e/0x4a0 [ 254.965789][T11392] ___sys_sendmsg+0x17b/0x1d0 [ 254.965832][T11392] __x64_sys_sendmsg+0xd4/0x160 [ 254.965880][T11392] x64_sys_call+0x17ba/0x3000 [ 254.965909][T11392] do_syscall_64+0xca/0x2b0 [ 254.965929][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.965960][T11392] RIP: 0033:0x7f84c221f749 [ 254.966030][T11392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.966047][T11392] RSP: 002b:00007f84c0c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.966104][T11392] RAX: ffffffffffffffda RBX: 00007f84c2475fa0 RCX: 00007f84c221f749 [ 254.966116][T11392] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e [ 254.966131][T11392] RBP: 00007f84c22a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 254.966167][T11392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.966180][T11392] R13: 00007f84c2476038 R14: 00007f84c2475fa0 R15: 00007ffc67d9fe08 [ 254.966200][T11392] [ 254.966207][T11392] memory: usage 307200kB, limit 307200kB, failcnt 56 [ 255.101849][T11469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.105497][T11392] memory+swap: usage 188296kB, limit 9007199254740988kB, failcnt 0 [ 255.110555][T11469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.115723][T11392] kmem: usage 187636kB, limit 9007199254740988kB, failcnt 0 [ 255.175961][T11466] lo speed is unknown, defaulting to 1000 [ 255.178634][T11392] Memory cgroup stats for /syz7: [ 255.178946][T11392] cache 8192 [ 255.188694][T11423] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.193499][T11392] rss 32768 [ 255.355448][T11392] shmem 0 [ 255.358391][T11392] mapped_file 0 [ 255.361949][T11392] dirty 0 [ 255.364878][T11392] writeback 0 [ 255.368222][T11392] workingset_refault_anon 0 [ 255.372734][T11392] workingset_refault_file 0 [ 255.377232][T11392] swap 446464 [ 255.380623][T11392] swapcached 45056 [ 255.384337][T11392] pgpgin 440 [ 255.387515][T11392] pgpgout 427 [ 255.391157][T11392] pgfault 630 [ 255.394428][T11392] pgmajfault 0 [ 255.397879][T11392] inactive_anon 45056 [ 255.401870][T11392] active_anon 0 [ 255.405320][T11392] inactive_file 0 [ 255.406129][T11473] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 255.409057][T11392] active_file 8192 [ 255.409067][T11392] unevictable 0 [ 255.409074][T11392] hierarchical_memory_limit 314572800 [ 255.409083][T11392] hierarchical_memsw_limit 9223372036854771712 [ 255.409092][T11392] total_cache 8192 [ 255.409099][T11392] total_rss 32768 [ 255.443333][T11392] total_shmem 0 [ 255.446819][T11392] total_mapped_file 0 [ 255.450829][T11392] total_dirty 0 [ 255.454315][T11392] total_writeback 0 [ 255.458095][T11392] total_workingset_refault_anon 0 [ 255.463188][T11392] total_workingset_refault_file 0 [ 255.468186][T11392] total_swap 446464 [ 255.472006][T11392] total_swapcached 45056 [ 255.476294][T11392] total_pgpgin 440 [ 255.479999][T11392] total_pgpgout 427 [ 255.483893][T11392] total_pgfault 630 [ 255.487682][T11392] total_pgmajfault 0 [ 255.491582][T11392] total_inactive_anon 45056 [ 255.496063][T11392] total_active_anon 0 [ 255.500054][T11392] total_inactive_file 0 [ 255.504219][T11392] total_active_file 8192 [ 255.508530][T11392] total_unevictable 0 [ 255.512517][T11392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2321,pid=11391,uid=0 [ 255.527276][T11392] Memory cgroup out of memory: Killed process 11391 (syz.7.2321) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 255.556124][T11476] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2342'. [ 255.566289][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2342'. [ 255.575304][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2342'. [ 255.590636][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.661476][T11490] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 255.694375][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'. [ 255.736310][T11423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.772117][T11423] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.789139][ T9225] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.796256][ T9225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.808272][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.815372][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.846901][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2348'. [ 255.867359][T11504] loop7: detected capacity change from 0 to 1024 [ 255.887982][T11507] loop3: detected capacity change from 0 to 1024 [ 255.895147][T11507] EXT4-fs: inline encryption not supported [ 255.902174][T11504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.915884][T11423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 255.928108][T11504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.944199][T11507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.052129][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.055699][T11423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.099798][T11518] lo speed is unknown, defaulting to 1000 [ 256.133620][T11526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.178022][T11526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.303724][T11423] veth0_vlan: entered promiscuous mode [ 256.321879][T11423] veth1_vlan: entered promiscuous mode [ 256.353321][T11423] veth0_macvtap: entered promiscuous mode [ 256.370640][T11423] veth1_macvtap: entered promiscuous mode [ 256.383607][T11423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.395608][T11423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.414263][ T9198] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.425623][T11539] lo speed is unknown, defaulting to 1000 [ 256.430820][ T9198] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.440061][ T9198] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.449842][ T9198] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.482796][T11518] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 256.591926][T11543] lo speed is unknown, defaulting to 1000 [ 256.904254][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.941358][ T3495] net_ratelimit: 13 callbacks suppressed [ 256.941376][ T3495] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.959219][T11549] loop8: detected capacity change from 0 to 1024 [ 256.965999][T11549] EXT4-fs: Ignoring removed orlov option [ 256.971993][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.980466][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.990499][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.000564][T11549] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 257.009119][T11549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 257.249310][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2358'. [ 257.283324][T11567] loop7: detected capacity change from 0 to 1024 [ 257.303668][T11568] tipc: Started in network mode [ 257.308879][T11568] tipc: Node identity ac14140f, cluster identity 4711 [ 257.309457][T11567] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 257.328524][T11568] tipc: New replicast peer: 255.255.255.83 [ 257.334569][T11568] tipc: Enabled bearer , priority 28 [ 257.341887][T11567] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 257.352073][T11567] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.2360: lblock 2 mapped to illegal pblock 2 (length 1) [ 257.366378][T11567] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.2360: lblock 0 mapped to illegal pblock 48 (length 1) [ 257.380854][T11567] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2360: Failed to acquire dquot type 0 [ 257.392580][T11567] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 257.402981][T11567] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.2360: mark_inode_dirty error [ 257.428755][T11573] loop6: detected capacity change from 0 to 1024 [ 257.437364][T11567] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 257.447793][T11567] EXT4-fs (loop7): 1 orphan inode deleted [ 257.451468][T11573] EXT4-fs: inline encryption not supported [ 257.454021][T11567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.475595][ T42] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 257.514770][T11573] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.531650][ T42] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 257.575713][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.590196][T11079] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 257.614010][T11079] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 257.619643][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.670428][T11079] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 257.686907][T11423] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.718575][T11584] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 257.774370][T11591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.782862][T11591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.791100][T11591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.858099][T11591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.866363][T11591] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.920939][T11595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.001368][T11605] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 258.023675][T11600] lo speed is unknown, defaulting to 1000 [ 258.031546][T11607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.040701][T11607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.046956][T11608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.059243][T11608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.091521][T11608] loop3: detected capacity change from 0 to 512 [ 258.113677][T11601] lo speed is unknown, defaulting to 1000 [ 258.171683][T11608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.330355][ T3416] tipc: Node number set to 2886997007 [ 258.372890][T11620] loop7: detected capacity change from 0 to 1024 [ 258.385281][T11620] EXT4-fs: inline encryption not supported [ 258.419510][T11607] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 258.451484][T11620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.594277][ T3321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 258.605231][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.605250][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 258.605287][ T3321] Call Trace: [ 258.605293][ T3321] [ 258.605299][ T3321] __dump_stack+0x1d/0x30 [ 258.605350][ T3321] dump_stack_lvl+0x95/0xd0 [ 258.605363][ T3321] dump_stack+0x15/0x1b [ 258.605374][ T3321] dump_header+0x81/0x240 [ 258.605443][ T3321] oom_kill_process+0x295/0x350 [ 258.605457][ T3321] out_of_memory+0x97b/0xb80 [ 258.605471][ T3321] try_charge_memcg+0x610/0xa10 [ 258.605574][ T3321] charge_memcg+0x51/0xc0 [ 258.605591][ T3321] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 258.605668][ T3321] __read_swap_cache_async+0x17b/0x2d0 [ 258.605690][ T3321] swap_cluster_readahead+0x262/0x3c0 [ 258.605709][ T3321] swapin_readahead+0xde/0x820 [ 258.605753][ T3321] ? next_uptodate_folio+0x81c/0x890 [ 258.605768][ T3321] ? percpu_counter_add_batch+0xb6/0x130 [ 258.605781][ T3321] ? __rcu_read_unlock+0x4f/0x70 [ 258.605793][ T3321] ? swap_cache_get_folio+0x277/0x280 [ 258.605866][ T3321] do_swap_page+0x2b4/0x21e0 [ 258.605885][ T3321] ? __pfx_default_wake_function+0x10/0x10 [ 258.605905][ T3321] handle_mm_fault+0x9d8/0x2c60 [ 258.605973][ T3321] do_user_addr_fault+0x630/0x1080 [ 258.605991][ T3321] exc_page_fault+0x62/0xa0 [ 258.606008][ T3321] asm_exc_page_fault+0x26/0x30 [ 258.606039][ T3321] RIP: 0033:0x7f18a0e25fd7 [ 258.606049][ T3321] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 258.606060][ T3321] RSP: 002b:00007ffe5ef9ff90 EFLAGS: 00010202 [ 258.606070][ T3321] RAX: 0000001b33b24000 RBX: 0000000000000538 RCX: 000000000003efd0 [ 258.606077][ T3321] RDX: 0000000008493d2a RSI: 00007ffe5efa0020 RDI: 0000000000000019 [ 258.606142][ T3321] RBP: 00007ffe5ef9ffcc R08: 000000001f9be264 R09: 7fffffffffffffff [ 258.606150][ T3321] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 258.606157][ T3321] R13: 00000000000927c0 R14: 000000000003f157 R15: 00007ffe5efa0020 [ 258.606169][ T3321] [ 258.606173][ T3321] memory: usage 307200kB, limit 307200kB, failcnt 13913 [ 258.641331][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.641698][ T3321] memory+swap: usage 308016kB, limit 9007199254740988kB, failcnt 0 [ 258.799535][T11630] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 258.803688][ T3321] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 258.853501][ T3321] Memory cgroup stats for /syz3: [ 258.853578][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 258.853591][ T29] audit: type=1400 audit(1768554828.641:43851): avc: denied { write } for pid=11627 comm="syz.7.2378" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 258.871477][ T3321] cache 8192 [ 258.890871][ T3321] rss 28672 [ 258.893973][ T3321] shmem 0 [ 258.896922][ T3321] mapped_file 0 [ 258.900387][ T3321] dirty 0 [ 258.903309][ T3321] writeback 0 [ 258.906576][ T3321] workingset_refault_anon 2234 [ 258.911444][ T3321] workingset_refault_file 10247 [ 258.916364][ T3321] swap 835584 [ 258.919635][ T3321] swapcached 45056 [ 258.923415][ T3321] pgpgin 308142 [ 258.926877][ T3321] pgpgout 308119 [ 258.930453][ T3321] pgfault 335256 [ 258.934002][ T3321] pgmajfault 1092 [ 258.937640][ T3321] inactive_anon 16384 [ 258.941775][ T3321] active_anon 28672 [ 258.945578][ T3321] inactive_file 49152 [ 258.949612][ T3321] active_file 0 [ 258.953154][ T3321] unevictable 0 [ 258.956628][ T3321] hierarchical_memory_limit 314572800 [ 258.962075][ T3321] hierarchical_memsw_limit 9223372036854771712 [ 258.968224][ T3321] total_cache 8192 [ 258.972021][ T3321] total_rss 28672 [ 258.975648][ T3321] total_shmem 0 [ 258.979099][ T3321] total_mapped_file 0 [ 258.983132][ T3321] total_dirty 0 [ 258.986595][ T3321] total_writeback 0 [ 258.990455][ T3321] total_workingset_refault_anon 2234 [ 258.995750][ T3321] total_workingset_refault_file 10247 [ 259.001187][ T3321] total_swap 835584 [ 259.005032][ T3321] total_swapcached 45056 [ 259.009334][ T3321] total_pgpgin 308142 [ 259.013411][ T3321] total_pgpgout 308119 [ 259.017525][ T3321] total_pgfault 335256 [ 259.021652][ T3321] total_pgmajfault 1092 [ 259.025801][ T3321] total_inactive_anon 16384 [ 259.030420][ T3321] total_active_anon 28672 [ 259.034780][ T3321] total_inactive_file 49152 [ 259.039414][ T3321] total_active_file 0 [ 259.043448][ T3321] total_unevictable 0 [ 259.047488][ T3321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2373,pid=11606,uid=0 [ 259.062394][ T3321] Memory cgroup out of memory: Killed process 11606 (syz.3.2373) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 259.084491][ T29] audit: type=1400 audit(1768554828.931:43852): avc: denied { read } for pid=11627 comm="syz.7.2378" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 259.107772][ T29] audit: type=1400 audit(1768554828.931:43853): avc: denied { open } for pid=11627 comm="syz.7.2378" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 259.157375][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.277394][ T29] audit: type=1400 audit(1768554829.121:43854): avc: denied { write } for pid=11647 comm="syz.8.2385" path="socket:[34235]" dev="sockfs" ino=34235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.586688][T11664] lo speed is unknown, defaulting to 1000 [ 259.692810][T11671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.733073][T11671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.811233][T11671] loop7: detected capacity change from 0 to 512 [ 259.822790][T11671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.881804][ T29] audit: type=1326 audit(1768554829.731:43855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 259.934473][ T29] audit: type=1326 audit(1768554829.751:43856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 259.958196][ T29] audit: type=1326 audit(1768554829.751:43857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 259.982130][ T29] audit: type=1326 audit(1768554829.751:43858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 260.005808][ T29] audit: type=1326 audit(1768554829.751:43859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 260.029512][ T29] audit: type=1326 audit(1768554829.751:43860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11680 comm="syz.6.2394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd798faf749 code=0x7ffc0000 [ 260.357406][T11703] lo speed is unknown, defaulting to 1000 [ 260.371843][T11704] loop3: detected capacity change from 0 to 1024 [ 260.397129][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.417984][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.436637][T11704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.490447][T11704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.680833][T11703] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 260.749275][T11671] syz.7.2391 