last executing test programs: 1m58.127758128s ago: executing program 3 (id=294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804011, &(0x7f0000000380)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@sysvgroups}, {@data_journal}, {@data_ordered}, {@discard}, {@nogrpid}, {@debug}]}, 0xd, 0x615, &(0x7f0000000400)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) 1m57.948638614s ago: executing program 3 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd428d7341900de04, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1m57.781428918s ago: executing program 3 (id=301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) (async) syz_emit_ethernet(0xad, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004a18009f00680000f8019078ac141413ac1e000183077a7f000001440ccce3ac1414aa000000060000009078006800024e8f407185d0cae9e87d0ab338e80130c49f68e50000000000000000000000000000000000955b628dada3ce7825bf9b64c55decb8499ca19d5a7f0998c684b7eb2cd5b2b03bd37ddd0000b08ab580001eac813aa6c8b6199519d7820eaf4e4ab3b6f1d1137f23c833332b05235fbb"], 0x0) (async) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xe6eb, 0x56}}}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x8010) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x9, 0x5, 0x8, 0x6e, 0x3ff}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) (async, rerun: 64) r5 = socket$kcm(0x10, 0x5, 0x0) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)}, 0x4048084) (async) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) (async, rerun: 64) connect$unix(r4, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) syz_clone(0x25144011, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) ioprio_set$pid(0x2, 0x0, 0x4007) (async, rerun: 32) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (rerun: 32) unshare(0x28000600) quotactl_fd$Q_QUOTAOFF(r6, 0x3, 0x0, 0x0) 1m57.671680318s ago: executing program 3 (id=302): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nodiscard}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_continue}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)={0x144, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x4004000) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x40007e58, &(0x7f0000000180)={0x0, 0x356f, 0x84, 0x3, 0x288}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r6, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4208, r9) ptrace(0x10, r9) dup3(r6, r0, 0x0) tgkill(r9, 0x0, 0x41) dup3(r6, r2, 0x80000) r10 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) pwrite64(r10, 0x0, 0x0, 0x4fed0) sendfile(r10, r10, 0x0, 0xe3aa6ea) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='inet_sock_set_state\x00', r11}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) flistxattr(r1, &(0x7f0000000340)=""/3, 0x3) utimes(0x0, 0x0) 1m57.587515346s ago: executing program 3 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000002000100fffe0900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000064000000060a010400000000000000000100000008000b40000000000900010073797a30000000003c00048010000180080001006c6f6700040002802800018008000100666962001c00028008000140000000110800034000000005080002400000000114000000110001"], 0xec}}, 0x0) socket(0x2, 0x2, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) 1m57.359873376s ago: executing program 3 (id=308): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_clone3(&(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240), 0x0, {0x32}, &(0x7f0000000500)=""/127, 0xffffffffffffffb1, &(0x7f0000000680)=""/124, &(0x7f0000000580)}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) msgget(0x3, 0x410) 1m57.356413716s ago: executing program 32 (id=308): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_clone3(&(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240), 0x0, {0x32}, &(0x7f0000000500)=""/127, 0xffffffffffffffb1, &(0x7f0000000680)=""/124, &(0x7f0000000580)}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f0000000080)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$selinux_access(0xffffffffffffffff, 0x0, 0x56) msgget(0x3, 0x410) 1m51.342593998s ago: executing program 5 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rmdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x5, 0x10}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='-\xea\x00') sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) setresuid(0x0, 0xee00, 0x0) 1m51.333431399s ago: executing program 5 (id=431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m51.308535831s ago: executing program 5 (id=433): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10000, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x243, &(0x7f0000000400)="$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") socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x1, 0x10000, 0x0) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x243, &(0x7f0000000400)="$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") (async) 1m50.918857296s ago: executing program 5 (id=438): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x6, 0x1000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f6, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x4f0082, 0x132) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbf6f4aaaaaaaaaa0800452400eaed6800007f0190780a010102ffffffea0f0090781e160006"], 0x0) 1m50.571697226s ago: executing program 5 (id=444): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000001f00000071000400000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x4, 0x6c, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffff57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x24) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000c4000500000000000000000001000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYBLOB="8381c1d2b90612f1bda613737e553c8fe6cb84f97c8b9a7ecdcffcef0c0a4bff355fe50e4606491f69dd866c40e163907f6d6a47798e7e398175b9f666016f53c0809b0813fcee173df9b74a5cc4a54c75236130ca9d72fccf06b02925ccef28d665e0d81af25d6b398f5fc8441d7ec4d0fbbb8781806250bcf034d208c0ebb93ab3aaa6e4d74cb3a1d53ab157c055a7e296d55fb3db43a2c45c6e5f74436b674c6500fda00b07ecd2f79d4642464e4b6cb90ef40f2ea794cd5982c30823166035f56f29bd5602a04204c3ff15af076858906a7b9ce8140036862beecdc475736cedcb37e248", @ANYRES64, @ANYRESHEX=r0, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r3}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendto(r5, 0x0, 0x0, 0x20000000, &(0x7f0000000380)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='rpm_return_int\x00', r4, 0x0, 0x4}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000040), 0x4a) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000fddbdf252e0000f508000200f0e3f4ba8c3f3e919cd6fe9f1eccab552321ce8dfbbae6bb1d40cbb9fb0c97053e94d9be4fc6a7206e5c085ec53c84f8e1f79da59a36af426190438c7b4d500008f613497367c7c841fcbc7bfc", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000340)=0x3, 0x4) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1, 0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x28) 1m50.011307226s ago: executing program 5 (id=454): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810028, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664dc", 0x6b}, {&(0x7f0000000580)="d13759e3a3caecd56194b676399a0aece385daaca5b22e2bee44dc0a3dc474bbbb5b5378718fc79ab7b2c57766d9e5d180e547bf302185a179dc5f89cca79817d61f6b3ba9d95c305a65d17024d89db1d8189c03663147a48359e96c9b9a1d173085a6fba07a080d6cba2b97d42ad275a44b45e946c26ab2411cd6666740209fb31fc04e89aa0bb888fb6622a9a789dcc4a1c63ec105becacff5714297317bfde1125094802ebeddd548fcf24d1949d7043acfad8e59f9c48267830622f734aa15de0da688f3d86cd813424362a36fff5f54cfa69b201a0c7515eab51d6f6504b5e73606438ba939768103b7c9455306e9aa08fe39e42593b4d0467be94d", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x8, 0x6, 0x9}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 1m49.995227407s ago: executing program 33 (id=454): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810028, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664dc", 0x6b}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x8, 0x6, 0x9}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 38.489325165s ago: executing program 6 (id=1687): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 37.0731532s ago: executing program 6 (id=1691): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x810028, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664dc", 0x6b}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x8, 0x6, 0x9}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000100), 0x100000000000001a) umount2(&(0x7f0000000bc0)='./file0\x00', 0xb) 36.973772789s ago: executing program 6 (id=1695): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) lseek(0xffffffffffffffff, 0x5, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000006c0)={@none, 0x6, 0x7, 0x5, 0x5, 0xfb3f, "fb7af2913c0d1bc02bdcb15006b17074968984432c99171587e5da422a90618e6acd4260dd1e4e8092b9af24c27f406a85efc35e47e9165c99a7d8b03cc0bd28e7291a3fd5a40963a205ae1f9cbb57f2e1a2ef1ef79b39e376a9befc30c763caee6df4a82ac56fb8d6fc81e09689dd96f51eef5348cd6e794697189b518f4a83"}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r4, 0xc266c000) write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d1baa4bf84d35b7b32539bf4d74ab3078a401db937625ee323643a8719505c25622626aae", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x68) 36.819019852s ago: executing program 6 (id=1700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x6, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4f6, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x4f0082, 0x132) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbf6f4aaaaaaaaaa0800452400eaed6800007f0190780a010102ffffffea0f0090781e160006"], 0x0) 36.547021577s ago: executing program 6 (id=1704): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 36.203210517s ago: executing program 6 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x34000811) 36.202921127s ago: executing program 34 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x34000811) 32.266132325s ago: executing program 2 (id=1753): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x1, 0x4000804) (fail_nth: 6) 32.179466983s ago: executing program 2 (id=1756): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@fallback, r0, 0x36, 0x1c}, 0x20) 32.178976783s ago: executing program 2 (id=1757): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000691226000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 32.122721488s ago: executing program 2 (id=1760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) memfd_create(0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120c042, &(0x7f0000000840)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@noauto_da_alloc}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$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") syz_genetlink_get_family_id$gtp(0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) fallocate(0xffffffffffffffff, 0x49, 0x5, 0x5) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6], 0x20}}, 0x8080) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100790018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1200) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x4, 0x1, 0x0, 0xc16}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r7, r11, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) 31.811239515s ago: executing program 0 (id=1769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 31.796146507s ago: executing program 0 (id=1771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xc000000b}) epoll_pwait2(r4, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) signalfd4(r5, &(0x7f0000000300)={[0xfffffffffffffff9]}, 0x8, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd70000000000001000000080001000300000014000480050003000200000005000300050000000800020002000000"], 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x20000000) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1bd) close(r11) syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7750646f3dbef262d7bb1e1b629a2fde3dfe43ae15d1767c9a75586d345d00"/44, @ANYRESHEX=r10, @ANYBLOB=',\x00']) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESHEX=r8, @ANYRESDEC=r6, @ANYRES32=0x0], 0x3c}}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d010000000000000001000000020000000000000802000000000061"], 0x0, 0x4c}, 0x20) syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) pipe(&(0x7f0000000200)) memfd_create(&(0x7f0000000080), 0x0) 31.53265366s ago: executing program 0 (id=1780): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@fallback, r0, 0x36, 0x1c}, 0x20) 31.527117401s ago: executing program 0 (id=1783): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYRES32=r0], 0x78) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000800)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = syz_clone(0xf8ca500, 0x0, 0xfffffffffffffed0, 0x0, 0x0, 0x0) syz_open_procfs(r2, &(0x7f0000000000)='net/dev_mcast\x00') sched_rr_get_interval(r2, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x401}, 0x18) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x8001) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) r6 = socket$inet(0xa, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='thermal_power_devfreq_get_power\x00', r7, 0x0, 0x155}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') sendto$isdn(r8, &(0x7f0000000780)=ANY=[@ANYBLOB="080000000600000026c2e69ac3bff4bc99e3e1fe0deec2e486b652267cef680065e0b5c8d9b4641110f6df1b9e042f8172edcaf5c0557978c4613ad636a4dc5e89c476eb836ce161b32800da"], 0x4c, 0x0, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f0000000740)=r2, 0x12) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x138, 0x1f0, 0x290, 0x0, 0x1f0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 31.223560348s ago: executing program 0 (id=1790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6d, &(0x7f0000000000)=""/109, 0x40f00}, 0x94) r3 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x9, 0x6, 0x1, @local, @private2, 0x1, 0x20, 0x9, 0x7}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f0000000040)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='rxrpc_notify_socket\x00', r6, 0x0, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r5, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r5, 0x1) 31.222865067s ago: executing program 2 (id=1791): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004780)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0x0, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) (fail_nth: 3) 30.553689927s ago: executing program 0 (id=1796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 30.553228147s ago: executing program 35 (id=1796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 30.363915753s ago: executing program 2 (id=1799): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 30.363541314s ago: executing program 36 (id=1799): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x190da) 4.004627545s ago: executing program 1 (id=2188): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e0021000000000000c802c2b751"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x98, 0x24, 0xd0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x8, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x200, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fffffffffffffff}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.577366162s ago: executing program 4 (id=2201): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x5fff0000}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='xen_cpu_write_idt_entry\x00', r1, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x84, 0x30, 0x20, 0x0, 0x400000, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000300)=[{0x200000000006, 0x3, 0x2, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f00000008c0), 0x0, 0x7a6, &(0x7f00000011c0)="$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") r6 = openat(r5, &(0x7f0000000440)='./file1\x00', 0x200042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0]) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000000)=0x8000, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) truncate(&(0x7f0000000380)='./file0\x00', 0x800) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x3, r9, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x80, @loopback, 0x4}}}, 0xa0) socket$nl_generic(0x10, 0x3, 0x10) 1.964732775s ago: executing program 1 (id=2215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000007946b089ff18020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x4, 0x7f97, {{0xa, 0x4, 0x2, 0x2e, 0x28, 0x64, 0x0, 0x20, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@end, @end, @lsrr={0x83, 0x7, 0x34, [@broadcast]}, @lsrr={0x83, 0xb, 0xca, [@multicast1, @remote]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r4, 0x25, 0x8, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003800)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.9115316s ago: executing program 1 (id=2206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000040)=""/60, 0xdb, 0x40, 0x0, 0x0) 1.700066519s ago: executing program 1 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e1b604000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0x850, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x3, 0x6dc0, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x5, 0x8, 0x9, 0x0, 0x7fff, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffff9, 0x9, 0x8, 0x2, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x3, 0x8000, 0x2, 0x17, 0xffff, 0xb, 0x9, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0x200, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x400, 0x8, 0x7ce7c36c, 0x35, 0x1eb, 0x10001, 0xc, 0x5102, 0x6ce, 0x6, 