last executing test programs: 4m47.866170297s ago: executing program 32 (id=511): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x31) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x74, 0x4745d7f32fab0664) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x100008, 0x29b}, &(0x7f0000010080), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000002680)=[{0x0}, {&(0x7f0000000800)=""/158, 0x9e}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x1, 0x7, 0x97, 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000007c0)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011", 0x45}], 0x64, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r7, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r8 = syz_io_uring_setup(0x4f8c, &(0x7f0000000680)={0x0, 0x10002000, 0x20000, 0x0, 0x260, 0x0, r2}, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @empty, 0xbf6b}}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x14) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x5b43, 0x0, 0x20, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000640), 0x0, &(0x7f0000000280)={[{@clone_children}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000340)) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[], 0x0) 4m18.666949311s ago: executing program 33 (id=954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2ea556c78080981f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18007d2cf69f541b68000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r5, 0x3, 0x1, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 2m17.651862174s ago: executing program 6 (id=2230): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) write$selinux_load(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x43) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000100)={0x2, 0x1}) 2m17.585659221s ago: executing program 6 (id=2231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000300)={0x0, 0x400}, 0x18) 2m17.535793694s ago: executing program 6 (id=2233): io_uring_setup(0x3c92, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 2m17.468364222s ago: executing program 6 (id=2235): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000002500)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4349f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3ead626c1d2066af967a377629e150dd6d7d79f8523c462d6fa3fc44a36a9a283618c9a4cb257cd99cba9dc12336ff4ae70778a76e42db65ff8a3e84dcc8cd5839980de073a50fb6c138116e924e08be4985a90905a4779cbc769e99de3a163e853f94d82e5b03c515e062b7d53c78144b8249b75045ddbea16e69b37caaf1ea4bd76dc5f8291df407119dd09225adb6f0c1"], 0xf9, 0x121d, &(0x7f00000038c0)="$eJzs3E9rXFUYB+A348Skqfmj1mq70ANuxMWlycKVIEFSkAwotRFaQbg1Ex1ynSm5Q2BErK7c+jlcuxP8Btn4Gdxl02UX4pXe2zRNHA0i40j6PIvcl7znN+dcmFmc4Z45fPv7L3Z3ymwnH0ZrZiZadyPSgxQpWnHk1c3meuv25nqns3EjpevrN1ffSiktvfbzx1/NRcTFj35c+mkuDlY+Oby/9uvB5YMrh7/f/LxXpl6Z+oNhytOdwWCY3ymW0nav3M1S+qDo5mU39fpld++JfjftvBkRo5T3txcX7u51yzLl/VHa7Y7ScJCGe6OUf5b3+inLsrS4EPyl2bOHbP3woKqqiKqajWejqqrqQizExXguFmMpvomZdjPuUrwUl+PleCWu1KMmvnYAAAAAAAAAAAAAAAAAAAB4qvzd+f/lWInn44V40fl/AAAAAAAAAAAAAAAAAAAAmKgPb93eXO90Nm6kNB9RfLe/tb/VXJv+ysM/RXTjWizHb1Gf/m809fX3OhvXUm0lvi3uPcrf2996ps6vH+VX658TeJRv172j/GqTTyfzc7HwML8TvTq/Fstxafz8a2Pz8/HG60/ks1iOXz6NQRSxXc99nP96NaV33++cyl+txwEAAMB5kKXHxu7fs+xEf/a43+Qf76/P/n7g1P66HVfb0713IsrRl7t5q+ju1UVxVMz/6T+TK+Jfvk7Ef7bUU0XE/aou5k62WhOatDW1Ox1XzPw/lnGOilZMcfYLcfpjxfl3/DaY9koAAAAAAAAAAAD4Jyb8XGE7xjxZ9s50bhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+IMdOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMFAAD//8q7wuo=") r0 = syz_clone3(&(0x7f00000007c0)={0x24001000, &(0x7f0000000380), 0x0, 0x0, {0x3f}, &(0x7f0000000540)=""/2, 0x2, 0x0, 0x0}, 0x58) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000010040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000010140)={&(0x7f0000010000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000010100)={&(0x7f0000010080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf250200000008000600ac1414bb06000a004e21000014000700fe8000c9679f96c7caeea67f000000000000000000000000bb14000700fe8000000000000000000000000000aa060001004e2200000500030000000000050003002c00000008000800ac1414251400090020010000000000"], 0x80}, 0x1, 0x0, 0x0, 0x18}, 0x4808) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000a00000a14000000118b45fdffe79305cdac7115d0000100"], 0x28}}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000008b000000000000e900f14a315dbec89b60", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x805) r9 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000200)={0xecc}, 0x4) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000001840)=""/156) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 2m17.099998778s ago: executing program 6 (id=2245): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10001, 0x800) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000040)) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000000c0)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @rand_addr, @local}, &(0x7f0000000140)=0xc) (rerun: 64) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={@local, @mcast2, @empty, 0xbd7a, 0x3, 0x0, 0x500, 0xd4, 0x6910090}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x29, 0x7f, 0x4, 0xfff, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0x4, 0x9}}) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x4) (async) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x6, 0x401, 0x6]}, &(0x7f0000000380)=0x44) syz_clone3(&(0x7f0000000600)={0x812100, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x2e}, &(0x7f0000000480)=""/66, 0x42, &(0x7f0000000500)=""/167, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7}, 0x58) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000680)=[r0, r0, r4, 0xffffffffffffffff], 0x4) (async, rerun: 64) bpf$PROG_BIND_MAP(0x23, &(0x7f00000006c0)={r1, r1}, 0xc) (rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001800)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/233, 0xe9}, &(0x7f0000001840)=0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001980)={@cgroup=r1, 0x13, 0x0, 0x41e4, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@fallback=r4, r1, 0x21, 0x2000, 0x0, @value=r1, @void, @void, @void, r5}, 0x20) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@generic={&(0x7f0000001a00)='./file0\x00'}, 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001b00)={'syztnl0\x00', &(0x7f0000001a80)={'ip6tnl0\x00', r2, 0x4, 0x9, 0x9d, 0x4, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x1, 0x700, 0x9}}) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b80)={&(0x7f0000001b40)='objagg_obj_put\x00', r1, 0x0, 0xfff}, 0x18) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) (async) io_uring_setup(0x6a4f, &(0x7f0000001bc0)={0x0, 0xe586, 0x200, 0x2, 0x1cb}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e40)={0x11, 0xb, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7}, [@printk={@ld}]}, &(0x7f0000001cc0)='GPL\x00', 0x1, 0xb1, &(0x7f0000001d00)=""/177, 0x41000, 0x3, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001e00)={0x4, 0xa, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000023c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002380)={&(0x7f0000001f40)={0x440, 0x3f4, 0x20, 0x70bd2d, 0x25dfdbfc, {0x6, 0x0, 0x1f, [0xc8, 0x2, 0xfffffe00, 0x5, 0xef, 0x40, 0xfffffff3, 0xffffffff, 0x5, 0xfffffffa, 0xc, 0xff, 0x6, 0x5, 0x52d, 0x401, 0x0, 0x3, 0x9, 0x2, 0x40, 0xffffff85, 0x0, 0x9, 0x1, 0x4, 0xfffffff9, 0xf56e, 0x100, 0x6, 0x8, 0x2d84, 0x3, 0x2, 0x5, 0x100, 0x1, 0x7, 0xf, 0x10001, 0x4, 0x2da1, 0x3ff, 0xff, 0x7, 0x7, 0x7, 0x7, 0x2, 0x0, 0x401, 0x2, 0x6, 0x0, 0x7, 0x3, 0x7fffffff, 0x1a1, 0x2, 0x3, 0xffff0001, 0xab0, 0x0, 0x3], [0x5, 0x3, 0x5, 0xff, 0x7, 0x8000000, 0x7, 0x5, 0x2da2b2ac, 0x7ff, 0x1, 0x4, 0x9, 0xef5, 0xef, 0x40, 0x6, 0x5, 0x200, 0x8, 0x8, 0x400, 0x2, 0x7, 0xcca, 0xee735a51, 0x2, 0x9f8, 0x800, 0x8, 0x80000001, 0x0, 0x2, 0x5, 0x2, 0x9, 0x2, 0xbb, 0x101, 0x1, 0x2, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x68858c6e, 0xc7, 0xffffff94, 0xc, 0xf, 0x4, 0x15, 0x1, 0x1, 0x7, 0x7ff, 0xe, 0x2, 0x0, 0x0, 0x8, 0x1, 0x6], [0x3, 0x1, 0x1, 0x9eb9, 0x53, 0x7, 0xfd, 0x6, 0x73, 0xfffffff9, 0x3, 0x40, 0x4, 0x8, 0x9, 0x2, 0x2, 0x7, 0xb, 0x5, 0x5, 0x8, 0x2, 0x2, 0x5, 0x8001, 0xea9, 0x4, 0x6, 0xfffffffb, 0x1, 0x0, 0x8, 0x2, 0x7, 0x9, 0x4, 0x2e33, 0x3, 0x7, 0x2d6, 0x0, 0x7, 0x0, 0x8, 0x3, 0x6, 0x7, 0x9, 0x2, 0x0, 0x8, 0x6, 0xfffffff7, 0x3ff, 0x6, 0x4, 0xfff, 0x0, 0x6, 0x73, 0xff80, 0x401, 0x5], [0x7, 0xfff, 0x7, 0x8, 0x11, 0x9, 0x0, 0x5, 0x8, 0x6, 0x2, 0x3, 0xd23, 0x2, 0x9c, 0x0, 0x8001, 0x8001, 0xfffffffc, 0xfffffffb, 0x8, 0x200, 0x7b4, 0x9, 0x4, 0x100, 0x7fffffff, 0x7fffffff, 0xcac, 0xffff, 0x3, 0x3, 0x2, 0x8, 0x4, 0x30, 0x5, 0x2, 0xecae, 0xa9, 0x5, 0x0, 0x80000000, 0x69, 0x5, 0x0, 0xb793, 0x8, 0x7fffffff, 0x4, 0x0, 0x7f, 0x5, 0x3, 0x8, 0x7, 0x7ff, 0x0, 0x6, 0x5a155a3c, 0x4, 0x5, 0x3, 0x6], 0x1f, ['\\\x00', 'GPL\x00', '>\x00', '/-,\xa0*(-!\x00', '\x00', '.\'%]\x00', '\'\x00', 'vlan0\x00']}, [""]}, 0x440}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async, rerun: 64) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)=@getchain={0x34, 0x66, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xd, 0xffeb}, {0x0, 0x7}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x2e}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x801) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000002500)=0x10, 0x4) (async) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000002540)={0x0, {{0x2, 0x4e20, @empty}}, 0x1, 0x3, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @loopback}}]}, 0x210) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000002780)={'HL\x00'}, &(0x7f00000027c0)=0x1e) (async) getpeername$llc(r1, &(0x7f0000002800)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002840)=0x10) ioctl$BLKCLOSEZONE(r1, 0x40101287, &(0x7f0000002880)={0x79405acc, 0x1}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000002940)='ns/pid_for_children\x00') 2m16.847221536s ago: executing program 6 (id=2250): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast1, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x3}, 0x3c) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='net/ip_mr_cache\x00', &(0x7f0000000180)='\xb3\x85\x00', &(0x7f00000001c0)='\xbb&\',%#\'\x9f}\xa4({\x96\x00']}, &(0x7f0000000400)={[&(0x7f0000000240)='net/ip_mr_cache\x00', &(0x7f0000000300)=',&\x00', &(0x7f0000000340)='$@+*%,+*-.\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='net/ip_mr_cache\x00']}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 2m16.641862342s ago: executing program 34 (id=2250): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast1, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x3}, 0x3c) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='net/ip_mr_cache\x00', &(0x7f0000000180)='\xb3\x85\x00', &(0x7f00000001c0)='\xbb&\',%#\'\x9f}\xa4({\x96\x00']}, &(0x7f0000000400)={[&(0x7f0000000240)='net/ip_mr_cache\x00', &(0x7f0000000300)=',&\x00', &(0x7f0000000340)='$@+*%,+*-.\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='net/ip_mr_cache\x00']}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 2m10.950300065s ago: executing program 0 (id=2372): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@data_err_ignore}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x588, &(0x7f0000000c40)="$eJzs3c9rFOcbAPBnNll/fzWCyLc9lICHWqwbk/SHhYL2WFqp0N51SdYg2biS3YhJBfVQofRSpFBKhdI/oPcepX9AS889C60gIqE99JIym1mzJtmsiWs3dj4fmOR9Z2b3nXdnnnef2ZllA8it4fRPIeKliPgyiTjQtmwwsoXDy+stPro2kU5JLC19/DCJJJvXWj/J/u/NKv+PiJ8+izhWWNtufX5hulytVmaz+khj5vJIfX7h+MWZ8lRlqnJpbHz85JvjY++8/VbP+vra2b+++eju+ye/OLL49Q/3D95O4nTsy5a19+MZ3GivDMdw9poU4/SqFUd70Nh2kvR7A9iSgSzOi5GOAQdiIIt64L/vekQsATmViH/IqVYe0Dq379F58AvjwXvLJ0Br+z+4/NlI7GqeG+1ZTJ44M0rPd4d60H7axo9/3LmdTtHlc4jrPWgPoOXGzYg4MTi4dvxLsvFv6040Pzze2Oo28vb+A/10N81/Xl8v/yk8zn9infxn7zqxuxXd479wvwfNdJTmf++um/8+HrqGBrLa/5o5XzG5cLFaORER+yPiaBR3pvWNruecXLy31GlZe/6XTmn7rVww2477gzuffMxkuVF+lj63e3Az4uWV/DeJNeP/rmauu3r/p6/H2bTw8+dd2zhcufNKp2Xd+9+u9xnw0vcRr667/1euaCUbX58caR4PI62jYq0/bx3+pVP7m+t/76X7f8/G/R9K2q/X1jffxne7/q50WrbV439H8kmzvCObd7XcaMyORuxIPmzWH+5umz+28thWvbV+2v+jRzYe/9Y7/tOnP9++ASt+3b9qxq1Dt85vvf/PV9r/yU3t/80X7n3w6bed2n+6/f9Gs3Q0m/M049/TbuCzvHYAAAAAAACw3RQiYl8khdLjcqFQKi3f33Eo9hSqtXrj2IXa3KXJaH5XdiiKhdaV7gNt90OMZvfDtupjq+rjEXEwIr4a2N2slyZq1cl+dx4AAAAAAAAAAAAAAAAAAAC2ib0dvv+f+n2g31sHPHd+8hvyq2v89+KXnoBtyfs/5Jf4h/wS/5Bf4h/yS/xDfol/yC/xD/kl/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp45k05Li4+uTaT1ySvzc9O1K8cnK/Xp0szcRGmiNnu5NFWrTVUrpYnaTLfnq9Zql0fHYu7qSKNSb4zU5xfOzdTmLjXOXZwpT1XOVYr/Sq8AAAAAAAAAAAAAAAAAAADgxVKfX5guV6uV2ZwUihGx2Uedim2y8VssJN328qnsYNhgnd/WzImsMNj/Dio8h0KfByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPNPAAAA//+B4TVJ") syz_io_uring_setup(0x10e, 0x0, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32=0x0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 2m10.772674578s ago: executing program 0 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a80)=ANY=[@ANYBLOB="240000002600010028bd7000ffdbdf251400fb8010"], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) chroot(&(0x7f00000000c0)='./file1\x00') ftruncate(r2, 0x2007ffc) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000030c0)=""/4106, 0x100a}], 0x1, 0x9, 0x87052) 2m10.392933134s ago: executing program 0 (id=2385): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000006, 0x8012, r0, 0x69236000) 2m10.29357244s ago: executing program 0 (id=2389): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000002500)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf9, 0x121d, &(0x7f00000038c0)="$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") r0 = syz_clone3(&(0x7f00000007c0)={0x24001000, &(0x7f0000000380), 0x0, 0x0, {0x3f}, &(0x7f0000000540)=""/2, 0x2, 0x0, 0x0}, 0x58) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000010040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000010140)={&(0x7f0000010000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000010100)={&(0x7f0000010080)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf250200000008000600ac1414bb06000a004e21000014000700fe8000c9679f96c7caeea67f000000000000000000000000bb14000700fe8000000000000000000000000000aa060001004e2200000500030000000000050003002c00000008000800ac1414251400090020010000000000"], 0x80}, 0x1, 0x0, 0x0, 0x18}, 0x4808) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x94) r6 = socket(0x10, 0x3, 0x9) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000a00000a14000000118b45fdffe79305cdac7115d0000100"], 0x28}}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000008b000000000000e900f14a315dbec89b60", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x805) r9 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000000200)={0xecc}, 0x4) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000001840)=""/156) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES16=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 2m9.744470692s ago: executing program 0 (id=2398): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00095c0000005c3085262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc0193892d6e21742dcd7cc5f1"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x18) r7 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") close(0x3) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x13, r1, 0x8, &(0x7f0000000580)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xd}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="db8eb9f1347aae01dbd857e27613e1247d04335824730e4ae3d54d", @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYRESOCT=r9, @ANYBLOB="ee108368a47a626343260c4ba6d7926716b3eda7c10b08988f660b5b30234086befab4ca55e16388ed291f0645e3cb69915524b5816738ad01e6bdff5b125dfcea739eae59aae159a0becc925de973ea48d5e9142719bd9f3ad43f2cfc499a0f0f4162bb71a0289245c24a4bf2d0e02262c57a0e0807e3f6eb"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000018110000000000000000000000000200", @ANYRES64=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7b98}, 0x10, 0x5, 0x8, 0x9, 0x7fffffffffffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300c0895fbcf5817cb600000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000f0000000000000000000000852000000400000085100000ed000000186800000a000000000000000400000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xd192}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="00ffffffffffffffdd00"/28, @ANYRES16=r2, @ANYRES32, @ANYRES64=r10], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$session_to_parent(0x12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2m8.620685999s ago: executing program 0 (id=2405): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746d", 0xe0}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) 2m8.567378064s ago: executing program 35 (id=2405): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746d", 0xe0}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="853d812375877866806fdff43051b4023fa2334c45b8d31dff2233f12c7ffec14b58976722a067ecd394dcf55ad8bc6adf88e0dd053d47e5ddc3b08ac01e128339844430d1033bc401927fd38018f2b0e9b713aa160d7b265e90ca90a88cbb0b1493ccdd35f17ed434451c742e3d9c7607fb338490fb578a48c1853a42bbd171367e33a75c9cde0160143ad61ffad513ae1059f9e31087c6448fae895aa68e70fa53628160525c97bf79f68247bf691e8e46c94c3c0fa018fd9d10c19d7bf717ef1da47e10b55a09cb5e411146c03b26abef74a1b955c2202b9a4838f5b2495c6728602328820e2df2acfb22138f1d86c29f73641d1a55e8deadd320d9e951b33370ccebbd05a4d4358c514b5c7b695a9ec90b36ac77e9dd4e03569065d281b1b727a1692e26b8f363d7540e8ca2e806164a6fc46f8e2d2a6c128daf63a398077a13fbc0d539bda7fb8b904638e612482b548f1a089ec8d80fe0e6baf6379a037ce7efdf6ede864f2c8736b1abb71991ba15f2fd1372314390de9a3fa1a4eefc12dfd5bbf5c6606a4a5d2e08742f02fbc8aaa140a652369a2200736851cf259dde2999c8b2539d7702d0b37aae943e160e14d24b3eaa0b025d55a16c924f16e9eecebbc52b2069ba5223df0e252c78372aa13958a89a2b3a2044aa2275817ac942b261d2f2c25c45984b8af9dfa7652f7530aa4e714ad4c66b65ebaf42e223e415f1326bfd00d98bdaa4396a23aaa3623d0324beb61843f685a4e577247ae9b833aee04e55ae6d336d73513fbdcc62af87d2ba946a9c25d175e66990c636df62f853377274c1a04fb1fb235ee080cad746e239cdc728474812e995ac0c670f9885ad7704a281044948efd5170cab39daa5b034349741fb857260796231aa7864e9517c159e7a5e05d86dd4f4185d0ece85f3bcdaf83dab3e2dfbe8ee2786b23b7f0dda7243e217382da2d3f481447f0f54f2d4b0d52e7afb07cc615c06699f53aadaf1073cbc7e40477acad0a92ec51ee421524bc082abb17cd85d21caf69dafb65e4896f5879c8c4e5a1ac91d4b9529da9cab44e27a88a1d446d5e59f6e186083d7b10ba0cee1933f62e8326fac01b12bdf3e6f7b9e18d729eb65d6e61bc29380e282347311220f54c7b52c3760a194a7a74f9aa418ce", 0x337}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) 