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 260.763862][T11671] CPU: 0 UID: 0 PID: 11671 Comm: syz.7.2391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.763894][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.763912][T11671] Call Trace: [ 260.763919][T11671] [ 260.763928][T11671] __dump_stack+0x1d/0x30 [ 260.763956][T11671] dump_stack_lvl+0x95/0xd0 [ 260.763979][T11671] dump_stack+0x15/0x1b [ 260.763998][T11671] dump_header+0x81/0x240 [ 260.764096][T11671] oom_kill_process+0x295/0x350 [ 260.764117][T11671] out_of_memory+0x97b/0xb80 [ 260.764139][T11671] try_charge_memcg+0x610/0xa10 [ 260.764178][T11671] obj_cgroup_charge_pages+0xa6/0x150 [ 260.764258][T11671] __memcg_kmem_charge_page+0x9f/0x170 [ 260.764311][T11671] __alloc_frozen_pages_noprof+0x18f/0x360 [ 260.764404][T11671] alloc_pages_mpol+0xb3/0x260 [ 260.764437][T11671] alloc_pages_noprof+0x90/0x130 [ 260.764537][T11671] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 260.764629][T11671] __kvmalloc_node_noprof+0x492/0x6b0 [ 260.764653][T11671] ? ip_set_alloc+0x24/0x30 [ 260.764861][T11671] ? ip_set_alloc+0x24/0x30 [ 260.764893][T11671] ip_set_alloc+0x24/0x30 [ 260.764926][T11671] hash_netiface_create+0x282/0x740 [ 260.764962][T11671] ? __pfx_hash_netiface_create+0x10/0x10 [ 260.765054][T11671] ip_set_create+0x3cc/0x970 [ 260.765086][T11671] ? __nla_parse+0x40/0x60 [ 260.765116][T11671] nfnetlink_rcv_msg+0x4c6/0x590 [ 260.765196][T11671] ? queue_work_on+0xca/0x130 [ 260.765246][T11671] netlink_rcv_skb+0x123/0x220 [ 260.765280][T11671] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 260.765364][T11671] nfnetlink_rcv+0x167/0x16c0 [ 260.765389][T11671] ? kmem_cache_free+0xe3/0x3a0 [ 260.765411][T11671] ? __kfree_skb+0x109/0x150 [ 260.765495][T11671] ? nlmon_xmit+0x4f/0x60 [ 260.765516][T11671] ? consume_skb+0x49/0x150 [ 260.765542][T11671] ? nlmon_xmit+0x4f/0x60 [ 260.765678][T11671] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 260.765714][T11671] ? __dev_queue_xmit+0x13a8/0x1ee0 [ 260.765824][T11671] ? __dev_queue_xmit+0x148/0x1ee0 [ 260.765858][T11671] ? ref_tracker_free+0x37d/0x3e0 [ 260.765888][T11671] ? __netlink_deliver_tap+0x4dc/0x500 [ 260.765959][T11671] netlink_unicast+0x5c0/0x690 [ 260.765993][T11671] netlink_sendmsg+0x58b/0x6b0 [ 260.766027][T11671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.766086][T11671] __sock_sendmsg+0x145/0x180 [ 260.766124][T11671] ____sys_sendmsg+0x31e/0x4a0 [ 260.766156][T11671] ___sys_sendmsg+0x17b/0x1d0 [ 260.766197][T11671] __x64_sys_sendmsg+0xd4/0x160 [ 260.766228][T11671] x64_sys_call+0x17ba/0x3000 [ 260.766291][T11671] do_syscall_64+0xca/0x2b0 [ 260.766315][T11671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.766395][T11671] RIP: 0033:0x7f84c221f749 [ 260.766412][T11671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.766479][T11671] RSP: 002b:00007f84c0c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.766498][T11671] RAX: ffffffffffffffda RBX: 00007f84c2475fa0 RCX: 00007f84c221f749 [ 260.766510][T11671] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000e [ 260.766559][T11671] RBP: 00007f84c22a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 260.766570][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.766582][T11671] R13: 00007f84c2476038 R14: 00007f84c2475fa0 R15: 00007ffc67d9fe08 [ 260.766599][T11671] [ 260.766633][T11671] memory: usage 307200kB, limit 307200kB, failcnt 600 [ 261.092441][T11724] loop8: detected capacity change from 0 to 1024 [ 261.094185][T11671] memory+swap: usage 307676kB, limit 9007199254740988kB, failcnt 0 [ 261.102869][T11724] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2407: bad orphan inode 134217728 [ 261.107278][T11671] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 261.107294][T11671] Memory cgroup stats for /syz7 [ 261.115681][T11724] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.125761][T11671] : [ 261.128960][T11671] cache 12288 [ 261.156037][T11671] rss 0 [ 261.158844][T11671] shmem 0 [ 261.161805][T11671] mapped_file 0 [ 261.165271][T11671] dirty 0 [ 261.168177][T11671] writeback 0 [ 261.171572][T11671] workingset_refault_anon 251 [ 261.176236][T11671] workingset_refault_file 5 [ 261.180804][T11671] swap 487424 [ 261.184128][T11671] swapcached 20480 [ 261.187819][T11671] pgpgin 7684 [ 261.191132][T11671] pgpgout 7676 [ 261.194502][T11671] pgfault 8648 [ 261.197862][T11671] pgmajfault 79 [ 261.201382][T11671] inactive_anon 20480 [ 261.205396][T11671] active_anon 0 [ 261.208841][T11671] inactive_file 0 [ 261.212531][T11671] active_file 12288 [ 261.216326][T11671] unevictable 0 [ 261.219774][T11671] hierarchical_memory_limit 314572800 [ 261.225154][T11671] hierarchical_memsw_limit 9223372036854771712 [ 261.228196][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 261.231312][T11671] total_cache 12288 [ 261.231323][T11671] total_rss 0 [ 261.247552][T11671] total_shmem 0 [ 261.251124][T11671] total_mapped_file 0 [ 261.255096][T11671] total_dirty 0 [ 261.258540][T11671] total_writeback 0 [ 261.262374][T11671] total_workingset_refault_anon 251 [ 261.267566][T11671] total_workingset_refault_file 5 [ 261.272608][T11671] total_swap 487424 [ 261.276406][T11671] total_swapcached 20480 [ 261.280740][T11671] total_pgpgin 7684 [ 261.284535][T11671] total_pgpgout 7676 [ 261.288410][T11671] total_pgfault 8648 [ 261.292341][T11671] total_pgmajfault 79 [ 261.296317][T11671] total_inactive_anon 20480 [ 261.300831][T11671] total_active_anon 0 [ 261.304804][T11671] total_inactive_file 0 [ 261.308944][T11671] total_active_file 12288 [ 261.313392][T11671] total_unevictable 0 [ 