0x3fe2fdbc, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x0, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0x2, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x80000006, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x5, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x1000002, 0xffe00000, 0x8, 0x7, 0x0, 0x5891, 0x3, 0x7, 0xb, 0x0, 0x400008, 0xb, 0xf, 0xfe, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x2, 0x5, 0x6, 0x3, 0x2, 0x4000001, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0xffff3dd1, 0x3, 0x7, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x40, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0xf, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x9, 0x101, 0x5, 0x6, 0xd, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x3, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xf, 0x7, 0x94a4, 0x0, 0x9, 0x7, 0x7, 0x80fa, 0x4, 0x4, 0xbc, 0x80000001, 0x1, 0xe, 0x2, 0x1, 0x6, 0xe588, 0x1, 0x1, 0x2, 0x3, 0x3, 0x10, 0x8000, 0x80000000, 0x4, 0xd06, 0x6, 0x7d2, 0xfffffffc, 0x8, 0x101, 0x2, 0xf93b, 0x9, 0x7, 0xa, 0x6, 0x6, 0x4c76, 0x81, 0x70a2, 0x9ef, 0x2, 0x3, 0x1, 0x0, 0x0, 0x40, 0xd, 0x4, 0xb99, 0x3, 0xfffffffa, 0x50, 0x32, 0x7, 0xb1, 0x9de, 0x100, 0xff, 0xfcdc, 0x9, 0x10000, 0x8, 0x81, 0xeba8, 0xfff, 0x5, 0x6, 0x9, 0x0, 0x4, 0xff, 0x40, 0x6, 0x401, 0x9, 0x6973, 0x0, 0x6, 0x7fffffff, 0xfff, 0x10, 0x6, 0x7, 0x4, 0x401, 0xe866, 0x38, 0x4, 0x4, 0x2000, 0x7bef, 0x0, 0x3, 0xffffffff, 0x783, 0x3, 0x1, 0x7, 0x800, 0x9, 0x8, 0x136, 0x8, 0x1, 0x800, 0x6, 0x0, 0x9, 0x7, 0x9, 0x7, 0x1, 0x101, 0x1, 0x80, 0x4, 0x7, 0x9, 0xde5, 0x3995, 0x2, 0x0, 0x6, 0xffffffff, 0x5, 0x2, 0x7, 0x7ff, 0xb, 0x8, 0x7, 0x54, 0x0, 0x0, 0x5, 0x81, 0x4, 0x2, 0xd, 0x6, 0x6, 0x400, 0xfffffffa, 0xc57d, 0x8, 0x6, 0xcd828db, 0xfff, 0x9, 0x864a, 0x8b3, 0x9, 0x7f, 0x3, 0x80, 0x200, 0x3, 0xfff, 0xd9a8, 0x4, 0xfca, 0x7, 0x2, 0x9, 0x40, 0x80000000, 0x9, 0xfab, 0x9, 0xf, 0x5c6, 0x7ad, 0xc3e, 0x1, 0xfffffffd, 0x2, 0x101, 0x6, 0x2, 0xfff, 0x80000000, 0xe006, 0x8, 0x8000, 0x10, 0x6, 0x8, 0x3, 0x9, 0x8, 0x0, 0x9, 0xe, 0xf, 0x562, 0x1, 0x2, 0x4, 0x7, 0x25590cd4, 0x8, 0x3686, 0x9, 0xfffffff8, 0x8618, 0x8f32, 0xc, 0x80, 0x200, 0x0, 0x714, 0x10, 0x200, 0xe, 0x5, 0x1, 0xfffffffc, 0x800, 0x48, 0xe8da, 0x7, 0x8, 0x8, 0x7fff, 0x401, 0x76aa0457, 0x401, 0x40000000, 0x2, 0xfffffff8, 0x3, 0xffff0001, 0xffff, 0x8, 0x8, 0x37f6, 0x8, 0x6e, 0x1dc3, 0xfffffc01, 0x2, 0x10001, 0x3, 0x4, 0x69f, 0xb8, 0x3ff, 0xcd, 0x1, 0x27e400, 0x17]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x8, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x12040, 0x35, 0x43a1bd76, 0x7, 0x20b, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x8, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f00000037c0)=""/4065, 0xfe1}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000680)=""/186, 0xba}, {&(0x7f0000000800)=""/184, 0xb8}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000b40)=""/192, 0xc0}, {&(0x7f0000000c00)=""/183, 0xb7}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x10002, 0x0, 0x0}) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r8, &(0x7f00000001c0)=""/155, 0x9b) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}}, 0x0) 1.611238947s ago: executing program 1 (id=2209): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x0, 0x0, 0xbd7, 0x0, 0x0, r3}]) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000018000085100000faff6e720a35ffff180000000000000000000000000000009500000000000000180100002020782500000000172020207b1af8ff00009b00000000000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000734dc84db6cc82460eb9a5ec6b77d4d97913ed91ec067cc8213871c5"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25110000004c0001800800040000000000060002003200000008000b00736970000800050001000000060001000200000008000800020000000a0006006c626c63720000000c000700060000002975a9ab08000600001000000c00038006000400050000000c00028006000b00000000000800040004000000"], 0x88}, 0x1, 0x0, 0x0, 0x4881}, 0x1) unshare(0x2040400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) socket$l2tp(0x2, 0x2, 0x73) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.323370912s ago: executing program 7 (id=2216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000580)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 1.287337736s ago: executing program 7 (id=2217): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x300, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) write$P9_RREAD(r3, &(0x7f0000000180)=ANY=[], 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x239f, &(0x7f0000000380)=0x0) r7 = eventfd2(0x5, 0x1) io_submit(r6, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r7, 0x0, 0x300, 0x800002, 0x0, 0x0, r7}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r7, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r7}]) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x88) gettid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r12, r11, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) 1.179440645s ago: executing program 4 (id=2220): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001600)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000001780)="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", 0x1000, 0x20040040, &(0x7f0000001640)={0x11, 0xf8, r6, 0x1, 0x40, 0x6, @remote}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000012c0)='net/netstat\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f00000016c0)={[{@delalloc}, {@grpid}, {@noblock_validity}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@init_itable}, {@user_xattr}, {@i_version}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x569, &(0x7f0000001080)="$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") preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/4095, 0xfff}], 0x1, 0x9, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00), 0x204400, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r8, r8, 0x34, 0x2000, r8}, 0x20) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022559b7d5d125bd7000fcdbdf251b000000080001007063690011000200303030303a30303a31302e300000000008000b000c000000080001007063690011000200303030303a30303a31302e300000000008000b"], 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) 1.142982978s ago: executing program 8 (id=2221): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000400)={0x0, 'wg1\x00', {0x1}, 0x4}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @dev={0xac, 0x14, 0x14, 0xf}}, 0xc) getsockopt$inet_mreqn(r1, 0x0, 0x4, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={r3}, &(0x7f0000000240)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x4, 0x800b, 0xf0, 0x4, r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000001c0)=0x6e) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000280), &(0x7f00000003c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0x97}, 0x18) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="90000000000801020000000000000100000000040600024080f30000050003008400000004000480090001"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(r6, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) 1.108371211s ago: executing program 8 (id=2222): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = gettid() fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0xffffffff, r3}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_create(0xb, &(0x7f0000000ac0)={0x0, 0x25, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000b00)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0x4f) close(r8) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='sys_enter\x00', r7}, 0x18) tee(r4, r5, 0x4e, 0x0) 999.001421ms ago: executing program 9 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x48) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5}, 0x18) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x3, {0x3, 0xff, 0x4}, 0xfd}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000), r7) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x18, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8004) socket$nl_rdma(0x10, 0x3, 0x14) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) getpid() r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r10, 0x3305) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376", @ANYRESDEC], 0xf4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 983.145342ms ago: executing program 9 (id=2225): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7", @ANYRES64=r7], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=r5, @ANYBLOB="310000001400", @ANYRES32=r2, @ANYBLOB="e1138733281ae6af7246c023d0b72501724243d2222afd3d9185f19bc1867576b3eba9e94e8bd56cc4dc8f2295ba7c65d6f3658ecebfb81116199e40d97c34507d4753933d01c4ae4467783bc9d9ef87842c18566e5b6ebbfbb54371532f91f30c53036b588e2bc240f6", @ANYRES64=r7], 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001cc0)=@newqdisc={0x434, 0x24, 0x4ee4e6a52ff56541, 0x30bd27, 0x4000005, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x6, 0x6b16, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7, 0x7, 0x25, 0x0, 0x80, 0x9, 0x30, 0x8, 0x81, 0x9, 0x2, 0x8, 0x40, 0x8, 0x80000001, 0x608cccb7, 0x10000400, 0x7a2, 0x5, 0x400, 0x3, 0xffffeffa, 0x6, 0x6, 0xaf8, 0x4, 0x3, 0x3ff, 0x9, 0x2, 0x3, 0x10001, 0x1, 0x5, 0x10001, 0x3, 0x59, 0x3, 0xd54e, 0x40, 0x6, 0xd, 0x0, 0x28, 0x9, 0xa4800000, 0x1, 0xa0, 0x1, 0x7, 0x4, 0x1, 0x7, 0x4, 0xff, 0x5, 0x7, 0x3ff, 0x3, 0xf6a5, 0x7fffffff, 0x8, 0x2, 0xcff, 0xfffffacf, 0x0, 0x4, 0x10001, 0xc, 0x1, 0x2, 0x8002, 0x5, 0x5, 0x5, 0xfffffffb, 0x5, 0x0, 0x4, 0x4edcaeea, 0x2, 0xe, 0xe, 0xfff, 0x4, 0x496c01fc, 0x4, 0x7fffffff, 0x9, 0x8, 0x12, 0x9, 0x80000001, 0x325b, 0x7, 0x0, 0x80000006, 0x2, 0x3, 0x5, 0x1, 0x18001, 0x6a9, 0x94, 0x2, 0x9, 0x7, 0x3, 0x5, 0x80, 0x1, 0xffffffff, 0x4, 0x0, 0x4, 0x3, 0x4, 0x5, 0xa993, 0x202, 0x6847adf1, 0x6, 0x9, 0x81, 0x7, 0x5, 0x5, 0x7fffffff, 0x8, 0xc, 0xd, 0x2, 0x1, 0x7fffffff, 0x8, 0x1, 0x8, 0x8, 0x91e, 0x4, 0xe, 0x8001, 0x20008, 0x40000, 0x0, 0x9, 0xd, 0x5, 0x8, 0x100, 0x9a0, 0x0, 0xb, 0x2, 0x9, 0x6, 0x3ff, 0x6, 0x1, 0xf682, 0x40, 0x637, 0x8, 0x3, 0x1fffe, 0xfffdfffe, 0x5, 0x1, 0xfffffff8, 0xa608, 0x23972b48, 0x7, 0x2, 0x0, 0x0, 0x4, 0xa, 0x5, 0x6, 0x10, 0x5, 0x5, 0x10, 0x41, 0x2, 0x76, 0x3, 0xfffffffa, 0x7, 0x2, 0x20004, 0x40, 0x9, 0x6, 0x2ef, 0xfffffffb, 0xcf30, 0x8, 0x4, 0xffffff8a, 0x0, 0x4, 0x80000000, 0x4, 0x2, 0x0, 0x2, 0x6, 0xfff, 0x4, 0x1, 0x40, 0x5, 0x9, 0x5, 0x8, 0x80000000, 0x0, 0x3, 0xeff, 0x6, 0x8001, 0x8, 0xc, 0x3, 0x1, 0x0, 0x5, 0x8, 0x6c67, 0x800, 0xffffff59, 0x9, 0x0, 0x303, 0x7, 0x1, 0x6, 0x6, 0x6, 0x7, 0x4, 0xc, 0x42, 0x3, 0x5f, 0x5fa, 0x10001]}]}}]}, 0x434}}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x6, 0x1, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x1, 0x1, 0x1000, 0x3}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x138, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$selinux_validatetrans(r9, 0x0, 0x6d) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r10 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22b81) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f0000000040)=ANY=[]) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274000040"], 0x60}}, 0x0) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r12, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x8b}], 0x2, 0x0, 0x0) 937.821536ms ago: executing program 9 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x400) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) setresgid(0xee00, 0xee01, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x9, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sysinfo(&(0x7f0000000540)=""/145) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000640)) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x0, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='!pu<20\t||') 832.121156ms ago: executing program 9 (id=2227): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000240)=0x3, 0x4) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="02030003110000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000010000000070c0000008005000500000000000a0000000000000000000000aaff0100000000000000000000000000000000000f7a3234298a588830fcf22440e193a4d5fe9a219e79e230734c3bd07aa6405b4d4532e993ec518b584ddc38c71cbf02abf8a0e3c1ab3319b1fbb2b59def03967981520615041da8bc6172"], 0x88}, 0x1, 0x7}, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./bus/../file0\x00', 0x800, 0x1) 687.781339ms ago: executing program 9 (id=2228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 686.956879ms ago: executing program 1 (id=2229): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() splice(r0, 0x0, r1, 0x0, 0x7, 0x100000000000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_robust_list(0x0, 0x0) 663.136561ms ago: executing program 9 (id=2230): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8005}, 0x18) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x16, 0x4, 0x8, 0xffffffff}]}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r8, 0x0, 0x7ff, 0xa) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="90a656c80f37677dc7be5a81d3f0a6983e4ac34ebc454e5f96e8cccd26f260939209198bc5fc0c00e741"], 0x48) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000f7ffffff000000000004000018110000", @ANYBLOB="bfab7474df72418f05b7b32d1264bebdba13ceacdb6015c523e9a160a55af16b7f2e095da52b3a9addf44021bfa90249", @ANYRES8=r7, @ANYRES32=r5, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000010000660800000000000018000000000000000000000a000000009500000000000000360a41c500000000180100002020782500000000002020207b1af8ff0000c87497da2c416202000007010000f8ffffffb7020000080000b2699fc7fd95a564b64200b50a0000000000007700000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r11, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000580)=""/116, &(0x7f0000000400)=0x74) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x8c}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x93}, @NFTA_EXTHDR_FLAGS={0x8}]}}}]}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000d83190f007000000000000bfa200000000000007020000f8ffffffb703000008000000b704002339bfe49cc5bc9d552ffec75d4000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x10, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x4) 520.654233ms ago: executing program 4 (id=2231): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0xd2, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x25, 0x1, 0x1, 0x25dfdbff, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x11, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840919fdc5a"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) unshare(0x62040200) 381.721706ms ago: executing program 7 (id=2232): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r4 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 306.232172ms ago: executing program 7 (id=2233): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000002680)=[&(0x7f00000003c0)={0x0, 0x0, 0xa0, 0x3, 0x0, r1, &(0x7f0000000200)='p', 0x1, 0x600, 0x0, 0x2}]) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88536, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xffffffffffffff7f}, 0x120, 0x10000, 0x4, 0x9, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$hidraw(0x0, 0x0, 0x81) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffc2}], 0x1, 0x7800, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000100)={@local, @empty}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x59) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) mq_open(&(0x7f0000000040)='erspan0\x00', 0x1, 0x0, &(0x7f0000000080)={0x0, 0x1, 0xbab}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000989497", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a0084f5d621fe735c149bb8f92f5481e1e106ee8d35dd85da134729ff"], 0x24}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents(r10, &(0x7f0000000f40)=""/243, 0xf3) 223.88558ms ago: executing program 8 (id=2234): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r4, 0xc266c000) write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d1baa4bf84d35b7b32539bf4d74ab3078a401db937625ee323643a8719505c25622626aae", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x68) 162.556245ms ago: executing program 8 (id=2235): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x1cc0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x1, 0x0) 160.241665ms ago: executing program 4 (id=2236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000e1b604000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0x850, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x83c, 0x1, [@m_police={0x838, 0x1, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0x81, 0x1, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x3, 0x6dc0, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x5, 0x8, 0x9, 0x0, 0x7fff, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xfffffff9, 0x9, 0x8, 0x2, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x3, 0x8000, 0x2, 0x17, 0xffff, 0xb, 0x9, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0x200, 0x8e, 0x6, 0x3, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x400, 0x8, 0x7ce7c36c, 0x35, 0x1eb, 0x10001, 0xc, 0x5102, 0x6ce, 0x6, 0x3fe2fdbc, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x0, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0x2, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x80000006, 0x7, 0x1ff, 0x6, 0xfffff77b, 0x3, 0xffffffff, 0xfffff400, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x5, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x1000002, 0xffe00000, 0x8, 0x7, 0x0, 0x5891, 0x3, 0x7, 0xb, 0x0, 0x400008, 0xb, 0xf, 0xfe, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x2, 0x5, 0x6, 0x3, 0x2, 0x4000001, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0xffff3dd1, 0x3, 0x7, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x0, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x40, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0xf, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x9, 0x101, 0x5, 0x6, 0xd, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x3, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xf, 