1m55.020904201s ago: executing program 2 (id=2631): r0 = msgget$private(0x0, 0xc4) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) msgrcv(r0, 0x0, 0x43, 0x0, 0x0) msgsnd(r0, &(0x7f0000000580)=ANY=[@ANYRES16], 0x8, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffd45, 0x80) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f00000000c0)={&(0x7f0000000040)="c5857fa7bf02470c7cd9bd908bcdbabf", 0x10, &(0x7f0000000080)=""/63, 0x3f}) 1m54.12120683s ago: executing program 2 (id=2649): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) fcntl$setflags(r0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8000, 0x80, 0x7f, 0xeb8, {{0x23, 0x4, 0x0, 0x13, 0x8c, 0x67, 0x0, 0xff, 0x4, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x39, 0x1, 0xc, [{@multicast1}, {@multicast2, 0x2}, {@rand_addr=0x64010101, 0x5}]}, @generic={0x94, 0x4, 'a+'}, @rr={0x7, 0x23, 0x87, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010100, @loopback, @remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x63, 0x3, 0x7, [{@multicast2, 0x9}, {@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@broadcast, 0x9}, {@broadcast}]}, @ssrr={0x89, 0x7, 0xa7, [@private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r3, 0x29, 0x81, 0x2, 0x9, 0x31, @local, @mcast2, 0x1, 0x80, 0xffff, 0x10}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0xe8) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r6, &(0x7f0000000340)) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000380), &(0x7f00000003c0)={0x0, 0xfb, 0xad, 0x1, 0x10, "46c0c8a1fd1c0869036bf3a4b2d4a736", "e38963c748badf08254e781740df659972f21fbf1d0bec434d6823cda89463f06cc51d1d73f4d608553b37b9c89d5556d9301573e7f6bdc6e2a3d1133effb97b44306ead54699e9a5bd4c3f338859a2e32781e523a6c29b9095540d1b8ca7f08a8d10801dedb5529c92a506215e3036d66e65596f7682e2d8bd7325a49b60803c030bd22ca4371c1735d088686ca561171f307d0cb9e8fbe"}, 0xad, 0x2) (async) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000480), &(0x7f00000004c0)=0xe) (async) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000500)=0x7a134) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000740)={0x0, 0x5}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000007c0)={0x0, 0xe}, &(0x7f0000000800)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000540)=@in6={0xa, 0x4e23, 0x3ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000580)="5c659df93972a68d9316d29182b401c8d46d7662b0f25f6788801dfb87aff314cba7b52928eaacfd098fa6bd52bd37ec35dc6b21327be52a6c9606d7d9009db731c8d4de4320ddef", 0x48}, {&(0x7f0000000600)="30d9c40ea61d9f64d73390c096256f9f", 0x10}, {&(0x7f0000000640)="b856ed63b5d24e859c01e08724a9ccf239c5ba3523d949105e0de7732437d6e3ac674da3140c07cd4876b3926c97d46fc4dd14be98c09c8501b0d8632e45518bf2eb264de4a1227881580589e92e79069e9ea9bf582b1d3c5c4dc61b48eefc11ca4b9f08ee16a88b40014efc154a673a1058391bc0c6f1857a129b89224df7bdc834ed70deb431f7629dc4690b7df9b1a2", 0x91}], 0x3, &(0x7f0000000840)=[@init={0x18, 0x84, 0x0, {0x4, 0x7f, 0x8483}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x204, 0xeec, 0x4, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x9, 0x8208, 0xfffff1fc, 0x2, 0x60e, 0x6, 0x77, r8}}, @init={0x18, 0x84, 0x0, {0xc, 0x9, 0x0, 0x5}}, @init={0x18, 0x84, 0x0, {0x8001, 0x26e8, 0x5, 0x101}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x1e5, 0x8, 0x1, 0x1}}, @init={0x18, 0x84, 0x0, {0x401, 0x7, 0x6, 0x8}}], 0x100, 0x20000000}], 0x1, 0x80) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000980)={r7, @in6={{0xa, 0x4e20, 0x1ff, @mcast2, 0x5}}, 0x3, 0x9}, &(0x7f0000000a40)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000a80)={0x0, 0x2}, &(0x7f0000000ac0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000b00)={r10, 0x9, 0x6, 0xf9dc, 0x1, 0x1095, 0x4, 0x7ff, {r11, @in={{0x2, 0x4e22, @broadcast}}, 0xf049, 0xff, 0x4, 0x81, 0x2}}, &(0x7f0000000bc0)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000c00)={r12, 0x6}, 0x8) (async) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0xd8e3, 0x0, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r14, 0x6, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) (async) r15 = syz_clone(0x40000000, &(0x7f0000000dc0), 0x0, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="25244f2b90a819bc07fdab4796f63d88a2589cfca42f93b3335ba71e28688ee1aa986144157d37b425a3156dc52673fb0856d6f17cb966f29e206d339e44ef01f13839fd13618ec683c65f7193ad40df971063889f1e889d093f0e3c5f4cf8c843d66bb4dc901d8247f9d6b7e9396e33d351249427a71fe4588eb892569a") r16 = syz_open_procfs(r15, &(0x7f0000000f00)='statm\x00') (async) chdir(&(0x7f0000000f40)='./file0\x00') (async) wait4(r15, &(0x7f0000000f80), 0x8, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000fc0)) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r16, 0x84, 0x71, &(0x7f0000001080)={r8, 0x4}, 0x8) (async) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000010c0)={0x0, 0x4, 0x1, 0x3}) 1m53.897441122s ago: executing program 2 (id=2654): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000d80), r0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x240) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000dc0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x7, r4, 0x0, 0x2, 0x4}}, 0x20) 1m53.849485758s ago: executing program 2 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x20000600}}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, 0x0, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r6, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ffffff, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x6, 0x3, 0x0, 0xed, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0xffffff38, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r10}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m53.71793332s ago: executing program 2 (id=2660): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0xffffffff, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r8, @ANYBLOB="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"], 0x8c8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r11}, 0x20) 1m38.463913896s ago: executing program 36 (id=2660): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0xffffffff, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r8, @ANYBLOB="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"], 0x8c8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r11}, 0x20) 1m25.452441023s ago: executing program 8 (id=3167): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m25.414547524s ago: executing program 8 (id=3168): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00095c0000005c3085262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc0193892d6e21742dcd7cc5f1"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x18) r7 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") close(0x3) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x13, r1, 0x8, &(0x7f0000000580)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xd}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="db8eb9f1347aae01dbd857e27613e1247d04335824730e4ae3d54d", @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYRESOCT=r9, @ANYBLOB="ee108368a47a626343260c4ba6d7926716b3eda7c10b08988f660b5b30234086befab4ca55e16388ed291f0645e3cb69915524b5816738ad01e6bdff5b125dfcea739eae59aae159a0becc925de973ea48d5e9142719bd9f3ad43f2cfc499a0f0f4162bb71a0289245c24a4bf2d0e02262c57a0e0807e3f6eb"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000018110000000000000000000000000200", @ANYRES64=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7b98}, 0x10, 0x5, 0x8, 0x9, 0x7fffffffffffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300c0895fbcf5817cb600000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000f0000000000000000000000852000000400000085100000ed000000186800000a000000000000000400000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xd192}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYBLOB="7b3100d4f4b4032bfa77d4d8030000000900a0c519c14b8928245bab1a5e6b2e41a73b5da98326374ac669d1f3dfc678bc3bf3ca61cbf97c92a6dbc95a04705d7cbf8f8e4d6772f4cba4fa8d39d842ad9c34897f5b12241d362618af23540611d115468b9ee4b32592dcad35951734793582831d2b41ae86de63723ef88f4845ea2f1fca38a208fe3ee31ba3bee37b5cae72d64cdc909e097a4bc1722a82e0e52b16dd5435eb8acd580d2796dd0f2037e164537791ce23786b7b58459ac2e4eacb10ac820c7b7af88c173f8d7f3d33664fb78a3f38c5f6727721b8746f2c10f7901591805eaf376a761ad39e58526397c3826c405bdabe628e87c6c5d10b479cdd3062d2b61cb12ca242da55eb655405b284cb20a34ffaab3991815e058d6ff7c7508ef33bd9d6b92567680f25a45eec469995ed625ad167076478618f8cb26adecfcd65d48b47ab43cae11684c545c96bdaf96e47d7f2fb78fbfd91261024a572dbcd114b1755f949b2bcf0c5548a103baabb6ed8613436e8b09ef5f47ba1bc93aaa0fecce128be10990a040900a3153c4753539ee0a6bf8ddc1555a7f22de9e7ebe21d37465bf9bfed8084429b", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="00ffffffffffffffdd00"/28, @ANYRES16=r2, @ANYRES32, @ANYRES64=r10], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$session_to_parent(0x12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000580)}) 1m24.407220011s ago: executing program 8 (id=3193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m24.088099955s ago: executing program 8 (id=3205): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00095c0000005c3085262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc0193892d6e21742dcd7cc5f1"], 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x0, 0x43, 0xa0, 0xe0, 0x98, 0x220, 0x178, 0x178, 0x220, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x2, 0x3a}, 0x12a, 0xc0, 0xe0, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlabel={{0x28}, {0x3, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x80, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, 0xffffff00, 0xff, '\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x2e, 0x1, 0x18}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ipvlan1\x00', {0x2, 0x7, 0x0, 0x8005, 0xc227, 0x9, 0xee, 0x20, 0x40}, {0x562}}}, @common=@addrtype={{0x30}, {0x135, 0x50c, 0x1, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x5ab, 0x0, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x18) r7 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") close(0x3) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x13, r1, 0x8, &(0x7f0000000580)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xd}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="db8eb9f1347aae01dbd857e27613e1247d04335824730e4ae3d54d", @ANYRES64=r6, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRESOCT=r6, @ANYRESDEC=r7, @ANYRESOCT=r9, @ANYBLOB="ee108368a47a626343260c4ba6d7926716b3eda7c10b08988f660b5b30234086befab4ca55e16388ed291f0645e3cb69915524b5816738ad01e6bdff5b125dfcea739eae59aae159a0becc925de973ea48d5e9142719bd9f3ad43f2cfc499a0f0f4162bb71a0289245c24a4bf2d0e02262c57a0e0807e3f6eb"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="0000000018110000000000000000000000000200", @ANYRES64=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7b98}, 0x10, 0x5, 0x8, 0x9, 0x7fffffffffffffff, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300c0895fbcf5817cb600000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000f0000000000000000000000852000000400000085100000ed000000186800000a000000000000000400000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xd192}, 0x18) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="10000000040000000400000002000000000000", @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB="00ffffffffffffffdd00"/28, @ANYRES16=r2, @ANYRES32, @ANYRES64=r10], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$session_to_parent(0x12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000580)}) 1m22.717084691s ago: executing program 8 (id=3214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000fd0f00000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r3 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x1, 0x8100014e}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="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"], 0x20000600}}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, 0x0, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r6, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd79, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ffffff, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x6, 0x3, 0x0, 0xed, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000500)='GPL\x00', 0x7fffffff, 0xffffff38, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r10}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0x65) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f00000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m22.328989522s ago: executing program 8 (id=3219): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 1m7.245763435s ago: executing program 37 (id=3219): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 1m3.96507055s ago: executing program 1 (id=3531): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f00000003c0)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x67, 0x40, 0xd, 0x8, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x8, 0x1, 0x6}}) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00'}) (async) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) (async) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) (async) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = syz_io_uring_setup(0x49f, &(0x7f0000000540)={0x0, 0x4660, 0x2000, 0x3, 0x285, 0x0, r6}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44042, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f00000001c0)=0x5, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4c, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r7, r0, 0x80000) 1m3.96487301s ago: executing program 1 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100005fff5000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x8010) 1m3.877490327s ago: executing program 1 (id=3533): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) 1m2.950053621s ago: executing program 1 (id=3538): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = geteuid() quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r2, &(0x7f00000004c0)={0x2, 0x2, 0x5, 0xff, 0x6, 0x9, 0x7fffffffffffffff, 0x4, 0x5}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {r2, 0xee00}}, './file0\x00'}) r5 = getgid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid={'resgid', 0x3d, r5}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000600)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r7, @ANYBLOB="2c004f150b95af755a505530f7aeb14bd92f22d29cfb9193bae668e6d6fa0d72e1369ba5e1089a6f8cb880c1d49b879c"]) fsetxattr$system_posix_acl(r1, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x5}, [{0x2, 0x0, r2}], {0x4, 0x4}, [{0x8, 0x6, r4}, {0x8, 0x3, 0xee00}, {0x8, 0x1, r5}, {0x8, 0x4, r7}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r3, &(0x7f0000000680)={'#! ', './file1', [{}, {0x20, 'Y/*'}, {0x20, 'noblock_validity'}, {0x20, '+\xf0'}, {0x20, '.(+!]!]'}], 0xa, "e8f765ccaa2f0b17828d7cceb8bef1dd960c4b5e80c14065247695807ced1c6c62f727"}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94) r11 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) 1m2.163836539s ago: executing program 1 (id=3545): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60940, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0xfffffffa, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x33, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @call={0x85, 0x0, 0x0, 0xa9}, @jmp={0x5, 0x1, 0x5, 0x3, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x8000000, 0xd, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f00000005c0)=[{0x4, 0x3, 0xc, 0x9}, {0x0, 0x1, 0x9, 0x2}, {0x3, 0x2, 0xc, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000600)='ext4_request_blocks\x00', r5, 0x0, 0x5}, 0x9) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000010087e20000050001000700"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b00)={'#! ', '', [{0x20, ' \x15'}, {}], 0xa, "78e9"}, 0xa) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000ac0)='br_fdb_add\x00', 0xffffffffffffffff, 0x0, 0x10}, 0x18) r7 = syz_open_dev$mouse(&(0x7f00000004c0), 0x8000, 0x26600) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000900)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syslog(0x4, &(0x7f0000000a00)=""/95, 0x5f) close_range(r3, 0xffffffffffffffff, 0x0) 1m0.261528404s ago: executing program 1 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xd4, 0x11, 0x0, 0x0, 0x0, 0xf, 0x2d011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x408, 0x5}, 0xb008, 0x9, 0x0, 0x8, 0x2b0f, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000480)={[{@errors_remount}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1m0.193613451s ago: executing program 38 (id=3560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xd4, 0x11, 0x0, 0x0, 0x0, 0xf, 0x2d011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x408, 0x5}, 0xb008, 0x9, 0x0, 0x8, 0x2b0f, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000480)={[{@errors_remount}]}, 0x1, 0x4bf, &(0x7f0000000540)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0x1, 0x8000c61) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.577301992s ago: executing program 9 (id=4899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) r1 = socket(0x23, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x80200000, &(0x7f0000000480)="3a501983691285e13543b9403c49a17be6084bf74c58c56279eece95b4a005d64d56ab33992733393f16cc24fb8c9f3aae8762fc282b5f8d0ac70a8ff3c9f261616051adaa7297dc0799f384e7c8a2ced525974f38c5a001312bcd7f31b690418817fbaac29fb01c9326f79a9cbb12532bb2462cb63e3974", 0x78, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) close_range(r1, r2, 0x0) 1.576710782s ago: executing program 9 (id=4901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x200000a, 0x10, r3, 0x6a573000) 1.471571819s ago: executing program 4 (id=4906): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r3, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) copy_file_range(r6, 0x0, r6, &(0x7f0000000080)=0x87d, 0x401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_getaffinity(r7, 0x8, &(0x7f00000000c0)) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.321399831s ago: executing program 7 (id=4911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x105d, &(0x7f00000010c0)="$eJzsz7Fpw0AABdAvIpQLaTRCMorSJm2qQGYwnkB7uFZhL+YF3BoZWcKawBjDe819Pp87LjxUtcaX+dj9J/Wt3B6TU3+N79OmWfrv8+Y16T8+15tKSro2w1dSkvxN5U+Vfdekat+WVckwjuP8Xp3fw73/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP4BIAAP//c5QOFg==") (async) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee01, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x8, 0x202, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8914}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001080)) 1.293127627s ago: executing program 4 (id=4912): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0160000000000000240012800900010069706970000000001400028008000100", @ANYRES32=r2], 0x44}}, 0x40848c0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) accept$inet6(0xffffffffffffffff, &(0x7f0000001280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000012c0)=0x1c) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000011c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 979.756507ms ago: executing program 4 (id=4917): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 908.116436ms ago: executing program 7 (id=4918): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300030c0000000007000000000000020009"], 0x60}, 0x1, 0x7}, 0x0) socket$inet6(0xa, 0x3, 0x3c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xd}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @jmp={0x5, 0x1, 0x4, 0x6, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x94e69947fd60cf48, 0x1, 0x9, 0xa, 0x3, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0x18, 0xffffffffffffffff}, @alu={0x4, 0x1, 0xa, 0x6, 0xb, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x1, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x93}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0xe, 0xbe, &(0x7f0000000100)=""/190, 0x40f00, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x1000, 0xb4fb}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[r5, r5, r5, r5, r6, r5, 0x1], &(0x7f00000002c0)=[{0x0, 0x4, 0xd, 0x4}, {0x0, 0x5, 0x1, 0x2}], 0x10, 0x7ff}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r9 = epoll_create(0x802) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000300)={0x10000001}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_rdma(0x10, 0x3, 0x14) inotify_init1(0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r12) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 788.215491ms ago: executing program 4 (id=4919): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff93}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 648.364087ms ago: executing program 3 (id=4920): close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a3000000000050004000000000005"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000000306010100000800000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) 598.594824ms ago: executing program 9 (id=4922): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 597.856285ms ago: executing program 4 (id=4923): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000280)='.\x00', 0x25000001) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0x9, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r3, 0x47ba, 0x98f1, 0x2a, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r6, 0x0, 0x0, 0x1000f4) copy_file_range(r6, 0x0, r6, &(0x7f0000000080)=0x87d, 0x401, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_getaffinity(r7, 0x8, &(0x7f00000000c0)) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r9, &(0x7f0000000180)=[{&(0x7f0000000740)=""/174, 0xae}], 0x1, 0x8000, 0x4, 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 545.281333ms ago: executing program 7 (id=4924): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYBLOB="d4467fa99f487a3a56e44e6de8f7d76c4a8b4f7cedb4fc3653f33965f34f34c37bc6e5b7a9060d734d9b62060355f66df07c801e1a93bb"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0xf) r3 = socket$key(0xf, 0x3, 0x2) r4 = getpid() syz_pidfd_open(r4, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000000)) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf25010018"], 0x18}}, 0x2000) 544.956003ms ago: executing program 5 (id=4925): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r0, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000001200)=""/147, 0x93}], 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0x0, "0006000000df0066952e0d16c708db720800"}) r1 = syz_open_pts(r0, 0x42) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x4c010) r6 = dup3(r1, r0, 0x0) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xd, {"08c39ee52f329f1698b1c4865f8b0a0a5eee9f496a0809c3d21c25867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76013256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) 543.392124ms ago: executing program 3 (id=4926): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 542.964174ms ago: executing program 7 (id=4927): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, r0, 0x800005, &(0x7f0000000100)=""/62) 499.251788ms ago: executing program 3 (id=4928): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}]}}}]}, 0x3c}}, 0xc004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r8, 0x0, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) accept$inet6(0xffffffffffffffff, &(0x7f0000001280)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000012c0)=0x1c) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000011c0)={'syz', 0x0}, 0x0, 0x0, 0x0) 483.267287ms ago: executing program 9 (id=4929): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000080)=0x13, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_9p2000}], [], 0x6b}}) 432.776345ms ago: executing program 7 (id=4930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(0x0, 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) 432.399525ms ago: executing program 5 (id=4931): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) 431.021455ms ago: executing program 4 (id=4932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x17, 0x4009, 0x0, 0x1, 0x0}) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)) dup3(0xffffffffffffffff, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='rpm_return_int\x00', r1, 0x0, 0xffffffff}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r5, 0x2007ffc) sendfile(r5, r5, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) 401.656442ms ago: executing program 5 (id=4933): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff93}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 381.365662ms ago: executing program 5 (id=4934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 332.638979ms ago: executing program 7 (id=4935): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000180085000000b00000001801000020cf782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='workqueue_queue_work\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x4f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) ftruncate(r2, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f0000000500)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000005c40), 0x403f, 0x0) 332.217239ms ago: executing program 5 (id=4936): unshare(0x20040600) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], &(0x7f0000001f40)=""/4089, 0x34, 0xff9, 0x9, 0x614fc9df}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0xf) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x68}}, 0x4000080) syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r0], 0x1}, 0x58) 329.74687ms ago: executing program 3 (id=4937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}]}, 0x68}}, 0x0) (fail_nth: 2) 293.78345ms ago: executing program 9 (id=4938): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xfff3, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 36.15819ms ago: executing program 3 (id=4939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) bind$xdp(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x2, r3, 0x1, r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 8.349925ms ago: executing program 9 (id=4940): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)) sendmsg$BATADV_CMD_TP_METER(r1, 0x0, 0x20040084) 3.238648ms ago: executing program 3 (id=4941): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xc, r0, 0x800005, &(0x7f0000000100)=""/62) 0s ago: executing program 5 (id=4942): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x9) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) (async, rerun: 32) tgkill(r3, r3, 0x1a) (rerun: 32) waitid(0x2, 0x0, 0x0, 0x4, 0x0) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, 0x0) sendfile(r0, r4, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) io_uring_setup(0x6b8e, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) (async) socket$rds(0x15, 0x5, 0x0) (async) open(0x0, 0x143342, 0x2d) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x3dd3e387) (async, rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) (async) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): otal_active_file 0 [ 327.303301][T13930] total_unevictable 0 [ 327.307402][T13930] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.4048,pid=15331,uid=0 [ 327.322095][T13930] Memory cgroup out of memory: Killed process 15331 (syz.3.4048) total-vm:94100kB, anon-rss:3952kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 327.737019][T15403] loop7: detected capacity change from 0 to 1024 [ 327.752184][T15403] EXT4-fs: Ignoring removed orlov option [ 327.764906][T15403] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 327.851125][T15413] loop9: detected capacity change from 0 to 1024 [ 327.868176][T15413] EXT4-fs: Ignoring removed bh option [ 327.878066][T15413] EXT4-fs: inline encryption not supported [ 327.891664][T15413] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.916855][T15413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 327.926093][T15413] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.4077: lblock 2 mapped to illegal pblock 2 (length 1) [ 327.940322][T15413] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.4077: lblock 0 mapped to illegal pblock 48 (length 1) [ 327.954720][T15413] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4077: Failed to acquire dquot type 0 [ 327.970933][T15413] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 327.980599][T15413] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.4077: mark_inode_dirty error [ 327.994822][T15413] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 328.005308][T15413] EXT4-fs (loop9): 1 orphan inode deleted [ 328.022220][ T295] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.046867][ T295] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 328.233234][T15418] loop4: detected capacity change from 0 to 128 [ 328.348404][T15444] EXT4-fs: Ignoring removed orlov option [ 328.349216][T15444] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 328.588333][T12121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 328.588484][T12121] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 328.588706][T12121] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 328.867817][T15477] EXT4-fs: Ignoring removed orlov option [ 328.874235][T15477] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 329.084775][T15490] EXT4-fs: Ignoring removed bh option [ 329.084843][T15490] EXT4-fs: inline encryption not supported [ 329.085324][T15490] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.086599][T15490] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 329.123317][T15490] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.4106: lblock 2 mapped to illegal pblock 2 (length 1) [ 329.137596][T15490] __quota_error: 149 callbacks suppressed [ 329.137613][T15490] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 329.152345][T15490] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.4106: lblock 0 mapped to illegal pblock 48 (length 1) [ 329.166744][T15490] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 329.175659][T15490] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4106: Failed to acquire dquot type 0 [ 329.188535][T15490] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 329.198322][T15490] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.4106: mark_inode_dirty error [ 329.202588][T15498] __nla_validate_parse: 15 callbacks suppressed [ 329.202653][T15498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4109'. [ 329.209981][T15490] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 329.236940][T15490] EXT4-fs (loop4): 1 orphan inode deleted [ 329.251923][ T2325] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.279561][ T2325] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 329.288215][ T2325] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 329.313637][ T29] audit: type=1326 audit(2000000493.098:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.337434][ T29] audit: type=1326 audit(2000000493.098:13538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.361255][ T29] audit: type=1326 audit(2000000493.098:13539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.385591][ T29] audit: type=1326 audit(2000000493.098:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.409911][ T29] audit: type=1326 audit(2000000493.098:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.433547][ T29] audit: type=1326 audit(2000000493.128:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.457221][ T29] audit: type=1326 audit(2000000493.128:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15506 comm="syz.5.4112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 329.508017][T15512] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4114'. [ 329.521421][T15514] EXT4-fs: Ignoring removed orlov option [ 329.540738][T15514] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 329.572599][T15514] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4115'. [ 329.604478][T15514] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4115'. [ 329.619772][T15527] set_capacity_and_notify: 5 callbacks suppressed [ 329.619806][T15527] loop7: detected capacity change from 0 to 512 [ 329.641402][T15527] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 329.662651][T15527] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.710437][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4123'. [ 329.815168][T13620] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 329.842318][T13620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 329.853385][T13620] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 330.195172][T15552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4129'. [ 330.234803][T15555] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4130'. [ 330.264519][T15555] SELinux: failed to load policy [ 330.298560][T15560] loop4: detected capacity change from 0 to 1024 [ 330.306544][T15560] EXT4-fs: Ignoring removed orlov option [ 330.315006][T15560] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 330.336640][T15560] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4133'. [ 330.347374][T15560] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4133'. [ 330.376707][T15568] loop3: detected capacity change from 0 to 1024 [ 330.383978][T15568] EXT4-fs: Ignoring removed bh option [ 330.389666][T15568] EXT4-fs: inline encryption not supported [ 330.390890][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4136'. [ 330.405842][T15568] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.425718][T15568] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 330.435595][T15568] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4135: lblock 2 mapped to illegal pblock 2 (length 1) [ 330.450608][T15568] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4135: lblock 0 mapped to illegal pblock 48 (length 1) [ 330.465452][T15568] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4135: Failed to acquire dquot type 0 [ 330.476996][T15568] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 330.487019][T15568] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4135: mark_inode_dirty error [ 330.500280][T15568] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 330.530712][T15568] EXT4-fs (loop3): 1 orphan inode deleted [ 330.553275][ T935] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 330.569770][ T935] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 330.758353][T15600] loop7: detected capacity change from 0 to 1024 [ 330.765320][T15600] EXT4-fs: Ignoring removed orlov option [ 330.772164][T15600] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 330.820984][T15604] tipc: New replicast peer: 255.255.255.255 [ 330.827274][T15604] tipc: Enabled bearer , priority 10 [ 330.898041][T15610] 9p: Bad value for 'rfdno' [ 331.058586][T15627] loop5: detected capacity change from 0 to 1024 [ 331.065699][T15627] EXT4-fs: Ignoring removed orlov option [ 331.071788][T15627] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 331.125187][T13930] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 331.139514][T13930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 331.149744][T13930] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 331.257051][T15651] loop5: detected capacity change from 0 to 1024 [ 331.277626][T15651] EXT4-fs: Ignoring removed bh option [ 331.283542][T15651] EXT4-fs: inline encryption not supported [ 331.290030][T15651] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 331.301255][T15651] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 331.329113][T15651] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.4172: lblock 2 mapped to illegal pblock 2 (length 1) [ 331.351231][T15651] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.4172: lblock 0 mapped to illegal pblock 48 (length 1) [ 331.376464][T15651] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4172: Failed to acquire dquot type 0 [ 331.388252][T15651] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 331.398100][T15651] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.4172: mark_inode_dirty error [ 331.419806][T15651] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 331.441493][T15651] EXT4-fs (loop5): 1 orphan inode deleted [ 331.467540][T15666] loop3: detected capacity change from 0 to 1024 [ 331.474153][ T12] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 331.474661][T15666] EXT4-fs: Ignoring removed orlov option [ 331.494959][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 331.501541][T15666] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 331.581483][T15680] program syz.3.4178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.752967][T15702] loop4: detected capacity change from 0 to 1024 [ 331.759811][T15702] EXT4-fs: Ignoring removed orlov option [ 331.766749][T15702] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 331.821816][ T1039] tipc: Node number set to 1864601820 [ 331.914965][T15715] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 332.056284][T13600] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 332.069562][T13600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 332.080697][T13600] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 332.279705][T15739] loop3: detected capacity change from 0 to 1024 [ 332.287325][T15739] EXT4-fs: Ignoring removed orlov option [ 332.293608][T15739] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 332.484328][T15758] loop3: detected capacity change from 0 to 1024 [ 332.491608][T15758] EXT4-fs: Ignoring removed bh option [ 332.499194][T15758] EXT4-fs: inline encryption not supported [ 332.506627][T15758] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.518281][T15758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 332.529145][T15758] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4208: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.546252][T15758] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4208: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.560750][T15758] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4208: Failed to acquire dquot type 0 [ 332.572481][T15758] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 332.583075][T15758] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4208: mark_inode_dirty error [ 332.594812][T15758] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 332.606700][T15758] EXT4-fs (loop3): 1 orphan inode deleted [ 332.622078][ T12] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.645017][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 332.670576][T15770] EXT4-fs: Ignoring removed orlov option [ 332.686969][T15770] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 332.773270][T15784] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 332.781271][T15784] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 332.789387][T15784] System zones: 0-1, 15-15, 18-18, 34-34 [ 332.795286][T15784] EXT4-fs (loop5): orphan cleanup on readonly fs [ 332.801890][T15784] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 332.816551][T15784] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 332.823708][T15784] EXT4-fs (loop5): 1 truncate cleaned up [ 333.147573][T15809] EXT4-fs: Ignoring removed orlov option [ 333.154792][T15809] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 333.623397][T15823] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 333.631715][T15823] EXT4-fs (loop9): orphan cleanup on readonly fs [ 333.639137][T15823] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4243: Failed to acquire dquot type 1 [ 333.650973][T15823] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4243: bg 0: block 40: padding at end of block bitmap is not set [ 333.665468][T15823] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 333.674702][T15823] EXT4-fs (loop9): 1 truncate cleaned up [ 333.749936][T15841] EXT4-fs: Ignoring removed orlov option [ 333.756242][T15841] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 333.776884][T13930] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 333.790506][T13930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 333.823432][T13930] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 333.894735][T15849] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 333.930643][T15866] syz_tun: entered allmulticast mode [ 333.940010][T15866] syz_tun (unregistering): left allmulticast mode [ 334.048905][T15874] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 334.258008][T15881] EXT4-fs: Ignoring removed bh option [ 334.263529][T15881] EXT4-fs: inline encryption not supported [ 334.270811][T15881] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.402123][T15881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 334.413756][T15881] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4252: lblock 2 mapped to illegal pblock 2 (length 1) [ 334.434013][T15881] __quota_error: 260 callbacks suppressed [ 334.434045][T15881] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 334.448351][T15881] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4252: lblock 0 mapped to illegal pblock 48 (length 1) [ 334.464134][T15888] __nla_validate_parse: 37 callbacks suppressed [ 334.464154][T15888] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4254'. [ 334.480116][T15881] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 334.489036][T15881] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4252: Failed to acquire dquot type 0 [ 334.510273][T15881] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 334.527522][T15881] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4252: mark_inode_dirty error [ 334.542617][T15890] syz_tun: entered allmulticast mode [ 334.548097][T15881] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 334.559656][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4255'. [ 334.568776][T15881] EXT4-fs (loop3): 1 orphan inode deleted [ 334.580876][T15890] syz_tun (unregistering): left allmulticast mode [ 334.721149][T15894] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4256'. [ 334.816408][T15901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.836030][T15901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.135053][ T935] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 335.149900][ T935] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 335.158389][ T935] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 335.406902][ T29] audit: type=1326 audit(2000000499.188:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.430954][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4264'. [ 335.440118][ T29] audit: type=1326 audit(2000000499.188:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.463732][ T29] audit: type=1326 audit(2000000499.188:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.487322][ T29] audit: type=1326 audit(2000000499.188:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.511080][ T29] audit: type=1326 audit(2000000499.188:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.534747][ T29] audit: type=1326 audit(2000000499.188:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.558410][ T29] audit: type=1326 audit(2000000499.188:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz.9.4264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 335.584256][T15913] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4264'. [ 335.705683][T13930] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 335.719300][T13930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 335.728964][T13930] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 335.784925][T15923] set_capacity_and_notify: 9 callbacks suppressed [ 335.784942][T15923] loop9: detected capacity change from 0 to 512 [ 335.836058][T15926] loop5: detected capacity change from 0 to 1024 [ 335.845004][T15927] validate_nla: 11 callbacks suppressed [ 335.845019][T15927] netlink: 'syz.3.4269': attribute type 9 has an invalid length. [ 335.858401][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 335.868155][T15923] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 335.879759][T15923] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.4268: bg 0: block 384: padding at end of block bitmap is not set [ 335.899205][T15927] hsr0: entered promiscuous mode [ 335.904362][T15927] macvlan2: entered promiscuous mode [ 335.909830][T15927] macvlan2: entered allmulticast mode [ 335.915308][T15927] hsr0: entered allmulticast mode [ 335.920337][T15927] hsr_slave_0: entered allmulticast mode [ 335.926026][T15927] hsr_slave_1: entered allmulticast mode [ 335.933959][T15926] EXT4-fs: Ignoring removed orlov option [ 335.940047][T15923] EXT4-fs (loop9): Remounting filesystem read-only [ 335.949934][T15926] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 335.964353][T15923] EXT4-fs (loop9): 1 truncate cleaned up [ 335.971247][T15927] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 335.977909][T15927] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 335.986095][T15927] vhci_hcd vhci_hcd.0: Device attached [ 336.007504][T15923] EXT4-fs mount: 92 callbacks suppressed [ 336.007524][T15923] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.054445][T15926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.073089][T12121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.091266][T15926] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4270'. [ 336.101201][T15926] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4270'. [ 336.121603][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.179159][T15952] FAULT_INJECTION: forcing a failure. [ 336.179159][T15952] name failslab, interval 1, probability 0, space 0, times 0 [ 336.191951][T15952] CPU: 1 UID: 0 PID: 15952 Comm: syz.7.4278 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.191991][T15952] Tainted: [W]=WARN [ 336.191999][T15952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.192015][T15952] Call Trace: [ 336.192023][T15952] [ 336.192033][T15952] __dump_stack+0x1d/0x30 [ 336.192064][T15952] dump_stack_lvl+0xe8/0x140 [ 336.192094][T15952] dump_stack+0x15/0x1b [ 336.192117][T15952] should_fail_ex+0x265/0x280 [ 336.192146][T15952] should_failslab+0x8c/0xb0 [ 336.192176][T15952] kmem_cache_alloc_noprof+0x69/0x4b0 [ 336.192204][T15952] ? vm_area_alloc+0x2c/0xb0 [ 336.192236][T15952] vm_area_alloc+0x2c/0xb0 [ 336.192264][T15952] mmap_region+0xadf/0x1410 [ 336.192330][T15952] do_mmap+0x9b3/0xbe0 [ 336.192368][T15952] vm_mmap_pgoff+0x17a/0x2e0 [ 336.192401][T15952] ksys_mmap_pgoff+0xc2/0x310 [ 336.192442][T15952] ? __x64_sys_mmap+0x49/0x70 [ 336.192480][T15952] x64_sys_call+0x16bb/0x3000 [ 336.192520][T15952] do_syscall_64+0xd8/0x2a0 [ 336.192562][T15952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.192587][T15952] RIP: 0033:0x7fe41de3f783 [ 336.192602][T15952] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 336.192624][T15952] RSP: 002b:00007fe41c89ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 336.192648][T15952] RAX: ffffffffffffffda RBX: 00000000000004fe RCX: 00007fe41de3f783 [ 336.192665][T15952] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 336.192678][T15952] RBP: 0000200000000b82 R08: 00000000ffffffff R09: 0000000000000000 [ 336.192690][T15952] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 336.192702][T15952] R13: 00007fe41c89eef0 R14: 00007fe41c89eeb0 R15: 0000200000000780 [ 336.192728][T15952] [ 336.210903][T15956] atomic_op ffff88811b8e6528 conn xmit_atomic 0000000000000000 [ 336.217314][T15956] SELinux: security_context_str_to_sid () failed with errno=-22 [ 336.255072][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4279'. [ 336.311351][T15964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4277'. [ 336.521071][T15970] loop4: detected capacity change from 0 to 1024 [ 336.527861][T15970] EXT4-fs: Ignoring removed orlov option [ 336.534075][T15970] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 336.563693][T15970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.588686][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.664334][T15931] vhci_hcd: connection closed [ 336.664745][ T2325] vhci_hcd vhci_hcd.3: stop threads [ 336.674756][ T2325] vhci_hcd vhci_hcd.3: release socket [ 336.680206][ T2325] vhci_hcd vhci_hcd.3: disconnect device [ 337.032596][T15996] loop5: detected capacity change from 0 to 512 [ 337.040849][T15996] EXT4-fs (loop5): 1 orphan inode deleted [ 337.047584][T15996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.062477][T15996] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.4295: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 337.094529][T15996] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.4295: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 337.121235][T16000] loop7: detected capacity change from 0 to 1024 [ 337.128147][T16000] EXT4-fs: Ignoring removed orlov option [ 337.134603][T16000] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 337.145827][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.164457][T16000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.233293][T10287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.402066][T16028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45103 sclass=netlink_route_socket pid=16028 comm=syz.4.4306 [ 337.459899][T16030] loop3: detected capacity change from 0 to 2048 [ 337.485380][T16030] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.505722][T16030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.572854][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.619253][T16044] loop4: detected capacity change from 0 to 1024 [ 337.626509][T16044] EXT4-fs: Ignoring removed orlov option [ 337.642325][T16044] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 337.670310][T16044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.696686][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.759145][T16057] bridge_slave_1: left allmulticast mode [ 337.765074][T16057] bridge_slave_1: left promiscuous mode [ 337.770956][T16057] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.778836][T16057] bridge_slave_0: left allmulticast mode [ 337.784547][T16057] bridge_slave_0: left promiscuous mode [ 337.790289][T16057] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.899406][T16069] FAULT_INJECTION: forcing a failure. [ 337.899406][T16069] name failslab, interval 1, probability 0, space 0, times 0 [ 337.912249][T16069] CPU: 0 UID: 0 PID: 16069 Comm: syz.3.4323 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.912288][T16069] Tainted: [W]=WARN [ 337.912297][T16069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.912313][T16069] Call Trace: [ 337.912321][T16069] [ 337.912332][T16069] __dump_stack+0x1d/0x30 [ 337.912361][T16069] dump_stack_lvl+0xe8/0x140 [ 337.912428][T16069] dump_stack+0x15/0x1b [ 337.912452][T16069] should_fail_ex+0x265/0x280 [ 337.912555][T16069] should_failslab+0x8c/0xb0 [ 337.912575][T16069] __kmalloc_node_noprof+0xbe/0x5c0 [ 337.912598][T16069] ? crypto_create_tfm_node+0x5c/0x250 [ 337.912653][T16069] crypto_create_tfm_node+0x5c/0x250 [ 337.912680][T16069] ? crypto_alg_mod_lookup+0x2f9/0x490 [ 337.912715][T16069] crypto_alloc_tfm_node+0xdc/0x2b0 [ 337.912783][T16069] crypto_alloc_aead+0x2d/0x40 [ 337.912804][T16069] esp6_init_state+0x3f3/0xa00 [ 337.912864][T16069] ? trace_buffer_unlock_commit_regs+0x114/0x310 [ 337.912894][T16069] ? xas_load+0x413/0x430 [ 337.912927][T16069] __xfrm_init_state+0x740/0xbb0 [ 337.913006][T16069] xfrm_init_state+0x1a/0x80 [ 337.913031][T16069] pfkey_add+0xebc/0x12e0 [ 337.913099][T16069] pfkey_sendmsg+0x718/0x900 [ 337.913135][T16069] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.913162][T16069] __sock_sendmsg+0x145/0x180 [ 337.913263][T16069] ____sys_sendmsg+0x31e/0x4a0 [ 337.913297][T16069] ___sys_sendmsg+0x17b/0x1d0 [ 337.913408][T16069] __x64_sys_sendmsg+0xd4/0x160 [ 337.913496][T16069] x64_sys_call+0x17ba/0x3000 [ 337.913518][T16069] do_syscall_64+0xd8/0x2a0 [ 337.913550][T16069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.913570][T16069] RIP: 0033:0x7fbb7f22f749 [ 337.913584][T16069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.913657][T16069] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.913728][T16069] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 337.913739][T16069] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 337.913750][T16069] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.913797][T16069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.913808][T16069] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 337.913826][T16069] [ 338.188109][T16075] loop4: detected capacity change from 0 to 1024 [ 338.195480][T16075] EXT4-fs: Ignoring removed orlov option [ 338.201903][T16075] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 338.205867][T16077] loop3: detected capacity change from 0 to 512 [ 338.235696][T16082] loop7: detected capacity change from 0 to 512 [ 338.244157][T16075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.245580][T16082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.273718][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.393898][T10287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.513905][T16106] vfat: Unknown parameter 'raw' [ 338.595846][T16117] EXT4-fs: Ignoring removed orlov option [ 338.604667][T16117] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 338.636049][T16117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.668982][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.332966][T16165] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16165 comm=syz.9.4359 [ 339.365088][T16168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.381974][T16168] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm ^: invalid indirect mapped block 4294967295 (level 0) [ 339.397788][T16166] vfat: Unknown parameter 'raw' [ 339.405644][T16168] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm ^: invalid indirect mapped block 4294967295 (level 1) [ 339.419721][T16168] EXT4-fs (loop4): 1 orphan inode deleted [ 339.425529][T16168] EXT4-fs (loop4): 1 truncate cleaned up [ 339.431698][T16168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.453392][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.462979][ T29] kauditd_printk_skb: 867 callbacks suppressed [ 339.462997][ T29] audit: type=1326 audit(2000000503.248:14664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16174 comm="syz.9.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 339.492851][ T29] audit: type=1326 audit(2000000503.248:14665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16174 comm="syz.9.4364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 339.529697][T16177] __nla_validate_parse: 18 callbacks suppressed [ 339.529721][T16177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4365'. [ 339.586077][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4368'. [ 339.590279][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4370'. [ 339.595618][T16185] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4369'. [ 340.042210][T16207] binfmt_misc: register: failed to install interpreter file ./file0 [ 340.086613][T16211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.096220][ T29] audit: type=1400 audit(2000000503.878:14666): avc: denied { mount } for pid=16210 comm="syz.5.4378" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 340.099916][T16211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.146790][T16205] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.164594][T16213] netlink: '+}[@': attribute type 2 has an invalid length. [ 340.166096][T16205] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.184368][T16205] FAULT_INJECTION: forcing a failure. [ 340.184368][T16205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.194639][ T29] audit: type=1400 audit(2000000503.968:14667): avc: denied { unmount } for pid=13600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 340.197756][T16205] CPU: 1 UID: 0 PID: 16205 Comm: syz.3.4375 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 340.197799][T16205] Tainted: [W]=WARN [ 340.197808][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 340.197879][T16205] Call Trace: [ 340.197888][T16205] [ 340.197895][T16205] __dump_stack+0x1d/0x30 [ 340.197920][T16205] dump_stack_lvl+0xe8/0x140 [ 340.198070][T16205] dump_stack+0x15/0x1b [ 340.198096][T16205] should_fail_ex+0x265/0x280 [ 340.198165][T16205] should_fail_alloc_page+0xf2/0x100 [ 340.198199][T16205] __alloc_frozen_pages_noprof+0x109/0x360 [ 340.198319][T16205] alloc_pages_mpol+0xb3/0x260 [ 340.198362][T16205] vma_alloc_folio_noprof+0x1aa/0x300 [ 340.198414][T16205] handle_mm_fault+0xef5/0x2c60 [ 340.198458][T16205] ? mt_find+0x21b/0x330 [ 340.198494][T16205] do_user_addr_fault+0x3fe/0x1080 [ 340.198585][T16205] exc_page_fault+0x62/0xa0 [ 340.198620][T16205] asm_exc_page_fault+0x26/0x30 [ 340.198647][T16205] RIP: 0010:filldir+0x1f0/0x420 [ 340.198674][T16205] Code: c1 ff 48 89 ef 4c 89 fe e8 9d bf c1 ff 4c 39 fd 0f 82 af 01 00 00 4c 39 e5 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 <49> 89 47 08 48 8b 44 24 10 48 8b 4c 24 38 48 89 08 48 8b 6c 24 18 [ 340.198749][T16205] RSP: 0018:ffffc90000f13cc0 EFLAGS: 00050283 [ 340.198772][T16205] RAX: 00000000000000ee RBX: 0000000000000008 RCX: ffff88810167a100 [ 340.198790][T16205] RDX: 0000000000000000 RSI: 0000200000001fc0 RDI: 0000200000001fe0 [ 340.198807][T16205] RBP: 0000200000001fe0 R08: 0001c90000f13e97 R09: 0000000000000000 [ 340.198842][T16205] R10: 000000000000006e R11: ffffffff81965f50 R12: 00007ffffffff000 [ 340.198859][T16205] R13: 0000000000000000 R14: ffff88814925e000 R15: 0000200000001fc0 [ 340.198879][T16205] ? __pfx_filldir+0x10/0x10 [ 340.198960][T16205] ? __pfx_filldir+0x10/0x10 [ 340.199100][T16205] isofs_readdir+0x759/0xb40 [ 340.199143][T16205] iterate_dir+0x114/0x330 [ 340.199189][T16205] __se_sys_getdents+0x88/0x1b0 [ 340.199232][T16205] ? __pfx_filldir+0x10/0x10 [ 340.199262][T16205] __x64_sys_getdents+0x43/0x50 [ 340.199345][T16205] x64_sys_call+0xe03/0x3000 [ 340.199423][T16205] do_syscall_64+0xd8/0x2a0 [ 340.199467][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.199497][T16205] RIP: 0033:0x7fbb7f22f749 [ 340.199516][T16205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.199541][T16205] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 340.199564][T16205] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 340.199602][T16205] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 340.199619][T16205] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.199720][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.199735][T16205] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 340.199761][T16205] [ 340.447616][T16217] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.560418][T16222] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.596704][T16222] EXT4-fs (loop4): orphan cleanup on readonly fs [ 340.637334][T16222] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4383: Allocating blocks 41-42 which overlap fs metadata [ 340.708030][T16222] Quota error (device loop4): write_blk: dquota write failed [ 340.715499][T16222] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 340.733138][T16223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4382'. [ 340.748235][T16229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 340.782494][T16222] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 340.794775][T16222] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4383: Failed to acquire dquot type 1 [ 340.815011][T16222] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 340.831433][T16222] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4383: corrupted inode contents [ 340.848276][T16222] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.4383: mark_inode_dirty error [ 340.860099][T16222] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4383: corrupted inode contents [ 340.874454][T16222] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4383: mark_inode_dirty error [ 340.886436][T16222] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4383: corrupted inode contents [ 340.898683][T16222] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 340.907603][T16234] set_capacity_and_notify: 8 callbacks suppressed [ 340.907622][T16234] loop7: detected capacity change from 0 to 128 [ 340.918564][T16222] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4383: corrupted inode contents [ 340.920896][T16234] vfat: Unknown parameter 'raw' [ 340.937368][T16222] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.4383: mark_inode_dirty error [ 340.948792][T16222] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 340.959684][T16222] EXT4-fs (loop4): 1 truncate cleaned up [ 340.965797][T16222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.007007][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.046016][ T29] audit: type=1326 audit(2000000504.828:14668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.4.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0231df749 code=0x7ffc0000 [ 341.056418][T16253] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 341.069840][ T29] audit: type=1326 audit(2000000504.828:14669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.4.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0231df749 code=0x7ffc0000 [ 341.101781][ T29] audit: type=1326 audit(2000000504.828:14670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16249 comm="syz.4.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0231df749 code=0x7ffc0000 [ 341.158317][T16258] loop5: detected capacity change from 0 to 512 [ 341.167108][T16258] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 341.171413][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4395'. [ 341.186893][T16258] EXT4-fs (loop5): orphan cleanup on readonly fs [ 341.194636][T16262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4396'. [ 341.204724][T16258] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.4394: Allocating blocks 41-42 which overlap fs metadata [ 341.222974][T16258] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4394: Failed to acquire dquot type 1 [ 341.245645][T16258] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 341.258439][T16267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4398'. [ 341.260562][T16258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.4394: corrupted inode contents [ 341.281378][T16258] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.4394: mark_inode_dirty error [ 341.293889][T16258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.4394: corrupted inode contents [ 341.306446][T16258] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.4394: mark_inode_dirty error [ 341.318026][T16258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.4394: corrupted inode contents [ 341.340914][T16270] wireguard0: entered promiscuous mode [ 341.346637][T16270] wireguard0: entered allmulticast mode [ 341.352147][T16258] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 341.361040][T16258] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.4394: corrupted inode contents [ 341.373141][T16258] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.4394: mark_inode_dirty error [ 341.385499][T16258] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 341.395790][T16258] EXT4-fs (loop5): 1 truncate cleaned up [ 341.403452][T16258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.419966][T16258] FAULT_INJECTION: forcing a failure. [ 341.419966][T16258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.433078][T16258] CPU: 1 UID: 0 PID: 16258 Comm: syz.5.4394 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.433210][T16258] Tainted: [W]=WARN [ 341.433219][T16258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 341.433297][T16258] Call Trace: [ 341.433304][T16258] [ 341.433312][T16258] __dump_stack+0x1d/0x30 [ 341.433405][T16258] dump_stack_lvl+0xe8/0x140 [ 341.433494][T16258] dump_stack+0x15/0x1b [ 341.433561][T16258] should_fail_ex+0x265/0x280 [ 341.433607][T16258] should_fail+0xb/0x20 [ 341.433646][T16258] should_fail_usercopy+0x1a/0x20 [ 341.433704][T16258] strncpy_from_user+0x27/0x260 [ 341.433822][T16258] getname_flags+0xae/0x3b0 [ 341.433853][T16258] user_path_at+0x28/0x130 [ 341.433883][T16258] __se_sys_mount+0x25b/0x2e0 [ 341.433913][T16258] __x64_sys_mount+0x67/0x80 [ 341.433934][T16258] x64_sys_call+0x2cca/0x3000 [ 341.433963][T16258] do_syscall_64+0xd8/0x2a0 [ 341.434026][T16258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.434052][T16258] RIP: 0033:0x7fe0321e0eea [ 341.434067][T16258] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.434085][T16258] RSP: 002b:00007fe030c3ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.434189][T16258] RAX: ffffffffffffffda RBX: 00007fe030c3eef0 RCX: 00007fe0321e0eea [ 341.434206][T16258] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 341.434221][T16258] RBP: 0000200000000f40 R08: 00007fe030c3eef0 R09: 0000000001aca421 [ 341.434234][T16258] R10: 0000000001aca421 R11: 0000000000000246 R12: 0000200000000f00 [ 341.434246][T16258] R13: 00007fe030c3eeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 341.434269][T16258] [ 341.551986][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.623144][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.739177][T16289] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4408'. [ 341.759734][T16280] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 341.905946][T16309] netlink: 'syz.4.4416': attribute type 2 has an invalid length. [ 342.408968][T16359] loop4: detected capacity change from 0 to 128 [ 342.476401][T16364] syz.4.4438: attempt to access beyond end of device [ 342.476401][T16364] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 342.490795][T16366] binfmt_misc: register: failed to install interpreter file ./file0 [ 342.513651][T16370] tipc: Started in network mode [ 342.518601][T16370] tipc: Node identity ac14140f, cluster identity 4711 [ 342.537056][T16370] tipc: New replicast peer: 255.255.255.255 [ 342.543361][T16370] tipc: Enabled bearer , priority 10 [ 342.550004][T16364] syz.4.4438: attempt to access beyond end of device [ 342.550004][T16364] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 342.578649][ T909] kworker/u8:6: attempt to access beyond end of device [ 342.578649][ T909] loop4: rw=1, sector=937, nr_sectors = 1 limit=128 [ 342.709092][T16393] qrtr: Invalid version 255 [ 342.718774][T16399] netlink: 'syz.5.4455': attribute type 2 has an invalid length. [ 342.859785][T16417] loop9: detected capacity change from 0 to 164 [ 342.872652][T16417] ISOFS: unable to read i-node block [ 342.878947][T16417] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 342.982107][T16440] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 342.988679][T16440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.996262][T16440] vhci_hcd vhci_hcd.0: Device attached [ 342.996420][T16441] loop5: detected capacity change from 0 to 1024 [ 343.007031][T16442] vhci_hcd: connection closed [ 343.009362][ T909] vhci_hcd vhci_hcd.7: stop threads [ 343.010495][T16441] EXT4-fs: Ignoring removed bh option [ 343.014164][ T909] vhci_hcd vhci_hcd.7: release socket [ 343.014182][ T909] vhci_hcd vhci_hcd.7: disconnect device [ 343.038231][T16441] EXT4-fs: inline encryption not supported [ 343.044947][T16441] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 343.057194][T16441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 343.067360][T16441] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.4467: lblock 2 mapped to illegal pblock 2 (length 1) [ 343.107234][T16441] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.4467: lblock 0 mapped to illegal pblock 48 (length 1) [ 343.128944][T16441] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4467: Failed to acquire dquot type 0 [ 343.143300][T16441] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 343.152970][T16441] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.4467: mark_inode_dirty error [ 343.163732][T16455] loop9: detected capacity change from 0 to 1024 [ 343.166648][T16441] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 343.170947][T16455] EXT4-fs: Ignoring removed orlov option [ 343.187122][T16441] EXT4-fs (loop5): 1 orphan inode deleted [ 343.194447][T16441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.207284][ T295] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 343.221927][ T295] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 343.237251][T16455] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 343.276334][T16465] binfmt_misc: register: failed to install interpreter file ./file0 [ 343.286305][T16455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.304293][T16455] netlink: 'syz.9.4476': attribute type 4 has an invalid length. [ 343.312845][T16455] netlink: 'syz.9.4476': attribute type 4 has an invalid length. [ 343.330052][T12121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.485802][T16493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.495700][T16493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.522421][T16500] loop4: detected capacity change from 0 to 1024 [ 343.529168][T16500] EXT4-fs: Ignoring removed orlov option [ 343.535190][T16502] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 343.545006][T16500] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 343.564858][T16499] netlink: '+}[@': attribute type 2 has an invalid length. [ 343.577855][T16500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.600995][T16500] netlink: 'syz.4.4494': attribute type 4 has an invalid length. [ 343.609310][T16500] netlink: 'syz.4.4494': attribute type 4 has an invalid length. [ 343.628785][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.661921][ T1039] tipc: Node number set to 2886997007 [ 343.758642][T16524] loop3: detected capacity change from 0 to 764 [ 343.810160][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.836801][T13600] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 343.856284][T13600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 343.866019][T13600] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 343.922346][T16533] syzkaller0: entered promiscuous mode [ 343.927873][T16533] syzkaller0: entered allmulticast mode [ 344.038995][T16546] x_tables: duplicate underflow at hook 1 [ 344.115440][T16554] FAULT_INJECTION: forcing a failure. [ 344.115440][T16554] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.128805][T16554] CPU: 1 UID: 0 PID: 16554 Comm: syz.3.4519 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.128846][T16554] Tainted: [W]=WARN [ 344.128856][T16554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.128872][T16554] Call Trace: [ 344.128881][T16554] [ 344.128940][T16554] __dump_stack+0x1d/0x30 [ 344.129010][T16554] dump_stack_lvl+0xe8/0x140 [ 344.129035][T16554] dump_stack+0x15/0x1b [ 344.129056][T16554] should_fail_ex+0x265/0x280 [ 344.129166][T16554] should_fail_alloc_page+0xf2/0x100 [ 344.129242][T16554] __alloc_frozen_pages_noprof+0x109/0x360 [ 344.129286][T16554] alloc_pages_mpol+0xb3/0x260 [ 344.129377][T16554] vma_alloc_folio_noprof+0x1aa/0x300 [ 344.129450][T16554] handle_mm_fault+0xef5/0x2c60 [ 344.129542][T16554] do_user_addr_fault+0x630/0x1080 [ 344.129576][T16554] ? ksys_mmap_pgoff+0xc2/0x310 [ 344.129614][T16554] exc_page_fault+0x62/0xa0 [ 344.129650][T16554] asm_exc_page_fault+0x26/0x30 [ 344.129735][T16554] RIP: 0033:0x7fbb7f0f0943 [ 344.129756][T16554] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 344.129780][T16554] RSP: 002b:00007fbb7dc8e4a0 EFLAGS: 00010202 [ 344.129800][T16554] RAX: 0000000000008000 RBX: 00007fbb7dc8e540 RCX: 00007fbb7586f000 [ 344.129849][T16554] RDX: 00007fbb7dc8e6e0 RSI: 0000000000000006 RDI: 00007fbb7dc8e5e0 [ 344.129863][T16554] RBP: 0000000000000102 R08: 0000000000000006 R09: 000000000000000e [ 344.129879][T16554] R10: 000000000000001a R11: 00007fbb7dc8e540 R12: 0000000000000001 [ 344.129896][T16554] R13: 00007fbb7f2cfc40 R14: 0000000000000001 R15: 00007fbb7dc8e5e0 [ 344.129921][T16554] [ 344.129933][T16554] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 344.307867][T16554] loop3: detected capacity change from 0 to 164 [ 344.309262][T16558] netlink: '+}[@': attribute type 2 has an invalid length. [ 344.322865][T16554] ISOFS: unable to read i-node block [ 344.328243][T16554] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 344.443263][T16570] loop5: detected capacity change from 0 to 764 [ 344.475612][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 344.475630][ T29] audit: type=1326 audit(2000000508.258:15123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.505610][ T29] audit: type=1326 audit(2000000508.258:15124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.592336][T16583] FAULT_INJECTION: forcing a failure. [ 344.592336][T16583] name failslab, interval 1, probability 0, space 0, times 0 [ 344.605192][T16583] CPU: 1 UID: 0 PID: 16583 Comm: syz.5.4531 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 344.605225][T16583] Tainted: [W]=WARN [ 344.605231][T16583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.605249][T16583] Call Trace: [ 344.605336][T16583] [ 344.605346][T16583] __dump_stack+0x1d/0x30 [ 344.605376][T16583] dump_stack_lvl+0xe8/0x140 [ 344.605404][T16583] dump_stack+0x15/0x1b [ 344.605423][T16583] should_fail_ex+0x265/0x280 [ 344.605497][T16583] should_failslab+0x8c/0xb0 [ 344.605527][T16583] kmem_cache_alloc_noprof+0x69/0x4b0 [ 344.605549][T16583] ? getname_flags+0x80/0x3b0 [ 344.605574][T16583] getname_flags+0x80/0x3b0 [ 344.605629][T16583] __se_sys_quotactl+0x16a/0x670 [ 344.605657][T16583] ? fput+0x8f/0xc0 [ 344.605773][T16583] __x64_sys_quotactl+0x55/0x70 [ 344.605801][T16583] x64_sys_call+0x19a4/0x3000 [ 344.605911][ T29] audit: type=1326 audit(2000000508.258:15125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.605830][T16583] do_syscall_64+0xd8/0x2a0 [ 344.605986][T16583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.606006][T16583] RIP: 0033:0x7fe0321df749 [ 344.606023][T16583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.606110][T16583] RSP: 002b:00007fe030c3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 344.606138][T16583] RAX: ffffffffffffffda RBX: 00007fe032435fa0 RCX: 00007fe0321df749 [ 344.606181][T16583] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000500 [ 344.606200][T16583] RBP: 00007fe030c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.606271][T16583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.606287][T16583] R13: 00007fe032436038 R14: 00007fe032435fa0 R15: 00007ffd836955e8 [ 344.606314][T16583] [ 344.803510][ T29] audit: type=1326 audit(2000000508.258:15126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.827136][ T29] audit: type=1326 audit(2000000508.258:15127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.851026][ T29] audit: type=1326 audit(2000000508.258:15128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.874612][ T29] audit: type=1326 audit(2000000508.258:15129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.898302][ T29] audit: type=1326 audit(2000000508.258:15130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.921934][ T29] audit: type=1326 audit(2000000508.258:15131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 344.945745][ T29] audit: type=1326 audit(2000000508.258:15132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16569 comm="syz.5.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0321df749 code=0x7ffc0000 [ 345.097539][T16597] binfmt_misc: register: failed to install interpreter file ./file0 [ 345.231526][T16604] SELinux: failed to load policy [ 345.258932][T16604] __nla_validate_parse: 20 callbacks suppressed [ 345.258952][T16604] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4539'. [ 345.376720][T16611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'. [ 345.602248][T16629] EXT4-fs: Ignoring removed bh option [ 345.608093][T16629] EXT4-fs: inline encryption not supported [ 345.625389][T16629] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.636998][T16629] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 345.646085][T16629] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.4549: lblock 2 mapped to illegal pblock 2 (length 1) [ 345.669557][T16629] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.4549: lblock 0 mapped to illegal pblock 48 (length 1) [ 345.685968][T16629] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4549: Failed to acquire dquot type 0 [ 345.699456][T16629] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 345.709187][T16629] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.4549: mark_inode_dirty error [ 345.723582][T16629] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 345.725060][T16635] syzkaller0: entered promiscuous mode [ 345.734351][T16629] EXT4-fs (loop7): 1 orphan inode deleted [ 345.739372][T16635] syzkaller0: entered allmulticast mode [ 345.745925][T16629] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.763325][ T909] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.782897][ T909] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 345.818433][T16638] netlink: '+}[@': attribute type 2 has an invalid length. [ 345.867576][T16641] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4553'. [ 346.166629][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4560'. [ 346.195217][T16659] set_capacity_and_notify: 1 callbacks suppressed [ 346.195239][T16659] loop9: detected capacity change from 0 to 512 [ 346.209306][T16659] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 346.223911][T16659] EXT4-fs (loop9): 1 truncate cleaned up [ 346.229994][T16659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.261669][T12121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.292454][T16658] loop4: detected capacity change from 0 to 512 [ 346.305744][T16664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4563'. [ 346.336016][T10287] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.370041][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4562'. [ 346.389878][T16658] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4555: iget: bad extra_isize 90 (inode size 256) [ 346.392341][T10287] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 346.414665][T16658] EXT4-fs (loop4): Remounting filesystem read-only [ 346.424167][T16675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4565'. [ 346.429892][T16658] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 346.443517][T16658] EXT4-fs (loop4): 1 orphan inode deleted [ 346.453451][T10287] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 346.457512][T16658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.469106][T10287] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 346.537990][T16658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.550033][T16674] SELinux: failed to load policy [ 346.567338][T16680] loop3: detected capacity change from 0 to 512 [ 346.579062][T16680] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 346.595132][T16674] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4564'. [ 346.624230][T16680] EXT4-fs (loop3): 1 truncate cleaned up [ 346.635732][T16680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.639596][T16647] netlink: 'syz.4.4555': attribute type 4 has an invalid length. [ 346.662708][T16680] FAULT_INJECTION: forcing a failure. [ 346.662708][T16680] name failslab, interval 1, probability 0, space 0, times 0 [ 346.675691][T16680] CPU: 1 UID: 0 PID: 16680 Comm: syz.3.4567 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 346.675803][T16680] Tainted: [W]=WARN [ 346.675810][T16680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 346.675822][T16680] Call Trace: [ 346.675828][T16680] [ 346.675834][T16680] __dump_stack+0x1d/0x30 [ 346.675863][T16680] dump_stack_lvl+0xe8/0x140 [ 346.675958][T16680] dump_stack+0x15/0x1b [ 346.675983][T16680] should_fail_ex+0x265/0x280 [ 346.676007][T16680] should_failslab+0x8c/0xb0 [ 346.676057][T16680] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 346.676079][T16680] ? __alloc_skb+0x324/0x4d0 [ 346.676108][T16680] __alloc_skb+0x324/0x4d0 [ 346.676255][T16680] ? __alloc_skb+0x24d/0x4d0 [ 346.676331][T16680] netlink_alloc_large_skb+0xbf/0xf0 [ 346.676359][T16680] netlink_sendmsg+0x3cf/0x6b0 [ 346.676433][T16680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.676522][T16680] __sock_sendmsg+0x145/0x180 [ 346.676541][T16680] ____sys_sendmsg+0x31e/0x4a0 [ 346.676580][T16680] ___sys_sendmsg+0x17b/0x1d0 [ 346.676666][T16680] __x64_sys_sendmsg+0xd4/0x160 [ 346.676703][T16680] x64_sys_call+0x17ba/0x3000 [ 346.676727][T16680] do_syscall_64+0xd8/0x2a0 [ 346.676812][T16680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.676832][T16680] RIP: 0033:0x7fbb7f22f749 [ 346.676914][T16680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.676931][T16680] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.676949][T16680] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 346.676962][T16680] RDX: 0000000024000004 RSI: 0000200000000280 RDI: 0000000000000008 [ 346.676977][T16680] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.676993][T16680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.677058][T16680] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 346.677082][T16680] [ 346.935718][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.000719][T16699] netlink: 'syz.3.4573': attribute type 2 has an invalid length. [ 347.050688][T16702] syzkaller0: entered promiscuous mode [ 347.056302][T16702] syzkaller0: entered allmulticast mode [ 347.084931][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4575'. [ 347.099446][T16706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4576'. [ 347.161705][T16713] loop9: detected capacity change from 0 to 512 [ 347.201467][T16713] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 347.240635][T16716] qrtr: Invalid version 255 [ 347.248182][T16713] EXT4-fs (loop9): 1 truncate cleaned up [ 347.262408][T16713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.356803][T12121] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.380114][T16719] loop4: detected capacity change from 0 to 8192 [ 347.390689][T16730] netlink: 'syz.9.4586': attribute type 2 has an invalid length. [ 347.518697][T16756] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 347.586888][T16764] netlink: 'syz.7.4599': attribute type 2 has an invalid length. [ 347.588297][T16763] syzkaller0: entered promiscuous mode [ 347.600214][T16763] syzkaller0: entered allmulticast mode [ 347.637047][T16761] syzkaller0: entered promiscuous mode [ 347.642714][T16761] syzkaller0: entered allmulticast mode [ 347.668646][T16753] bond1: option lacp_active: invalid value (37) [ 347.687560][T16753] bond1 (unregistering): Released all slaves [ 347.840361][T16796] syzkaller0: entered promiscuous mode [ 347.845936][T16796] syzkaller0: entered allmulticast mode [ 348.155648][T16826] loop4: detected capacity change from 0 to 512 [ 348.175958][T16826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.198330][T16826] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 348.363958][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.389802][T16836] loop7: detected capacity change from 0 to 7 [ 348.397624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.407260][ C0] buffer_io_error: 19 callbacks suppressed [ 348.407278][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.421589][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.431233][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.439263][T16836] loop7: unable to read partition table [ 348.445478][T16836] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 348.496205][T16847] binfmt_misc: register: failed to install interpreter file ./file0 [ 348.522014][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.531653][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.539825][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.549483][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.558909][T10287] loop7: unable to read partition table [ 348.566344][T16852] loop4: detected capacity change from 0 to 256 [ 348.578954][T16850] netlink: 'syz.4.4628': attribute type 17 has an invalid length. [ 348.588870][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.598534][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.607628][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 348.617262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 348.625168][T16844] loop7: unable to read partition table [ 348.631933][T16844] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 348.770464][T16870] 9p: Bad value for 'rfdno' [ 348.834490][T16881] binfmt_misc: register: failed to install interpreter file ./file0 [ 348.893480][T16887] netlink: 'syz.3.4640': attribute type 39 has an invalid length. [ 348.925462][T16892] FAULT_INJECTION: forcing a failure. [ 348.925462][T16892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 348.938757][T16892] CPU: 0 UID: 0 PID: 16892 Comm: syz.9.4642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.938853][T16892] Tainted: [W]=WARN [ 348.938859][T16892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.938870][T16892] Call Trace: [ 348.938876][T16892] [ 348.938882][T16892] __dump_stack+0x1d/0x30 [ 348.938910][T16892] dump_stack_lvl+0xe8/0x140 [ 348.938930][T16892] dump_stack+0x15/0x1b [ 348.938947][T16892] should_fail_ex+0x265/0x280 [ 348.938968][T16892] should_fail_alloc_page+0xf2/0x100 [ 348.938990][T16892] __alloc_frozen_pages_noprof+0x109/0x360 [ 348.939041][T16892] alloc_pages_mpol+0xb3/0x260 [ 348.939068][T16892] vma_alloc_folio_noprof+0x1aa/0x300 [ 348.939096][T16892] handle_mm_fault+0xef5/0x2c60 [ 348.939201][T16892] do_user_addr_fault+0x630/0x1080 [ 348.939226][T16892] ? ksys_mmap_pgoff+0xc2/0x310 [ 348.939253][T16892] exc_page_fault+0x62/0xa0 [ 348.939338][T16892] asm_exc_page_fault+0x26/0x30 [ 348.939355][T16892] RIP: 0033:0x7f1de1f30943 [ 348.939369][T16892] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 348.939387][T16892] RSP: 002b:00007f1de0ace4a0 EFLAGS: 00010202 [ 348.939459][T16892] RAX: 000000000001a000 RBX: 00007f1de0ace540 RCX: 00007f1dd86af000 [ 348.939470][T16892] RDX: 00007f1de0ace6e0 RSI: 0000000000000003 RDI: 00007f1de0ace5e0 [ 348.939481][T16892] RBP: 00000000000000bd R08: 0000000000000008 R09: 00000000000000cd [ 348.939564][T16892] R10: 00000000000000d8 R11: 00007f1de0ace540 R12: 0000000000000001 [ 348.939574][T16892] R13: 00007f1de210fc40 R14: 0000000000000073 R15: 00007f1de0ace5e0 [ 348.939592][T16892] [ 348.939601][T16892] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 349.119885][T16892] loop9: detected capacity change from 0 to 512 [ 349.143220][T16892] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 349.153227][T16892] FAT-fs (loop9): Filesystem has been set read-only [ 349.199387][T16911] binfmt_misc: register: failed to install interpreter file ./file0 [ 349.207675][T16910] loop3: detected capacity change from 0 to 1024 [ 349.234617][T16914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.249041][T16914] EXT4-fs (loop4): 1 truncate cleaned up [ 349.255613][T16914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.281581][T16910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 349.325016][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.370932][T16932] syzkaller0: entered promiscuous mode [ 349.376607][T16932] syzkaller0: entered allmulticast mode [ 349.440295][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 349.478951][T16942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 349.490249][T16942] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 349.496863][T16945] EXT4-fs: Ignoring removed i_version option [ 349.501835][T16942] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 349.506632][T16945] EXT4-fs: Ignoring removed bh option [ 349.515722][T16942] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.4659: lblock 2 mapped to illegal pblock 2 (length 1) [ 349.534272][T16942] __quota_error: 260 callbacks suppressed [ 349.534288][T16942] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 349.549066][T16942] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.4659: lblock 0 mapped to illegal pblock 48 (length 1) [ 349.563672][T16942] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 349.572694][T16942] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4659: Failed to acquire dquot type 0 [ 349.585019][T16942] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 349.585658][T16945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.594680][T16942] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.4659: mark_inode_dirty error [ 349.618567][T16942] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 349.629479][T16942] EXT4-fs (loop4): 1 orphan inode deleted [ 349.635644][T16942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.654510][ T1638] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 349.669271][ T1638] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 349.677989][ T1638] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 349.678820][T16945] ext4 filesystem being mounted at /264/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 349.715908][T16942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.727149][T16942] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.4659: Invalid inode table block 1 in block_group 0 [ 349.740199][T16942] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 349.752236][T16942] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz.4.4659: mark_inode_dirty error [ 349.775196][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.849431][T16975] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 349.860051][T16975] EXT4-fs (loop3): orphan cleanup on readonly fs [ 349.871389][T16975] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.4669: Allocating blocks 41-42 which overlap fs metadata [ 349.888430][T16975] Quota error (device loop3): write_blk: dquota write failed [ 349.896047][T16975] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 349.905556][T16975] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.4669: Allocating blocks 41-42 which overlap fs metadata [ 349.919874][T16975] Quota error (device loop3): write_blk: dquota write failed [ 349.927538][T16975] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 349.937635][T16975] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4669: Failed to acquire dquot type 1 [ 349.949638][T16975] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 349.964690][T16975] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4669: corrupted inode contents [ 349.979372][T16975] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.4669: mark_inode_dirty error [ 349.991041][T16987] netlink: '+}[@': attribute type 2 has an invalid length. [ 349.998442][T16975] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4669: corrupted inode contents [ 350.010874][T16975] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.4669: mark_inode_dirty error [ 350.022548][T16975] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4669: corrupted inode contents [ 350.034807][T16975] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 350.043656][T16975] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.4669: corrupted inode contents [ 350.060105][T16975] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.4669: mark_inode_dirty error [ 350.071955][T16975] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 350.081530][T16975] EXT4-fs (loop3): 1 truncate cleaned up [ 350.083439][ T29] audit: type=1400 audit(2000000513.858:15390): avc: denied { getopt } for pid=16988 comm="syz.4.4675" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 350.092505][T16975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.140008][T13930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.187105][T16998] wg2: entered promiscuous mode [ 350.192198][T16998] wg2: entered allmulticast mode [ 350.195672][T17000] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 350.224827][T17000] EXT4-fs (loop5): 1 truncate cleaned up [ 350.248608][T17000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.281699][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.307795][ T29] audit: type=1326 audit(2000000514.078:15391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 350.331550][ T29] audit: type=1326 audit(2000000514.078:15392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17015 comm="syz.9.