261.317365][T11671] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2391,pid=11668,uid=0 [ 261.332197][T11671] Memory cgroup out of memory: Killed process 11668 (syz.7.2391) total-vm:94100kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 261.457981][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.535281][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2410'. [ 261.552519][T11423] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.643801][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.691918][T11754] loop3: detected capacity change from 0 to 128 [ 261.779639][T11764] loop7: detected capacity change from 0 to 1024 [ 261.796898][T11764] EXT4-fs: inline encryption not supported [ 261.818005][T11754] bio_check_eod: 16 callbacks suppressed [ 261.818021][T11754] syz.3.2416: attempt to access beyond end of device [ 261.818021][T11754] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 261.838176][T11754] syz.3.2416: attempt to access beyond end of device [ 261.838176][T11754] loop3: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 261.856830][T11764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.876682][T11754] syz.3.2416: attempt to access beyond end of device [ 261.876682][T11754] loop3: rw=8390657, sector=148, nr_sectors = 2 limit=128 [ 261.890483][T11754] buffer_io_error: 8 callbacks suppressed [ 261.890560][T11754] Buffer I/O error on dev loop3, logical block 74, lost async page write [ 261.950668][ T8304] net_ratelimit: 69 callbacks suppressed [ 261.950763][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.995918][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.007715][T11778] loop1: detected capacity change from 0 to 512 [ 262.014284][T11754] syz.3.2416: attempt to access beyond end of device [ 262.014284][T11754] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 262.028059][T11754] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 262.044487][T11778] EXT4-fs: Ignoring removed nobh option [ 262.050328][T11754] syz.3.2416: attempt to access beyond end of device [ 262.050328][T11754] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 262.064166][T11754] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 262.073586][T11754] syz.3.2416: attempt to access beyond end of device [ 262.073586][T11754] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 262.095145][T11754] syz.3.2416: attempt to access beyond end of device [ 262.095145][T11754] loop3: rw=2049, sector=162, nr_sectors = 2 limit=128 [ 262.150429][T11778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.166621][T11778] ext4 filesystem being mounted at /458/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.182198][T11785] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2425'. [ 262.191483][T11778] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.2423: iget: bad i_size value: 2533274857506816 [ 262.206104][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.208203][T11754] syz.3.2416: attempt to access beyond end of device [ 262.208203][T11754] loop3: rw=8390657, sector=164, nr_sectors = 2 limit=128 [ 262.214285][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.227897][T11754] Buffer I/O error on dev loop3, logical block 82, lost async page write [ 262.249630][T11754] syz.3.2416: attempt to access beyond end of device [ 262.249630][T11754] loop3: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 262.263428][T11754] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 262.295029][T11754] syz.3.2416: attempt to access beyond end of device [ 262.295029][T11754] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 262.308802][T11754] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 262.318831][T11754] Buffer I/O error on dev loop3, logical block 94, lost async page write [ 262.327624][T11754] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 262.330510][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2423'. [ 262.336185][T11754] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 262.358594][T11754] Buffer I/O error on dev loop3, logical block 98, lost async page write [ 262.362400][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.384332][T11778] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.2423: iget: bad i_size value: 2533274857506816 [ 262.471648][T11805] loop6: detected capacity change from 0 to 1024 [ 262.478498][T11805] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.494600][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.504390][T11807] lo speed is unknown, defaulting to 1000 [ 262.527459][T11805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.565664][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.614760][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.670402][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.679334][ T3586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.687555][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.865550][T11807] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 262.932743][T11820] lo speed is unknown, defaulting to 1000 [ 263.070495][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.093827][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2426'. [ 263.148365][T11838] loop3: detected capacity change from 0 to 512 [ 263.160289][T11838] EXT4-fs: Ignoring removed nobh option [ 263.176087][T11840] loop8: detected capacity change from 0 to 1024 [ 263.197333][T11838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.210210][T11840] EXT4-fs: inline encryption not supported [ 263.211867][T11838] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.230959][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.233583][T11838] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.2443: iget: bad i_size value: 2533274857506816 [ 263.239272][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.274226][T11840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.289824][T11838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 263.307621][T11838] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.2443: iget: bad i_size value: 2533274857506816 [ 263.324405][T11423] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.379114][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.477827][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.549063][T11860] SELinux: ebitmap: truncated map [ 263.556508][T11860] SELinux: failed to load policy [ 263.925912][T11875] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 264.083243][T11895] loop1: detected capacity change from 0 to 512 [ 264.083942][T11895] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 264.093931][T11895] EXT4-fs (loop1): orphan cleanup on readonly fs [ 264.094062][T11895] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.2462: Block bitmap for bg 0 marked uninitialized [ 264.094219][T11895] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 264.094372][T11895] EXT4-fs (loop1): 1 orphan inode deleted [ 264.094788][T11895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.096876][T11900] tipc: MTU too low for tipc bearer [ 264.149934][T11904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2461'. [ 264.156717][T11905] loop7: detected capacity change from 0 to 1024 [ 264.157176][T11905] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.165884][T11905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.262776][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 264.262793][ T29] audit: type=1326 audit(1768554834.101:44102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.340483][ T29] audit: type=1326 audit(1768554834.101:44103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.354988][T11920] 9pnet_virtio: no channels available for device éq‰Y’3aK [ 264.364457][ T29] audit: type=1326 audit(1768554834.101:44104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395081][ T29] audit: type=1326 audit(1768554834.101:44105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395191][ T29] audit: type=1326 audit(1768554834.101:44106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395220][ T29] audit: type=1326 audit(1768554834.101:44107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395247][ T29] audit: type=1326 audit(1768554834.101:44108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395350][ T29] audit: type=1326 audit(1768554834.101:44109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395378][ T29] audit: type=1326 audit(1768554834.101:44110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.395403][ T29] audit: type=1326 audit(1768554834.101:44111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.3.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a0f4f749 code=0x7ffc0000 [ 264.422603][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2459'. [ 264.793306][T11928] lo speed is unknown, defaulting to 1000 [ 265.222253][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.312585][T11936] tipc: MTU too low for tipc bearer [ 265.319321][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.446172][T11953] loop6: detected capacity change from 0 to 1024 [ 265.466009][T11953] EXT4-fs: inline encryption not supported [ 265.485939][T11953] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.597937][T11962] SELinux: ebitmap: truncated map [ 265.618818][T11962] SELinux: failed to load policy [ 265.625640][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.643694][T11965] loop1: detected capacity change from 0 to 1024 [ 265.653693][T11965] EXT4-fs: inline encryption not supported [ 265.697784][T11965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.718882][T11969] lo speed is unknown, defaulting to 1000 [ 265.739192][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.747808][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.770586][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.832105][T11981] loop1: detected capacity change from 0 to 256 [ 265.869732][T11981] FAT-fs (loop1): Directory bread(block 64) failed [ 265.885873][T11981] FAT-fs (loop1): Directory bread(block 65) failed [ 265.897896][T11981] FAT-fs (loop1): Directory bread(block 66) failed [ 265.905995][T11981] FAT-fs (loop1): Directory bread(block 67) failed [ 265.913452][T11981] FAT-fs (loop1): Directory bread(block 68) failed [ 265.923233][T11981] FAT-fs (loop1): Directory bread(block 69) failed [ 265.929823][T11981] FAT-fs (loop1): Directory bread(block 70) failed [ 265.936483][T11981] FAT-fs (loop1): Directory bread(block 71) failed [ 265.944636][T11981] FAT-fs (loop1): Directory bread(block 72) failed [ 265.952006][T11981] FAT-fs (loop1): Directory bread(block 73) failed [ 265.963797][T11981] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 265.969459][T11989] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 265.972468][T11981] FAT-fs (loop1): Filesystem has been set read-only [ 265.984781][T11981] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 265.997270][T11981] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.006534][T11969] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 266.009011][T11981] FAULT_INJECTION: forcing a failure. [ 266.009011][T11981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.027909][T11981] CPU: 1 UID: 0 PID: 11981 Comm: syz.1.2490 