0x7, 0x94a4, 0x0, 0x9, 0x7, 0x7, 0x80fa, 0x4, 0x4, 0xbc, 0x80000001, 0x1, 0xe, 0x2, 0x1, 0x6, 0xe588, 0x1, 0x1, 0x2, 0x3, 0x3, 0x10, 0x8000, 0x80000000, 0x4, 0xd06, 0x6, 0x7d2, 0xfffffffc, 0x8, 0x101, 0x2, 0xf93b, 0x9, 0x7, 0xa, 0x6, 0x6, 0x4c76, 0x81, 0x70a2, 0x9ef, 0x2, 0x3, 0x1, 0x0, 0x0, 0x40, 0xd, 0x4, 0xb99, 0x3, 0xfffffffa, 0x50, 0x32, 0x7, 0xb1, 0x9de, 0x100, 0xff, 0xfcdc, 0x9, 0x10000, 0x8, 0x81, 0xeba8, 0xfff, 0x5, 0x6, 0x9, 0x0, 0x4, 0xff, 0x40, 0x6, 0x401, 0x9, 0x6973, 0x0, 0x6, 0x7fffffff, 0xfff, 0x10, 0x6, 0x7, 0x4, 0x401, 0xe866, 0x38, 0x4, 0x4, 0x2000, 0x7bef, 0x0, 0x3, 0xffffffff, 0x783, 0x3, 0x1, 0x7, 0x800, 0x9, 0x8, 0x136, 0x8, 0x1, 0x800, 0x6, 0x0, 0x9, 0x7, 0x9, 0x7, 0x1, 0x101, 0x1, 0x80, 0x4, 0x7, 0x9, 0xde5, 0x3995, 0x2, 0x0, 0x6, 0xffffffff, 0x5, 0x2, 0x7, 0x7ff, 0xb, 0x8, 0x7, 0x54, 0x0, 0x0, 0x5, 0x81, 0x4, 0x2, 0xd, 0x6, 0x6, 0x400, 0xfffffffa, 0xc57d, 0x8, 0x6, 0xcd828db, 0xfff, 0x9, 0x864a, 0x8b3, 0x9, 0x7f, 0x3, 0x80, 0x200, 0x3, 0xfff, 0xd9a8, 0x4, 0xfca, 0x7, 0x2, 0x9, 0x40, 0x80000000, 0x9, 0xfab, 0x9, 0xf, 0x5c6, 0x7ad, 0xc3e, 0x1, 0xfffffffd, 0x2, 0x101, 0x6, 0x2, 0xfff, 0x80000000, 0xe006, 0x8, 0x8000, 0x10, 0x6, 0x8, 0x3, 0x9, 0x8, 0x0, 0x9, 0xe, 0xf, 0x562, 0x1, 0x2, 0x4, 0x7, 0x25590cd4, 0x8, 0x3686, 0x9, 0xfffffff8, 0x8618, 0x8f32, 0xc, 0x80, 0x200, 0x0, 0x714, 0x10, 0x200, 0xe, 0x5, 0x1, 0xfffffffc, 0x800, 0x48, 0xe8da, 0x7, 0x8, 0x8, 0x7fff, 0x401, 0x76aa0457, 0x401, 0x40000000, 0x2, 0xfffffff8, 0x3, 0xffff0001, 0xffff, 0x8, 0x8, 0x37f6, 0x8, 0x6e, 0x1dc3, 0xfffffc01, 0x2, 0x10001, 0x3, 0x4, 0x69f, 0xb8, 0x3ff, 0xcd, 0x1, 0x27e400, 0x17]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x850}, 0x1, 0x0, 0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x8, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x12040, 0x35, 0x43a1bd76, 0x7, 0x20b, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r6, &(0x7f00000001c0)=""/155, 0x9b) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000011143dcf0000000000000000080001000000000008004b0028"], 0x28}}, 0x0) 125.824158ms ago: executing program 4 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r2}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, 0x0, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 125.022058ms ago: executing program 8 (id=2238): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x518, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xed}, 0x4c58, 0xd, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r3, 0xc266c000) write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3d1baa4bf84d35b7b32539bf4d74ab3078a401db937625ee323643a8719505c25622626aae", @ANYRESOCT=r0, @ANYRESDEC=r0], 0x68) 106.97277ms ago: executing program 4 (id=2239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) close(0xffffffffffffffff) 33.860036ms ago: executing program 8 (id=2240): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00", 0x12) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r4, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r3, 0x0, 0x0, 0xbd7, 0x0, 0x0, r3}]) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000018000085100000faff6e720a35ffff180000000000000000000000000000009500000000000000180100002020782500000000172020207b1af8ff00009b00000000000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000734dc84db6cc82460eb9a5ec6b77d4d97913ed91ec067cc8213871c5df54000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf25110000004c0001800800040000000000060002003200000008000b00736970000800050001000000060001000200000008000800020000000a0006006c626c63720000000c000700060000002975a9ab08000600001000000c00038006000400050000000c00028006000b00000000000800040004000000"], 0x88}, 0x1, 0x0, 0x0, 0x4881}, 0x1) unshare(0x2040400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) socket$l2tp(0x2, 0x2, 0x73) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r7, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.419196ms ago: executing program 7 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)={0x14, r3, 0x301, 0x1, 0x0, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}}, 0x24}}, 0x20000004) 0s ago: executing program 7 (id=2242): syz_read_part_table(0x5ac, &(0x7f00000005c0)="$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") kernel console output (not intermixed with test programs): acity change from 0 to 512 [ 140.145512][ T8437] EXT4-fs (loop1): Remounting filesystem read-only [ 140.152308][ T8437] EXT4-fs (loop1): 1 truncate cleaned up [ 140.158957][ T995] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.169571][ T995] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.181476][ T995] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.192527][ T8437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.219168][ T8448] FAULT_INJECTION: forcing a failure. [ 140.219168][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 140.231996][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.4.1686 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.232029][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.232075][ T8448] Call Trace: [ 140.232083][ T8448] [ 140.232092][ T8448] __dump_stack+0x1d/0x30 [ 140.232122][ T8448] dump_stack_lvl+0x95/0xd0 [ 140.232146][ T8448] dump_stack+0x15/0x1b [ 140.232168][ T8448] should_fail_ex+0x265/0x280 [ 140.232270][ T8448] should_failslab+0x8c/0xb0 [ 140.232295][ T8448] kmem_cache_alloc_noprof+0x69/0x4b0 [ 140.232319][ T8448] ? posix_lock_inode+0x218/0x2380 [ 140.232344][ T8448] posix_lock_inode+0x218/0x2380 [ 140.232378][ T8448] ? file_has_perm+0x359/0x3a0 [ 140.232424][ T8448] fcntl_setlk+0x61f/0x950 [ 140.232457][ T8448] do_fcntl+0x6a1/0xf60 [ 140.232491][ T8448] __se_sys_fcntl+0xb1/0x120 [ 140.232594][ T8448] __x64_sys_fcntl+0x43/0x50 [ 140.232624][ T8448] x64_sys_call+0x2d6f/0x3000 [ 140.232651][ T8448] do_syscall_64+0xca/0x2b0 [ 140.232687][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.232781][ T8448] RIP: 0033:0x7f9da806f749 [ 140.232800][ T8448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.232822][ T8448] RSP: 002b:00007f9da6ad7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 140.232845][ T8448] RAX: ffffffffffffffda RBX: 00007f9da82c5fa0 RCX: 00007f9da806f749 [ 140.232867][ T8448] RDX: 0000200000000000 RSI: 0000000000000026 RDI: 0000000000000005 [ 140.232945][ T8448] RBP: 00007f9da6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.232959][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.232972][ T8448] R13: 00007f9da82c6038 R14: 00007f9da82c5fa0 R15: 00007ffee0efa628 [ 140.232994][ T8448] [ 140.233260][ T8442] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 140.420330][ T8442] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.421027][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.430012][ T8442] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.1684: corrupted inode contents [ 140.447955][ T8442] EXT4-fs (loop2): Remounting filesystem read-only [ 140.454576][ T8442] EXT4-fs (loop2): 1 truncate cleaned up [ 140.460513][ T899] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.471159][ T899] __quota_error: 1938 callbacks suppressed [ 140.471192][ T899] Quota error (device loop2): write_blk: dquota write failed [ 140.484514][ T899] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 140.494697][ T899] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 140.505292][ T899] Quota error (device loop2): write_blk: dquota write failed [ 140.512720][ T899] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 140.587945][ T899] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.598239][ T899] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 141.563195][ T899] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 141.575784][ T8442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.588961][ T29] audit: type=1326 audit(1767619892.103:28196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f183181df90 code=0x7ffc0000 [ 141.641587][ T29] audit: type=1326 audit(1767619892.123:28197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f183181e497 code=0x7ffc0000 [ 141.665224][ T29] audit: type=1326 audit(1767619892.123:28198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f183181df90 code=0x7ffc0000 [ 141.689010][ T29] audit: type=1326 audit(1767619892.123:28199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8438 comm="syz.2.1684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f183181f749 code=0x7ffc0000 [ 141.791893][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.827424][ T8466] loop6: detected capacity change from 0 to 1764 [ 141.861658][ T8462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.894864][ T8468] lo speed is unknown, defaulting to 1000 [ 141.911483][ T8462] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.957607][ T8468] lo speed is unknown, defaulting to 1000 [ 142.003282][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.048550][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.069383][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.099377][ T8486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.118003][ T8486] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.322702][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.349240][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.367296][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.395395][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.409442][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.425372][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.440109][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.451774][ T8509] lo speed is unknown, defaulting to 1000 [ 142.455105][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.476301][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.481331][ T8511] __nla_validate_parse: 17 callbacks suppressed [ 142.481384][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1707'. [ 142.490887][ T4912] EXT4-fs error (device loop6): ext4_empty_dir:3078: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 142.543444][ T8509] lo speed is unknown, defaulting to 1000 [ 142.572317][ T8513] netlink: 'syz.4.1708': attribute type 3 has an invalid length. [ 142.604254][ T6053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.626673][ T6105] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.679916][ T6105] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.740805][ T8526] set_capacity_and_notify: 2 callbacks suppressed [ 142.740899][ T8526] loop2: detected capacity change from 0 to 1024 [ 142.755525][ T8526] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.762088][ T6105] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.780185][ T8526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.841007][ T6105] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.862855][ T8528] SELinux: failed to load policy [ 142.880356][ T8523] lo speed is unknown, defaulting to 1000 [ 142.920446][ T8523] lo speed is unknown, defaulting to 1000 [ 142.926455][ T6105] bridge_slave_1: left allmulticast mode [ 142.932240][ T6105] bridge_slave_1: left promiscuous mode [ 142.938026][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.945884][ T6105] bridge_slave_0: left allmulticast mode [ 142.951624][ T6105] bridge_slave_0: left promiscuous mode [ 142.957393][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.064142][ T6105] dvmrp8 (unregistering): left allmulticast mode [ 143.121249][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.133256][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.146043][ T6105] bond0 (unregistering): Released all slaves [ 143.161300][ T6105] bond1 (unregistering): Released all slaves [ 143.216623][ T6105] tipc: Left network mode [ 143.248648][ T8523] chnl_net:caif_netlink_parms(): no params data found [ 143.271219][ T6105] hsr_slave_0: left promiscuous mode [ 143.277094][ T6105] hsr_slave_1: left promiscuous mode [ 143.282873][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.290559][ T6105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.303271][ T6105] veth1_macvtap: left promiscuous mode [ 143.309035][ T6105] veth0_macvtap: left promiscuous mode [ 143.314620][ T6105] veth1_vlan: left promiscuous mode [ 143.320064][ T6105] veth0_vlan: left promiscuous mode [ 143.411569][ T6105] team0 (unregistering): Port device team_slave_1 removed [ 143.427117][ T6105] team0 (unregistering): Port device team_slave_0 removed [ 143.475857][ T8555] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 143.497542][ T8554] netlink: 'syz.0.1727': attribute type 3 has an invalid length. [ 143.539775][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.546890][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.567255][ T8539] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 143.570094][ T8523] bridge_slave_0: entered allmulticast mode [ 143.661184][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.673380][ T8523] bridge_slave_0: entered promiscuous mode [ 143.689557][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.698853][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.725001][ T8566] loop2: detected capacity change from 0 to 1024 [ 143.732618][ T8566] EXT4-fs: inline encryption not supported [ 143.738318][ T8523] bridge_slave_1: entered allmulticast mode [ 143.738684][ T8566] EXT4-fs: Ignoring removed orlov option [ 143.750832][ T8566] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 143.763273][ T8523] bridge_slave_1: entered promiscuous mode [ 143.777258][ T8562] SELinux: failed to load policy [ 143.809550][ T8523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.818725][ T8569] netlink: 'syz.1.1721': attribute type 3 has an invalid length. [ 143.828844][ T8523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.853461][ T8523] team0: Port device team_slave_0 added [ 143.873118][ T8523] team0: Port device team_slave_1 added [ 143.891687][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.898814][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.925107][ T8523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.968844][ T8523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.975885][ T8523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.001960][ T8523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.016631][ T8566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 144.077822][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.086923][ T8566] System zones: 0-1, 3-12 [ 144.092085][ T8566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.104609][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.146421][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.202659][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 144.215061][ T8523] hsr_slave_0: entered promiscuous mode [ 144.223260][ T8523] hsr_slave_1: entered promiscuous mode [ 144.229727][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 144.239294][ T8523] debugfs: 'hsr0' already exists in 'hsr' [ 144.245092][ T8523] Cannot create hsr debugfs directory [ 144.314453][ T8582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1726'. [ 144.324136][ T8582] lo: Caught tx_queue_len zero misconfig [ 144.330599][ T8582] program syz.2.1726 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.377344][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1728'. [ 144.435135][ T8523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 144.444369][ T8523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.458612][ T8523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.479122][ T8523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.520749][ T8590] lo speed is unknown, defaulting to 1000 [ 144.565455][ T8590] lo speed is unknown, defaulting to 1000 [ 144.580037][ T8600] loop1: detected capacity change from 0 to 128 [ 144.599232][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.599232][ T8600] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 144.619329][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.619329][ T8600] loop1: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 144.620981][ T8523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.634366][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.634366][ T8600] loop1: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 144.653254][ T8600] Buffer I/O error on dev loop1, logical block 75, lost async page write [ 144.664468][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.664468][ T8600] loop1: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 144.678307][ T8600] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 144.700450][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.700450][ T8600] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 144.714818][ T8523] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.744852][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.752017][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.787163][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.794398][ T6121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.804145][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.804145][ T8600] loop1: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 144.818180][ T8600] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 144.829276][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.829276][ T8600] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 144.843307][ T8600] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 144.876634][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.876634][ T8600] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 144.879854][ T8523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.900503][ T8523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.935843][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.935843][ T8600] loop1: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 144.949984][ T8600] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 144.998734][ T8600] syz.1.1731: attempt to access beyond end of device [ 144.998734][ T8600] loop1: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 145.012847][ T8600] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 145.078794][ T8600] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 145.087383][ T8600] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 145.113293][ T8523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.148767][ T8600] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 145.194139][ T8600] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 145.368887][ T8523] veth0_vlan: entered promiscuous mode [ 145.399900][ T8523] veth1_vlan: entered promiscuous mode [ 145.438465][ T8523] veth0_macvtap: entered promiscuous mode [ 145.453418][ T8523] veth1_macvtap: entered promiscuous mode [ 145.484560][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.535784][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1737'. [ 145.548143][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 145.548161][ T29] audit: type=1326 audit(1767619896.063:28573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.586867][ T29] audit: type=1326 audit(1767619896.093:28574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.609937][ T29] audit: type=1326 audit(1767619896.093:28575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.633079][ T29] audit: type=1326 audit(1767619896.093:28576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.656087][ T29] audit: type=1326 audit(1767619896.093:28577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.662393][ T8523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.679175][ T29] audit: type=1326 audit(1767619896.093:28578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.679212][ T29] audit: type=1326 audit(1767619896.093:28579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.732474][ T29] audit: type=1326 audit(1767619896.093:28580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.755499][ T29] audit: type=1326 audit(1767619896.093:28581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.778623][ T29] audit: type=1326 audit(1767619896.093:28582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8639 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7a49f749 code=0x7ffc0000 [ 145.806492][ T6098] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.865700][ T6098] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.876803][ T6121] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.886215][ T6121] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.990188][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.011159][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.075540][ T8657] SELinux: failed to load policy [ 146.353970][ T8665] loop7: detected capacity change from 0 to 512 [ 146.409773][ T8665] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 146.418166][ T8665] EXT4-fs (loop7): orphan cleanup on readonly fs [ 146.437426][ T8670] netlink: 'syz.0.1748': attribute type 2 has an invalid length. [ 146.445326][ T8670] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 146.454910][ T8665] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.1745: corrupted inode contents [ 146.468316][ T8665] EXT4-fs (loop7): Remounting filesystem read-only [ 146.474979][ T8665] EXT4-fs (loop7): 1 truncate cleaned up [ 146.480855][ T6121] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.491662][ T6121] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 146.534756][ T6121] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 146.548068][ T8665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.625008][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.692861][ T8698] loop7: detected capacity change from 0 to 1764 [ 146.746762][ T8708] loop1: detected capacity change from 0 to 164 [ 146.791563][ T8711] loop2: detected capacity change from 0 to 1024 [ 146.801259][ T8711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 146.809517][ T8711] System zones: 0-1, 3-36 [ 146.872507][ T8711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.019493][ T8739] SELinux: policydb magic number 0x4c5047 does not match expected magic number 0xf97cff8c [ 147.044809][ T8739] SELinux: failed to load policy [ 147.080859][ T8737] SELinux: failed to load policy [ 147.171190][ T8765] 9pnet_fd: Insufficient options for proto=fd [ 147.191954][ T8764] loop1: detected capacity change from 0 to 4096 [ 147.200182][ T8764] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.212948][ T8764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.232659][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1778'. [ 147.233092][ T8764] tipc: Can't bind to reserved service type 2 [ 147.250303][ T8769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.267891][ T8769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.296832][ T8773] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.312989][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.515884][ T8789] SELinux: failed to load policy [ 147.539003][ T8779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 147.605132][ T3318] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 147.622235][ T8803] lo speed is unknown, defaulting to 1000 [ 147.637857][ T3318] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 147.693700][ T8803] lo speed is unknown, defaulting to 1000 [ 147.768856][ T8815] FAULT_INJECTION: forcing a failure. [ 147.768856][ T8815] name failslab, interval 1, probability 0, space 0, times 0 [ 147.781637][ T8815] CPU: 1 UID: 0 PID: 8815 Comm: syz.4.1793 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.781673][ T8815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.781726][ T8815] Call Trace: [ 147.781735][ T8815] [ 147.781779][ T8815] __dump_stack+0x1d/0x30 [ 147.781843][ T8815] dump_stack_lvl+0x95/0xd0 [ 147.781871][ T8815] dump_stack+0x15/0x1b [ 147.781897][ T8815] should_fail_ex+0x265/0x280 [ 147.781925][ T8815] should_failslab+0x8c/0xb0 [ 147.781953][ T8815] __kmalloc_noprof+0xb9/0x5a0 [ 147.782044][ T8815] ? taprio_init+0x1d3/0x5f0 [ 147.782145][ T8815] ? __pfx_advance_sched+0x10/0x10 [ 147.782173][ T8815] taprio_init+0x1d3/0x5f0 [ 147.782266][ T8815] ? qdisc_alloc+0x397/0x410 [ 147.782299][ T8815] ? __pfx_taprio_init+0x10/0x10 [ 147.782412][ T8815] qdisc_create+0x591/0x9e0 [ 147.782442][ T8815] tc_modify_qdisc+0xf9c/0x1480 [ 147.782534][ T8815] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 147.782579][ T8815] rtnetlink_rcv_msg+0x65a/0x6d0 [ 147.782627][ T8815] netlink_rcv_skb+0x123/0x220 [ 147.782668][ T8815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.782716][ T8815] rtnetlink_rcv+0x1c/0x30 [ 147.782752][ T8815] netlink_unicast+0x5c0/0x690 [ 147.782782][ T8815] netlink_sendmsg+0x58b/0x6b0 [ 147.782824][ T8815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.782864][ T8815] __sock_sendmsg+0x145/0x180 [ 147.782902][ T8815] ____sys_sendmsg+0x31e/0x4a0 [ 147.782948][ T8815] ___sys_sendmsg+0x17b/0x1d0 [ 147.782997][ T8815] __x64_sys_sendmsg+0xd4/0x160 [ 147.783102][ T8815] x64_sys_call+0x17ba/0x3000 [ 147.783125][ T8815] do_syscall_64+0xca/0x2b0 [ 147.783182][ T8815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.783201][ T8815] RIP: 0033:0x7f9da806f749 [ 147.783222][ T8815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.783276][ T8815] RSP: 002b:00007f9da6ad7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.783295][ T8815] RAX: ffffffffffffffda RBX: 00007f9da82c5fa0 RCX: 00007f9da806f749 [ 147.783307][ T8815] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000008 [ 147.783370][ T8815] RBP: 00007f9da6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.783380][ T8815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.783391][ T8815] R13: 00007f9da82c6038 R14: 00007f9da82c5fa0 R15: 00007ffee0efa628 [ 147.783409][ T8815] [ 148.042947][ T4157] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.080529][ T8820] loop4: detected capacity change from 0 to 512 [ 148.089848][ T8820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.102822][ T8820] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.288998][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.399046][ T6089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.502106][ T6089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.547063][ T8828] lo speed is unknown, defaulting to 1000 [ 148.570936][ T6089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.608551][ T8844] program syz.1.1802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.631923][ T8828] lo speed is unknown, defaulting to 1000 [ 148.640173][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1804'. [ 148.663741][ T6089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.698155][ T8841] lo speed is unknown, defaulting to 1000 [ 148.774078][ T8841] lo speed is unknown, defaulting to 1000 [ 148.828363][ T6089] bridge_slave_1: left allmulticast mode [ 148.834266][ T6089] bridge_slave_1: left promiscuous mode [ 148.840138][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.850277][ T6089] bridge_slave_0: left allmulticast mode [ 148.855966][ T6089] bridge_slave_0: left promiscuous mode [ 148.861765][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.007372][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.025864][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.040308][ T6089] bond0 (unregistering): Released all slaves [ 149.049172][ T8828] chnl_net:caif_netlink_parms(): no params data found [ 149.064841][ T8773] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.137655][ T8888] loop1: detected capacity change from 0 to 512 [ 149.154402][ T8888] EXT4-fs (loop1): 1 truncate cleaned up [ 149.160624][ T8888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.176958][ T8888] FAULT_INJECTION: forcing a failure. [ 149.176958][ T8888] name failslab, interval 1, probability 0, space 0, times 0 [ 149.189920][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.1.1813 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.190003][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.190020][ T8888] Call Trace: [ 149.190029][ T8888] [ 149.190039][ T8888] __dump_stack+0x1d/0x30 [ 149.190067][ T8888] dump_stack_lvl+0x95/0xd0 [ 149.190106][ T8888] dump_stack+0x15/0x1b [ 149.190132][ T8888] should_fail_ex+0x265/0x280 [ 149.190158][ T8888] should_failslab+0x8c/0xb0 [ 149.190185][ T8888] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 149.190240][ T8888] ? __d_alloc+0x37/0x340 [ 149.190349][ T8888] __d_alloc+0x37/0x340 [ 149.190380][ T8888] ? selinux_inode_permission+0x6be/0x7c0 [ 149.190422][ T8888] d_alloc_parallel+0x54/0xcd0 [ 149.190451][ T8888] ? security_inode_permission+0x4a/0xb0 [ 149.190551][ T8888] ? lockref_get_not_dead+0x120/0x1c0 [ 149.190583][ T8888] ? __rcu_read_unlock+0x4f/0x70 [ 149.190603][ T8888] __lookup_slow+0x8c/0x250 [ 149.190632][ T8888] lookup_slow+0x3c/0x60 [ 149.190733][ T8888] path_lookupat+0x2f7/0x500 [ 149.190758][ T8888] ? _parse_integer+0x27/0x40 [ 149.190778][ T8888] filename_lookup+0x147/0x340 [ 149.190873][ T8888] user_path_at+0x3e/0x130 [ 149.190902][ T8888] do_utimes+0xd9/0x210 [ 149.190928][ T8888] __x64_sys_utime+0xbc/0x140 [ 149.191028][ T8888] x64_sys_call+0x2776/0x3000 [ 149.191058][ T8888] do_syscall_64+0xca/0x2b0 [ 149.191102][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.191193][ T8888] RIP: 0033:0x7f9b7a49f749 [ 149.191212][ T8888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.191280][ T8888] RSP: 002b:00007f9b78f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 149.191304][ T8888] RAX: ffffffffffffffda RBX: 00007f9b7a6f5fa0 RCX: 00007f9b7a49f749 [ 149.191321][ T8888] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000ac0 [ 149.191335][ T8888] RBP: 00007f9b78f07090 R08: 0000000000000000 R09: 0000000000000000 [ 149.191392][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.191414][ T8888] R13: 00007f9b7a6f6038 R14: 00007f9b7a6f5fa0 R15: 00007ffc9f0d8158 [ 149.191435][ T8888] [ 149.194213][ T8773] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.423605][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.456265][ T6089] hsr_slave_0: left promiscuous mode [ 149.463347][ T6089] hsr_slave_1: left promiscuous mode [ 149.472200][ T6089] veth1_macvtap: left promiscuous mode [ 149.477739][ T6089] veth0_macvtap: left promiscuous mode [ 149.488182][ T8898] loop4: detected capacity change from 0 to 512 [ 149.495911][ T6089] veth1_vlan: left promiscuous mode [ 149.502078][ T6089] veth0_vlan: left promiscuous mode [ 149.512196][ T8898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.525015][ T8898] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.541776][ T8898] SELinux: Context @ is not valid (left unmapped). [ 149.599962][ T6089] team0 (unregistering): Port device team_slave_1 removed [ 149.610714][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 149.642718][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.649862][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.658197][ T8828] bridge_slave_0: entered allmulticast mode [ 149.664788][ T8828] bridge_slave_0: entered promiscuous mode [ 149.674483][ T8773] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.692883][ T8841] chnl_net:caif_netlink_parms(): no params data found [ 149.702001][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.709182][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.716608][ T8828] bridge_slave_1: entered allmulticast mode [ 149.719449][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.724346][ T8828] bridge_slave_1: entered promiscuous mode [ 149.775321][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.790668][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.812267][ T6098] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.825312][ T8916] loop4: detected capacity change from 0 to 1024 [ 149.832132][ T8916] EXT4-fs: Ignoring removed orlov option [ 149.842424][ T8916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.860970][ T8828] team0: Port device team_slave_0 added [ 149.873231][ T899] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.882268][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.889410][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.896765][ T8841] bridge_slave_0: entered allmulticast mode [ 149.903600][ T8841] bridge_slave_0: entered promiscuous mode [ 149.911057][ T8919] loop1: detected capacity change from 0 to 1024 [ 149.914216][ T8828] team0: Port device team_slave_1 added [ 149.920837][ T8919] EXT4-fs: inline encryption not supported [ 149.929110][ T8919] EXT4-fs: Ignoring removed orlov option [ 149.930651][ T899] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.944202][ T8919] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 149.960912][ T899] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.969318][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.976464][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.983905][ T8841] bridge_slave_1: entered allmulticast mode [ 149.991801][ T8841] bridge_slave_1: entered promiscuous mode [ 150.004252][ T8919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 150.013027][ T8919] System zones: 0-1, 3-12 [ 150.018153][ T8919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.034128][ T8770] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.049223][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.056271][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.084468][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.113261][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.120304][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.146274][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.161912][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.184081][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.195651][ T8770] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.216561][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.244289][ T8770] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.277368][ T8828] hsr_slave_0: entered promiscuous mode [ 150.284098][ T8828] hsr_slave_1: entered promiscuous mode [ 150.290399][ T8828] debugfs: 'hsr0' already exists in 'hsr' [ 150.296171][ T8828] Cannot create hsr debugfs directory [ 150.302616][ T8841] team0: Port device team_slave_0 added [ 150.310749][ T6089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.341347][ T8841] team0: Port device team_slave_1 added [ 150.350349][ T8770] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.399333][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.406338][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.432275][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.441056][ T8928] loop4: detected capacity change from 0 to 512 [ 150.449147][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.449164][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.449199][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.499752][ T6089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.515118][ T8928] loop4: detected capacity change from 0 to 2048 [ 150.553632][ T8841] hsr_slave_0: entered promiscuous mode [ 150.560373][ T8841] hsr_slave_1: entered promiscuous mode [ 150.566538][ T8841] debugfs: 'hsr0' already exists in 'hsr' [ 150.567192][ T8928] Alternate GPT is invalid, using primary GPT. [ 150.572333][ T8841] Cannot create hsr debugfs directory [ 150.584169][ T8928] loop4: p2 p3 p7 [ 150.648507][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1826'. [ 150.661032][ T6089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.682363][ T8934] program syz.4.1826 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.736904][ T6089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.775376][ T8828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 150.920579][ T8828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 150.936095][ T8943] loop4: detected capacity change from 0 to 512 [ 150.946055][ T8828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 150.957961][ T8828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 150.991586][ T8943] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.064063][ T8943] FAULT_INJECTION: forcing a failure. [ 151.064063][ T8943] name failslab, interval 1, probability 0, space 0, times 0 [ 151.076798][ T8943] CPU: 1 UID: 0 PID: 8943 Comm: syz.4.1828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.076833][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.076925][ T8943] Call Trace: [ 151.076983][ T8943] [ 151.076993][ T8943] __dump_stack+0x1d/0x30 [ 151.077024][ T8943] dump_stack_lvl+0x95/0xd0 [ 151.077123][ T8943] dump_stack+0x15/0x1b [ 151.077148][ T8943] should_fail_ex+0x265/0x280 [ 151.077189][ T8943] should_failslab+0x8c/0xb0 [ 151.077231][ T8943] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 151.077256][ T8943] ? security_context_to_sid_core+0x69/0x3b0 [ 151.077286][ T8943] kmemdup_nul+0x36/0xc0 [ 151.077303][ T8943] security_context_to_sid_core+0x69/0x3b0 [ 151.077394][ T8943] ? avc_has_perm_noaudit+0xab/0x130 [ 151.077430][ T8943] security_context_to_sid+0x2e/0x40 [ 151.077528][ T8943] selinux_inode_setxattr+0x4aa/0x6d0 [ 151.077569][ T8943] security_inode_setxattr+0x13a/0x1b0 [ 151.077594][ T8943] __vfs_setxattr_locked+0x83/0x1c0 [ 151.077623][ T8943] vfs_setxattr+0x132/0x270 [ 151.077658][ T8943] file_setxattr+0x139/0x1b0 [ 151.077686][ T8943] path_setxattrat+0x290/0x310 [ 151.077812][ T8943] __x64_sys_fsetxattr+0x6b/0x80 [ 151.077842][ T8943] x64_sys_call+0x23c4/0x3000 [ 151.077869][ T8943] do_syscall_64+0xca/0x2b0 [ 151.077941][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.077968][ T8943] RIP: 0033:0x7f9da806f749 [ 151.077987][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.078018][ T8943] RSP: 002b:00007f9da6ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 151.078037][ T8943] RAX: ffffffffffffffda RBX: 00007f9da82c5fa0 RCX: 00007f9da806f749 [ 151.078052][ T8943] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000004 [ 151.078068][ T8943] RBP: 00007f9da6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.078083][ T8943] R10: 00000000000003c8 R11: 0000000000000246 R12: 0000000000000001 [ 151.078098][ T8943] R13: 00007f9da82c6038 R14: 00007f9da82c5fa0 R15: 00007ffee0efa628 [ 151.078133][ T8943] [ 151.340281][ T8828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.354297][ T8828] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.381890][ T8828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.392317][ T8828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.487859][ T899] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.495012][ T899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.504328][ T899] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.511425][ T899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.535782][ T6089] bridge_slave_1: left allmulticast mode [ 151.541544][ T6089] bridge_slave_1: left promiscuous mode [ 151.547384][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.559066][ T6089] bridge_slave_0: left allmulticast mode [ 151.564843][ T6089] bridge_slave_0: left promiscuous mode [ 151.570548][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.720842][ T6089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.734229][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 151.734243][ T29] audit: type=1326 audit(1767619902.243:29100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.767014][ T6089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.788236][ T6089] bond0 (unregistering): Released all slaves [ 151.805706][ T29] audit: type=1326 audit(1767619902.273:29101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.829365][ T29] audit: type=1326 audit(1767619902.273:29102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.853243][ T29] audit: type=1326 audit(1767619902.273:29103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.876812][ T29] audit: type=1326 audit(1767619902.273:29104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.900325][ T29] audit: type=1326 audit(1767619902.273:29105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.924042][ T29] audit: type=1326 audit(1767619902.273:29106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.947638][ T29] audit: type=1326 audit(1767619902.273:29107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.971232][ T29] audit: type=1326 audit(1767619902.273:29108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 151.994861][ T29] audit: type=1326 audit(1767619902.273:29109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8955 comm="syz.4.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9da806f783 code=0x7ffc0000 [ 152.108668][ T8841] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 152.117553][ T8841] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 152.132093][ T8828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.148385][ T8841] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 152.582658][ T8970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1830'. [ 152.616684][ T8828] veth0_vlan: entered promiscuous mode [ 152.625441][ T8828] veth1_vlan: entered promiscuous mode [ 152.639605][ T8828] veth0_macvtap: entered promiscuous mode [ 152.646869][ T8828] veth1_macvtap: entered promiscuous mode [ 152.657855][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.667292][ T8828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.742693][ T8841] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 152.768524][ T6113] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.779433][ T6089] hsr_slave_0: left promiscuous mode [ 152.785609][ T6089] hsr_slave_1: left promiscuous mode [ 152.798653][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.806162][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.864621][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.872243][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.883435][ T6089] veth1_macvtap: left promiscuous mode [ 152.899776][ T6089] veth0_macvtap: left promiscuous mode [ 152.905435][ T6089] veth1_vlan: left promiscuous mode [ 152.911432][ T6089] veth0_vlan: left promiscuous mode [ 152.936938][ T8988] loop4: detected capacity change from 0 to 1024 [ 152.948786][ T8990] loop1: detected capacity change from 0 to 1764 [ 152.960397][ T8988] EXT4-fs: inline encryption not supported [ 152.966366][ T8988] EXT4-fs: Ignoring removed orlov option [ 152.984898][ T8988] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 153.006936][ T8988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 153.027708][ T8988] System zones: 0-1, 3-12 [ 153.085935][ T8998] futex_wake_op: syz.4.1839 tries to shift op by -3; fix this program [ 153.094663][ T6089] team0 (unregistering): Port device team_slave_0 removed [ 153.152407][ T6102] smc: removing ib device syz1 [ 153.235286][ T6113] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.244429][ T3553] lo speed is unknown, defaulting to 1000 [ 153.250254][ T3553] syz1: Port: 1 Link DOWN [ 153.309340][ T9010] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 153.318518][ T8841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.509055][ T6113] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.733335][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 153.777701][ T8995] loop8: detected capacity change from 0 to 32768 [ 153.812908][ T6113] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.824924][ T8841] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.864098][ T8995] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 153.887635][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.894830][ T6123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.000837][ T8995] loop8: p1 start 460800 is beyond EOD, truncated [ 154.007348][ T8995] loop8: p2 size 83886080 extends beyond EOD, truncated [ 154.024700][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.031845][ T6123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.161272][ T8995] loop8: p5 start 460800 is beyond EOD, truncated [ 154.167763][ T8995] loop8: p6 size 83886080 extends beyond EOD, truncated [ 154.191906][ T9029] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1847'. [ 154.224386][ T9029] program syz.1.1847 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.264899][ T8841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.344706][ T9040] futex_wake_op: syz.1.1849 tries to shift op by -3; fix this program [ 154.417438][ T9044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1850'. [ 154.459644][ T9044] loop1: detected capacity change from 0 to 512 [ 154.472207][ T9045] loop8: detected capacity change from 0 to 128 [ 154.495974][ T9045] FAT-fs (loop8): bogus logical sector size 65535 [ 154.502603][ T9045] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 154.511980][ T9045] FAT-fs (loop8): Can't find a valid FAT filesystem [ 154.553525][ T3385] hid_parser_main: 20 callbacks suppressed [ 154.553543][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 154.567270][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 154.575171][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 154.587774][ T9044] ------------[ cut here ]------------ [ 154.593512][ T9044] EA inode 11 i_nlink=2 [ 154.593529][ T9044] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.1.1850/9044 [ 154.608609][ T9044] Modules linked in: [ 154.612559][ T9044] CPU: 1 UID: 0 PID: 9044 Comm: syz.1.1850 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.622420][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.632608][ T9044] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 154.639289][ T9044] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 154.659063][ T9044] RSP: 0018:ffffc90010c275a0 EFLAGS: 00010246 [ 154.665178][ T9044] RAX: ffff8881036ddd10 RBX: ffff88811b544ee0 RCX: ffffffff81bb1d5b [ 154.673384][ T9044] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 154.681468][ T9044] RBP: 000000000000000b R08: 000188811b544e93 R09: 0000000000000000 [ 154.689589][ T9044] R10: ffffc90010c274d0 R11: 0001c90010c274d0 R12: ffff88811b544e90 [ 154.697685][ T9044] R13: ffffffff86dc0db0 R14: ffff88811b544e48 R15: 0000000000000001 [ 154.705748][ T9044] FS: 00007f9b78f076c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 154.714923][ T9044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.721681][ T9044] CR2: 0000001b34b18ff8 CR3: 000000011af6c000 CR4: 00000000003506f0 [ 154.729960][ T9044] Call Trace: [ 154.733273][ T9044] [ 154.736238][ T9044] ext4_xattr_set_entry+0x77f/0x1020 [ 154.741754][ T9044] ext4_xattr_ibody_set+0x184/0x3c0 [ 154.747151][ T9044] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 154.753070][ T9044] __ext4_expand_extra_isize+0x246/0x280 [ 154.758768][ T9044] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 154.764328][ T9044] ext4_evict_inode+0x7c4/0xd40 [ 154.769233][ T9044] ? __pfx_ext4_evict_inode+0x10/0x10 [ 154.774654][ T9044] evict+0x2af/0x510 [ 154.778625][ T9044] ? __dquot_initialize+0x146/0x7c0 [ 154.783901][ T9044] iput+0x4bd/0x650 [ 154.787746][ T9044] ext4_process_orphan+0x1a9/0x1c0 [ 154.792917][ T9044] ext4_orphan_cleanup+0x6a8/0xa00 [ 154.798143][ T9044] ext4_fill_super+0x3411/0x37a0 [ 154.803190][ T9044] ? set_blocksize+0x1a8/0x310 [ 154.808069][ T9044] ? sb_set_blocksize+0xfc/0x170 [ 154.813104][ T9044] ? setup_bdev_super+0x30e/0x370 [ 154.818277][ T9044] ? __pfx_ext4_fill_super+0x10/0x10 [ 154.823686][ T9044] get_tree_bdev_flags+0x291/0x300 [ 154.828942][ T9044] ? __pfx_ext4_fill_super+0x10/0x10 [ 154.834357][ T9044] get_tree_bdev+0x1f/0x30 [ 154.838923][ T9044] ext4_get_tree+0x1c/0x30 [ 154.843451][ T9044] vfs_get_tree+0x57/0x1d0 [ 154.847920][ T9044] do_new_mount+0x24d/0x6a0 [ 154.852561][ T9044] path_mount+0x4ab/0xb80 [ 154.856927][ T9044] ? user_path_at+0xbf/0x130 [ 154.861615][ T9044] __se_sys_mount+0x28c/0x2e0 [ 154.866390][ T9044] __x64_sys_mount+0x67/0x80 [ 154.871196][ T9044] x64_sys_call+0x2cca/0x3000 [ 154.875988][ T9044] do_syscall_64+0xca/0x2b0 [ 154.880736][ T9044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.886707][ T9044] RIP: 0033:0x7f9b7a4a0eea [ 154.891172][ T9044] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.910912][ T9044] RSP: 002b:00007f9b78f06e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.919400][ T9044] RAX: ffffffffffffffda RBX: 00007f9b78f06ef0 RCX: 00007f9b7a4a0eea [ 154.927399][ T9044] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9b78f06eb0 [ 154.935435][ T9044] RBP: 0000200000000180 R08: 00007f9b78f06ef0 R09: 0000000000800700 [ 154.943465][ T9044] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 154.951501][ T9044] R13: 00007f9b78f06eb0 R14: 000000000000046f R15: 000000000000002c [ 154.959993][ T9044] [ 154.963049][ T9044] ---[ end trace 0000000000000000 ]--- [ 154.998389][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.006390][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.014184][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.022063][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x1 [ 155.029856][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.037697][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.045509][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: unknown main item tag 0x0 [ 155.108503][ T3385] hid-generic 0000:0000:FFFFFFFC.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 155.269159][ T9044] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.1850: iget: bad extra_isize 90 (inode size 256) [ 155.292535][ T9044] EXT4-fs (loop1): Remounting filesystem read-only [ 155.299860][ T9044] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 155.308897][ T9044] EXT4-fs (loop1): 1 orphan inode deleted [ 155.437259][ T8841] veth0_vlan: entered promiscuous mode [ 155.455645][ T8841] veth1_vlan: entered promiscuous mode [ 155.473672][ T8841] veth0_macvtap: entered promiscuous mode [ 155.482291][ T8841] veth1_macvtap: entered promiscuous mode [ 155.491264][ T9050] loop8: detected capacity change from 0 to 1024 [ 155.495790][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.505741][ T9050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.510375][ T8841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.522978][ T9050] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 155.531681][ T9050] System zones: 0-1, 3-36 [ 155.542688][ T6117] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.552023][ T6117] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.561051][ T6117] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.572103][ T6117] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.638813][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1855'. [ 155.671399][ T9074] loop9: detected capacity change from 0 to 1764 [ 155.954358][ T9094] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1864'. [ 155.965159][ T9094] program syz.8.1864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.976637][ T9096] netlink: 'syz.9.1865': attribute type 3 has an invalid length. [ 156.011980][ T9099] futex_wake_op: syz.8.1866 tries to shift op by -3; fix this program [ 156.016710][ T9100] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1867'. [ 156.058210][ T9104] loop9: detected capacity change from 0 to 1024 [ 156.065370][ T9104] EXT4-fs: inline encryption not supported [ 156.071415][ T9104] EXT4-fs: Ignoring removed orlov option [ 156.078551][ T9104] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 156.099265][ T9104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 156.107543][ T9104] System zones: 0-1, 3-12 [ 156.212541][ T9115] netlink: 'syz.4.1873': attribute type 3 has an invalid length. [ 156.430319][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1877'. [ 156.440903][ T9125] program syz.1.1877 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.464237][ T9123] loop9: detected capacity change from 0 to 512 [ 156.482022][ T9127] netlink: 'syz.1.1878': attribute type 3 has an invalid length. [ 156.491291][ T9123] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 156.499462][ T9123] EXT4-fs (loop9): orphan cleanup on readonly fs [ 156.507485][ T9123] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.1876: corrupted inode contents [ 156.519727][ T9123] EXT4-fs (loop9): Remounting filesystem read-only [ 156.526449][ T9123] EXT4-fs (loop9): 1 truncate cleaned up [ 156.532426][ T6117] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 156.543174][ T6117] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 156.545297][ T9131] futex_wake_op: syz.1.1879 tries to shift op by -3; fix this program [ 156.553908][ T6117] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 156.694859][ T9133] loop1: detected capacity change from 0 to 512 [ 156.720953][ T9133] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 156.732221][ T9133] EXT4-fs (loop1): orphan cleanup on readonly fs [ 156.738959][ T29] kauditd_printk_skb: 2014 callbacks suppressed [ 156.738975][ T29] audit: type=1326 audit(1767619907.253:31118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9da80a2005 code=0x7ffc0000 [ 156.776440][ T6075] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.797173][ T6075] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.818943][ T6075] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.827184][ T6075] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.840031][ T9133] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 156.852166][ T29] audit: type=1326 audit(1767619907.353:31119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9da80665e7 code=0x7ffc0000 [ 156.875748][ T29] audit: type=1326 audit(1767619907.353:31120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9da80a2005 code=0x7ffc0000 [ 156.899572][ T29] audit: type=1326 audit(1767619907.353:31121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9da800b829 code=0x7ffc0000 [ 156.923076][ T29] audit: type=1326 audit(1767619907.353:31122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 156.925977][ T9133] EXT4-fs (loop1): Remounting filesystem read-only [ 156.946646][ T29] audit: type=1326 audit(1767619907.353:31123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9da80665e7 code=0x7ffc0000 [ 156.976704][ T29] audit: type=1326 audit(1767619907.353:31124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9da800b829 code=0x7ffc0000 [ 156.977295][ T9133] EXT4-fs (loop1): 1 truncate cleaned up [ 157.000416][ T29] audit: type=1326 audit(1767619907.353:31125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f9da806f749 code=0x7ffc0000 [ 157.000455][ T29] audit: type=1326 audit(1767619907.353:31126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9116 comm="syz.4.