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 350.370432][T17021] EXT4-fs: Ignoring removed orlov option [ 350.398680][T17021] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 350.434980][T17021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.450070][T17021] netlink: 'syz.5.4687': attribute type 1 has an invalid length. [ 350.457977][T17021] netlink: 'syz.5.4687': attribute type 4 has an invalid length. [ 350.465834][T17021] __nla_validate_parse: 21 callbacks suppressed [ 350.465854][T17021] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4687'. [ 350.481703][T17021] netlink: 'syz.5.4687': attribute type 1 has an invalid length. [ 350.489479][T17021] netlink: 'syz.5.4687': attribute type 4 has an invalid length. [ 350.497542][T17021] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4687'. [ 350.515601][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.797940][T17050] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 350.813284][T17050] EXT4-fs (loop4): 1 truncate cleaned up [ 350.820912][T17054] FAULT_INJECTION: forcing a failure. [ 350.820912][T17054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.834349][T17054] CPU: 1 UID: 0 PID: 17054 Comm: syz.9.4699 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 350.834443][T17054] Tainted: [W]=WARN [ 350.834453][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.834469][T17054] Call Trace: [ 350.834477][T17054] [ 350.834544][T17054] __dump_stack+0x1d/0x30 [ 350.834576][T17054] dump_stack_lvl+0xe8/0x140 [ 350.834599][T17054] dump_stack+0x15/0x1b [ 350.834640][T17054] should_fail_ex+0x265/0x280 [ 350.834670][T17054] should_fail+0xb/0x20 [ 350.834781][T17054] should_fail_usercopy+0x1a/0x20 [ 350.834805][T17054] _copy_from_user+0x1c/0xb0 [ 350.834840][T17054] sctp_setsockopt+0x154/0xe30 [ 350.834879][T17054] sock_common_setsockopt+0x69/0x80 [ 350.834953][T17050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.834979][T17054] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 350.835008][T17054] __sys_setsockopt+0x184/0x200 [ 350.835125][T17054] __x64_sys_setsockopt+0x64/0x80 [ 350.835165][T17054] x64_sys_call+0x21d5/0x3000 [ 350.835226][T17054] do_syscall_64+0xd8/0x2a0 [ 350.835334][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.835364][T17054] RIP: 0033:0x7f1de206f749 [ 350.835516][T17054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.835542][T17054] RSP: 002b:00007f1de0acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.835569][T17054] RAX: ffffffffffffffda RBX: 00007f1de22c5fa0 RCX: 00007f1de206f749 [ 350.835587][T17054] RDX: 0000000000000015 RSI: 0000000000000084 RDI: 0000000000000003 [ 350.835639][T17054] RBP: 00007f1de0acf090 R08: 0000000000000001 R09: 0000000000000000 [ 350.835719][T17054] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 350.835737][T17054] R13: 00007f1de22c6038 R14: 00007f1de22c5fa0 R15: 00007ffd2719bd78 [ 350.835764][T17054] [ 350.896694][T17058] EXT4-fs: Ignoring removed orlov option [ 351.033762][T17061] tipc: Enabling of bearer rejected, failed to enable media [ 351.042516][T17058] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 351.043064][T17062] syzkaller0: entered promiscuous mode [ 351.058014][T17062] syzkaller0: entered allmulticast mode [ 351.066707][T17058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.089750][T17058] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4701'. [ 351.099355][T17058] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4701'. [ 351.127654][T13600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.138753][T13620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.253251][T17083] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 351.287737][T17095] set_capacity_and_notify: 10 callbacks suppressed [ 351.287779][T17095] loop5: detected capacity change from 0 to 1024 [ 351.301349][T17095] EXT4-fs: Ignoring removed orlov option [ 351.307810][T17095] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 351.319191][T17096] loop4: detected capacity change from 0 to 1024 [ 351.325826][T17096] EXT4-fs: Ignoring removed bh option [ 351.331327][T17096] EXT4-fs: inline encryption not supported [ 351.337775][T17096] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.358075][T17096] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 351.362526][T17095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.382616][T17096] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.4711: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.382835][T17095] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4716'. [ 351.396783][T17096] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.4711: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.422034][T17096] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4711: Failed to acquire dquot type 0 [ 351.433574][T17103] loop7: detected capacity change from 0 to 512 [ 351.439984][T17096] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 351.440617][T17106] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4716'. [ 351.449587][T17103] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 351.470358][T17096] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.4711: mark_inode_dirty error [ 351.483047][T17103] EXT4-fs (loop7): 1 truncate cleaned up [ 351.489333][T17103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.501923][T17096] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 351.525455][T17096] EXT4-fs (loop4): 1 orphan inode deleted [ 351.542194][ T31] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.560110][ T31] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 351.647345][T17129] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 351.749699][T17138] random: crng reseeded on system resumption [ 351.804898][T17147] loop9: detected capacity change from 0 to 512 [ 351.812057][T17147] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 351.825174][T17147] EXT4-fs (loop9): 1 truncate cleaned up [ 351.848017][T17151] tipc: Enabling of bearer rejected, failed to enable media [ 351.856938][T17151] syzkaller0: entered promiscuous mode [ 351.862493][T17151] syzkaller0: entered allmulticast mode [ 351.895908][T17154] loop5: detected capacity change from 0 to 1024 [ 351.903670][T17154] EXT4-fs: Ignoring removed bh option [ 351.909250][T17154] EXT4-fs: inline encryption not supported [ 351.915670][T17154] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 351.927551][T17154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 351.937787][T17154] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.4734: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.961600][T17154] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.4734: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.976196][T17154] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.4734: Failed to acquire dquot type 0 [ 351.987719][T17154] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 352.005399][T17154] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.4734: mark_inode_dirty error [ 352.008068][T17161] loop9: detected capacity change from 0 to 512 [ 352.019020][T17154] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 352.033393][T17154] EXT4-fs (loop5): 1 orphan inode deleted [ 352.040411][T17161] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 352.048332][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4737'. [ 352.059393][ T295] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 352.073821][ T295] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 352.087386][T17161] EXT4-fs (loop9): 1 truncate cleaned up [ 352.087847][T17159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4737'. [ 352.132857][T17164] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 352.144957][T13620] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 352.172378][T13620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 352.184901][T13620] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 352.311831][T17183] binfmt_misc: register: failed to install interpreter file ./file0 [ 352.390950][T17196] loop3: detected capacity change from 0 to 512 [ 352.402715][T17196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.416380][T17196] EXT4-fs (loop3): 1 truncate cleaned up [ 352.495630][T17208] syzkaller0: entered promiscuous mode [ 352.501148][T17208] syzkaller0: entered allmulticast mode [ 352.525814][T17214] syzkaller0: entered promiscuous mode [ 352.531355][T17214] syzkaller0: entered allmulticast mode [ 352.540778][T17217] binfmt_misc: register: failed to install interpreter file ./file0 [ 352.709188][T17233] loop3: detected capacity change from 0 to 512 [ 352.725288][T17233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 352.738779][T13600] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 352.754006][T17233] EXT4-fs (loop3): 1 truncate cleaned up [ 352.757377][T13600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 352.772164][T17237] validate_nla: 10 callbacks suppressed [ 352.772222][T17237] netlink: '+}[@': attribute type 2 has an invalid length. [ 352.798767][T13600] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 352.853924][T17242] team0: Port device team_slave_1 removed [ 352.882769][T17243] netlink: 'syz.5.4770': attribute type 9 has an invalid length. [ 352.885143][T17245] binfmt_misc: register: failed to install interpreter file ./file0 [ 352.894097][T17243] hsr0: entered promiscuous mode [ 352.904317][T17243] macvlan2: entered promiscuous mode [ 352.909726][T17243] macvlan2: entered allmulticast mode [ 352.915236][T17243] hsr0: entered allmulticast mode [ 352.920313][T17243] hsr_slave_0: entered allmulticast mode [ 352.926036][T17243] hsr_slave_1: entered allmulticast mode [ 352.956771][T17243] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 352.963465][T17243] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 352.971679][T17243] vhci_hcd vhci_hcd.0: Device attached [ 352.984310][T17248] vhci_hcd: connection closed [ 352.984452][ T31] vhci_hcd vhci_hcd.5: stop threads [ 352.994468][ T31] vhci_hcd vhci_hcd.5: release socket [ 352.999858][ T31] vhci_hcd vhci_hcd.5: disconnect device [ 353.105406][T17258] gre0: entered promiscuous mode [ 353.110559][T17258] gre0: entered allmulticast mode [ 353.127210][T17260] loop3: detected capacity change from 0 to 128 [ 353.134145][T17260] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.146341][T17260] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.186446][ T5237] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.269543][T17266] tipc: Enabling of bearer rejected, failed to enable media [ 353.319985][T17266] syzkaller0: entered promiscuous mode [ 353.325539][T17266] syzkaller0: entered allmulticast mode [ 353.432799][T17269] netlink: '+}[@': attribute type 2 has an invalid length. [ 353.498509][T17271] loop3: detected capacity change from 0 to 512 [ 353.522955][T17271] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 353.542836][T17271] EXT4-fs (loop3): 1 truncate cleaned up [ 353.582452][T17279] FAULT_INJECTION: forcing a failure. [ 353.582452][T17279] name failslab, interval 1, probability 0, space 0, times 0 [ 353.595188][T17279] CPU: 1 UID: 0 PID: 17279 Comm: syz.3.4787 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 353.595223][T17279] Tainted: [W]=WARN [ 353.595232][T17279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.595249][T17279] Call Trace: [ 353.595268][T17279] [ 353.595278][T17279] __dump_stack+0x1d/0x30 [ 353.595304][T17279] dump_stack_lvl+0xe8/0x140 [ 353.595330][T17279] dump_stack+0x15/0x1b [ 353.595428][T17279] should_fail_ex+0x265/0x280 [ 353.595452][T17279] should_failslab+0x8c/0xb0 [ 353.595481][T17279] __kvmalloc_node_noprof+0x149/0x6b0 [ 353.595516][T17279] ? alloc_netdev_mqs+0xa5/0xa40 [ 353.595552][T17279] ? vsnprintf+0x7ee/0x860 [ 353.595612][T17279] ? __pfx_macsec_setup+0x10/0x10 [ 353.595630][T17279] alloc_netdev_mqs+0xa5/0xa40 [ 353.595721][T17279] rtnl_create_link+0x239/0x6e0 [ 353.595767][T17279] rtnl_newlink_create+0x14c/0x620 [ 353.595789][T17279] ? security_capable+0x83/0x90 [ 353.595870][T17279] ? netlink_ns_capable+0x86/0xa0 [ 353.595905][T17279] rtnl_newlink+0xf5b/0x1360 [ 353.595955][T17279] ? xas_load+0x413/0x430 [ 353.596024][T17279] ? cmp_ex_search+0x25/0x40 [ 353.596047][T17279] ? bsearch+0x95/0xc0 [ 353.596084][T17279] ? __pfx_cmp_ex_search+0x10/0x10 [ 353.596107][T17279] ? rep_movs_alternative+0xf/0x90 [ 353.596137][T17279] ? __memcg_slab_free_hook+0x135/0x230 [ 353.596173][T17279] ? __rcu_read_unlock+0x4f/0x70 [ 353.596197][T17279] ? avc_has_perm_noaudit+0xab/0x130 [ 353.596257][T17279] ? cred_has_capability+0x210/0x280 [ 353.596298][T17279] ? selinux_capable+0x31/0x40 [ 353.596320][T17279] ? security_capable+0x83/0x90 [ 353.596357][T17279] ? ns_capable+0x7d/0xb0 [ 353.596445][T17279] ? __pfx_rtnl_newlink+0x10/0x10 [ 353.596488][T17279] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 353.596535][T17279] netlink_rcv_skb+0x123/0x220 [ 353.596648][T17279] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 353.596689][T17279] rtnetlink_rcv+0x1c/0x30 [ 353.596789][T17279] netlink_unicast+0x5c0/0x690 [ 353.596827][T17279] netlink_sendmsg+0x58b/0x6b0 [ 353.596940][T17279] ? __pfx_netlink_sendmsg+0x10/0x10 [ 353.596972][T17279] __sock_sendmsg+0x145/0x180 [ 353.596991][T17279] ____sys_sendmsg+0x31e/0x4a0 [ 353.597038][T17279] ___sys_sendmsg+0x17b/0x1d0 [ 353.597145][T17279] __x64_sys_sendmsg+0xd4/0x160 [ 353.597179][T17279] x64_sys_call+0x17ba/0x3000 [ 353.597208][T17279] do_syscall_64+0xd8/0x2a0 [ 353.597310][T17279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.597331][T17279] RIP: 0033:0x7fbb7f22f749 [ 353.597349][T17279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.597371][T17279] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.597396][T17279] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 353.597460][T17279] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 353.597472][T17279] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 353.597484][T17279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.597496][T17279] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 353.597520][T17279] [ 354.011180][T17299] netlink: '+}[@': attribute type 2 has an invalid length. [ 354.045947][T17300] EXT4-fs: Ignoring removed bh option [ 354.053122][T17300] EXT4-fs: inline encryption not supported [ 354.060479][T17300] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.078549][T17300] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 354.087782][T17300] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.4793: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.102061][T17300] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.4793: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.116568][T17300] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4793: Failed to acquire dquot type 0 [ 354.128237][T17300] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 354.138593][T17300] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.4793: mark_inode_dirty error [ 354.150406][T17300] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 354.160718][T17300] EXT4-fs (loop9): 1 orphan inode deleted [ 354.172083][ T2325] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.186513][ T2325] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 354.729064][T12121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 354.748320][T12121] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 354.758235][T12121] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 354.788081][T17314] netlink: 'syz.9.4797': attribute type 9 has an invalid length. [ 354.798950][T17314] hsr0: entered promiscuous mode [ 354.804147][T17314] macvlan0: entered promiscuous mode [ 354.809636][T17314] macvlan0: entered allmulticast mode [ 354.815165][T17314] hsr0: entered allmulticast mode [ 354.820215][T17314] hsr_slave_0: entered allmulticast mode [ 354.826015][T17314] hsr_slave_1: entered allmulticast mode [ 354.840497][T17315] EXT4-fs: Ignoring removed bh option [ 354.846166][T17315] EXT4-fs: inline encryption not supported [ 354.852413][T17315] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 354.863731][T17315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 354.872682][T17315] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.4807: lblock 2 mapped to illegal pblock 2 (length 1) [ 354.893817][T17315] __quota_error: 176 callbacks suppressed [ 354.893837][T17315] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 354.894136][ T29] audit: type=1326 audit(2000000518.678:15560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 354.899678][T17315] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.4807: lblock 0 mapped to illegal pblock 48 (length 1) [ 354.934178][ T29] audit: type=1326 audit(2000000518.698:15561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 354.946400][T17315] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 354.969251][ T29] audit: type=1326 audit(2000000518.698:15562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 354.978015][T17315] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.4807: Failed to acquire dquot type 0 [ 355.002010][ T29] audit: type=1326 audit(2000000518.698:15563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 355.036586][ T29] audit: type=1326 audit(2000000518.698:15564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 355.060235][ T29] audit: type=1326 audit(2000000518.698:15565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 355.083867][ T29] audit: type=1326 audit(2000000518.698:15566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 355.107445][ T29] audit: type=1326 audit(2000000518.698:15567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17313 comm="syz.9.4797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1de206f749 code=0x7ffc0000 [ 355.122040][T17315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 355.132559][T17317] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(11) [ 355.147063][T17317] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 355.154208][T17315] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.4807: mark_inode_dirty error [ 355.155319][T17317] vhci_hcd vhci_hcd.0: Device attached [ 355.176751][T17315] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 355.187280][T17315] EXT4-fs (loop3): 1 orphan inode deleted [ 355.201883][ T935] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 355.216570][ T935] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 355.259524][T17330] FAULT_INJECTION: forcing a failure. [ 355.259524][T17330] name failslab, interval 1, probability 0, space 0, times 0 [ 355.272255][T17330] CPU: 0 UID: 0 PID: 17330 Comm: syz.5.4802 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 355.272284][T17330] Tainted: [W]=WARN [ 355.272290][T17330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 355.272302][T17330] Call Trace: [ 355.272309][T17330] [ 355.272316][T17330] __dump_stack+0x1d/0x30 [ 355.272395][T17330] dump_stack_lvl+0xe8/0x140 [ 355.272425][T17330] dump_stack+0x15/0x1b [ 355.272454][T17330] should_fail_ex+0x265/0x280 [ 355.272532][T17330] should_failslab+0x8c/0xb0 [ 355.272553][T17330] kmem_cache_alloc_noprof+0x69/0x4b0 [ 355.272574][T17330] ? audit_log_start+0x342/0x720 [ 355.272595][T17330] audit_log_start+0x342/0x720 [ 355.272647][T17330] ? kstrtouint+0x76/0xc0 [ 355.272665][T17330] audit_seccomp+0x48/0x100 [ 355.272709][T17330] ? __seccomp_filter+0x832/0x1260 [ 355.272743][T17330] __seccomp_filter+0x843/0x1260 [ 355.272778][T17330] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.272881][T17330] ? vfs_write+0x7e8/0x960 [ 355.272898][T17330] ? __rcu_read_unlock+0x4f/0x70 [ 355.272918][T17330] ? __fget_files+0x184/0x1c0 [ 355.273050][T17330] __secure_computing+0x82/0x150 [ 355.273086][T17330] syscall_trace_enter+0xcf/0x1e0 [ 355.273117][T17330] do_syscall_64+0xb2/0x2a0 [ 355.273148][T17330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.273168][T17330] RIP: 0033:0x7fe0321df749 [ 355.273205][T17330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.273274][T17330] RSP: 002b:00007fe030c3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 355.273291][T17330] RAX: ffffffffffffffda RBX: 00007fe032435fa0 RCX: 00007fe0321df749 [ 355.273303][T17330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 355.273348][T17330] RBP: 00007fe030c3f090 R08: 0000000000000000 R09: 0000000000000000 [ 355.273360][T17330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.273371][T17330] R13: 00007fe032436038 R14: 00007fe032435fa0 R15: 00007ffd836955e8 [ 355.273405][T17330] [ 355.522104][T17338] netlink: '+}[@': attribute type 2 has an invalid length. [ 355.543777][T17340] netlink: 'syz.5.4808': attribute type 12 has an invalid length. [ 355.573108][T17342] netlink: 'syz.5.4809': attribute type 1 has an invalid length. [ 355.588923][T17342] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.615568][T17318] vhci_hcd: connection closed [ 355.615794][ T31] vhci_hcd vhci_hcd.9: stop threads [ 355.625871][ T31] vhci_hcd vhci_hcd.9: release socket [ 355.631271][ T31] vhci_hcd vhci_hcd.9: disconnect device [ 355.638275][ T3390] usb 20-1: enqueue for inactive port 0 [ 355.851811][ T3390] usb 20-1: enqueue for inactive port 0 [ 355.866195][T17349] __nla_validate_parse: 12 callbacks suppressed [ 355.866212][T17349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4811'. [ 355.896243][T13930] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 355.909553][T13930] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 355.919197][T13930] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 356.005837][T17353] tipc: Enabling of bearer rejected, failed to enable media [ 356.015133][T17353] syzkaller0: entered promiscuous mode [ 356.020653][T17353] syzkaller0: entered allmulticast mode [ 356.161095][T17357] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 356.174179][T17357] EXT4-fs (loop9): 1 truncate cleaned up [ 356.185233][T17360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4815'. [ 356.216007][T17364] binfmt_misc: register: failed to install interpreter file ./file0 [ 356.243074][T17368] netlink: '+}[@': attribute type 2 has an invalid length. [ 356.267307][T17370] netlink: 'syz.9.4820': attribute type 12 has an invalid length. [ 356.348411][T17376] set_capacity_and_notify: 3 callbacks suppressed [ 356.348426][T17376] loop9: detected capacity change from 0 to 1024 [ 356.361581][T17376] EXT4-fs: Ignoring removed bh option [ 356.367132][T17376] EXT4-fs: inline encryption not supported [ 356.373718][T17376] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.385069][T17376] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 356.394432][T17376] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.4822: lblock 2 mapped to illegal pblock 2 (length 1) [ 356.408959][T17376] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.4822: lblock 0 mapped to illegal pblock 48 (length 1) [ 356.423195][T17376] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.4822: Failed to acquire dquot type 0 [ 356.434659][T17376] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 356.445901][T17376] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.4822: mark_inode_dirty error [ 356.457394][T17376] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 356.469679][T17376] EXT4-fs (loop9): 1 orphan inode deleted [ 356.482585][T17383] loop3: detected capacity change from 0 to 512 [ 356.483177][T17385] 9p: Bad value for 'wfdno' [ 356.494630][ T12] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 356.518215][ T12] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 356.560951][T17392] loop5: detected capacity change from 0 to 512 [ 356.568476][T17392] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.580137][T17392] EXT4-fs (loop5): 1 truncate cleaned up [ 356.614520][T17402] binfmt_misc: register: failed to install interpreter file ./file0 [ 356.626230][T17403] tipc: Enabling of bearer rejected, failed to enable media [ 356.636533][T17403] syzkaller0: entered promiscuous mode [ 356.642211][T17403] syzkaller0: entered allmulticast mode [ 356.719644][T17414] FAULT_INJECTION: forcing a failure. [ 356.719644][T17414] name failslab, interval 1, probability 0, space 0, times 0 [ 356.732465][T17414] CPU: 1 UID: 0 PID: 17414 Comm: syz.7.4835 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 356.732503][T17414] Tainted: [W]=WARN [ 356.732512][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.732533][T17414] Call Trace: [ 356.732540][T17414] [ 356.732566][T17414] __dump_stack+0x1d/0x30 [ 356.732597][T17414] dump_stack_lvl+0xe8/0x140 [ 356.732627][T17414] dump_stack+0x15/0x1b [ 356.732652][T17414] should_fail_ex+0x265/0x280 [ 356.732680][T17414] should_failslab+0x8c/0xb0 [ 356.732753][T17414] __kvmalloc_node_noprof+0x149/0x6b0 [ 356.732780][T17414] ? alloc_netdev_mqs+0x6e3/0xa40 [ 356.732821][T17414] alloc_netdev_mqs+0x6e3/0xa40 [ 356.732941][T17414] __ip_tunnel_create+0x2a0/0x420 [ 356.732984][T17414] ? ip_tunnel_find+0x144/0x300 [ 356.733029][T17414] ip_tunnel_ctl+0x38f/0x750 [ 356.733066][T17414] ipip_tunnel_ctl+0xd2/0x160 [ 356.733092][T17414] vif_add+0x1bc/0xc80 [ 356.733127][T17414] ip_mroute_setsockopt+0x781/0x960 [ 356.733191][T17414] do_ip_setsockopt+0xcea/0x2240 [ 356.733230][T17414] ip_setsockopt+0x58/0x110 [ 356.733265][T17414] raw_setsockopt+0xbd/0x150 [ 356.733340][T17414] sock_common_setsockopt+0x69/0x80 [ 356.733359][T17414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 356.733378][T17414] __sys_setsockopt+0x184/0x200 [ 356.733404][T17414] __x64_sys_setsockopt+0x64/0x80 [ 356.733487][T17414] x64_sys_call+0x21d5/0x3000 [ 356.733509][T17414] do_syscall_64+0xd8/0x2a0 [ 356.733547][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.733601][T17414] RIP: 0033:0x7fe41de3f749 [ 356.733615][T17414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.733632][T17414] RSP: 002b:00007fe41c89f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 356.733649][T17414] RAX: ffffffffffffffda RBX: 00007fe41e095fa0 RCX: 00007fe41de3f749 [ 356.733661][T17414] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 356.733672][T17414] RBP: 00007fe41c89f090 R08: 0000000000000010 R09: 0000000000000000 [ 356.733715][T17414] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000002 [ 356.733800][T17414] R13: 00007fe41e096038 R14: 00007fe41e095fa0 R15: 00007fff60362a58 [ 356.733818][T17414] [ 356.972029][ T3390] usb usb20-port1: attempt power cycle [ 356.999695][T17413] loop4: detected capacity change from 0 to 1024 [ 357.007043][T17413] ext4: Unknown parameter 'audit' [ 357.044477][T17421] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 357.103261][T17425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17425 comm=syz.5.4838 [ 357.146807][T17428] loop7: detected capacity change from 0 to 512 [ 357.185583][T12121] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 357.185850][T12121] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 357.186175][T12121] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 357.221785][T17428] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 357.230749][T17428] EXT4-fs (loop7): 1 truncate cleaned up [ 357.327743][T17445] random: crng reseeded on system resumption [ 357.429094][T17448] loop9: detected capacity change from 0 to 512 [ 357.444004][T17448] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 357.509025][T17456] 9p: Bad value for 'rfdno' [ 357.558588][T17459] loop4: detected capacity change from 0 to 1024 [ 357.587579][T17459] EXT4-fs: Ignoring removed orlov option [ 357.604926][T17459] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 357.621447][T17465] loop3: detected capacity change from 0 to 512 [ 357.630038][T17465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.649639][T17465] EXT4-fs (loop3): 1 truncate cleaned up [ 357.663582][T17468] : renamed from wg2 (while UP) [ 357.687605][T17459] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4852'. [ 357.697025][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4858'. [ 357.707386][T17459] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4852'. [ 357.898074][T17492] 9p: Bad value for 'rfdno' [ 357.941029][T17496] binfmt_misc: register: failed to install interpreter file ./file0 [ 357.943516][T17494] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 358.223599][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'. [ 358.311019][T17518] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4874'. [ 358.351559][T17519] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17519 comm=syz.5.4874 [ 358.437382][T17527] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 358.529003][T17533] tipc: Enabling of bearer rejected, failed to enable media [ 358.538371][T17533] syzkaller0: entered promiscuous mode [ 358.543940][T17533] syzkaller0: entered allmulticast mode [ 358.653922][T17537] loop5: detected capacity change from 0 to 128 [ 358.695872][T17541] : renamed from team_slave_1 (while UP) [ 358.832336][ T3390] usb usb20-port1: unable to enumerate USB device [ 358.945243][T17554] loop4: detected capacity change from 0 to 1024 [ 358.952189][T17554] EXT4-fs: dax option not supported [ 359.565549][T17587] validate_nla: 8 callbacks suppressed [ 359.565565][T17587] netlink: 'syz.9.4901': attribute type 21 has an invalid length. [ 359.591745][T17587] netlink: 'syz.9.4901': attribute type 6 has an invalid length. [ 359.622161][T17595] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 359.684720][T17604] tipc: Enabling of bearer rejected, failed to enable media [ 359.696161][T17604] syzkaller0: entered promiscuous mode [ 359.701706][T17604] syzkaller0: entered allmulticast mode [ 359.720658][T17607] syzkaller0: entered promiscuous mode [ 359.726279][T17607] syzkaller0: entered allmulticast mode [ 359.796983][T17611] FAULT_INJECTION: forcing a failure. [ 359.796983][T17611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.810230][T17611] CPU: 1 UID: 0 PID: 17611 Comm: syz.3.4910 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.810264][T17611] Tainted: [W]=WARN [ 359.810273][T17611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.810289][T17611] Call Trace: [ 359.810298][T17611] [ 359.810378][T17611] __dump_stack+0x1d/0x30 [ 359.810403][T17611] dump_stack_lvl+0xe8/0x140 [ 359.810432][T17611] dump_stack+0x15/0x1b [ 359.810457][T17611] should_fail_ex+0x265/0x280 [ 359.810488][T17611] should_fail+0xb/0x20 [ 359.810550][T17611] should_fail_usercopy+0x1a/0x20 [ 359.810579][T17611] _copy_from_user+0x1c/0xb0 [ 359.810608][T17611] __sys_connect+0xd0/0x2b0 [ 359.810712][T17611] __x64_sys_connect+0x3f/0x50 [ 359.810742][T17611] x64_sys_call+0x2e09/0x3000 [ 359.810774][T17611] do_syscall_64+0xd8/0x2a0 [ 359.810819][T17611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.810840][T17611] RIP: 0033:0x7fbb7f22f749 [ 359.810856][T17611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.810878][T17611] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 359.810951][T17611] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 359.810967][T17611] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004 [ 359.810983][T17611] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.810999][T17611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.811011][T17611] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 359.811066][T17611] [ 360.082766][T17613] loop7: p1 p2 p4 [ 360.086795][T17613] loop7: p1 size 134219777 extends beyond EOD, truncated [ 360.096047][T17613] loop7: p4 size 262912 extends beyond EOD, truncated [ 360.153315][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 360.153374][ T29] audit: type=1326 audit(2000000523.938:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.183480][ T29] audit: type=1326 audit(2000000523.938:16154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.214529][ T29] audit: type=1326 audit(2000000523.998:16155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.238332][ T29] audit: type=1326 audit(2000000523.998:16156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.279702][ T29] audit: type=1326 audit(2000000524.028:16157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.303419][ T29] audit: type=1326 audit(2000000524.028:16158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.327523][ T29] audit: type=1326 audit(2000000524.028:16159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.353325][ T29] audit: type=1326 audit(2000000524.088:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.376961][ T29] audit: type=1326 audit(2000000524.088:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.400576][ T29] audit: type=1326 audit(2000000524.118:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17623 comm="syz.3.4916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb7f22f749 code=0x7ffc0000 [ 360.431583][T17628] lo speed is unknown, defaulting to 1000 [ 360.437572][T17628] lo speed is unknown, defaulting to 1000 [ 360.443476][T17628] lo speed is unknown, defaulting to 1000 [ 360.450475][T17628] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 360.461372][T17628] lo speed is unknown, defaulting to 1000 [ 360.467922][T17628] lo speed is unknown, defaulting to 1000 [ 360.474403][T17628] lo speed is unknown, defaulting to 1000 [ 360.480783][T17628] lo speed is unknown, defaulting to 1000 [ 360.492295][T17628] lo speed is unknown, defaulting to 1000 [ 360.602034][T17652] syzkaller0: entered promiscuous mode [ 360.607574][T17652] syzkaller0: entered allmulticast mode [ 360.804951][T17673] FAULT_INJECTION: forcing a failure. [ 360.804951][T17673] name failslab, interval 1, probability 0, space 0, times 0 [ 360.817648][T17673] CPU: 1 UID: 0 PID: 17673 Comm: syz.3.4937 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.817753][T17673] Tainted: [W]=WARN [ 360.817762][T17673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.817779][T17673] Call Trace: [ 360.817787][T17673] [ 360.817844][T17673] __dump_stack+0x1d/0x30 [ 360.817868][T17673] dump_stack_lvl+0xe8/0x140 [ 360.817895][T17673] dump_stack+0x15/0x1b [ 360.818033][T17673] should_fail_ex+0x265/0x280 [ 360.818091][T17673] should_failslab+0x8c/0xb0 [ 360.818119][T17673] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 360.818222][T17673] ? __alloc_skb+0x324/0x4d0 [ 360.818249][T17673] __alloc_skb+0x324/0x4d0 [ 360.818271][T17673] ? __alloc_skb+0x24d/0x4d0 [ 360.818294][T17673] netlink_alloc_large_skb+0xbf/0xf0 [ 360.818360][T17673] netlink_sendmsg+0x3cf/0x6b0 [ 360.818398][T17673] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.818429][T17673] __sock_sendmsg+0x145/0x180 [ 360.818466][T17673] ____sys_sendmsg+0x31e/0x4a0 [ 360.818506][T17673] ___sys_sendmsg+0x17b/0x1d0 [ 360.818559][T17673] __x64_sys_sendmsg+0xd4/0x160 [ 360.818591][T17673] x64_sys_call+0x17ba/0x3000 [ 360.818769][T17673] do_syscall_64+0xd8/0x2a0 [ 360.818807][T17673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.818905][T17673] RIP: 0033:0x7fbb7f22f749 [ 360.818924][T17673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.818946][T17673] RSP: 002b:00007fbb7dc8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.818965][T17673] RAX: ffffffffffffffda RBX: 00007fbb7f485fa0 RCX: 00007fbb7f22f749 [ 360.818977][T17673] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 360.818989][T17673] RBP: 00007fbb7dc8f090 R08: 0000000000000000 R09: 0000000000000000 [ 360.819037][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.819049][T17673] R13: 00007fbb7f486038 R14: 00007fbb7f485fa0 R15: 00007ffe6c3447a8 [ 360.819073][T17673] [ 361.043615][T17681] __nla_validate_parse: 13 callbacks suppressed [ 361.043642][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4939'. [ 361.125098][T17676] random: crng reseeded on system resumption [ 361.176504][T17693] ================================================================== [ 361.184620][T17693] BUG: KCSAN: data-race in prepare_signal / ptrace_attach [ 361.191821][T17693] [ 361.194142][T17693] write to 0xffff888104408030 of 4 bytes by task 17687 on cpu 1: [ 361.201853][T17693] ptrace_attach+0x26c/0x590 [ 361.206441][T17693] __se_sys_ptrace+0x146/0x2c0 [ 361.211217][T17693] __x64_sys_ptrace+0x55/0x70 [ 361.215914][T17693] x64_sys_call+0x2ee5/0x3000 [ 361.220595][T17693] do_syscall_64+0xd8/0x2a0 [ 361.225124][T17693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.231017][T17693] [ 361.233334][T17693] read to 0xffff888104408030 of 4 bytes by task 17693 on cpu 0: [ 361.240952][T17693] prepare_signal+0x450/0x670 [ 361.245660][T17693] __send_signal_locked+0x30/0x760 [ 361.250769][T17693] send_signal_locked+0x34e/0x3c0 [ 361.255790][T17693] do_send_sig_info+0x9f/0xf0 [ 361.260467][T17693] do_send_specific+0xca/0x110 [ 361.265238][T17693] __x64_sys_tgkill+0x127/0x160 [ 361.270110][T17693] x64_sys_call+0x2d22/0x3000 [ 361.274792][T17693] do_syscall_64+0xd8/0x2a0 [ 361.279301][T17693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.285192][T17693] [ 361.287521][T17693] value changed: 0x00000000 -> 0x00000001 [ 361.293230][T17693] [ 361.295545][T17693] Reported by Kernel Concurrency Sanitizer on: [ 361.301691][T17693] CPU: 0 UID: 0 PID: 17693 Comm: syz.5.4942 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.313061][T17693] Tainted: [W]=WARN [ 361.316900][T17693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.326952][T17693] ================================================================== [ 361.445312][T17696] syzkaller0: entered promiscuous mode [ 361.450870][T17696] syzkaller0: entered allmulticast mode