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.027928][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.027936][T11981] Call Trace: [ 266.028015][T11981] [ 266.028020][T11981] __dump_stack+0x1d/0x30 [ 266.028044][T11981] dump_stack_lvl+0x95/0xd0 [ 266.028056][T11981] dump_stack+0x15/0x1b [ 266.028106][T11981] should_fail_ex+0x265/0x280 [ 266.028120][T11981] should_fail+0xb/0x20 [ 266.028131][T11981] should_fail_usercopy+0x1a/0x20 [ 266.028145][T11981] _copy_from_user+0x1c/0xb0 [ 266.028247][T11981] __sys_bind+0x106/0x2a0 [ 266.028314][T11981] __x64_sys_bind+0x3f/0x50 [ 266.028357][T11981] x64_sys_call+0x2ceb/0x3000 [ 266.028371][T11981] do_syscall_64+0xca/0x2b0 [ 266.028384][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.028425][T11981] RIP: 0033:0x7f052fa9f749 [ 266.028434][T11981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.028445][T11981] RSP: 002b:00007f052e4ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 266.028457][T11981] RAX: ffffffffffffffda RBX: 00007f052fcf5fa0 RCX: 00007f052fa9f749 [ 266.028464][T11981] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000006 [ 266.028472][T11981] RBP: 00007f052e4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 266.028479][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.028512][T11981] R13: 00007f052fcf6038 R14: 00007f052fcf5fa0 R15: 00007ffebf40fda8 [ 266.028523][T11981] [ 266.187031][T11991] loop8: detected capacity change from 0 to 256 [ 266.193516][T11993] loop3: detected capacity change from 0 to 256 [ 266.206431][T11991] FAT-fs (loop8): Directory bread(block 64) failed [ 266.206560][T11993] FAT-fs (loop3): Directory bread(block 64) failed [ 266.219955][T11993] FAT-fs (loop3): Directory bread(block 65) failed [ 266.223268][T11991] FAT-fs (loop8): Directory bread(block 65) failed [ 266.226893][T11993] FAT-fs (loop3): Directory bread(block 66) failed [ 266.239744][T11993] FAT-fs (loop3): Directory bread(block 67) failed [ 266.240759][T11991] FAT-fs (loop8): Directory bread(block 66) failed [ 266.246377][T11993] FAT-fs (loop3): Directory bread(block 68) failed [ 266.259452][T11993] FAT-fs (loop3): Directory bread(block 69) failed [ 266.265815][T11991] FAT-fs (loop8): Directory bread(block 67) failed [ 266.266533][T11993] FAT-fs (loop3): Directory bread(block 70) failed [ 266.275806][T11991] FAT-fs (loop8): Directory bread(block 68) failed [ 266.279044][T11993] FAT-fs (loop3): Directory bread(block 71) failed [ 266.285619][T11991] FAT-fs (loop8): Directory bread(block 69) failed [ 266.292144][T11993] FAT-fs (loop3): Directory bread(block 72) failed [ 266.305344][T11991] FAT-fs (loop8): Directory bread(block 70) failed [ 266.312461][T11991] FAT-fs (loop8): Directory bread(block 71) failed [ 266.319142][T11991] FAT-fs (loop8): Directory bread(block 72) failed [ 266.321645][T11993] FAT-fs (loop3): Directory bread(block 73) failed [ 266.327198][T11991] FAT-fs (loop8): Directory bread(block 73) failed [ 266.356158][T11991] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.364768][T11991] FAT-fs (loop8): Filesystem has been set read-only [ 266.376104][T11991] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.385233][T11991] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.402585][T11993] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.411191][T11993] FAT-fs (loop3): Filesystem has been set read-only [ 266.434960][T11993] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.443596][T11993] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 266.580322][T12011] SELinux: ebitmap: truncated map [ 266.587558][T12011] SELinux: failed to load policy [ 266.623407][T12013] loop1: detected capacity change from 0 to 1024 [ 266.642037][T12019] loop7: detected capacity change from 0 to 1024 [ 266.648787][T12019] EXT4-fs: inline encryption not supported [ 266.661773][T12019] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.676499][T12013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.699678][T12030] veth4: entered allmulticast mode [ 266.719373][T12029] veth6: entered allmulticast mode [ 266.773902][T12029] netlink: 'syz.3.2512': attribute type 32 has an invalid length. [ 266.781804][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2512'. [ 266.801525][T11079] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.805879][T12029] bond2: option coupled_control: invalid value (17) [ 266.825731][T12037] loop6: detected capacity change from 0 to 1024 [ 266.836149][T12029] bond2 (unregistering): Released all slaves [ 266.847318][T12037] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.860648][T12041] smc: net device bond0 applied user defined pnetid SYZ0 [ 266.868872][T12041] smc: net device bond0 erased user defined pnetid SYZ0 [ 266.878213][T12030] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 266.878213][T12030] program syz.3.2512 not setting count and/or reply_len properly [ 266.931295][T12049] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 266.963919][T12049] SELinux: failed to load policy [ 266.971566][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.016766][T12055] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 267.115264][T12066] lo speed is unknown, defaulting to 1000 [ 267.118653][T12064] FAULT_INJECTION: forcing a failure. [ 267.118653][T12064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.134219][T12064] CPU: 1 UID: 0 PID: 12064 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.134290][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.134310][T12064] Call Trace: [ 267.134317][T12064] [ 267.134324][T12064] __dump_stack+0x1d/0x30 [ 267.134347][T12064] dump_stack_lvl+0x95/0xd0 [ 267.134443][T12064] dump_stack+0x15/0x1b [ 