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9da80a2005 code=0x7ffc0000 [ 157.029792][ T6105] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.029813][ T6105] Quota error (device loop1): write_blk: dquota write failed [ 157.071596][ T6105] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.082546][ T6105] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 157.266083][ T9155] loop1: detected capacity change from 0 to 1764 [ 157.347665][ T9152] loop4: detected capacity change from 0 to 512 [ 157.361963][ T9152] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 157.370779][ T9152] EXT4-fs (loop4): orphan cleanup on readonly fs [ 157.379590][ T9152] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1887: corrupted inode contents [ 157.392500][ T9152] EXT4-fs (loop4): Remounting filesystem read-only [ 157.400998][ T9152] EXT4-fs (loop4): 1 truncate cleaned up [ 157.406993][ T6105] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.417673][ T6105] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 157.436831][ T6105] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 157.450317][ T9162] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1889'. [ 157.461021][ T9162] program syz.1.1889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.504434][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 157.515472][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 157.623477][ T9172] netlink: 'syz.4.1894': attribute type 13 has an invalid length. [ 157.691306][ T3490] lo speed is unknown, defaulting to 1000 [ 157.777353][ T9191] EXT4-fs: inline encryption not supported [ 157.783349][ T9191] EXT4-fs: Ignoring removed orlov option [ 157.810112][ T9191] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 157.821979][ T9194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.835265][ T9194] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.1895: invalid block [ 157.848292][ T9191] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 157.850328][ T9194] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1895: invalid indirect mapped block 4294967295 (level 1) [ 157.857717][ T9191] System zones: 0-1, 3-12 [ 157.882628][ T9194] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1895: invalid indirect mapped block 4294967295 (level 1) [ 157.897547][ T9194] EXT4-fs (loop9): 2 truncates cleaned up [ 157.937535][ T9202] lo: Caught tx_queue_len zero misconfig [ 157.944755][ T9202] program syz.4.1903 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.532398][ T9222] EXT4-fs: inline encryption not supported [ 158.538405][ T9222] EXT4-fs: Ignoring removed orlov option [ 158.544754][ T9222] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 158.560461][ T9222] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 158.568753][ T9222] System zones: 0-1, 3-12 [ 158.618570][ T9228] netlink: 'syz.1.1914': attribute type 13 has an invalid length. [ 158.680422][ T9230] program syz.4.1915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.752055][ T9236] __nla_validate_parse: 13 callbacks suppressed [ 158.752076][ T9236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 158.760334][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 158.776334][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 158.785283][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 158.789789][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 158.864472][ T9243] set_capacity_and_notify: 4 callbacks suppressed [ 158.864494][ T9243] loop4: detected capacity change from 0 to 512 [ 158.898797][ T9243] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.909883][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 158.918931][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 158.927848][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 159.006237][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 159.015318][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 159.135349][ T9264] loop7: detected capacity change from 0 to 1024 [ 159.142962][ T9266] lo: Caught tx_queue_len zero misconfig [ 159.149546][ T9266] program syz.1.1927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.168326][ T9264] EXT4-fs: inline encryption not supported [ 159.174340][ T9264] EXT4-fs: Ignoring removed orlov option [ 159.182200][ T9264] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 159.219557][ T9270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.229251][ T9270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.244894][ T9264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 159.255080][ T9264] System zones: 0-1, 3-12 [ 159.417425][ T9281] FAULT_INJECTION: forcing a failure. [ 159.417425][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.430747][ T9281] CPU: 0 UID: 0 PID: 9281 Comm: syz.7.1932 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.430792][ T9281] Tainted: [W]=WARN [ 159.430798][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.430880][ T9281] Call Trace: [ 159.430887][ T9281] [ 159.430894][ T9281] __dump_stack+0x1d/0x30 [ 159.430917][ T9281] dump_stack_lvl+0x95/0xd0 [ 159.430957][ T9281] dump_stack+0x15/0x1b [ 159.430974][ T9281] should_fail_ex+0x265/0x280 [ 159.430994][ T9281] should_fail+0xb/0x20 [ 159.431010][ T9281] should_fail_usercopy+0x1a/0x20 [ 159.431031][ T9281] _copy_from_iter+0xcf/0xe70 [ 159.431071][ T9281] ? __build_skb_around+0x164/0x1c0 [ 159.431125][ T9281] ? __alloc_skb+0x396/0x4b0 [ 159.431143][ T9281] ? __alloc_skb+0x228/0x4b0 [ 159.431226][ T9281] pfkey_sendmsg+0x126/0x900 [ 159.431252][ T9281] ? avc_has_perm+0xf7/0x180 [ 159.431316][ T9281] ? selinux_socket_sendmsg+0x175/0x1b0 [ 159.431469][ T9281] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 159.431498][ T9281] __sock_sendmsg+0x145/0x180 [ 159.431523][ T9281] ____sys_sendmsg+0x31e/0x4a0 [ 159.431622][ T9281] ___sys_sendmsg+0x17b/0x1d0 [ 159.431677][ T9281] __x64_sys_sendmsg+0xd4/0x160 [ 159.431707][ T9281] x64_sys_call+0x17ba/0x3000 [ 159.431751][ T9281] do_syscall_64+0xca/0x2b0 [ 159.431781][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.431801][ T9281] RIP: 0033:0x7f8a59d8f749 [ 159.431814][ T9281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.431830][ T9281] RSP: 002b:00007f8a587ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.431915][ T9281] RAX: ffffffffffffffda RBX: 00007f8a59fe5fa0 RCX: 00007f8a59d8f749 [ 159.431926][ T9281] RDX: 0000000000008890 RSI: 0000200000000040 RDI: 0000000000000006 [ 159.431939][ T9281] RBP: 00007f8a587ef090 R08: 0000000000000000 R09: 0000000000000000 [ 159.431949][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.431960][ T9281] R13: 00007f8a59fe6038 R14: 00007f8a59fe5fa0 R15: 00007ffe1c854fb8 [ 159.431977][ T9281] [ 159.673055][ T9285] futex_wake_op: syz.9.1934 tries to shift op by -3; fix this program [ 159.827604][ T9297] program syz.9.1938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.929294][ T9302] netlink: 'syz.9.1940': attribute type 3 has an invalid length. [ 160.040884][ T9310] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 160.152116][ T9324] loop9: detected capacity change from 0 to 512 [ 160.171902][ T9324] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 160.189315][ T9324] EXT4-fs (loop9): orphan cleanup on readonly fs [ 160.205116][ T9324] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.1949: Block bitmap for bg 0 marked uninitialized [ 160.209188][ T9332] netlink: 'syz.1.1952': attribute type 3 has an invalid length. [ 160.244316][ T9324] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 160.261396][ T9324] EXT4-fs (loop9): 1 orphan inode deleted [ 160.403044][ T9347] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 160.411742][ T9347] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 160.622170][ T9361] futex_wake_op: syz.4.1964 tries to shift op by -3; fix this program [ 160.689375][ T9368] netlink: 'syz.4.1966': attribute type 3 has an invalid length. [ 160.732992][ T9370] loop4: detected capacity change from 0 to 1024 [ 160.747315][ T9370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.761449][ T9370] EXT4-fs mount: 29 callbacks suppressed [ 160.761470][ T9370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.900582][ T9380] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.956194][ T9380] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.032459][ T9380] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.092917][ T9380] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.167151][ T6102] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.184699][ T6102] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.202500][ T6102] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.211740][ T6102] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.286467][ T9388] netlink: 'syz.8.1974': attribute type 13 has an invalid length. [ 161.390340][ T9396] futex_wake_op: syz.1.1976 tries to shift op by -3; fix this program [ 161.510670][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.558346][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.590157][ T9406] loop9: detected capacity change from 0 to 512 [ 161.602490][ T9412] FAULT_INJECTION: forcing a failure. [ 161.602490][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 161.615307][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.8.1981 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.615351][ T9412] Tainted: [W]=WARN [ 161.615358][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.615430][ T9412] Call Trace: [ 161.615437][ T9412] [ 161.615446][ T9412] __dump_stack+0x1d/0x30 [ 161.615476][ T9412] dump_stack_lvl+0x95/0xd0 [ 161.615502][ T9412] dump_stack+0x15/0x1b [ 161.615527][ T9412] should_fail_ex+0x265/0x280 [ 161.615619][ T9412] should_failslab+0x8c/0xb0 [ 161.615641][ T9412] __kmalloc_noprof+0xb9/0x5a0 [ 161.615663][ T9412] ? copy_splice_read+0xc2/0x660 [ 161.615772][ T9412] copy_splice_read+0xc2/0x660 [ 161.615819][ T9412] ? __pfx_copy_splice_read+0x10/0x10 [ 161.615880][ T9412] splice_direct_to_actor+0x26f/0x680 [ 161.615902][ T9412] ? __pfx_direct_splice_actor+0x10/0x10 [ 161.615947][ T9412] do_splice_direct+0xda/0x150 [ 161.615966][ T9412] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 161.616049][ T9412] do_sendfile+0x380/0x650 [ 161.616128][ T9412] __x64_sys_sendfile64+0x105/0x150 [ 161.616158][ T9412] x64_sys_call+0x2db1/0x3000 [ 161.616265][ T9412] do_syscall_64+0xca/0x2b0 [ 161.616404][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.616425][ T9412] RIP: 0033:0x7faba635f749 [ 161.616440][ T9412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.616518][ T9412] RSP: 002b:00007faba4dbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 161.616540][ T9412] RAX: ffffffffffffffda RBX: 00007faba65b5fa0 RCX: 00007faba635f749 [ 161.616619][ T9412] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 161.616631][ T9412] RBP: 00007faba4dbf090 R08: 0000000000000000 R09: 0000000000000000 [ 161.616642][ T9412] R10: 7fffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 161.616655][ T9412] R13: 00007faba65b6038 R14: 00007faba65b5fa0 R15: 00007ffd59bfbad8 [ 161.616679][ T9412] [ 161.680751][ T9406] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 161.827189][ T9406] EXT4-fs (loop9): orphan cleanup on readonly fs [ 161.838845][ T9406] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.1977: corrupted inode contents [ 161.853359][ T9406] EXT4-fs (loop9): Remounting filesystem read-only [ 161.860113][ T9406] EXT4-fs (loop9): 1 truncate cleaned up [ 161.865933][ T6083] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.876522][ T6083] __quota_error: 2160 callbacks suppressed [ 161.876536][ T6083] Quota error (device loop9): write_blk: dquota write failed [ 161.889890][ T6083] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 161.899970][ T6083] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.910615][ T6083] Quota error (device loop9): write_blk: dquota write failed [ 161.917866][ T9370] syz.4.1967 (9370) used greatest stack depth: 7256 bytes left [ 161.918099][ T6083] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 161.939240][ T29] audit: type=1400 audit(1767619912.453:33276): avc: denied { setopt } for pid=9417 comm="syz.8.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 161.968092][ T6083] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 161.978373][ T6083] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 161.987335][ T6083] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 162.009046][ T9406] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.021799][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.032338][ T29] audit: type=1326 audit(1767619912.543:33277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9395 comm="syz.9.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1931df90 code=0x7ffc0000 [ 162.057750][ T29] audit: type=1326 audit(1767619912.563:33278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9395 comm="syz.9.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2c1931e497 code=0x7ffc0000 [ 162.081358][ T29] audit: type=1326 audit(1767619912.563:33279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9395 comm="syz.9.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c1931df90 code=0x7ffc0000 [ 162.117322][ T9425] FAULT_INJECTION: forcing a failure. [ 162.117322][ T9425] name failslab, interval 1, probability 0, space 0, times 0 [ 162.130111][ T9425] CPU: 1 UID: 0 PID: 9425 Comm: syz.4.1984 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.130195][ T9425] Tainted: [W]=WARN [ 162.130201][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.130283][ T9425] Call Trace: [ 162.130292][ T9425] [ 162.130302][ T9425] __dump_stack+0x1d/0x30 [ 162.130332][ T9425] dump_stack_lvl+0x95/0xd0 [ 162.130357][ T9425] dump_stack+0x15/0x1b [ 162.130383][ T9425] should_fail_ex+0x265/0x280 [ 162.130450][ T9425] should_failslab+0x8c/0xb0 [ 162.130539][ T9425] kmem_cache_alloc_noprof+0x69/0x4b0 [ 162.130565][ T9425] ? alloc_empty_file+0x76/0x200 [ 162.130593][ T9425] alloc_empty_file+0x76/0x200 [ 162.130620][ T9425] alloc_file_pseudo+0xc6/0x160 [ 162.130708][ T9425] __se_sys_memfd_secret+0x127/0x240 [ 162.130757][ T9425] __x64_sys_memfd_secret+0x1f/0x30 [ 162.130835][ T9425] x64_sys_call+0x2512/0x3000 [ 162.130866][ T9425] do_syscall_64+0xca/0x2b0 [ 162.130976][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.130997][ T9425] RIP: 0033:0x7f9da806f749 [ 162.131013][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.131036][ T9425] RSP: 002b:00007f9da6ad7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 162.131061][ T9425] RAX: ffffffffffffffda RBX: 00007f9da82c5fa0 RCX: 00007f9da806f749 [ 162.131118][ T9425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 162.131130][ T9425] RBP: 00007f9da6ad7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.131142][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.131154][ T9425] R13: 00007f9da82c6038 R14: 00007f9da82c5fa0 R15: 00007ffee0efa628 [ 162.131173][ T9425] [ 162.366498][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.414219][ T9434] futex_wake_op: syz.9.1988 tries to shift op by -3; fix this program [ 162.446782][ T9436] loop4: detected capacity change from 0 to 512 [ 162.460833][ T9436] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.469239][ T9436] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.477813][ T9436] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.1986: corrupted inode contents [ 162.490798][ T9436] EXT4-fs (loop4): Remounting filesystem read-only [ 162.497531][ T9436] EXT4-fs (loop4): 1 truncate cleaned up [ 162.503401][ T6102] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.514003][ T6102] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 162.525249][ T6102] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 162.537269][ T9436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.571572][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.731079][ T9458] program syz.7.1998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.780143][ T9448] lo speed is unknown, defaulting to 1000 [ 162.793922][ T9466] netlink: 'syz.7.2001': attribute type 3 has an invalid length. [ 162.864348][ T9469] sit0: Caught tx_queue_len zero misconfig [ 162.897881][ T9452] lo speed is unknown, defaulting to 1000 [ 163.152592][ T9487] netlink: 'syz.4.2009': attribute type 13 has an invalid length. [ 163.181940][ T9489] loop9: detected capacity change from 0 to 512 [ 163.220701][ T9489] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 163.241048][ T9489] EXT4-fs (loop9): orphan cleanup on readonly fs [ 163.255717][ T9489] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.2004: corrupted inode contents [ 163.268150][ T9489] EXT4-fs (loop9): Remounting filesystem read-only [ 163.281933][ T9489] EXT4-fs (loop9): 1 truncate cleaned up [ 163.287978][ T6116] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.298650][ T6116] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 163.339159][ T6116] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 163.350457][ T9489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.390757][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.520867][ T9506] netlink: 'syz.9.2013': attribute type 3 has an invalid length. [ 163.788060][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.806595][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.969106][ T9516] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 163.974858][ T9516] dvmrp1: linktype set to 823 [ 164.328709][ T9519] __nla_validate_parse: 42 callbacks suppressed [ 164.328725][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2018'. [ 164.368316][ T9521] loop9: detected capacity change from 0 to 1024 [ 164.376036][ T9521] EXT4-fs: inline encryption not supported [ 164.382102][ T9521] EXT4-fs: Ignoring removed orlov option [ 164.395979][ T9521] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 164.424015][ T9521] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 164.432771][ T9521] System zones: 0-1, 3-12 [ 164.438894][ T9521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.479544][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2021'. [ 164.506846][ T9532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.518605][ T9532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.527310][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.562129][ T9539] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2023'. [ 164.572389][ T9539] program syz.9.2023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.583017][ T9541] netlink: 'syz.4.2026': attribute type 3 has an invalid length. [ 164.637617][ T9547] Invalid argument reading file caps for ./file0 [ 164.710356][ T9551] netlink: 'syz.4.2030': attribute type 13 has an invalid length. [ 164.795830][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.804885][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.813821][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.833017][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.842318][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.851256][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 164.881807][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2030'. [ 165.016155][ T9563] loop9: detected capacity change from 0 to 128 [ 165.030454][ T9563] 9p: Bad value for 'rfdno' [ 165.078258][ T9568] loop7: detected capacity change from 0 to 1024 [ 165.097736][ T9568] EXT4-fs: inline encryption not supported [ 165.103700][ T9568] EXT4-fs: Ignoring removed orlov option [ 165.140142][ T9568] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 165.191641][ T9566] lo speed is unknown, defaulting to 1000 [ 165.197695][ T9568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 165.211847][ T9568] System zones: 0-1, 3-12 [ 165.216845][ T9568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.259100][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.305462][ T9578] netlink: 'syz.4.2038': attribute type 3 has an invalid length. [ 165.384403][ T9586] bridge0: port 3(batadv1) entered blocking state [ 165.390963][ T9586] bridge0: port 3(batadv1) entered disabled state [ 165.397677][ T9586] batadv1: entered allmulticast mode [ 165.403892][ T9586] batadv1: entered promiscuous mode [ 165.561926][ T9595] FAULT_INJECTION: forcing a failure. [ 165.561926][ T9595] name failslab, interval 1, probability 0, space 0, times 0 [ 165.574750][ T9595] CPU: 0 UID: 0 PID: 9595 Comm: syz.7.2045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.574833][ T9595] Tainted: [W]=WARN [ 165.574841][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.574855][ T9595] Call Trace: [ 165.574862][ T9595] [ 165.574871][ T9595] __dump_stack+0x1d/0x30 [ 165.574933][ T9595] dump_stack_lvl+0x95/0xd0 [ 165.574957][ T9595] dump_stack+0x15/0x1b [ 165.574979][ T9595] should_fail_ex+0x265/0x280 [ 165.575082][ T9595] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 165.575115][ T9595] should_failslab+0x8c/0xb0 [ 165.575185][ T9595] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 165.575209][ T9595] ? shmem_alloc_inode+0x34/0x50 [ 165.575238][ T9595] ? kstrtouint_from_user+0x9f/0xf0 [ 165.575263][ T9595] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 165.575403][ T9595] shmem_alloc_inode+0x34/0x50 [ 165.575432][ T9595] alloc_inode+0x40/0x170 [ 165.575455][ T9595] new_inode+0x1d/0xe0 [ 165.575479][ T9595] shmem_get_inode+0x246/0x750 [ 165.575575][ T9595] __shmem_file_setup+0x113/0x210 [ 165.575602][ T9595] shmem_file_setup+0x3b/0x50 [ 165.575665][ T9595] __se_sys_memfd_create+0x2f7/0x6b0 [ 165.575703][ T9595] __x64_sys_memfd_create+0x31/0x40 [ 165.575738][ T9595] x64_sys_call+0x28cb/0x3000 [ 165.575778][ T9595] do_syscall_64+0xca/0x2b0 [ 165.575816][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.575840][ T9595] RIP: 0033:0x7f8a59d8f749 [ 165.575881][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.576004][ T9595] RSP: 002b:00007f8a587eee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 165.576042][ T9595] RAX: ffffffffffffffda RBX: 000000000000063f RCX: 00007f8a59d8f749 [ 165.576056][ T9595] RDX: 00007f8a587eeef0 RSI: 0000000000000000 RDI: 00007f8a59e14960 [ 165.576070][ T9595] RBP: 0000200000000d80 R08: 00007f8a587eebb7 R09: 00007f8a587eee40 [ 165.576084][ T9595] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 165.576098][ T9595] R13: 00007f8a587eeef0 R14: 00007f8a587eeeb0 R15: 00002000000003c0 [ 165.576119][ T9595] [ 165.911445][ T6113] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 165.920992][ T6113] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 165.942313][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.951681][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.105208][ T9589] infiniband syz!: set active [ 166.110067][ T9589] infiniband syz!: added team_slave_0 [ 166.159120][ T9589] RDS/IB: syz!: added [ 166.173390][ T9589] smc: adding ib device syz! with port count 1 [ 166.194925][ T9589] smc: ib device syz! port 1 has no pnetid [ 166.551811][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.622489][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.681388][ T9610] netlink: 'syz.9.2050': attribute type 3 has an invalid length. [ 166.823245][ T9606] lo speed is unknown, defaulting to 1000 [ 166.879969][ T29] kauditd_printk_skb: 1465 callbacks suppressed [ 166.879984][ T29] audit: type=1326 audit(1767619917.393:34733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c1931f783 code=0x7ffc0000 [ 167.065494][ T29] audit: type=1326 audit(1767619917.493:34734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2c1931f807 code=0x7ffc0000 [ 167.089142][ T29] audit: type=1326 audit(1767619917.493:34735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2c192d6bdd code=0x7ffc0000 [ 167.112684][ T29] audit: type=1326 audit(1767619917.493:34736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2c19353e89 code=0x7ffc0000 [ 167.140863][ T29] audit: type=1326 audit(1767619917.493:34737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2c192d6c47 code=0x7ffc0000 [ 167.167935][ T29] audit: type=1326 audit(1767619917.493:34739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1931f749 code=0x7ffc0000 [ 167.191642][ T29] audit: type=1326 audit(1767619917.493:34738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2c192d6357 code=0x7ffc0000 [ 167.215300][ T29] audit: type=1326 audit(1767619917.493:34740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1931f749 code=0x7ffc0000 [ 167.238835][ T29] audit: type=1326 audit(1767619917.493:34741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2c192d63b6 code=0x7ffc0000 [ 167.262469][ T29] audit: type=1326 audit(1767619917.493:34742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.9.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c1931f34b code=0x7ffc0000 [ 167.326533][ T9618] program syz.1.2053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.374470][ T9624] loop7: detected capacity change from 0 to 1024 [ 167.382630][ T9624] EXT4-fs: inline encryption not supported [ 167.388736][ T9624] EXT4-fs: Ignoring removed orlov option [ 167.395131][ T9624] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 167.549235][ T9624] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 167.569278][ T9624] System zones: 0-1, 3-12 [ 167.574517][ T9624] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.661520][ T9632] loop1: detected capacity change from 0 to 512 [ 167.673741][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.684932][ T9632] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 167.700505][ T9632] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.730134][ T9648] netlink: 'syz.8.2062': attribute type 3 has an invalid length. [ 167.741335][ T9632] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2058: corrupted inode contents [ 167.757670][ T9632] EXT4-fs (loop1): Remounting filesystem read-only [ 167.765000][ T9632] EXT4-fs (loop1): 1 truncate cleaned up [ 167.771074][ T6102] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.781761][ T6102] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.792693][ T6102] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.803677][ T9632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.881218][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.922488][ T9652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.932758][ T9652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.453167][ T9664] can0: slcan on ttyS3. [ 168.482924][ T9664] lo: Caught tx_queue_len zero misconfig [ 168.489470][ T9664] netem: change failed [ 168.697995][ T9663] can0 (unregistered): slcan off ttyS3. [ 168.761395][ T9670] loop7: detected capacity change from 0 to 1024 [ 168.792132][ T9670] EXT4-fs: inline encryption not supported [ 168.798957][ T9670] EXT4-fs: Ignoring removed orlov option [ 168.817645][ T9673] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 168.856432][ T9670] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 168.981556][ T9673] SELinux: failed to load policy [ 169.009699][ T9670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 169.009731][ T9670] System zones: 0-1, 3-12 [ 169.010239][ T9670] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.149751][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.200101][ T9689] netlink: 'syz.9.2080': attribute type 13 has an invalid length. [ 169.340542][ T9692] __nla_validate_parse: 16 callbacks suppressed [ 169.340563][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2080'. [ 169.356077][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2080'. [ 169.365202][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2080'. [ 169.489401][ T9704] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2085'. [ 169.500867][ T9704] lo: Caught tx_queue_len zero misconfig [ 169.507895][ T9704] program syz.9.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.559647][ T9706] loop9: detected capacity change from 0 to 1764 [ 169.628668][ T9709] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2087'. [ 169.640122][ T9709] program syz.8.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.710918][ T9717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.720048][ T9717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.739743][ T9718] netlink: 'syz.7.2090': attribute type 1 has an invalid length. [ 169.892583][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2096'. [ 169.913125][ T9733] netlink: 'syz.7.2097': attribute type 13 has an invalid length. [ 170.015583][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2097'. [ 170.024893][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2097'. [ 170.027737][ T9738] netlink: 'syz.1.2099': attribute type 3 has an invalid length. [ 170.034053][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2097'. [ 170.067418][ T9733] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2097'. [ 170.488667][ T9749] netlink: 'syz.7.2101': attribute type 1 has an invalid length. [ 170.702201][ T9747] loop1: detected capacity change from 0 to 512 [ 170.849290][ T9747] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 170.874057][ T9747] EXT4-fs (loop1): orphan cleanup on readonly fs [ 170.899176][ T9747] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2100: corrupted inode contents [ 170.927234][ T9747] EXT4-fs (loop1): Remounting filesystem read-only [ 170.937828][ T9747] EXT4-fs (loop1): 1 truncate cleaned up [ 171.110773][ T995] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.121533][ T995] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.134464][ T995] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.157677][ T9747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.348172][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.539410][ T3429] IPVS: starting estimator thread 0... [ 171.610429][ T9785] netlink: 'syz.7.2116': attribute type 1 has an invalid length. [ 171.628011][ T9783] IPVS: using max 2208 ests per chain, 110400 per kthread [ 171.795028][ T9797] loop1: detected capacity change from 0 to 512 [ 171.839132][ T9799] loop9: detected capacity change from 0 to 1024 [ 171.846944][ T9799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.923318][ T9799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.949796][ T29] kauditd_printk_skb: 2811 callbacks suppressed [ 171.949815][ T29] audit: type=1400 audit(1767619922.463:37542): avc: denied { create } for pid=9796 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.023178][ T9803] netlink: 'syz.1.2114': attribute type 3 has an invalid length. [ 172.031050][ T9803] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 172.039090][ T29] audit: type=1400 audit(1767619922.493:37543): avc: denied { mount } for pid=9798 comm="syz.9.2122" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.061113][ T29] audit: type=1400 audit(1767619922.493:37544): avc: denied { getopt } for pid=9796 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.081242][ T29] audit: type=1400 audit(1767619922.493:37545): avc: denied { write } for pid=9796 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 172.101674][ T29] audit: type=1400 audit(1767619922.493:37546): avc: denied { create } for pid=9796 comm="syz.1.2114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.122400][ T29] audit: type=1400 audit(1767619922.493:37547): avc: denied { module_request } for pid=9796 comm="syz.1.2114" kmod="net-pf-6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 172.144261][ T29] audit: type=1400 audit(1767619922.513:37548): avc: denied { tracepoint } for pid=9811 comm="syz.4.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.164399][ T29] audit: type=1326 audit(1767619922.523:37549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.9.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1931f749 code=0x7ffc0000 [ 172.170614][ T9814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.188252][ T29] audit: type=1326 audit(1767619922.523:37550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.9.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c1931f749 code=0x7ffc0000 [ 172.227490][ T9816] FAULT_INJECTION: forcing a failure. [ 172.227490][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.240652][ T9816] CPU: 1 UID: 0 PID: 9816 Comm: syz.7.2127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.240736][ T9799] netlink: '': attribute type 30 has an invalid length. [ 172.240758][ T9816] Tainted: [W]=WARN [ 172.240765][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.240778][ T9816] Call Trace: [ 172.240785][ T9816] [ 172.240793][ T9816] __dump_stack+0x1d/0x30 [ 172.240857][ T9816] dump_stack_lvl+0x95/0xd0 [ 172.240953][ T9816] dump_stack+0x15/0x1b [ 172.241067][ T9816] should_fail_ex+0x265/0x280 [ 172.241153][ T9816] should_fail+0xb/0x20 [ 172.241300][ T9816] should_fail_usercopy+0x1a/0x20 [ 172.241378][ T9816] strncpy_from_user+0x27/0x260 [ 172.241558][ T9816] getname_flags+0xae/0x3b0 [ 172.241719][ T9816] __x64_sys_renameat2+0x6c/0x90 [ 172.241796][ T9816] x64_sys_call+0x35f/0x3000 [ 172.241880][ T9816] do_syscall_64+0xca/0x2b0 [ 172.241983][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.242048][ T9816] RIP: 0033:0x7f8a59d8f749 [ 172.242103][ T9816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.242176][ T9816] RSP: 002b:00007f8a587ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 172.242247][ T9816] RAX: ffffffffffffffda RBX: 00007f8a59fe5fa0 RCX: 00007f8a59d8f749 [ 172.242291][ T9816] RDX: ffffffffffffff9c RSI: 0000200000000380 RDI: ffffffffffffff9c [ 172.242354][ T9816] RBP: 00007f8a587ef090 R08: 0000000000000000 R09: 0000000000000000 [ 172.242408][ T9816] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 172.242459][ T9816] R13: 00007f8a59fe6038 R14: 00007f8a59fe5fa0 R15: 00007ffe1c854fb8 [ 172.242522][ T9816] [ 172.433403][ T9823] netlink: 'syz.8.2129': attribute type 3 has an invalid length. [ 172.458409][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.479712][ T9825] netlink: 'syz.8.2130': attribute type 13 has an invalid length. [ 172.755852][ T9838] loop7: detected capacity change from 0 to 512 [ 172.772131][ T9838] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 172.788539][ T9838] EXT4-fs (loop7): orphan cleanup on readonly fs [ 172.801702][ T9838] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2133: corrupted inode contents [ 172.830317][ T9838] EXT4-fs (loop7): Remounting filesystem read-only [ 172.831169][ T9855] loop9: detected capacity change from 0 to 512 [ 172.837723][ T9838] EXT4-fs (loop7): 1 truncate cleaned up [ 172.849723][ T6123] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.860416][ T6123] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.871222][ T6123] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 172.882283][ T9838] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.899269][ T9855] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 172.907597][ T9855] EXT4-fs (loop9): orphan cleanup on readonly fs [ 172.919771][ T9855] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.2136: corrupted inode contents [ 172.944752][ T9855] EXT4-fs (loop9): Remounting filesystem read-only [ 172.953970][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.962931][ T9861] 9pnet_virtio: no channels available for device 127.0.0.1 [ 172.963033][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.978230][ T9855] EXT4-fs (loop9): 1 truncate cleaned up [ 172.985517][ T995] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.985550][ T995] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.985572][ T995] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 172.985706][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.997568][ T9855] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.073832][ T9868] siw: device registration error -23 [ 173.081560][ T9868] netlink: 'syz.7.2143': attribute type 3 has an invalid length. [ 173.096917][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.109749][ T9866] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.117206][ T9866] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.125393][ T9866] bridge0: entered allmulticast mode [ 173.160516][ T9869] bridge_slave_1: left allmulticast mode [ 173.166645][ T9869] bridge_slave_1: left promiscuous mode [ 173.172854][ T9869] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.198962][ T9869] bridge_slave_0: left allmulticast mode [ 173.204832][ T9869] bridge_slave_0: left promiscuous mode [ 173.210860][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.257757][ T9876] loop7: detected capacity change from 0 to 1024 [ 173.268795][ T9876] EXT4-fs: inline encryption not supported [ 173.274690][ T9876] EXT4-fs: Ignoring removed orlov option [ 173.291105][ T9876] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.346422][ T9876] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 173.354743][ T9876] System zones: 0-1, 3-12 [ 173.362316][ T9876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.418662][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.456254][ T9895] netlink: 'syz.7.2153': attribute type 1 has an invalid length. [ 173.581264][ T9907] netlink: 'syz.1.2160': attribute type 3 has an invalid length. [ 173.725419][ T9922] loop1: detected capacity change from 0 to 512 [ 173.736811][ T9925] loop7: detected capacity change from 0 to 512 [ 173.749536][ T9922] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 173.758945][ T9922] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 173.811520][ T9932] loop4: detected capacity change from 0 to 1024 [ 173.819403][ T9932] EXT4-fs: inline encryption not supported [ 173.825306][ T9932] EXT4-fs: Ignoring removed orlov option [ 173.832232][ T9932] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.850067][ T9932] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 173.858643][ T9932] System zones: 0-1, 3-12 [ 173.863911][ T9932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.932594][ T9938] netlink: 'syz.7.2167': attribute type 3 has an invalid length. [ 173.940441][ T9938] netlink: 'syz.7.2167': attribute type 1 has an invalid length. [ 173.962589][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.020374][ T9937] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 174.028875][ T9937] EXT4-fs (loop9): orphan cleanup on readonly fs [ 174.037370][ T9937] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.2171: corrupted inode contents [ 174.049731][ T9937] EXT4-fs (loop9): Remounting filesystem read-only [ 174.056382][ T9937] EXT4-fs (loop9): 1 truncate cleaned up [ 174.062510][ T995] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.073280][ T995] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.084438][ T995] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.095340][ T9937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.126573][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.155682][ T9945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9945 comm=syz.4.2173 [ 174.220756][ T9951] tipc: Failed to obtain node identity [ 174.226418][ T9951] tipc: Enabling of bearer rejected, failed to enable media [ 174.462101][ T9965] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 174.484639][ T9965] EXT4-fs (loop4): orphan cleanup on readonly fs [ 174.519149][ T9965] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2178: corrupted inode contents [ 174.543023][ T9965] EXT4-fs (loop4): Remounting filesystem read-only [ 174.550325][ T9965] EXT4-fs (loop4): 1 truncate cleaned up [ 174.560712][ T6123] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.571404][ T6123] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 174.590491][ T9974] FAULT_INJECTION: forcing a failure. [ 174.590491][ T9974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.603760][ T9974] CPU: 0 UID: 0 PID: 9974 Comm: syz.1.2183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.603793][ T9974] Tainted: [W]=WARN [ 174.603853][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.603867][ T9974] Call Trace: [ 174.603873][ T9974] [ 174.603883][ T9974] __dump_stack+0x1d/0x30 [ 174.603914][ T9974] dump_stack_lvl+0x95/0xd0 [ 174.603943][ T9974] dump_stack+0x15/0x1b [ 174.604034][ T9974] should_fail_ex+0x265/0x280 [ 174.604062][ T9974] should_fail+0xb/0x20 [ 174.604084][ T9974] should_fail_usercopy+0x1a/0x20 [ 174.604108][ T9974] _copy_to_user+0x20/0xa0 [ 174.604141][ T9974] simple_read_from_buffer+0xb5/0x130 [ 174.604168][ T9974] proc_fail_nth_read+0x10e/0x150 [ 174.604247][ T9974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.604286][ T9974] vfs_read+0x1a8/0x770 [ 174.604308][ T9974] ? __rcu_read_unlock+0x4f/0x70 [ 174.604333][ T9974] ? __fget_files+0x184/0x1c0 [ 174.604392][ T9974] ? mutex_lock+0x58/0x90 [ 174.604425][ T9974] ksys_read+0xda/0x1a0 [ 174.604444][ T9974] __x64_sys_read+0x40/0x50 [ 174.604507][ T9974] x64_sys_call+0x2889/0x3000 [ 174.604538][ T9974] do_syscall_64+0xca/0x2b0 [ 174.604574][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.604595][ T9974] RIP: 0033:0x7f9b7a49e15c [ 174.604611][ T9974] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.604707][ T9974] RSP: 002b:00007f9b78f07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.604726][ T9974] RAX: ffffffffffffffda RBX: 00007f9b7a6f5fa0 RCX: 00007f9b7a49e15c [ 174.604738][ T9974] RDX: 000000000000000f RSI: 00007f9b78f070a0 RDI: 0000000000000003 [ 174.604750][ T9974] RBP: 00007f9b78f07090 R08: 0000000000000000 R09: 0000000000000000 [ 174.604766][ T9974] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 174.604844][ T9974] R13: 00007f9b7a6f6038 R14: 00007f9b7a6f5fa0 R15: 00007ffc9f0d8158 [ 174.604863][ T9974] [ 174.606278][ T9973] __nla_validate_parse: 28 callbacks suppressed [ 174.606292][ T9973] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2184'. [ 174.655838][ T6123] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 174.831919][ T9965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.949016][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.006785][ T9985] set_capacity_and_notify: 3 callbacks suppressed [ 175.006800][ T9985] loop7: detected capacity change from 0 to 512 [ 175.174284][ T9994] bond0: Caught tx_queue_len zero misconfig [ 175.281547][ T9985] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 175.290665][ T9985] EXT4-fs (loop7): orphan cleanup on readonly fs [ 175.311847][ T9985] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2185: corrupted inode contents [ 175.399199][ T9985] EXT4-fs (loop7): Remounting filesystem read-only [ 175.406935][T10002] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 175.440275][ T9985] EXT4-fs (loop7): 1 truncate cleaned up [ 175.446427][ T6123] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.457027][ T6123] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.483208][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2192'. [ 175.509907][T10004] loop4: detected capacity change from 0 to 512 [ 175.517791][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2192'. [ 175.528531][ T6123] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.550628][ T9985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.564370][T10004] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 175.585532][T10004] EXT4-fs (loop4): orphan cleanup on readonly fs [ 175.626994][T10004] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2190: corrupted inode contents [ 175.688627][T10004] EXT4-fs (loop4): Remounting filesystem read-only [ 175.704372][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.758351][T10004] EXT4-fs (loop4): 1 truncate cleaned up [ 175.764169][ T6123] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.775132][ T6123] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 175.787065][ T6123] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 175.798318][T10004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 175.834075][T10008] loop9: detected capacity change from 0 to 1024 [ 175.850691][T10008] EXT4-fs: inline encryption not supported [ 175.856624][T10008] EXT4-fs: Ignoring removed orlov option [ 175.896595][T10008] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 175.939882][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.958799][T10008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 175.977486][T10008] System zones: 0-1, 3-12 [ 175.998752][T10008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.024659][T10015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2196'. [ 176.035827][T10015] program syz.4.2196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.126259][T10019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 176.196384][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2198'. [ 176.214387][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.261284][T10023] loop7: detected capacity change from 0 to 1764 [ 176.634197][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2203'. [ 176.873494][T10036] loop8: detected capacity change from 0 to 512 [ 176.908667][T10036] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 176.917191][T10036] EXT4-fs (loop8): orphan cleanup on readonly fs [ 176.925545][T10036] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.2204: corrupted inode contents [ 176.938227][T10036] EXT4-fs (loop8): Remounting filesystem read-only [ 176.954264][T10036] EXT4-fs (loop8): 1 truncate cleaned up [ 176.960283][ T29] kauditd_printk_skb: 1985 callbacks suppressed [ 176.960298][ T29] audit: type=1326 audit(1767619927.473:39484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8a59d8f749 code=0x7ffc0000 [ 176.989911][ T6102] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 176.990182][ T29] audit: type=1326 audit(1767619927.503:39485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a59d865e7 code=0x7ffc0000 [ 177.000899][ T6102] Quota error (device loop8): write_blk: dquota write failed [ 177.023651][ T29] audit: type=1326 audit(1767619927.503:39486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a59d2b829 code=0x7ffc0000 [ 177.031097][ T6102] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 177.031121][ T6102] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 177.031142][ T6102] Quota error (device loop8): write_blk: dquota write failed [ 177.031163][ T6102] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 177.092303][ T29] audit: type=1326 audit(1767619927.503:39487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f8a59d8f749 code=0x7ffc0000 [ 177.115804][ T29] audit: type=1326 audit(1767619927.553:39488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a59d865e7 code=0x7ffc0000 [ 177.139067][ T29] audit: type=1326 audit(1767619927.553:39489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10029 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a59d2b829 code=0x7ffc0000 [ 177.140813][ T6102] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 177.191454][T10053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.200703][T10053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.210556][T10036] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 177.228281][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2207'. [ 177.268635][ T8828] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.310813][T10057] loop8: detected capacity change from 0 to 1024 [ 177.317974][T10057] EXT4-fs: inline encryption not supported [ 177.323858][T10057] EXT4-fs: Ignoring removed orlov option [ 177.330237][T10057] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 177.350635][T10057] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 177.359221][T10057] System zones: 0-1, 3-12 [ 177.364349][T10057] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.376802][T10062] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2211'. [ 177.390890][T10062] lo: Caught tx_queue_len zero misconfig [ 177.400050][T10062] program syz.7.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.420995][ T8828] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.472177][T10067] loop8: detected capacity change from 0 to 1024 [ 177.480205][T10067] EXT4-fs: inline encryption not supported [ 177.486263][T10067] EXT4-fs: Ignoring removed orlov option [ 177.493374][T10067] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 177.504211][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2214'. [ 177.519272][T10067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 177.527680][T10067] System zones: 0-1, 3-12 [ 177.541121][T10067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.601691][ T8828] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.727036][T10083] 8021q: VLANs not supported on wg1 [ 177.840037][T10090] random: crng reseeded on system resumption [ 177.851870][T10090] Restarting kernel threads ... [ 177.857222][T10090] Done restarting kernel threads. [ 177.890277][T10092] program syz.9.2225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.916309][T10094] ..@ÿ: renamed from bond_slave_0 (while UP) [ 177.938864][T10094] loop4: detected capacity change from 0 to 1024 [ 177.946785][T10094] EXT4-fs: Ignoring removed i_version option [ 177.953383][T10094] EXT4-fs: Ignoring removed i_version option [ 177.961393][T10094] EXT4-fs (loop4): filesystem too large to mount safely on this system [ 177.988369][T10094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.033665][T10099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10099 comm=syz.4.2220 [ 178.051935][T10094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.063344][T10098] loop9: detected capacity change from 0 to 512 [ 178.071216][T10098] EXT4-fs: Ignoring removed i_version option [ 178.077391][T10098] EXT4-fs: Ignoring removed bh option [ 178.099944][T10098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.113133][T10098] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.140333][T10094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.151693][ T8841] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.193519][T10094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.255999][ T6117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.269282][ T6117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.292465][ T6117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.300903][ T6117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.495704][T10112] lo speed is unknown, defaulting to 1000 [ 178.574367][T10118] loop7: detected capacity change from 0 to 1024 [ 178.592347][T10118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.610437][T10118] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.651389][T10118] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2233: bg 0: block 112: padding at end of block bitmap is not set [ 178.666458][T10118] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.2233: Freeing blocks not in datazone - block = 0, count = 16 [ 178.830712][ T8523] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 178.892907][ T6117] ================================================================== [ 178.901048][ T6117] BUG: KCSAN: data-race in l2tp_tunnel_del_work / sk_common_release [ 178.909066][ T6117] [ 178.911419][ T6117] write to 0xffff88811bce50e0 of 8 bytes by task 10132 on cpu 1: [ 178.919154][ T6117] sk_common_release+0xae/0x230 [ 178.924205][ T6117] udp_lib_close+0x15/0x20 [ 178.928654][ T6117] inet_release+0xce/0xf0 [ 178.933005][ T6117] sock_close+0x6b/0x150 [ 178.937281][ T6117] __fput+0x29b/0x650 [ 178.941388][ T6117] ____fput+0x1c/0x30 [ 178.945585][ T6117] task_work_run+0x131/0x1a0 [ 178.950225][ T6117] exit_to_user_mode_loop+0x1fe/0x740 [ 178.955638][ T6117] do_syscall_64+0x1dd/0x2b0 [ 178.960274][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.966219][ T6117] [ 178.968584][ T6117] read to 0xffff88811bce50e0 of 8 bytes by task 6117 on cpu 0: [ 178.976150][ T6117] l2tp_tunnel_del_work+0x2f/0x1a0 [ 178.981298][ T6117] process_scheduled_works+0x4ce/0x9d0 [ 178.986780][ T6117] worker_thread+0x582/0x770 [ 178.991404][ T6117] kthread+0x489/0x510 [ 178.995527][ T6117] ret_from_fork+0x149/0x290 [ 179.000158][ T6117] ret_from_fork_asm+0x1a/0x30 [ 179.004948][ T6117] [ 179.007281][ T6117] value changed: 0xffff88811b477a80 -> 0x0000000000000000 [ 179.014506][ T6117] [ 179.016862][ T6117] Reported by Kernel Concurrency Sanitizer on: [ 179.023194][ T6117] CPU: 0 UID: 0 PID: 6117 Comm: kworker/u8:55 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.034772][ T6117] Tainted: [W]=WARN [ 179.038594][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 179.048678][ T6117] Workqueue: l2tp l2tp_tunnel_del_work [ 179.054176][ T6117] ==================================================================