267.134461][T12064] should_fail_ex+0x265/0x280 [ 267.134511][T12064] should_fail+0xb/0x20 [ 267.134571][T12064] should_fail_usercopy+0x1a/0x20 [ 267.134594][T12064] copy_fpstate_to_sigframe+0x628/0x7d0 [ 267.134616][T12064] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 267.134697][T12064] ? x86_task_fpu+0x36/0x60 [ 267.134732][T12064] get_sigframe+0x34d/0x490 [ 267.134756][T12064] ? get_signal+0xdc7/0xf70 [ 267.134837][T12064] x64_setup_rt_frame+0xa8/0x580 [ 267.134862][T12064] arch_do_signal_or_restart+0x24c/0x450 [ 267.134959][T12064] exit_to_user_mode_loop+0x6a/0x740 [ 267.134978][T12064] ? __se_sys_ioctl+0x13a/0x140 [ 267.135011][T12064] do_syscall_64+0x1dd/0x2b0 [ 267.135110][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.135134][T12064] RIP: 0033:0x7f84c221f747 [ 267.135179][T12064] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 267.135199][T12064] RSP: 002b:00007f84c0c87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.135220][T12064] RAX: 0000000000000010 RBX: 00007f84c2475fa0 RCX: 00007f84c221f749 [ 267.135233][T12064] RDX: 0000200000000440 RSI: 00000000c0502100 RDI: 0000000000000003 [ 267.135329][T12064] RBP: 00007f84c0c87090 R08: 0000000000000000 R09: 0000000000000000 [ 267.135343][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.135356][T12064] R13: 00007f84c2476038 R14: 00007f84c2475fa0 R15: 00007ffc67d9fe08 [ 267.135374][T12064] [ 267.154701][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.237824][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2527'. [ 267.251632][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.393518][ T8971] net_ratelimit: 15 callbacks suppressed [ 267.393592][ T8971] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.396146][T12079] loop6: detected capacity change from 0 to 1024 [ 267.399344][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.410277][T12080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2527'. [ 267.423702][T12079] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2530: bad orphan inode 134217728 [ 267.441725][T12079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.471245][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.483962][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.503260][T12083] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 267.518923][T12083] SELinux: failed to load policy [ 267.553932][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.573161][T12066] netlink: 16 bytes leftover after parsing attributes in process `ÿ'. [ 267.601792][T12079] ================================================================== [ 267.609906][T12079] BUG: KCSAN: data-race in filemap_read / filemap_read [ 267.616766][T12079] [ 267.619091][T12079] read to 0xffff888104844528 of 8 bytes by task 12084 on cpu 0: [ 267.626721][T12079] filemap_read+0x6f/0xa00 [ 267.631146][T12079] generic_file_read_iter+0x79/0x330 [ 267.636450][T12079] ext4_file_read_iter+0x1cc/0x290 [ 267.641599][T12079] copy_splice_read+0x442/0x660 [ 267.646466][T12079] splice_direct_to_actor+0x290/0x680 [ 267.651847][T12079] do_splice_direct+0xda/0x150 [ 267.656621][T12079] do_sendfile+0x380/0x650 [ 267.661045][T12079] __x64_sys_sendfile64+0x105/0x150 [ 267.666242][T12079] x64_sys_call+0x2db1/0x3000 [ 267.670908][T12079] do_syscall_64+0xca/0x2b0 [ 267.675398][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.681272][T12079] [ 267.683591][T12079] write to 0xffff888104844528 of 8 bytes by task 12079 on cpu 1: [ 267.691303][T12079] filemap_read+0x974/0xa00 [ 267.695788][T12079] generic_file_read_iter+0x79/0x330 [ 267.701059][T12079] ext4_file_read_iter+0x1cc/0x290 [ 267.706157][T12079] copy_splice_read+0x442/0x660 [ 267.710990][T12079] splice_direct_to_actor+0x290/0x680 [ 267.716357][T12079] do_splice_direct+0xda/0x150 [ 267.721109][T12079] do_sendfile+0x380/0x650 [ 267.725512][T12079] __x64_sys_sendfile64+0x105/0x150 [ 267.730699][T12079] x64_sys_call+0x2db1/0x3000 [ 267.735364][T12079] do_syscall_64+0xca/0x2b0 [ 267.739849][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.745732][T12079] [ 267.748047][T12079] value changed: 0x00000000000002c2 -> 0x00000000000002c3 [ 267.755149][T12079] [ 267.757469][T12079] Reported by Kernel Concurrency Sanitizer on: [ 267.763607][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.6.2530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.773396][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.783449][T12079] ================================================================== [ 267.836806][T10177] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.110536][ T8304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.440804][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.448960][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.592829][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.071155][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.080560][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.590513][ T3481] net_ratelimit: 15 callbacks suppressed [ 272.590525][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.604420][ T3761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.760377][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.910665][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.550687][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.631230][ T3697] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.639550][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.792885][ T3481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.190671][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.670419][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog