last executing test programs: 3m46.812965535s ago: executing program 0 (id=242): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3ee, &(0x7f00000004c0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x800, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r4}, 0x18) rt_sigpending(0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010102, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x9, 0xfffffffffffffffc, 0x0, 0xdffffffffffffff9, 0x2000002}, {0x8, 0x0, 0x5, 0x7fffbfffffffffc}, 0x5, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0xa, @in=@multicast2, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff030001000000000000000000000000000000000000000000000000000000000000000000000000000008"]) mq_timedreceive(r5, &(0x7f0000000100)=""/172, 0xac, 0x1, &(0x7f0000000040)={0x77359400}) 3m45.891411701s ago: executing program 0 (id=250): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x297, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x58, 0x6, "81d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab840"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000000600)={0xa0000013}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 3m44.654252699s ago: executing program 0 (id=259): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd30, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m44.53214252s ago: executing program 0 (id=260): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0x2}, 0x1, 0x0, 0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="e310755b70c186dd9955334adcafb0a1c8a5d19c564571d4cb4e5f82e450c903b4892e795e96ddc496995350e7e92534ed4eec8a035e34261cf1e557d1ac2bbd03826ccea6c28e438f5c7b1063f09506fd8d150af95530f0baff0d00ac6d831fba006da62eee024162e404e8dc29e77587fb", 0x72, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x268}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x46, 0x208005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852e9c05d29316a2a5fce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b784660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d60200000000fdffffff00000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 3m44.380500511s ago: executing program 0 (id=263): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="92a4a3c1", @ANYRES16=r1, @ANYBLOB="1bb302000000ffffffff010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create(0x3ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7, 0x0, 0x18d7ffdf}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000240)={0xa0000000}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="39e8dcfa461ac09e8a722e34d7e484893ffa560200133b1b00003f210000001770faf04714", 0x25}], 0x1) r9 = syz_open_dev$sg(&(0x7f0000001bc0), 0x208, 0x2c41) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r9]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r7, @ANYRES64], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r11, 0x2, 0x0, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) 3m43.883615594s ago: executing program 0 (id=273): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 3m43.880575744s ago: executing program 32 (id=273): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x6, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000340), &(0x7f0000000300)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd25, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) 3m41.105758282s ago: executing program 3 (id=294): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x10, 0xffffffffffffffff, 0xc7e08000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) unshare(0x20000400) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000b14a5fb8b058e891242e6a8d4acf5c36df3124151904308f27b64dde77dcddc58ef674c0d161a823c263146f0c4feb416cae573202b7a5a461c4f6c37a47ea2ec2eec10be8f3169ce2127317dd6c9877ca0f8013feea734a19cacfc0f014680c9ac9698b1114a0a29f40a3328c6e6beb106f03bedceaf922d0543404180b6fad3cc29d80b2e80881ae73730a0d3abf013d2b4d8687c3b0d44e1aa9aee31f6cc4fb9e3b0ced9c97710c9f1a3745c90ada8e3d1132f9467f017b52d274f47cbe42bbe066982c1a46617e14f226326d8f8d176f5cba1c719b2587be6afd20b7ca6f3527d6037dba5dc4d8120b225ace11edb98a0696c1b2f992", @ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') read$char_usb(r3, &(0x7f00000013c0)=""/4089, 0xfffffe14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r4 = socket(0x1e, 0x4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r6, 0x0, 0xf7}, 0x18) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r6, r7, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000180)={0x36, 0x37, 0x2, 0x18, 0x0, 0x9, 0x4, 0x39}) r9 = pidfd_getfd(0xffffffffffffffff, r8, 0x0) ioctl$sock_inet_SIOCRTMSG(r9, 0x890d, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e22, @rand_addr=0x1}, {0x2, 0x4e21, @empty}, 0xec, 0x0, 0x0, 0x0, 0xfff8, &(0x7f0000000380)='veth1_macvtap\x00', 0x7, 0x5, 0x2}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x22444a0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0xfe, 0x2a9, &(0x7f0000000a00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x181a03, 0xd4) 3m40.180842998s ago: executing program 3 (id=305): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) cachestat(r2, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) 3m39.931365219s ago: executing program 3 (id=307): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0}, &(0x7f0000003a00)=[{&(0x7f00000016c0)=""/96, 0x60}], 0x1, 0x0, 0x2}}], 0x48, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r6, @ANYBLOB="16cfc515847a96d5ec40aa629b29dbce89f7c103b1d93b100456ff9cbcd4dca9defbf72be3055c2589351597ee8c611a7270301fc29dec4a803902d3d55b9b4f936f9833fe9dad98335ec209b9bbfcd95ce13e3ca67791516227dda81a0bcb334fb1d8f484ca8c2cae9b2a855f53ef02b3a6421421dd4b0076b0a4c6dae57123fd808ff08334cbc239ff35cd10520955c534ce0bb76f55339a01b94be000cc745db4843d39d84202181bf65e5499b24d40", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, 0x0, 0x0) 3m37.809896323s ago: executing program 3 (id=321): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{'\x00', 0x3}, {0x2}, 0x1, 0x0, 0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)="e310755b70c186dd9955334adcafb0a1c8a5d19c564571d4cb4e5f82e450c903b4892e795e96ddc496995350e7e92534ed4eec8a035e34261cf1e557d1ac2bbd03826ccea6c28e438f5c7b1063f09506fd8d150af95530f0baff0d00ac6d831fba006da62eee024162e404e8dc29e77587fb", 0x72, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x268}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x46, 0x208005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852e9c05d29316a2a5fce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b784660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d60200000000fdffffff00000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 3m37.414706346s ago: executing program 3 (id=323): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x88, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0x52, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ef7cc1", 0x0, 0x0, 0x0, @private0, @dev, [], "2b03e411709c8af2a4e40d15eb620aa7b9a21c82b539efb86cae5c4cf5943ac4c10d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) io_setup(0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x16, 0x0, 0x0, 0x5}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = semget$private(0x0, 0x7, 0x0) r4 = syz_open_pts(r2, 0x40002) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xe, 0x119, &(0x7f0000000740)}) semtimedop(r3, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) semop(r3, &(0x7f0000000180)=[{0x2, 0x2, 0x800}], 0x1) semop(r3, &(0x7f0000000140)=[{0x2, 0xce97, 0x1800}, {0x1, 0x5, 0x1000}], 0x2) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) 3m36.883740079s ago: executing program 3 (id=326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0, &(0x7f0000000400)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000b424ad7800"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000480)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r0, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x0, 0x1}) io_uring_enter(r1, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000f06e6cb1cc2534f0900020073797a31000000000c0007800800170000000000050004000000000005000100070000000d0003006c6973743a73657400000000"], 0x54}}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x30, r10, 0xfffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='alloc_extent_state\x00', r9}, 0x18) getpeername(r11, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r12, 0x8940, 0x0) r13 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r13, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) 3m25.725962691s ago: executing program 5 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 3m25.675660371s ago: executing program 4 (id=478): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x37f9, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) acct(0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r5, 0x0, 0xfffffffffffffff4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r7}, 0x8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000045}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, &(0x7f0000000080)="40f90b8cd7cc89f28a564375a7dbd8f94c206e1d7f4879d4fee6d95d570e3d11e46218eb0502068b", &(0x7f0000000c00)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1b0000001c00010400442139d5aa2e8b2d"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000085000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffe0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040015}, 0x0) unlink(&(0x7f0000000440)='./file0\x00') 3m25.611661141s ago: executing program 5 (id=479): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3m25.611536481s ago: executing program 5 (id=480): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000300)={&(0x7f0000001000)={[{&(0x7f0000000180)="4bbaca797a258e2637a16ba61547f74451b3c96db68ac318d92338b09e32197382d3a4859ef8e6c545e590", 0x2b, 0x1}, {&(0x7f00000001c0)="5682e513cda2328553771efdf7fc12d795fccda413c2218629bf4af48ae86c0351a084be1e04c11d3ba19164ef363deb1ffe8b9957d36ae436630cfd10e813defa4b1ccee295003527bbd144734ccae5", 0x50, 0x2}, {&(0x7f0000000240)="d2918df68167c37e6cf276b97ac176c400a96cab4c6b5e22cde59c0c620497f8abf700aa5f3797d09a2de4095f1bc53a28865f46fa3c8de4932fa6d3c2d2d49181367ec7d5a07275587d0154effb20649e80bc3de95d681f771921f9d448926eb52c560725aec601f1acb25a4bf52e33186d804997013468700e2e49e5f4a33630e0993ec258ab4545195918db58a62a4109", 0x92}]}, 0x3, 0x1}, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x208008, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRES8=0x0], 0x41, 0x314, &(0x7f0000000700)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(0xffffffffffffffff, 0x9, 0x0) 3m25.526331692s ago: executing program 5 (id=482): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) read$hiddev(r1, &(0x7f00000000c0)=""/63, 0x3f) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r1, r1, 0x0, 0x800000009) 3m25.383622543s ago: executing program 4 (id=483): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000080), &(0x7f00000000c0)) syz_clone3(&(0x7f0000000200)={0x48a00000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x6}, &(0x7f0000000100)=""/21, 0x15, &(0x7f0000000540)=""/4096, &(0x7f0000000140)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') kcmp(r5, 0x0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 3m25.372510833s ago: executing program 5 (id=484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0xfffffffb, 0x6, 0x100, &(0x7f0000000440)="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"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rxrpc_call_complete\x00', r3, 0x0, 0x3}, 0x18) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7e9, &(0x7f0000001f80)="$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") pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') 3m24.971321435s ago: executing program 5 (id=492): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3m24.934638226s ago: executing program 34 (id=492): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 3m24.549244198s ago: executing program 4 (id=495): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x46, 0x208005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852e9c05d29316a2a5fce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b784660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d60200000000fdffffff00000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 3m24.20518298s ago: executing program 4 (id=499): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xd192}, 0x18) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m23.820560973s ago: executing program 4 (id=503): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_setup(0x8f0, &(0x7f0000002400)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207000502cf1f332019536d0000002dbd7002ff"], 0x10}}, 0x4040014) 3m23.820408193s ago: executing program 35 (id=503): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) io_setup(0x8f0, &(0x7f0000002400)) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="0207000502cf1f332019536d0000002dbd7002ff"], 0x10}}, 0x4040014) 3m17.225934655s ago: executing program 8 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x4bd, &(0x7f0000000a00)="$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") syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x80061, &(0x7f00000001c0)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) 3m17.043158786s ago: executing program 8 (id=570): r0 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 3m16.920272177s ago: executing program 8 (id=573): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3m16.795741868s ago: executing program 8 (id=576): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(0x0, 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x46, 0x208005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852e9c05d29316a2a5fce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b784660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d60200000000fdffffff00000001", [0x204]}) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) 3m16.593952769s ago: executing program 8 (id=579): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = eventfd2(0x2, 0x80001) write$eventfd(r3, &(0x7f0000000040)=0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000006100ed0000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0x2d, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) 3m16.268221391s ago: executing program 8 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 3m16.203191082s ago: executing program 36 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 3.111704761s ago: executing program 6 (id=4388): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x2, "f42a"}}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000004) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setitimer(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)=0x14) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c1400", @ANYRES64=r4], 0x24}}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x27, 0x1, 0xa7, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x80228, 0x10000, 0x0, 0x6, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x264) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x80009, 0x0, 0x0) 2.913941272s ago: executing program 6 (id=4393): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x803}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x4, 0xf}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0xe, 0x10, 0x1}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="385cfe8011"]}) 2.377214065s ago: executing program 6 (id=4406): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x20, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x6, 0x5, 0xf, 0xa, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xb}, @ldst={0x3, 0x2, 0x6, 0xb, 0x4, 0xfffffffffffffffe, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x6d, 0x9, 0x6, 0x6, 0x10001}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0x94, &(0x7f0000000a40)=""/148, 0x41100, 0x1, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x0, 0x1, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000b80)=[r0, r0, r0], &(0x7f0000000bc0)=[{0x5, 0x3, 0xe, 0x1}, {0x0, 0x4, 0xb, 0x4}, {0x1, 0x2, 0xa, 0x3}, {0x0, 0x4, 0x8, 0x5}, {0x2, 0x5, 0xe, 0x3}, {0x4, 0x5, 0x8, 0x9}, {0x1, 0x3, 0xf, 0x7}], 0x10, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$phonet(0x23, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x7fffffffffffffff) 2.321758505s ago: executing program 6 (id=4408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 2.211606836s ago: executing program 6 (id=4411): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x48) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x94, 0x0, 0x2, 0x11}]}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCGSOFTCAR(r9, 0x5414, &(0x7f0000000040)) 2.003269327s ago: executing program 1 (id=4412): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1.779292819s ago: executing program 1 (id=4414): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000001c0)=[{0x5, 0x1, 0x3}, {0x100, 0x10, 0x4, 0x9}, {0xffff, 0x7, 0x26, 0x9}]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty, 0x4}}, 0x8, 0x1, 0xfffffe01, 0x0, 0xb3550aa4ba878386, 0x2, 0x2}, 0x9c) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xfffffffffffffcf4}, {0xc}}}]}]}, 0xe94}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}]}}]}, 0xa4}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="8520000004000000185800000c000000000000000000000000000000a000"/40], &(0x7f0000001200)='syzkaller\x00', 0x7ff, 0x4d, &(0x7f0000001240)=""/77, 0x40f00, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001340)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x9, 0xfffffffc}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000013c0)=[{0x2, 0x2, 0xd, 0xc}, {0x4, 0x2, 0xc, 0xc}, {0x2, 0x1, 0x10, 0x3}, {0x2, 0x5, 0x8, 0x6}, {0x1, 0x1, 0x10, 0x4}, {0x1, 0x4, 0xb, 0x9}, {0x1, 0x1, 0xe, 0x2}, {0x0, 0x2, 0x8, 0x4}], 0x10, 0x8}, 0x94) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r11}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.772309379s ago: executing program 1 (id=4415): io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x20001, 0xae) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, r1}]) 1.65139846s ago: executing program 1 (id=4417): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x60, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x803}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf9, 0x4, 0xf}}}}}]}}]}}, &(0x7f00000000c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x8, 0xe, 0x10, 0x1}, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="385cfe8011"]}) 1.080848613s ago: executing program 1 (id=4422): perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e3fcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x404, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x5e21, @private=0xa010101}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r8}, 0x10) 1.073635804s ago: executing program 7 (id=4423): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x297, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x58, 0x6, "81d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab840"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 1.003082914s ago: executing program 9 (id=4424): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffff}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r3 = creat(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRESDEC=r4, @ANYBLOB="628e5432ee", @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c95}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0xff40) write$ppp(r6, &(0x7f0000000200)="bc72", 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x2a9, &(0x7f00000006c0)={{0x12, 0x1, 0x210, 0x52, 0x7d, 0xab, 0x40, 0x93a, 0x2603, 0x8440, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x297, 0x1, 0xe, 0x5, 0xa0, 0xc, [{{0x9, 0x4, 0x91, 0x1a, 0xd, 0x68, 0xd9, 0xf9, 0xff, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '$'}, {0x5, 0x24, 0x0, 0x30}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x0, 0xff, 0x9}, [@country_functional={0xc, 0x24, 0x7, 0xa2, 0x9, [0x1, 0x400, 0x9]}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0xe, 0x100}]}], [{{0x9, 0x5, 0x4, 0x2, 0x5bf, 0x7, 0xd, 0x10, [@generic={0x1e, 0x8, "eb233d4d92160656d4fdd8f66668a83fcf6d5649761cf9d22a99bbcc"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xb, 0x4f, 0x0, [@generic={0x22, 0x22, "1b7140692f5bd717630950eca52e9a0a9931de3d6c898a34f2835daebc47b6a2"}, @generic={0x7, 0x9, "c99a845364"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x7, 0x8, 0x10}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0xa, 0xaa, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x207}]}}, {{0x9, 0x5, 0x8a, 0x10, 0x20, 0xf, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x0, 0x43, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9d}]}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0x7f, 0xc, 0xe7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0x7, 0x1f5cb390bd622936, 0x400, 0x2, 0x7, 0x7, [@generic={0x6f, 0x7, "e83fffb2f66f89240987dda9cf1d9e2d76fffd15ebf165c2cc0f9ff4c68bdc1195060692877652e589ed2de26b468e38b776a7bb95d35c43794ac228614c4394abe4154617d95ce70d15710aa52eba1fa172cfcef15f2971951830d841169aabf4fb17c0e845e942814d29a0c2"}, @generic={0x6, 0x10, "76a3289e"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0x7, 0x7, 0xe}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7, 0x7, 0xd}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xa, 0x3a, 0x68, [@generic={0x98, 0x1, "e4887dca70831e83920c7b619fdc685403efa458556c9045486b39ad2c4cab71d5193eb206fa1baa8aab8129bf20ae8e117fa8cc5f1108234cea5731de0fe4f86b6c02a8045e7b0d65e8e6882fe3724473b8763bc03ed61195ba860ca02b436a7fdcedb66d9fdcf98a9d7cebe43deca0cd8b67b1de53bd2a5818cb1357c31aa29e5f805b737207b778b522871b29203f039419033ebc"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x200, 0x5, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x8}, @generic={0x58, 0x6, "81d8136a86fe088103cb332def5b4d433f5831fe50eff0ab897e607566c65865d1e906977af57fe7a9546fa92086d464236ba7551a2e595d7bd9c641c136b63be9422ea8124f5e1576f3bb87857136d20a6d7b6ab840"}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0xf, 0x7, 0xe, 0xff, 0xe0}, 0x5, &(0x7f0000000380)=ANY=[], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x42d}}]}) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0x20000014}) close_range(r8, r9, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100004001ea1c003d37ceefc0300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x20008050}, 0x24040050) close(r3) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, &(0x7f0000000000)={'\x00', 0x80000000, 0x3, 0xfffffffd}) fallocate(r0, 0x20, 0x0, 0x8000) 934.658355ms ago: executing program 2 (id=4425): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file1\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async, rerun: 32) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x20, 0x25dfdbfc, {{@in=@multicast1, @in=@private=0xa010100, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x2, 0x9, 0xd, 0x0, 0x80000001, 0x543}, {0x4, 0x8000000000000000, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x103500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r4, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000a00)) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) set_tid_address(&(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fallocate(r9, 0x49, 0xda, 0x5) (async) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 871.665625ms ago: executing program 2 (id=4426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrlimit(0xf, &(0x7f0000000340)) 855.824125ms ago: executing program 2 (id=4427): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x4041c0, 0x0) setns(r2, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) 759.887856ms ago: executing program 2 (id=4428): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 751.017216ms ago: executing program 6 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_fallocate\x00', r1, 0x0, 0x1000003}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nomblk_io_submit}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x572, &(0x7f0000000980)="$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") r3 = gettid() ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x4, 0x4002) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x4, &(0x7f0000000200)={0x0, 0x2d, 0x1, @thr={&(0x7f0000000280)="b2a2ebefae5e913ccd3e289fe4e41628c6c7d37418ebb465f52d9251c467d4fc3d0d7a7bd4ea869b0bbaf49a0f5cf035492f863e6074108d8515c9383eb8ff158e3a067eb8ea62e368434a06b2b87bc79930f1644e8f27f4a5915c177582e7bdc19bf564393e27956bc9b987a4", &(0x7f0000000480)="4113f4c0ae6fc8374427def7c5608f36144584aca1b5ae8e570f7ba6ada7f7875fc2ff27b1845482eb15d80665ff38c1346cdcc4df0a857444d99f3e0f87cf04bd382d057661a953364f85c37fa531d274aedb"}}, &(0x7f0000000300)) ioctl$KDMKTONE(r4, 0x4b30, 0xffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r3) r5 = syz_open_procfs(0x0, &(0x7f0000002140)='sched\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x200}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x0, 0x280, 0x8, 0x4d2005e, r7}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfd5c603, 0x0, 0x0, 0x0, 0x5}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0xca, &(0x7f0000000840)=""/202, 0x40f00, 0x0, '\x00', r7, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000500)=[{0x2, 0x3, 0x1}, {0x3, 0x3, 0xa, 0x7}, {0x0, 0x4, 0x0, 0x6}, {0x1, 0x5, 0xc, 0x7}, {0x5, 0x3, 0x9, 0x4}, {0x1, 0x2, 0x0, 0x2}, {0x4, 0x5, 0xa, 0xd}], 0x10, 0x101}, 0x94) preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1, 0x0, 0x5) tkill(r3, 0x13) 736.384045ms ago: executing program 2 (id=4430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4, 0x0, 0x20000000004}, 0x18) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300050e000000000700000000000004000900a800000053bb460900000062a6f463273efca720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002001900ac1414000001000000000040"], 0x70}, 0x1, 0x7}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0xad7ac) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syslog(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x31, 0x1, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) fcntl$setlease(r10, 0x400, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$getflags(r5, 0x401) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd602e5cea00183c01fc010000000000000000000000000000ff"], 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x1, 0x80000000}}}}]}, 0x44}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) 687.696666ms ago: executing program 2 (id=4431): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = dup2(r0, r1) lseek(r0, 0x268, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f0000000000)=""/133, &(0x7f00000000c0)=0x85) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x37ba, 0x40000) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x89d, 0x8}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x1b, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xca}, @generic={0x6, 0x9, 0xc, 0x7, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x9, &(0x7f00000002c0)=""/9, 0x40f00, 0x22, '\x00', r6, @fallback=0x19, r2, 0x8, &(0x7f0000000340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xb, 0x4, 0xfffffffd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000003c0)=[r4], &(0x7f0000000400)=[{0x2, 0x4, 0x1, 0x9}, {0x0, 0x6, 0x5, 0x9}, {0x1, 0x5, 0xe, 0xa}, {0x3, 0x2, 0x9, 0x3}], 0x10, 0x9}, 0x94) r8 = openat$cgroup_ro(r2, &(0x7f0000000540)='cgroup.freeze\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'pim6reg1\x00'}) readv(r3, &(0x7f00000018c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/187, 0xbb}, {&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/131, 0x83}, {&(0x7f0000001780)=""/225, 0xe1}, {&(0x7f0000001880)=""/44, 0x2c}], 0x6) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000019c0)={0x9, &(0x7f0000001940)=[{0x400, 0xf, 0x7, 0x2000000}, {0x8, 0x2, 0x81, 0x3}, {0x0, 0x2, 0x1, 0x101}, {0x10, 0x5e, 0x7, 0x81}, {0xef47, 0x81, 0x3, 0x7}, {0x2, 0x5, 0xf6, 0x7fff}, {0x6, 0x7, 0x8, 0x9}, {0x3, 0x8, 0x6, 0x7}, {0x3, 0x8, 0x7, 0x80}]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16c, 0x16c, 0x8, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @typedef={0x8}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0xb, 0x2}, {0x5, 0x3}, {0x5}, {0xf, 0x1}, {0x7, 0x2}, {0x2, 0x1}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x6, 0x4}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0xc, 0x5}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x2}, {0x3, 0x4}, {0x1}, {0x4, 0x2}]}, @enum64={0xc, 0x7, 0x0, 0x13, 0x0, 0x0, [{0x3, 0xfffff000, 0x2}, {0xf, 0x1, 0x7}, {0xd, 0x10, 0x1}, {0xf, 0x6, 0x5}, {0x5, 0x40, 0xfff}, {0xa, 0xfffffeff, 0x6}, {0x2, 0x1, 0x8}]}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @union={0x5, 0x5, 0x0, 0x5, 0x1, 0x8, [{0xa, 0x5, 0x1b}, {0x3, 0x0, 0x1}, {0x4, 0x4, 0x7}, {0x6, 0x3, 0x9}, {0xe, 0x5, 0x3a17c364}]}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x30, 0x2e]}}, &(0x7f0000001bc0)=""/48, 0x18c, 0x30, 0x0, 0x6, 0x10000, @value=r4}, 0x28) fsopen(&(0x7f0000001c40)='ramfs\x00', 0x1) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001c80)=0x7, 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000020c0)={r9, 0x2, 0x7, 0x1}) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000024c0)='./file0\x00', 0x10000, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f00000025c0)={{0x1, 0x1, 0x18, r10, {0x0, 0xee00}}, './file0\x00'}) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x7) fsetxattr(r10, &(0x7f0000002600)=@known='trusted.overlay.upper\x00', &(0x7f0000002640)=']:k\xf3,{\x00', 0x7, 0x3) 262.811359ms ago: executing program 7 (id=4432): r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x9, 0x0}, 0x8) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x502}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4b, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x24, r3, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, r2, 0x1, &(0x7f00000003c0)=[r1, r1, r1, r1, r1, r1, r1, r5], &(0x7f0000000500)=[{0x2, 0x4, 0xe, 0x7}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) syz_clone3(&(0x7f0000000300)={0x300500, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0xffffffffffffffff], 0x1}, 0x58) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'syztnl2\x00', &(0x7f0000000b80)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x4, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x7, 0x0, 0xe}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x1, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r7, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pI4 \x00'}, 0x20) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f80)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x17, 0x22, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='syzkaller\x00', 0x9, 0x7, &(0x7f0000000b40)=""/7, 0x40f00, 0x75d3112f948bad61, '\x00', r9, @cgroup_sysctl=0x12, r3, 0x8, &(0x7f0000000c80)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0xb, 0x800, 0x8}, 0x10, r10, r6, 0x7, &(0x7f0000000e00)=[r5, r1, r1, r11, r5, r5, r1, r5], &(0x7f0000000e40)=[{0x2, 0x2, 0xa, 0xb}, {0x1, 0x1, 0x10, 0xc}, {0x5, 0x4, 0x9, 0x7}, {0x5, 0x3, 0x2, 0x8}, {0x3, 0x4, 0x4, 0x9}, {0x2, 0x4, 0x1, 0x3}, {0x1, 0x4, 0xe, 0x8}], 0x10, 0x2, @value=r12}, 0x94) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r13, 0x107, 0x5, &(0x7f0000000040)=@req3={0x44, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3ff}, 0x1c) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0x4, 0x8}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r16, &(0x7f0000000380)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r16, 0x407, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0x0, '\x00', r15, r16, 0x1, 0x5, 0x5}, 0x50) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x700, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20) 223.923449ms ago: executing program 1 (id=4433): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x60040, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r8) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, r10, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) socket$key(0xf, 0x3, 0x2) 201.369569ms ago: executing program 9 (id=4434): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000640)=@usbdevfs_driver={0x401, 0x4, &(0x7f0000000740)="e2317a0f0d4b712ecd2931c5b77d4fdac382ff5dbc4537dc46e46f386669390567fae313f07560f15dc86899ca201adc6313e76783b0a0225784af4cec5f071889c0facf2d1b7517847421c3ed00094f8e14a83e1fe71559819f4f7c08161c1e413b452e11d687af015f671eefdfadcb6621c00ae1a1d1d177261175"}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000480)=0xc, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x8}, 0x4a00, 0x10000, 0x0, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4000000000, 0x3fff8000}, 0x201, 0x32, 0x43a1bd76, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, &(0x7f0000000300)="f598c1835426d886908f7cbd7ad30182b728e4657859e717b3481705df9cb2d4c597924352612f23c7f42b0fd7637fbfb3059a6728ba11a1c3c88cf7d0b7a2ad698bd375d52fc9f16212acfcf76c85b3f12cf05cda2b1fbe0801c87cda990289071c433c9a94a4f5ec37a094479779530d5184213325cf86d0e74a4d89fc168430c25aa523bbaa792fa0f8774e6e74bd67b9bf0565e32b61d46d36e740e0265df4ef883c874af330df61d367401baff9a787dcb4a67da6bc1edc9f3a392e228460e47dacf7e93b80e9605e16ae9c7dd38d9ffaa11c119f1f7eb0929bb1e84c502fbacea18759e7b91bec8a8b", 0xec, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000440)="33bdd7d5540718424694773d1ae8459eb4d9e398f45ff5c50447b92068d82903") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x40000}]}}) 188.664939ms ago: executing program 7 (id=4435): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x7, 0x65, &(0x7f0000000240)={0x1f, 0x12, 0x0, 0x55}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x6, 0x0}) 128.84533ms ago: executing program 7 (id=4436): io_setup(0x9, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x20001, 0xae) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000140)="392f6ce4b1404d344b37d56177dff0c6a57840455afcd97647b7c8aa8ae1dc304d3249e913d262f5c181a337d472c2a25a1d7f639312232e5007d4ea40c1988a2a3a1cd50d642e6bf740396b4d85326d23aaaff883bb205c88c6f1541aa11a0f114dff16385fc57745", 0x69, 0x0, 0x0, 0x0, r1}]) 116.472039ms ago: executing program 9 (id=4437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrlimit(0xf, &(0x7f0000000340)) 55.51055ms ago: executing program 9 (id=4438): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f00000000c0)=""/51, 0x33, 0x0, &(0x7f0000000140)=""/138, 0x8a}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 51.54227ms ago: executing program 9 (id=4439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 29.5063ms ago: executing program 7 (id=4440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 26.36347ms ago: executing program 9 (id=4441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") r2 = socket(0x400000000010, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kmem_cache_free\x00', r4, 0x0, 0x20000000004}, 0x18) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="020300050e000000000700000000000004000900a800000053bb460900000062a6f463273efca720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002001900ac1414000001000000000040"], 0x70}, 0x1, 0x7}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r9, 0x9204, 0xad7ac) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syslog(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x31, 0x1, 0x2, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) fcntl$setlease(r10, 0x400, 0x1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$getflags(r5, 0x401) syz_emit_ethernet(0x4e, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd602e5cea00183c01fc010000000000000000000000000000ff"], 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x1, 0x80000000}}}}]}, 0x44}}, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) 0s ago: executing program 7 (id=4442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000091106a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000001600001103000000000000000300000000000004000000000000000000000084000000000000002e"], 0x0, 0x45}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='rpcgss_context\x00', r5, 0x0, 0x4}, 0x18) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r6}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cd, &(0x7f0000001180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="c00f86dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000000000000189"], 0xfce) unshare(0x62040200) dup(r2) kernel console output (not intermixed with test programs): yz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.012119][ T29] audit: type=1326 audit(1762664917.162:33943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.036932][ T29] audit: type=1326 audit(1762664917.162:33944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.043300][T15645] loop6: detected capacity change from 0 to 512 [ 250.060583][ T29] audit: type=1326 audit(1762664917.162:33945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.060621][ T29] audit: type=1326 audit(1762664917.162:33946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.114171][ T29] audit: type=1326 audit(1762664917.162:33947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.137829][ T29] audit: type=1326 audit(1762664917.162:33948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.161438][ T29] audit: type=1326 audit(1762664917.162:33949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 250.185129][ T29] audit: type=1326 audit(1762664917.162:33950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa13bea6567 code=0x7ffc0000 [ 250.208629][ T29] audit: type=1326 audit(1762664917.162:33951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15641 comm="syz.9.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa13be4b779 code=0x7ffc0000 [ 250.234996][T15645] EXT4-fs (loop6): failed to initialize system zone (-117) [ 250.242552][T15645] EXT4-fs (loop6): mount failed [ 250.280039][T15650] loop1: detected capacity change from 0 to 512 [ 250.294205][T15640] lo speed is unknown, defaulting to 1000 [ 250.309228][T15650] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3814: couldn't read orphan inode 26 (err -116) [ 250.321336][T15650] EXT4-fs (loop1): Remounting filesystem read-only [ 250.328623][T15650] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.362226][T15656] lo speed is unknown, defaulting to 1000 [ 250.392619][T15662] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3815'. [ 250.425593][T15664] loop1: detected capacity change from 0 to 1024 [ 250.498692][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.507276][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.812278][T15675] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3819'. [ 250.846895][T15677] loop9: detected capacity change from 0 to 2048 [ 250.877276][T15677] loop9: p3 < > p4 < > [ 250.881468][T15677] loop9: partition table partially beyond EOD, truncated [ 250.888699][T15677] loop9: p3 start 4284289 is beyond EOD, truncated [ 250.970570][T15686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.979224][T15686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.128948][T15688] loop7: detected capacity change from 0 to 1024 [ 251.146042][T15688] EXT4-fs mount: 95 callbacks suppressed [ 251.146062][T15688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.165459][T12956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.201960][T15694] loop1: detected capacity change from 0 to 512 [ 251.221101][T15694] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3827: couldn't read orphan inode 26 (err -116) [ 251.233562][T15694] EXT4-fs (loop1): Remounting filesystem read-only [ 251.235395][T15688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.240513][T15694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.261090][T15694] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.275047][T15688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.285124][T12956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.298364][T15701] loop2: detected capacity change from 0 to 512 [ 251.306503][T15701] EXT4-fs (loop2): failed to initialize system zone (-117) [ 251.314288][T15701] EXT4-fs (loop2): mount failed [ 251.345177][T15701] lo speed is unknown, defaulting to 1000 [ 251.390723][T15706] loop6: detected capacity change from 0 to 1024 [ 251.408855][T15706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.438748][T15706] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.3831: Allocating blocks 449-513 which overlap fs metadata [ 251.458669][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 251.459501][T15705] EXT4-fs (loop6): pa ffff888107119230: logic 48, phys. 177, len 21 [ 251.475748][T15705] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 251.497162][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.573015][T15722] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 251.580914][T15722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3838'. [ 251.599514][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3836'. [ 251.610917][T15722] loop1: detected capacity change from 0 to 1024 [ 251.617788][T15722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.624393][T15722] EXT4-fs: Ignoring removed orlov option [ 251.630202][T15722] ext2: Bad value for 'mb_optimize_scan' [ 251.818445][T15744] loop9: detected capacity change from 0 to 2048 [ 251.854171][T15747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.862170][T15744] loop9: p2 p3 p7 [ 251.863007][T15747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.909837][ T5424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.977847][T15752] loop9: detected capacity change from 0 to 512 [ 252.004711][T15752] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3849: couldn't read orphan inode 26 (err -116) [ 252.054229][T15752] EXT4-fs (loop9): Remounting filesystem read-only [ 252.062429][T15752] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.076132][T15752] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.113142][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.141280][ T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.162184][T15755] lo speed is unknown, defaulting to 1000 [ 252.191427][ T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.230354][T15768] loop9: detected capacity change from 0 to 1024 [ 252.240585][ T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.249184][T15768] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.265654][T15755] chnl_net:caif_netlink_parms(): no params data found [ 252.286323][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.320604][ T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.335784][T15755] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.342936][T15755] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.350271][T15755] bridge_slave_0: entered allmulticast mode [ 252.357040][T15755] bridge_slave_0: entered promiscuous mode [ 252.364011][T15755] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.369212][T15778] loop9: detected capacity change from 0 to 512 [ 252.371260][T15755] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.379189][T15778] EXT4-fs: Ignoring removed nobh option [ 252.384649][T15755] bridge_slave_1: entered allmulticast mode [ 252.396781][T15755] bridge_slave_1: entered promiscuous mode [ 252.429362][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.3853: corrupted inode contents [ 252.443477][T15755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.452813][T15778] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #3: comm syz.9.3853: mark_inode_dirty error [ 252.452974][ T37] bridge_slave_1: left allmulticast mode [ 252.469768][ T37] bridge_slave_1: left promiscuous mode [ 252.475433][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.484950][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.3853: corrupted inode contents [ 252.507644][ T37] bridge_slave_0: left allmulticast mode [ 252.513327][ T37] bridge_slave_0: left promiscuous mode [ 252.517375][T15778] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3853: mark_inode_dirty error [ 252.519104][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.556035][T15778] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.3853: Failed to acquire dquot type 0 [ 252.580848][T15789] loop6: detected capacity change from 0 to 1024 [ 252.587364][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.3853: corrupted inode contents [ 252.599784][T15778] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #16: comm syz.9.3853: mark_inode_dirty error [ 252.611602][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.3853: corrupted inode contents [ 252.627496][T15778] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3853: mark_inode_dirty error [ 252.639674][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.3853: corrupted inode contents [ 252.652863][T15789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.666454][T15778] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 252.675872][T15778] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.3853: corrupted inode contents [ 252.689389][T15778] EXT4-fs error (device loop9): ext4_truncate:4637: inode #16: comm syz.9.3853: mark_inode_dirty error [ 252.706775][T15794] loop1: detected capacity change from 0 to 512 [ 252.713288][T15778] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 252.715414][T15794] EXT4-fs (loop1): failed to initialize system zone (-117) [ 252.722633][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.731268][T15794] EXT4-fs (loop1): mount failed [ 252.745621][T15778] EXT4-fs (loop9): 1 truncate cleaned up [ 252.752731][T15778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.765538][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.777574][ T37] bond0 (unregistering): Released all slaves [ 252.787698][T15778] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.788338][T15755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.800302][T15797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.817315][T15797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.843955][ T37] hsr_slave_0: left promiscuous mode [ 252.850403][ T37] hsr_slave_1: left promiscuous mode [ 252.856280][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.856875][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.863705][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.880872][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.888313][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.907444][ T37] veth1_macvtap: left promiscuous mode [ 252.913003][ T37] veth0_macvtap: left promiscuous mode [ 252.919888][ T37] veth1_vlan: left promiscuous mode [ 252.925167][ T37] veth0_vlan: left promiscuous mode [ 252.983836][ T37] team0 (unregistering): Port device team_slave_1 removed [ 252.994965][ T37] team0 (unregistering): Port device team_slave_0 removed [ 253.047629][T15755] team0: Port device team_slave_0 added [ 253.055709][T15755] team0: Port device team_slave_1 added [ 253.081233][T15806] lo speed is unknown, defaulting to 1000 [ 253.088468][T15755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.095436][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.121396][T15755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.133067][T15755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.140090][T15755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.166135][T15755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.232072][T15755] hsr_slave_0: entered promiscuous mode [ 253.238797][T15755] hsr_slave_1: entered promiscuous mode [ 253.246200][T15822] usb usb1: usbfs: process 15822 (syz.9.3868) did not claim interface 63 before use [ 253.600914][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.626432][T15842] FAULT_INJECTION: forcing a failure. [ 253.626432][T15842] name failslab, interval 1, probability 0, space 0, times 0 [ 253.639140][T15842] CPU: 0 UID: 0 PID: 15842 Comm: syz.6.3875 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.639177][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 253.639195][T15842] Call Trace: [ 253.639204][T15842] [ 253.639213][T15842] __dump_stack+0x1d/0x30 [ 253.639239][T15842] dump_stack_lvl+0xe8/0x140 [ 253.639259][T15842] dump_stack+0x15/0x1b [ 253.639333][T15842] should_fail_ex+0x265/0x280 [ 253.639360][T15842] should_failslab+0x8c/0xb0 [ 253.639396][T15842] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 253.639505][T15842] ? sidtab_sid2str_get+0xa0/0x130 [ 253.639538][T15842] kmemdup_noprof+0x2b/0x70 [ 253.639632][T15842] sidtab_sid2str_get+0xa0/0x130 [ 253.639665][T15842] security_sid_to_context_core+0x1eb/0x2e0 [ 253.639742][T15842] security_sid_to_context+0x27/0x40 [ 253.639855][T15842] selinux_lsmprop_to_secctx+0x67/0xf0 [ 253.639955][T15842] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 253.640005][T15842] audit_log_subj_ctx+0xa4/0x3e0 [ 253.640077][T15842] ? skb_put+0xa9/0xf0 [ 253.640138][T15842] audit_log_task_context+0x48/0x70 [ 253.640168][T15842] audit_log_task+0xf4/0x250 [ 253.640205][T15842] ? kstrtouint+0x76/0xc0 [ 253.640248][T15842] audit_seccomp+0x61/0x100 [ 253.640295][T15842] ? __seccomp_filter+0x82d/0x1250 [ 253.640325][T15842] __seccomp_filter+0x83e/0x1250 [ 253.640491][T15842] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 253.640561][T15842] ? vfs_write+0x7e8/0x960 [ 253.640585][T15842] ? __rcu_read_unlock+0x4f/0x70 [ 253.640609][T15842] ? __fget_files+0x184/0x1c0 [ 253.640755][T15842] __secure_computing+0x82/0x150 [ 253.640852][T15842] syscall_trace_enter+0xcf/0x1e0 [ 253.640879][T15842] do_syscall_64+0xac/0x200 [ 253.640904][T15842] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 253.641003][T15842] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 253.641054][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.641080][T15842] RIP: 0033:0x7f5e6d90f6c9 [ 253.641099][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.641172][T15842] RSP: 002b:00007f5e6c377038 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 253.641196][T15842] RAX: ffffffffffffffda RBX: 00007f5e6db65fa0 RCX: 00007f5e6d90f6c9 [ 253.641212][T15842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.641227][T15842] RBP: 00007f5e6c377090 R08: 0000000000000000 R09: 0000000000000000 [ 253.641243][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.641255][T15842] R13: 00007f5e6db66038 R14: 00007f5e6db65fa0 R15: 00007ffefafc6a78 [ 253.641273][T15842] [ 253.927939][T15755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 253.947115][T15755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 253.971754][T15755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 253.987170][T15755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 254.037493][T15844] loop6: detected capacity change from 0 to 1024 [ 254.059723][T15844] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 254.080695][T15855] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 254.085421][T15844] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.106756][T15755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.120554][T15755] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.131428][T15844] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 254.142882][T15858] usb usb1: usbfs: process 15858 (syz.2.3878) did not claim interface 63 before use [ 254.158046][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.160058][T15844] EXT4-fs (loop6): orphan cleanup on readonly fs [ 254.165171][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.182394][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.189502][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.199331][T15844] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.3876: Inode bitmap for bg 0 marked uninitialized [ 254.212561][T15755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.222990][T15755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.236044][T15844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.254074][T15862] loop2: detected capacity change from 0 to 1024 [ 254.267756][T15862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.294829][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.306029][T15755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.336054][T15875] usb usb1: usbfs: process 15875 (syz.1.3882) did not claim interface 63 before use [ 254.349964][T15862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.363314][T15872] loop6: detected capacity change from 0 to 512 [ 254.380647][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.389290][T15862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.398940][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.408128][T15872] EXT4-fs (loop6): failed to initialize system zone (-117) [ 254.415564][T15872] EXT4-fs (loop6): mount failed [ 254.466904][T15872] lo speed is unknown, defaulting to 1000 [ 254.498087][T15755] veth0_vlan: entered promiscuous mode [ 254.511482][T15755] veth1_vlan: entered promiscuous mode [ 254.529543][T15755] veth0_macvtap: entered promiscuous mode [ 254.536961][T15755] veth1_macvtap: entered promiscuous mode [ 254.547341][T15755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.558808][T15755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.569004][ T114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.579874][ T114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.591050][ T114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.601814][ T114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.643877][T15892] __nla_validate_parse: 4 callbacks suppressed [ 254.643890][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3848'. [ 254.682785][T15894] loop6: detected capacity change from 0 to 1024 [ 254.701150][T15894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.775912][T15894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.784446][T15894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.014000][T15908] loop1: detected capacity change from 0 to 2048 [ 255.041505][T12256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.068314][T15908] loop1: p2 p3 p7 [ 255.082241][ T29] kauditd_printk_skb: 610 callbacks suppressed [ 255.082273][ T29] audit: type=1326 audit(1762664922.262:34559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.112140][ T29] audit: type=1326 audit(1762664922.262:34560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.135716][ T29] audit: type=1326 audit(1762664922.262:34561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.159573][ T29] audit: type=1326 audit(1762664922.262:34562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.183089][ T29] audit: type=1326 audit(1762664922.262:34563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.206865][ T29] audit: type=1326 audit(1762664922.262:34564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.230596][ T29] audit: type=1326 audit(1762664922.262:34565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.254434][ T29] audit: type=1326 audit(1762664922.262:34566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.278094][ T29] audit: type=1326 audit(1762664922.262:34567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.301743][ T29] audit: type=1326 audit(1762664922.262:34568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz.1.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 255.334475][T15918] loop9: detected capacity change from 0 to 1024 [ 255.341805][T15918] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 255.352758][T15918] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 255.363569][T15918] JBD2: no valid journal superblock found [ 255.369419][T15918] EXT4-fs (loop9): Could not load journal inode [ 255.416075][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.417444][T15918] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 255.451303][T15924] netlink: 'syz.6.3894': attribute type 1 has an invalid length. [ 255.459151][T15924] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3894'. [ 255.473921][T15924] loop6: detected capacity change from 0 to 1024 [ 255.481111][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3893'. [ 255.493111][T15924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.499877][T15924] EXT4-fs: Ignoring removed orlov option [ 255.505622][T15924] ext2: Bad value for 'mb_optimize_scan' [ 255.533833][T15927] loop1: detected capacity change from 0 to 1024 [ 255.559270][T15927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.632653][T15935] syzkaller0: entered promiscuous mode [ 255.638298][T15935] syzkaller0: entered allmulticast mode [ 255.661841][T15927] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.3895: Allocating blocks 449-513 which overlap fs metadata [ 255.683264][T15939] loop9: detected capacity change from 0 to 512 [ 255.688289][T15926] EXT4-fs (loop1): pa ffff88810722a9a0: logic 48, phys. 177, len 21 [ 255.697741][T15926] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 255.712654][T15939] EXT4-fs (loop9): failed to initialize system zone (-117) [ 255.720900][T15939] EXT4-fs (loop9): mount failed [ 255.725976][T12956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.759365][T15944] loop1: detected capacity change from 0 to 512 [ 255.764370][T15939] lo speed is unknown, defaulting to 1000 [ 255.768910][T15944] EXT4-fs (loop1): failed to initialize system zone (-117) [ 255.779682][T15944] EXT4-fs (loop1): mount failed [ 255.816907][T15944] lo speed is unknown, defaulting to 1000 [ 255.826677][T15950] loop6: detected capacity change from 0 to 1024 [ 255.847308][T15950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.922738][T15950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.931300][T15955] loop2: detected capacity change from 0 to 2048 [ 255.931856][T15950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.981088][T15955] loop2: p2 p3 p7 [ 256.068821][T15961] netlink: 10 bytes leftover after parsing attributes in process `syz.9.3904'. [ 256.138551][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'. [ 256.500195][T15972] loop7: detected capacity change from 0 to 1024 [ 256.508675][T15972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.515310][T15972] EXT4-fs: Ignoring removed orlov option [ 256.521064][T15972] ext2: Bad value for 'mb_optimize_scan' [ 256.591475][T15973] veth1_to_bridge: entered allmulticast mode [ 256.598232][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.610889][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.723637][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.733595][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.760278][T15989] loop7: detected capacity change from 0 to 512 [ 256.766910][T15989] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.775689][T15989] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.782787][T15989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.791338][T15989] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.822702][T15989] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 256.838205][T15989] EXT4-fs (loop7): mount failed [ 256.922987][T16000] loop7: detected capacity change from 0 to 512 [ 256.929616][T16000] EXT4-fs: test_dummy_encryption option not supported [ 256.963706][T16000] loop7: detected capacity change from 0 to 1024 [ 256.973342][T16000] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 256.985143][T16000] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3919: Invalid block bitmap block 0 in block_group 0 [ 256.999423][T16000] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3919: Failed to acquire dquot type 0 [ 257.012703][T16000] EXT4-fs error (device loop7): ext4_free_blocks:6706: comm syz.7.3919: Freeing blocks not in datazone - block = 0, count = 4096 [ 257.026868][T16000] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3919: Invalid inode bitmap blk 0 in block_group 0 [ 257.045313][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 257.071695][T16000] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 257.084680][T16000] EXT4-fs (loop7): 1 orphan inode deleted [ 257.093836][T16000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.120666][T16010] serio: Serial port ptm0 [ 257.126230][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.374484][T16021] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3926'. [ 257.930925][T16027] loop9: detected capacity change from 0 to 1024 [ 257.983688][T16027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.013292][T16027] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #12: block 7: comm syz.9.3928: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 258.037093][T16033] loop1: detected capacity change from 0 to 512 [ 258.043622][T16033] EXT4-fs: Ignoring removed nobh option [ 258.049386][T16027] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.3928: reserved inode found cleared - inode=2 [ 258.066240][T16027] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #12: block 7: comm syz.9.3928: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 258.076647][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3930: corrupted inode contents [ 258.089230][T16027] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3928'. [ 258.112806][T16037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.121425][T16037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.125085][T16033] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #3: comm syz.1.3930: mark_inode_dirty error [ 258.129329][T16027] EXT4-fs error (device loop9): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.9.3928: path /46/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 258.144873][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.3930: corrupted inode contents [ 258.173875][T16033] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3930: mark_inode_dirty error [ 258.188494][T16033] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3930: Failed to acquire dquot type 0 [ 258.200402][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3930: corrupted inode contents [ 258.212662][T16033] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #16: comm syz.1.3930: mark_inode_dirty error [ 258.224282][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3930: corrupted inode contents [ 258.236365][T16033] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3930: mark_inode_dirty error [ 258.247862][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3930: corrupted inode contents [ 258.259969][T16033] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 258.270302][T16033] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.3930: corrupted inode contents [ 258.282383][T16033] EXT4-fs error (device loop1): ext4_truncate:4637: inode #16: comm syz.1.3930: mark_inode_dirty error [ 258.293881][T16033] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 258.303253][T16033] EXT4-fs (loop1): 1 truncate cleaned up [ 258.309366][T16033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.321910][T16033] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.345874][T12956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.413849][T16051] lo speed is unknown, defaulting to 1000 [ 258.555996][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 258.602930][T16065] vhci_hcd: invalid port number 65 [ 258.608161][T16065] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 258.708556][T16072] loop7: detected capacity change from 0 to 512 [ 258.716712][T16072] EXT4-fs (loop7): failed to initialize system zone (-117) [ 258.724114][T16072] EXT4-fs (loop7): mount failed [ 258.738988][T16074] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3942'. [ 258.751232][T16072] lo speed is unknown, defaulting to 1000 [ 258.772298][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.806455][T16077] loop9: detected capacity change from 0 to 2048 [ 258.861756][T16077] loop9: p2 p3 p7 [ 258.916335][T16079] usb usb1: usbfs: process 16079 (syz.7.3946) did not claim interface 63 before use [ 258.946303][T16081] loop7: detected capacity change from 0 to 1024 [ 258.959438][T16081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.993248][T16085] lo speed is unknown, defaulting to 1000 [ 259.007531][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.055739][T16090] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3950'. [ 259.400193][T16109] loop1: detected capacity change from 0 to 512 [ 259.416733][T16109] EXT4-fs (loop1): failed to initialize system zone (-117) [ 259.424344][T16109] EXT4-fs (loop1): mount failed [ 259.527843][T16117] loop2: detected capacity change from 0 to 1024 [ 259.549937][T16117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.583501][T12256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.714162][T16124] __nla_validate_parse: 1 callbacks suppressed [ 259.714181][T16124] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3963'. [ 259.731017][T16109] lo speed is unknown, defaulting to 1000 [ 259.756384][T16126] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3964'. [ 259.783602][T16128] loop2: detected capacity change from 0 to 1024 [ 259.799250][T16128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.828662][T16128] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.3965: Allocating blocks 449-513 which overlap fs metadata [ 259.843895][T16127] EXT4-fs (loop2): pa ffff88810722aa10: logic 48, phys. 177, len 21 [ 259.852010][T16127] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 259.871666][T12256] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.992546][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3968'. [ 260.087272][ T29] kauditd_printk_skb: 1472 callbacks suppressed [ 260.087289][ T29] audit: type=1326 audit(1762664927.262:36035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.1.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3c7dc6567 code=0x7ffc0000 [ 260.117393][ T29] audit: type=1326 audit(1762664927.272:36036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.1.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3c7d6b779 code=0x7ffc0000 [ 260.141283][ T29] audit: type=1326 audit(1762664927.272:36037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16133 comm="syz.1.3967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 260.165326][ T29] audit: type=1326 audit(1762664927.272:36038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.189395][ T29] audit: type=1326 audit(1762664927.272:36039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.213390][ T29] audit: type=1326 audit(1762664927.272:36040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="syz.2.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.237057][ T29] audit: type=1326 audit(1762664927.272:36041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.260038][ T29] audit: type=1326 audit(1762664927.272:36042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.283117][ T29] audit: type=1326 audit(1762664927.272:36043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.306214][ T29] audit: type=1326 audit(1762664927.272:36044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16147 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6e4af6c9 code=0x7ffc0000 [ 260.431154][T16155] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 260.437762][T16155] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 260.445559][T16155] vhci_hcd vhci_hcd.0: Device attached [ 260.455844][T16159] loop9: detected capacity change from 0 to 764 [ 260.462907][T16156] vhci_hcd: connection closed [ 260.463201][ T37] vhci_hcd: stop threads [ 260.472186][ T37] vhci_hcd: release socket [ 260.476595][ T37] vhci_hcd: disconnect device [ 260.551283][T16165] loop9: detected capacity change from 0 to 1024 [ 260.578699][T16165] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.606804][T16165] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.3977: Allocating blocks 449-513 which overlap fs metadata [ 260.623615][T16164] EXT4-fs (loop9): pa ffff88810722a930: logic 48, phys. 177, len 21 [ 260.631812][T16164] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 260.657498][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.686184][T16169] loop9: detected capacity change from 0 to 512 [ 260.694720][T16169] EXT4-fs (loop9): failed to initialize system zone (-117) [ 260.702248][T16169] EXT4-fs (loop9): mount failed [ 260.725505][T16169] lo speed is unknown, defaulting to 1000 [ 260.907471][T16178] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 260.916497][T16178] Driver unsupported XDP return value 0 on prog (id 2196) dev N/A, expect packet loss! [ 260.962637][T16176] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 260.997697][T16186] loop1: detected capacity change from 0 to 1024 [ 261.014515][T16186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.021196][T16186] EXT4-fs: Ignoring removed orlov option [ 261.026882][T16186] ext2: Bad value for 'mb_optimize_scan' [ 261.041935][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3985'. [ 261.054893][T16190] netlink: 830 bytes leftover after parsing attributes in process `syz.6.3985'. [ 261.109378][T16207] usb usb1: usbfs: process 16207 (syz.6.3990) did not claim interface 63 before use [ 261.171001][T16215] FAULT_INJECTION: forcing a failure. [ 261.171001][T16215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.184174][T16215] CPU: 1 UID: 0 PID: 16215 Comm: syz.1.3993 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.184199][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.184215][T16215] Call Trace: [ 261.184223][T16215] [ 261.184285][T16215] __dump_stack+0x1d/0x30 [ 261.184341][T16215] dump_stack_lvl+0xe8/0x140 [ 261.184364][T16215] dump_stack+0x15/0x1b [ 261.184381][T16215] should_fail_ex+0x265/0x280 [ 261.184400][T16215] should_fail+0xb/0x20 [ 261.184414][T16215] should_fail_usercopy+0x1a/0x20 [ 261.184463][T16215] _copy_to_user+0x20/0xa0 [ 261.184494][T16215] simple_read_from_buffer+0xb5/0x130 [ 261.184522][T16215] proc_fail_nth_read+0x10e/0x150 [ 261.184562][T16215] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.184648][T16215] vfs_read+0x1a8/0x770 [ 261.184698][T16215] ? __rcu_read_unlock+0x4f/0x70 [ 261.184732][T16215] ? __fget_files+0x184/0x1c0 [ 261.184796][T16215] ksys_read+0xda/0x1a0 [ 261.184928][T16215] __x64_sys_read+0x40/0x50 [ 261.184952][T16215] x64_sys_call+0x27c0/0x3000 [ 261.184975][T16215] do_syscall_64+0xd2/0x200 [ 261.185029][T16215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.185099][T16215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.185142][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.185169][T16215] RIP: 0033:0x7ff3c7dce0dc [ 261.185257][T16215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.185275][T16215] RSP: 002b:00007ff3c682f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.185299][T16215] RAX: ffffffffffffffda RBX: 00007ff3c8025fa0 RCX: 00007ff3c7dce0dc [ 261.185314][T16215] RDX: 000000000000000f RSI: 00007ff3c682f0a0 RDI: 0000000000000006 [ 261.185443][T16215] RBP: 00007ff3c682f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.185460][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.185475][T16215] R13: 00007ff3c8026038 R14: 00007ff3c8025fa0 R15: 00007ffde7b73698 [ 261.185498][T16215] [ 261.189078][T16216] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3987'. [ 261.225261][T16220] program syz.1.3995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.466445][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3996'. [ 261.547782][T16237] lo speed is unknown, defaulting to 1000 [ 261.609867][T16239] loop1: detected capacity change from 0 to 1024 [ 261.617047][T16239] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.623733][T16239] EXT4-fs: Ignoring removed orlov option [ 261.629614][T16239] ext2: Bad value for 'mb_optimize_scan' [ 261.752690][T16244] usb usb1: usbfs: process 16244 (syz.1.4001) did not claim interface 63 before use [ 261.931846][T16257] loop7: detected capacity change from 0 to 512 [ 261.953636][T16257] EXT4-fs: Ignoring removed nobh option [ 261.971779][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.4006: corrupted inode contents [ 262.043251][T16264] netlink: 774 bytes leftover after parsing attributes in process `syz.1.4008'. [ 262.053635][T16264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4008'. [ 262.084616][T16257] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.4006: mark_inode_dirty error [ 262.096227][T16265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=247 sclass=netlink_route_socket pid=16265 comm=syz.9.4005 [ 262.143520][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.4006: corrupted inode contents [ 262.157729][T16257] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.4006: mark_inode_dirty error [ 262.174562][T16269] loop6: detected capacity change from 0 to 1024 [ 262.183820][T16257] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4006: Failed to acquire dquot type 0 [ 262.196148][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.4006: corrupted inode contents [ 262.224732][T16269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.240425][T16257] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.4006: mark_inode_dirty error [ 262.275196][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.4006: corrupted inode contents [ 262.311960][T16269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.320584][T16269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.368944][T16257] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.4006: mark_inode_dirty error [ 262.398392][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.4006: corrupted inode contents [ 262.412632][T16257] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 262.431530][T16257] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.4006: corrupted inode contents [ 262.477198][T16257] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.4006: mark_inode_dirty error [ 262.497215][T16257] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 262.638106][T16257] EXT4-fs (loop7): 1 truncate cleaned up [ 262.686805][T16257] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.711890][T16257] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.744376][T16276] loop9: detected capacity change from 0 to 2048 [ 262.755682][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.806553][T16276] loop9: p2 p3 p7 [ 262.834467][T16281] usb usb1: usbfs: process 16281 (syz.7.4014) did not claim interface 63 before use [ 262.879678][T16286] loop7: detected capacity change from 0 to 2048 [ 262.912560][T16286] loop7: p2 p3 p7 [ 262.929135][T16289] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 262.935675][T16289] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 262.943398][T16289] vhci_hcd vhci_hcd.0: Device attached [ 262.949565][T16290] vhci_hcd: connection closed [ 262.950724][ T12] vhci_hcd: stop threads [ 262.959827][ T12] vhci_hcd: release socket [ 262.964284][ T12] vhci_hcd: disconnect device [ 262.979907][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.004935][T16294] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 263.011626][T16294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 263.019829][T16294] vhci_hcd vhci_hcd.0: Device attached [ 263.029449][T16295] vhci_hcd: connection closed [ 263.029648][ T37] vhci_hcd: stop threads [ 263.038755][ T37] vhci_hcd: release socket [ 263.043186][ T37] vhci_hcd: disconnect device [ 263.083499][T16302] loop7: detected capacity change from 0 to 512 [ 263.091316][T16302] EXT4-fs (loop7): failed to initialize system zone (-117) [ 263.098859][T16302] EXT4-fs (loop7): mount failed [ 263.119163][T16302] lo speed is unknown, defaulting to 1000 [ 263.277750][T16307] loop7: detected capacity change from 0 to 1024 [ 263.284842][T16307] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 263.295871][T16307] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 263.306220][T16307] JBD2: no valid journal superblock found [ 263.312021][T16307] EXT4-fs (loop7): Could not load journal inode [ 263.335764][T16309] IPVS: Error connecting to the multicast addr [ 263.361224][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 263.369006][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 263.376653][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.384366][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.392602][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.400330][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.408069][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.415725][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.423480][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.431229][ T3396] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 263.440560][ T3396] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 263.472854][T16318] usb usb1: usbfs: process 16318 (syz.7.4025) did not claim interface 63 before use [ 263.556054][T16323] loop9: detected capacity change from 0 to 1024 [ 263.557671][T16326] loop6: detected capacity change from 0 to 1024 [ 263.579799][T16326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.594944][T16323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.628098][T16335] loop7: detected capacity change from 0 to 1024 [ 263.638480][T16335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.666658][T16326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.675571][T16326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.676929][T16323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.691873][T16323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.708010][T16335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.716556][T16335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.739663][T16342] loop2: detected capacity change from 0 to 512 [ 263.747609][T16342] EXT4-fs (loop2): failed to initialize system zone (-117) [ 263.755003][T16342] EXT4-fs (loop2): mount failed [ 263.782998][T16342] lo speed is unknown, defaulting to 1000 [ 263.908033][T16349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 263.914574][T16349] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 263.922322][T16349] vhci_hcd vhci_hcd.0: Device attached [ 263.928969][T16350] vhci_hcd: connection closed [ 263.929215][ T4376] vhci_hcd: stop threads [ 263.938174][ T4376] vhci_hcd: release socket [ 263.942661][ T4376] vhci_hcd: disconnect device [ 264.011904][T16353] FAULT_INJECTION: forcing a failure. [ 264.011904][T16353] name failslab, interval 1, probability 0, space 0, times 0 [ 264.024615][T16353] CPU: 0 UID: 0 PID: 16353 Comm: syz.2.4036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 264.024638][T16353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 264.024673][T16353] Call Trace: [ 264.024679][T16353] [ 264.024685][T16353] __dump_stack+0x1d/0x30 [ 264.024726][T16353] dump_stack_lvl+0xe8/0x140 [ 264.024795][T16353] dump_stack+0x15/0x1b [ 264.024810][T16353] should_fail_ex+0x265/0x280 [ 264.024826][T16353] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 264.024880][T16353] should_failslab+0x8c/0xb0 [ 264.024905][T16353] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 264.024949][T16353] ? shmem_alloc_inode+0x34/0x50 [ 264.025002][T16353] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 264.025084][T16353] shmem_alloc_inode+0x34/0x50 [ 264.025143][T16353] alloc_inode+0x40/0x170 [ 264.025163][T16353] new_inode+0x1d/0xe0 [ 264.025208][T16353] shmem_get_inode+0x244/0x750 [ 264.025227][T16353] __shmem_file_setup+0x113/0x210 [ 264.025281][T16353] shmem_file_setup+0x3b/0x50 [ 264.025341][T16353] __se_sys_memfd_create+0x2c3/0x590 [ 264.025365][T16353] __x64_sys_memfd_create+0x31/0x40 [ 264.025385][T16353] x64_sys_call+0x2ac2/0x3000 [ 264.025487][T16353] do_syscall_64+0xd2/0x200 [ 264.025504][T16353] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 264.025528][T16353] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 264.025571][T16353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.025668][T16353] RIP: 0033:0x7efd6e4af6c9 [ 264.025680][T16353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.025724][T16353] RSP: 002b:00007efd6cf16e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 264.025740][T16353] RAX: ffffffffffffffda RBX: 000000000000061d RCX: 00007efd6e4af6c9 [ 264.025750][T16353] RDX: 00007efd6cf16ef0 RSI: 0000000000000000 RDI: 00007efd6e532960 [ 264.025761][T16353] RBP: 0000200000001680 R08: 00007efd6cf16bb7 R09: 00007efd6cf16e40 [ 264.025813][T16353] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 264.025896][T16353] R13: 00007efd6cf16ef0 R14: 00007efd6cf16eb0 R15: 00002000000001c0 [ 264.025911][T16353] [ 264.319873][T16359] lo speed is unknown, defaulting to 1000 [ 264.451163][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.530915][T16379] loop9: detected capacity change from 0 to 1024 [ 264.549468][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.559953][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.573043][T16379] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.610776][T16386] loop6: detected capacity change from 0 to 2048 [ 264.630913][T16379] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.4046: Allocating blocks 449-513 which overlap fs metadata [ 264.647516][T16392] vhci_hcd: invalid port number 65 [ 264.652676][T16392] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 264.692679][T16386] loop6: p2 p3 p7 [ 264.700161][T16378] EXT4-fs (loop9): pa ffff888107119000: logic 48, phys. 177, len 21 [ 264.708284][T16378] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 264.766384][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.776501][T16401] loop7: detected capacity change from 0 to 1024 [ 264.792033][T16401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.861305][T16401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.870006][T16401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.103562][ T29] kauditd_printk_skb: 4234 callbacks suppressed [ 265.103654][ T29] audit: type=1326 audit(1762664932.282:40277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e6d906567 code=0x7ffc0000 [ 265.133760][ T29] audit: type=1326 audit(1762664932.282:40278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e6d8ab779 code=0x7ffc0000 [ 265.157332][ T29] audit: type=1326 audit(1762664932.282:40279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5e6d90f6c9 code=0x7ffc0000 [ 265.180812][ T29] audit: type=1326 audit(1762664932.292:40280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e6d906567 code=0x7ffc0000 [ 265.204283][ T29] audit: type=1326 audit(1762664932.292:40281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e6d8ab779 code=0x7ffc0000 [ 265.227743][ T29] audit: type=1326 audit(1762664932.292:40282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5e6d90f6c9 code=0x7ffc0000 [ 265.251248][ T29] audit: type=1326 audit(1762664932.292:40283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e6d906567 code=0x7ffc0000 [ 265.274747][ T29] audit: type=1326 audit(1762664932.292:40284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e6d8ab779 code=0x7ffc0000 [ 265.298218][ T29] audit: type=1326 audit(1762664932.292:40285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f5e6d90f6c9 code=0x7ffc0000 [ 265.321908][ T29] audit: type=1326 audit(1762664932.292:40286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16409 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e6d906567 code=0x7ffc0000 [ 265.363251][T16419] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 265.369793][T16419] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 265.377700][T16419] vhci_hcd vhci_hcd.0: Device attached [ 265.383725][T16420] vhci_hcd: connection closed [ 265.383871][ T12] vhci_hcd: stop threads [ 265.393121][ T12] vhci_hcd: release socket [ 265.397559][ T12] vhci_hcd: disconnect device [ 265.498953][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.695530][T16431] loop9: detected capacity change from 0 to 1024 [ 265.714496][T16431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.758946][T16431] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.4064: Allocating blocks 449-513 which overlap fs metadata [ 265.786705][T16430] EXT4-fs (loop9): pa ffff88810722a850: logic 48, phys. 177, len 21 [ 265.794885][T16430] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 265.879093][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.910034][T16442] vhci_hcd: invalid port number 65 [ 265.915196][T16442] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 265.986148][T16449] __nla_validate_parse: 5 callbacks suppressed [ 265.986161][T16449] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4068'. [ 266.116143][T16464] loop6: detected capacity change from 0 to 1024 [ 266.140823][T16464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.172446][T16464] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4077: Allocating blocks 449-513 which overlap fs metadata [ 266.195014][T16463] EXT4-fs (loop6): pa ffff88810722a930: logic 48, phys. 177, len 21 [ 266.203222][T16463] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 266.225862][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.308746][T16470] netlink: '+}[@': attribute type 10 has an invalid length. [ 266.320372][T16470] team0: Port device dummy0 added [ 266.327861][T16470] netlink: '+}[@': attribute type 10 has an invalid length. [ 266.335713][T16470] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.346870][T16470] team0: Failed to send options change via netlink (err -105) [ 266.365698][T16470] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.381823][T16470] team0: Port device dummy0 removed [ 266.398633][T16470] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.436597][T16475] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 266.443235][T16475] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 266.451007][T16475] vhci_hcd vhci_hcd.0: Device attached [ 266.457106][T16476] vhci_hcd: connection closed [ 266.457236][ T12] vhci_hcd: stop threads [ 266.462249][T16479] loop6: detected capacity change from 0 to 1024 [ 266.466218][ T12] vhci_hcd: release socket [ 266.466228][ T12] vhci_hcd: disconnect device [ 266.489162][T16479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.509450][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 266.520245][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4082'. [ 266.545427][T16485] loop1: detected capacity change from 0 to 512 [ 266.557979][T16485] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.562948][T16479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.573011][T16485] EXT4-fs (loop1): mount failed [ 266.581501][T16479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.863443][T16511] pimreg: entered allmulticast mode [ 266.912481][T16515] loop9: detected capacity change from 0 to 512 [ 266.919113][T16515] EXT4-fs: Ignoring removed oldalloc option [ 266.927600][T16515] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.4094: Parent and EA inode have the same ino 15 [ 266.941330][T16515] EXT4-fs (loop9): Remounting filesystem read-only [ 266.947971][T16515] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -30) [ 266.956952][T16515] EXT4-fs (loop9): 1 orphan inode deleted [ 266.963193][T16515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.976094][T16518] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 267.006470][T16520] loop7: detected capacity change from 0 to 512 [ 267.016376][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.027117][T16520] EXT4-fs (loop7): failed to initialize system zone (-117) [ 267.034594][T16520] EXT4-fs (loop7): mount failed [ 267.069694][T16520] lo speed is unknown, defaulting to 1000 [ 267.218753][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.298869][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.307920][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.317232][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.319575][T16534] loop9: detected capacity change from 0 to 1024 [ 267.333257][T16534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.339960][T16534] EXT4-fs: Ignoring removed orlov option [ 267.345686][T16534] ext2: Bad value for 'mb_optimize_scan' [ 267.345756][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.360324][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.370448][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.390332][T16536] loop7: detected capacity change from 0 to 2048 [ 267.401398][T16532] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4099'. [ 267.418423][T16536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.423969][T16541] veth1_to_bridge: entered allmulticast mode [ 267.439419][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.460983][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.557986][T16551] loop7: detected capacity change from 0 to 1024 [ 267.573792][T16551] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 267.584795][T16551] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 267.600126][T16551] JBD2: no valid journal superblock found [ 267.605901][T16551] EXT4-fs (loop7): Could not load journal inode [ 267.617096][T16556] loop1: detected capacity change from 0 to 512 [ 267.628488][T16556] EXT4-fs (loop1): failed to initialize system zone (-117) [ 267.635943][T16556] EXT4-fs (loop1): mount failed [ 267.660394][T16556] lo speed is unknown, defaulting to 1000 [ 267.695852][T16510] pimreg: left allmulticast mode [ 267.811129][T16559] vhci_hcd: invalid port number 65 [ 267.816332][T16559] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 267.862384][T16564] loop2: detected capacity change from 0 to 1024 [ 267.879840][T16564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.948627][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.957522][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.006670][T16575] loop1: detected capacity change from 0 to 1024 [ 268.013746][T16575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.020358][T16575] EXT4-fs: Ignoring removed orlov option [ 268.026057][T16575] ext2: Bad value for 'mb_optimize_scan' [ 268.130540][T16580] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 268.141422][T16580] bond1 (unregistering): Released all slaves [ 268.266290][T16589] loop1: detected capacity change from 0 to 1024 [ 268.285486][T16589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.293970][T16589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.375163][T16597] loop9: detected capacity change from 0 to 512 [ 268.382839][T16597] EXT4-fs (loop9): failed to initialize system zone (-117) [ 268.390232][T16597] EXT4-fs (loop9): mount failed [ 268.410897][T16597] lo speed is unknown, defaulting to 1000 [ 268.651596][T16605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 268.742325][T16611] loop9: detected capacity change from 0 to 1024 [ 268.749181][T16611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.755906][T16611] EXT4-fs: Ignoring removed orlov option [ 268.761748][T16611] ext2: Bad value for 'mb_optimize_scan' [ 268.934512][T16623] lo speed is unknown, defaulting to 1000 [ 268.985595][T16627] loop1: detected capacity change from 0 to 1024 [ 269.008453][T16625] loop9: detected capacity change from 0 to 2048 [ 269.018942][T16625] ext3: Unknown parameter 'euid<00000000000000000000' [ 269.080599][T16627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.089356][T16627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.212181][T16642] loop6: detected capacity change from 0 to 128 [ 269.219284][T16642] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 269.339791][T16643] 9pnet: Could not find request transport: fd [ 272.281049][T16778] __dump_stack+0x1d/0x30 [ 272.281076][T16778] dump_stack_lvl+0xe8/0x140 [ 272.281161][T16778] dump_stack+0x15/0x1b [ 272.281259][T16778] should_fail_ex+0x265/0x280 [ 272.281283][T16778] should_failslab+0x8c/0xb0 [ 272.281377][T16778] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 272.281440][T16778] ? __alloc_skb+0x101/0x320 [ 272.281474][T16778] __alloc_skb+0x101/0x320 [ 272.281499][T16778] ? audit_log_start+0x342/0x720 [ 272.281520][T16778] audit_log_start+0x3a0/0x720 [ 272.281542][T16778] ? kstrtouint+0x76/0xc0 [ 272.281620][T16778] audit_seccomp+0x48/0x100 [ 272.281669][T16778] ? __seccomp_filter+0x82d/0x1250 [ 272.281751][T16778] __seccomp_filter+0x83e/0x1250 [ 272.281814][T16778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.281903][T16778] ? vfs_write+0x7e8/0x960 [ 272.281930][T16778] ? __rcu_read_unlock+0x4f/0x70 [ 272.281954][T16778] ? __fget_files+0x184/0x1c0 [ 272.281984][T16778] __secure_computing+0x82/0x150 [ 272.282028][T16778] syscall_trace_enter+0xcf/0x1e0 [ 272.282174][T16778] do_syscall_64+0xac/0x200 [ 272.282198][T16778] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.282223][T16778] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.282334][T16778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.282352][T16778] RIP: 0033:0x7ff3c7dcf6c9 [ 272.282365][T16778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.282380][T16778] RSP: 002b:00007ff3c682f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 272.282514][T16778] RAX: ffffffffffffffda RBX: 00007ff3c8025fa0 RCX: 00007ff3c7dcf6c9 [ 272.282525][T16778] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000000000004 [ 272.282616][T16778] RBP: 00007ff3c682f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.282627][T16778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.282643][T16778] R13: 00007ff3c8026038 R14: 00007ff3c8025fa0 R15: 00007ffde7b73698 [ 272.282661][T16778] [ 272.284779][T16774] EXT4-fs (loop7): failed to initialize system zone (-117) [ 272.351159][T16776] lo speed is unknown, defaulting to 1000 [ 272.354274][T16774] EXT4-fs (loop7): mount failed [ 272.369742][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4188'. [ 272.561233][T16774] lo speed is unknown, defaulting to 1000 [ 272.568898][T16785] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4188'. [ 272.709568][T16794] loop1: detected capacity change from 0 to 2048 [ 272.716451][T16794] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.723011][T16794] EXT4-fs: Ignoring removed i_version option [ 272.917049][T16807] loop7: detected capacity change from 0 to 1024 [ 273.014849][T16807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.023426][T16807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.501537][T16816] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4197'. [ 273.739049][T16827] loop7: detected capacity change from 0 to 1024 [ 273.788906][T16827] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4200: Allocating blocks 449-513 which overlap fs metadata [ 273.817706][T16826] EXT4-fs (loop7): pa ffff8881071191c0: logic 48, phys. 177, len 21 [ 273.826008][T16826] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 273.859517][T16840] netlink: 'syz.6.4203': attribute type 1 has an invalid length. [ 273.867370][T16840] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4203'. [ 273.891021][T16840] loop6: detected capacity change from 0 to 1024 [ 273.898415][T16840] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.905093][T16840] EXT4-fs: Ignoring removed orlov option [ 273.910863][T16840] ext2: Bad value for 'mb_optimize_scan' [ 273.979850][T16846] loop7: detected capacity change from 0 to 512 [ 274.036914][T16846] EXT4-fs (loop7): failed to initialize system zone (-117) [ 274.045237][T16846] EXT4-fs (loop7): mount failed [ 274.091700][T16846] lo speed is unknown, defaulting to 1000 [ 274.185294][T16851] lo speed is unknown, defaulting to 1000 [ 274.201577][T16855] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4208'. [ 274.276781][T16862] loop6: detected capacity change from 0 to 1024 [ 274.294450][T16862] EXT4-fs warning (device loop6): ext4_empty_dir:3089: inode #11: comm syz.6.4210: directory missing '.' [ 274.319509][T16862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4210'. [ 274.368147][T16871] vhci_hcd: invalid port number 65 [ 274.373299][T16871] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 274.396159][T16875] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4212'. [ 274.423282][T16878] loop7: detected capacity change from 0 to 1024 [ 274.469173][T16878] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4216: Allocating blocks 449-513 which overlap fs metadata [ 274.492226][T16877] EXT4-fs (loop7): pa ffff888107119000: logic 48, phys. 177, len 21 [ 274.500449][T16877] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 274.579900][T16897] loop1: detected capacity change from 0 to 512 [ 274.594904][T16896] loop7: detected capacity change from 0 to 512 [ 274.603344][T16896] EXT4-fs (loop7): failed to initialize system zone (-117) [ 274.610633][T16896] EXT4-fs (loop7): mount failed [ 274.616256][T16897] EXT4-fs: inline encryption not supported [ 274.649810][T16902] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4224'. [ 274.704769][T16896] lo speed is unknown, defaulting to 1000 [ 274.763914][T16868] loop9: detected capacity change from 0 to 8192 [ 274.803648][T16906] loop1: detected capacity change from 0 to 512 [ 274.833926][T16906] EXT4-fs (loop1): failed to initialize system zone (-117) [ 274.844251][T16875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.856162][T16906] EXT4-fs (loop1): mount failed [ 274.861300][T16875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.911543][T16906] lo speed is unknown, defaulting to 1000 [ 275.117018][ T29] kauditd_printk_skb: 965 callbacks suppressed [ 275.117036][ T29] audit: type=1326 audit(1762664942.292:42064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8ebdf6c9 code=0x7ffc0000 [ 275.167739][ T29] audit: type=1326 audit(1762664942.332:42065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b8ebd6567 code=0x7ffc0000 [ 275.191318][ T29] audit: type=1326 audit(1762664942.332:42066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8eb7b779 code=0x7ffc0000 [ 275.214806][ T29] audit: type=1326 audit(1762664942.332:42067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2b8ebdf6c9 code=0x7ffc0000 [ 275.238356][ T29] audit: type=1326 audit(1762664942.342:42068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b8ebd6567 code=0x7ffc0000 [ 275.261987][ T29] audit: type=1326 audit(1762664942.342:42069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8eb7b779 code=0x7ffc0000 [ 275.285834][ T29] audit: type=1326 audit(1762664942.342:42070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2b8ebdf6c9 code=0x7ffc0000 [ 275.309401][ T29] audit: type=1326 audit(1762664942.342:42071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2b8ebd6567 code=0x7ffc0000 [ 275.333066][ T29] audit: type=1326 audit(1762664942.342:42072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2b8eb7b779 code=0x7ffc0000 [ 275.356699][ T29] audit: type=1326 audit(1762664942.342:42073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16912 comm="syz.7.4227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2b8ebdf6c9 code=0x7ffc0000 [ 275.493418][T16930] loop6: detected capacity change from 0 to 1024 [ 275.500183][T16930] EXT4-fs: Invalid want_extra_isize 2 [ 275.573042][T16930] veth1_to_bridge: left allmulticast mode [ 275.609171][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.620243][T16930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.672635][ T114] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.697063][ T114] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.711108][ T114] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.720337][ T114] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.769860][T16937] lo speed is unknown, defaulting to 1000 [ 276.076549][T16956] loop7: detected capacity change from 0 to 1024 [ 276.103938][T16956] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 276.115100][T16956] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 276.167848][T16956] JBD2: no valid journal superblock found [ 276.173629][T16956] EXT4-fs (loop7): Could not load journal inode [ 276.375926][T16974] FAULT_INJECTION: forcing a failure. [ 276.375926][T16974] name failslab, interval 1, probability 0, space 0, times 0 [ 276.388642][T16974] CPU: 1 UID: 0 PID: 16974 Comm: syz.1.4251 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.388742][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.388757][T16974] Call Trace: [ 276.388765][T16974] [ 276.388772][T16974] __dump_stack+0x1d/0x30 [ 276.388799][T16974] dump_stack_lvl+0xe8/0x140 [ 276.388878][T16974] dump_stack+0x15/0x1b [ 276.388919][T16974] should_fail_ex+0x265/0x280 [ 276.388946][T16974] should_failslab+0x8c/0xb0 [ 276.388977][T16974] kmem_cache_alloc_noprof+0x50/0x480 [ 276.389048][T16974] ? dst_alloc+0xbd/0x100 [ 276.389090][T16974] dst_alloc+0xbd/0x100 [ 276.389145][T16974] ? ip_route_input_rcu+0x1112/0x1cd0 [ 276.389186][T16974] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 276.389280][T16974] ip_route_output_key_hash+0x63/0xa0 [ 276.389360][T16974] tcp_v4_connect+0x3e4/0xaf0 [ 276.389441][T16974] __inet_stream_connect+0x169/0x7d0 [ 276.389471][T16974] ? _raw_spin_unlock_bh+0x36/0x40 [ 276.389547][T16974] ? release_sock+0x116/0x150 [ 276.389646][T16974] ? _raw_spin_unlock_bh+0x36/0x40 [ 276.389676][T16974] ? lock_sock_nested+0x112/0x140 [ 276.389708][T16974] ? selinux_netlbl_socket_connect+0x115/0x130 [ 276.389744][T16974] inet_stream_connect+0x44/0x70 [ 276.389841][T16974] ? __pfx_inet_stream_connect+0x10/0x10 [ 276.389890][T16974] __sys_connect+0x1f2/0x2b0 [ 276.389928][T16974] __x64_sys_connect+0x3f/0x50 [ 276.389968][T16974] x64_sys_call+0x2c0c/0x3000 [ 276.390000][T16974] do_syscall_64+0xd2/0x200 [ 276.390115][T16974] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 276.390161][T16974] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 276.390201][T16974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.390220][T16974] RIP: 0033:0x7ff3c7dcf6c9 [ 276.390284][T16974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.390302][T16974] RSP: 002b:00007ff3c682f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 276.390331][T16974] RAX: ffffffffffffffda RBX: 00007ff3c8025fa0 RCX: 00007ff3c7dcf6c9 [ 276.390345][T16974] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000007 [ 276.390360][T16974] RBP: 00007ff3c682f090 R08: 0000000000000000 R09: 0000000000000000 [ 276.390374][T16974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.390463][T16974] R13: 00007ff3c8026038 R14: 00007ff3c8025fa0 R15: 00007ffde7b73698 [ 276.390486][T16974] [ 276.648729][T16979] loop6: detected capacity change from 0 to 1024 [ 276.710792][T16983] loop7: detected capacity change from 0 to 512 [ 276.722341][T16983] EXT4-fs (loop7): failed to initialize system zone (-117) [ 276.724662][T16976] __nla_validate_parse: 3 callbacks suppressed [ 276.724679][T16976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4252'. [ 276.729629][T16983] EXT4-fs (loop7): mount failed [ 276.753681][T16979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.762285][T16979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.775647][T16983] lo speed is unknown, defaulting to 1000 [ 276.815445][T16995] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 276.823272][T16995] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4257'. [ 276.848422][T16995] loop1: detected capacity change from 0 to 1024 [ 276.855262][T16995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.861915][T16995] EXT4-fs: Ignoring removed orlov option [ 276.867677][T16995] ext2: Bad value for 'mb_optimize_scan' [ 276.966393][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4260'. [ 277.009868][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4261'. [ 277.018871][T17005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4261'. [ 277.038231][T17005] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 277.049082][T17005] bond1 (unregistering): Released all slaves [ 277.117303][T17010] loop7: detected capacity change from 0 to 1024 [ 277.124250][T17010] ext3: Unknown parameter 'fowner' [ 277.153400][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4264'. [ 277.162574][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4264'. [ 277.358374][T17022] loop1: detected capacity change from 0 to 1024 [ 277.428221][T17022] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.4268: Allocating blocks 449-513 which overlap fs metadata [ 277.470570][T17028] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 277.477124][T17028] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.484908][T17028] vhci_hcd vhci_hcd.0: Device attached [ 277.517065][T17021] EXT4-fs (loop1): pa ffff88810722a8c0: logic 48, phys. 177, len 21 [ 277.525147][T17021] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 277.550205][T17029] vhci_hcd: connection closed [ 277.550372][ T317] vhci_hcd: stop threads [ 277.559407][ T317] vhci_hcd: release socket [ 277.563854][ T317] vhci_hcd: disconnect device [ 277.608525][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4271'. [ 277.823285][T17054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4280'. [ 277.832534][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4280'. [ 278.110243][T17078] loop6: detected capacity change from 0 to 1024 [ 278.129510][T17076] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 278.140579][T17076] bond1 (unregistering): Released all slaves [ 278.162845][T17078] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4290: Allocating blocks 449-513 which overlap fs metadata [ 278.183452][T17077] EXT4-fs (loop6): pa ffff88810722a930: logic 48, phys. 177, len 21 [ 278.191718][T17077] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 278.249535][T17091] IPVS: Unknown mcast interface: ip [ 278.404991][T17106] lo speed is unknown, defaulting to 1000 [ 278.563312][T17122] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 278.569950][T17122] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.577712][T17122] vhci_hcd vhci_hcd.0: Device attached [ 278.584593][T17123] vhci_hcd: connection closed [ 278.584850][ T4376] vhci_hcd: stop threads [ 278.593950][ T4376] vhci_hcd: release socket [ 278.598507][ T4376] vhci_hcd: disconnect device [ 279.099892][T17133] lo speed is unknown, defaulting to 1000 [ 279.240325][T17143] FAULT_INJECTION: forcing a failure. [ 279.240325][T17143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.253543][T17143] CPU: 0 UID: 0 PID: 17143 Comm: syz.7.4312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 279.253579][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 279.253596][T17143] Call Trace: [ 279.253604][T17143] [ 279.253614][T17143] __dump_stack+0x1d/0x30 [ 279.253640][T17143] dump_stack_lvl+0xe8/0x140 [ 279.253678][T17143] dump_stack+0x15/0x1b [ 279.253694][T17143] should_fail_ex+0x265/0x280 [ 279.253714][T17143] should_fail+0xb/0x20 [ 279.253734][T17143] should_fail_usercopy+0x1a/0x20 [ 279.253761][T17143] _copy_from_user+0x1c/0xb0 [ 279.253799][T17143] do_ip6t_set_ctl+0x3a9/0x840 [ 279.253825][T17143] ? kstrtoull+0x111/0x140 [ 279.253864][T17143] ? __rcu_read_unlock+0x4f/0x70 [ 279.253963][T17143] nf_setsockopt+0x199/0x1b0 [ 279.254057][T17143] ipv6_setsockopt+0x11a/0x130 [ 279.254201][T17143] tcp_setsockopt+0x98/0xb0 [ 279.254227][T17143] sock_common_setsockopt+0x69/0x80 [ 279.254260][T17143] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 279.254298][T17143] __sys_setsockopt+0x184/0x200 [ 279.254365][T17143] __x64_sys_setsockopt+0x64/0x80 [ 279.254400][T17143] x64_sys_call+0x20ec/0x3000 [ 279.254505][T17143] do_syscall_64+0xd2/0x200 [ 279.254529][T17143] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 279.254651][T17143] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 279.254752][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.254883][T17143] RIP: 0033:0x7f2b8ebdf6c9 [ 279.254902][T17143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.254924][T17143] RSP: 002b:00007f2b8d63f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.254947][T17143] RAX: ffffffffffffffda RBX: 00007f2b8ee35fa0 RCX: 00007f2b8ebdf6c9 [ 279.254963][T17143] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 279.254978][T17143] RBP: 00007f2b8d63f090 R08: 0000000000000430 R09: 0000000000000000 [ 279.255007][T17143] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 279.255022][T17143] R13: 00007f2b8ee36038 R14: 00007f2b8ee35fa0 R15: 00007fffdddcd3a8 [ 279.255043][T17143] [ 279.616177][T17152] loop7: detected capacity change from 0 to 1024 [ 279.705382][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.715668][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.736204][T17163] loop6: detected capacity change from 0 to 512 [ 279.744885][T17163] EXT4-fs: Ignoring removed nobh option [ 279.758521][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.4319: corrupted inode contents [ 279.770729][T17163] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #3: comm syz.6.4319: mark_inode_dirty error [ 279.782590][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.4319: corrupted inode contents [ 279.800700][T17163] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.4319: mark_inode_dirty error [ 279.812349][T17163] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4319: Failed to acquire dquot type 0 [ 279.825411][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.4319: corrupted inode contents [ 279.839148][T17163] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #16: comm syz.6.4319: mark_inode_dirty error [ 279.850853][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.4319: corrupted inode contents [ 279.863179][T17163] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4319: mark_inode_dirty error [ 279.875078][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.4319: corrupted inode contents [ 279.887174][T17163] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 279.895903][T17163] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.4319: corrupted inode contents [ 279.908236][T17163] EXT4-fs error (device loop6): ext4_truncate:4637: inode #16: comm syz.6.4319: mark_inode_dirty error [ 279.919599][T17163] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 279.930509][T17163] EXT4-fs (loop6): 1 truncate cleaned up [ 279.932796][T17167] loop1: detected capacity change from 0 to 512 [ 279.936872][T17163] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.944745][T17167] EXT4-fs (loop1): failed to initialize system zone (-117) [ 279.962196][T17167] EXT4-fs (loop1): mount failed [ 279.981993][T17170] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 279.991765][T17167] lo speed is unknown, defaulting to 1000 [ 280.125179][T17178] loop6: detected capacity change from 0 to 128 [ 280.160089][T17178] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 280.199284][T17179] geneve2: entered promiscuous mode [ 280.211492][ T29] kauditd_printk_skb: 923 callbacks suppressed [ 280.211510][ T29] audit: type=1400 audit(1762664947.392:42995): avc: denied { getopt } for pid=17175 comm="syz.9.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.245013][ T29] audit: type=1326 audit(1762664947.422:42996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 280.245717][T17181] FAULT_INJECTION: forcing a failure. [ 280.245717][T17181] name failslab, interval 1, probability 0, space 0, times 0 [ 280.281354][T17181] CPU: 0 UID: 0 PID: 17181 Comm: syz.1.4326 Not tainted syzkaller #0 PREEMPT(voluntary) [ 280.281381][T17181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.281412][T17181] Call Trace: [ 280.281421][T17181] [ 280.281430][T17181] __dump_stack+0x1d/0x30 [ 280.281453][T17181] dump_stack_lvl+0xe8/0x140 [ 280.281499][T17181] dump_stack+0x15/0x1b [ 280.281518][T17181] should_fail_ex+0x265/0x280 [ 280.281587][T17181] should_failslab+0x8c/0xb0 [ 280.281697][T17181] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 280.281728][T17181] ? sidtab_sid2str_get+0xa0/0x130 [ 280.281758][T17181] kmemdup_noprof+0x2b/0x70 [ 280.281845][T17181] sidtab_sid2str_get+0xa0/0x130 [ 280.281920][T17181] security_sid_to_context_core+0x1eb/0x2e0 [ 280.281951][T17181] security_sid_to_context+0x27/0x40 [ 280.281979][T17181] selinux_lsmprop_to_secctx+0x67/0xf0 [ 280.282084][T17181] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 280.282107][T17181] audit_log_subj_ctx+0xa4/0x3e0 [ 280.282129][T17181] ? skb_put+0xa9/0xf0 [ 280.282159][T17181] audit_log_task_context+0x48/0x70 [ 280.282238][T17181] audit_log_task+0xf4/0x250 [ 280.282271][T17181] ? kstrtouint+0x76/0xc0 [ 280.282303][T17181] audit_seccomp+0x61/0x100 [ 280.282403][T17181] ? __seccomp_filter+0x82d/0x1250 [ 280.282431][T17181] __seccomp_filter+0x83e/0x1250 [ 280.282459][T17181] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 280.282494][T17181] ? vfs_write+0x7e8/0x960 [ 280.282536][T17181] ? __rcu_read_unlock+0x4f/0x70 [ 280.282610][T17181] ? __fget_files+0x184/0x1c0 [ 280.282639][T17181] __secure_computing+0x82/0x150 [ 280.282740][T17181] syscall_trace_enter+0xcf/0x1e0 [ 280.282842][T17181] do_syscall_64+0xac/0x200 [ 280.282918][T17181] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 280.282945][T17181] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 280.282978][T17181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.283057][T17181] RIP: 0033:0x7ff3c7dcf6c9 [ 280.283071][T17181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.283089][T17181] RSP: 002b:00007ff3c682f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 280.283107][T17181] RAX: ffffffffffffffda RBX: 00007ff3c8025fa0 RCX: 00007ff3c7dcf6c9 [ 280.283119][T17181] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 280.283131][T17181] RBP: 00007ff3c682f090 R08: 0000200000000000 R09: 0000000000000000 [ 280.283142][T17181] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 280.283204][T17181] R13: 00007ff3c8026038 R14: 00007ff3c8025fa0 R15: 00007ffde7b73698 [ 280.283223][T17181] [ 280.283243][T17181] audit: error in audit_log_subj_ctx [ 280.287025][ T29] audit: type=1326 audit(1762664947.422:42997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 280.344600][T17185] bio_check_eod: 96863 callbacks suppressed [ 280.344618][T17185] syz.6.4324: attempt to access beyond end of device [ 280.344618][T17185] loop6: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 280.348116][ T29] audit: type=1326 audit(1762664947.422:42998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 280.354399][T17185] syz.6.4324: attempt to access beyond end of device [ 280.354399][T17185] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 280.359092][ T29] audit: type=1326 audit(1762664947.422:42999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 280.371726][T17185] syz.6.4324: attempt to access beyond end of device [ 280.371726][T17185] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 280.375483][ T29] audit: type=1326 audit(1762664947.422:43000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 280.380571][T17185] syz.6.4324: attempt to access beyond end of device [ 280.380571][T17185] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 280.384505][ T29] audit: type=1326 audit(1762664947.422:43001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3c7dcdf10 code=0x7ffc0000 [ 280.389799][T17185] syz.6.4324: attempt to access beyond end of device [ 280.389799][T17185] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 280.394336][ T29] audit: type=1326 audit(1762664947.422:43002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3c7dce17f code=0x7ffc0000 [ 280.404099][T17186] syz.6.4324: attempt to access beyond end of device [ 280.404099][T17186] loop6: rw=1, sector=225, nr_sectors = 8 limit=128 [ 280.425116][ T29] audit: type=1326 audit(1762664947.472:43004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17180 comm="syz.1.4326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff3c7e01f85 code=0x7ffc0000 [ 280.447741][T17186] syz.6.4324: attempt to access beyond end of device [ 280.447741][T17186] loop6: rw=1, sector=241, nr_sectors = 8 limit=128 [ 280.815378][T17186] syz.6.4324: attempt to access beyond end of device [ 280.815378][T17186] loop6: rw=1, sector=257, nr_sectors = 8 limit=128 [ 280.829005][T17186] syz.6.4324: attempt to access beyond end of device [ 280.829005][T17186] loop6: rw=1, sector=273, nr_sectors = 8 limit=128 [ 280.842355][T17185] syz.6.4324: attempt to access beyond end of device [ 280.842355][T17185] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 280.916248][T17193] serio: Serial port ptm0 [ 281.057123][ T4376] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 281.164233][T17207] loop9: detected capacity change from 0 to 512 [ 281.177918][T17207] EXT4-fs: Ignoring removed nobh option [ 281.188560][T17209] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 281.206396][T17205] loop6: detected capacity change from 0 to 4096 [ 281.221006][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.4337: corrupted inode contents [ 281.228535][T17209] team_slave_0: entered promiscuous mode [ 281.238495][T17209] team_slave_1: entered promiscuous mode [ 281.244640][T17207] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #3: comm syz.9.4337: mark_inode_dirty error [ 281.245664][T17209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 281.263219][T17205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.275427][T17205] EXT4-fs mount: 29 callbacks suppressed [ 281.275523][T17205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.303545][T17209] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 281.338784][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.4337: corrupted inode contents [ 281.387311][T17207] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.4337: mark_inode_dirty error [ 281.405062][T17216] geneve2: entered promiscuous mode [ 281.410357][T17216] geneve2: entered allmulticast mode [ 281.426097][T17207] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.4337: Failed to acquire dquot type 0 [ 281.454726][T17218] syzkaller0: entered allmulticast mode [ 281.466139][T17218] syzkaller0: entered promiscuous mode [ 281.542379][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.4337: corrupted inode contents [ 281.566651][T17207] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #16: comm syz.9.4337: mark_inode_dirty error [ 281.585221][T17216] vlan2: entered allmulticast mode [ 281.593006][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.4337: corrupted inode contents [ 281.629682][T17222] loop1: detected capacity change from 0 to 2048 [ 281.646218][T17207] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4337: mark_inode_dirty error [ 281.663313][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.678149][T17215] syzkaller0: left promiscuous mode [ 281.682927][T17222] loop1: p2 p3 p7 [ 281.683725][T17215] syzkaller0: left allmulticast mode [ 281.696658][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.4337: corrupted inode contents [ 281.729908][T17207] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 281.777271][T17207] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.4337: corrupted inode contents [ 281.800819][T17207] EXT4-fs error (device loop9): ext4_truncate:4637: inode #16: comm syz.9.4337: mark_inode_dirty error [ 281.826827][T17230] FAULT_INJECTION: forcing a failure. [ 281.826827][T17230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.827148][T17207] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 281.840042][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.1.4344 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.840077][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.840095][T17230] Call Trace: [ 281.840103][T17230] [ 281.840130][T17230] __dump_stack+0x1d/0x30 [ 281.840159][T17230] dump_stack_lvl+0xe8/0x140 [ 281.840185][T17230] dump_stack+0x15/0x1b [ 281.840230][T17230] should_fail_ex+0x265/0x280 [ 281.840255][T17230] should_fail+0xb/0x20 [ 281.840336][T17230] should_fail_usercopy+0x1a/0x20 [ 281.840385][T17230] _copy_from_user+0x1c/0xb0 [ 281.840417][T17230] do_ip6t_set_ctl+0x3a9/0x840 [ 281.840533][T17230] ? kstrtoull+0x111/0x140 [ 281.840572][T17230] ? __rcu_read_unlock+0x4f/0x70 [ 281.840646][T17230] nf_setsockopt+0x199/0x1b0 [ 281.840677][T17230] ipv6_setsockopt+0x11a/0x130 [ 281.840785][T17230] tcp_setsockopt+0x98/0xb0 [ 281.840810][T17230] sock_common_setsockopt+0x69/0x80 [ 281.840882][T17230] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 281.840917][T17230] __sys_setsockopt+0x184/0x200 [ 281.840958][T17230] __x64_sys_setsockopt+0x64/0x80 [ 281.841011][T17230] x64_sys_call+0x20ec/0x3000 [ 281.841040][T17230] do_syscall_64+0xd2/0x200 [ 281.841100][T17230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 281.841140][T17230] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 281.841224][T17230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.841251][T17230] RIP: 0033:0x7ff3c7dcf6c9 [ 281.841269][T17230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.841292][T17230] RSP: 002b:00007ff3c682f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.841363][T17230] RAX: ffffffffffffffda RBX: 00007ff3c8025fa0 RCX: 00007ff3c7dcf6c9 [ 281.841379][T17230] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 281.841389][T17230] RBP: 00007ff3c682f090 R08: 0000000000000430 R09: 0000000000000000 [ 281.841400][T17230] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 281.841410][T17230] R13: 00007ff3c8026038 R14: 00007ff3c8025fa0 R15: 00007ffde7b73698 [ 281.841530][T17230] [ 282.068968][T17207] EXT4-fs (loop9): 1 truncate cleaned up [ 282.075046][T17207] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.090680][T17207] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.108331][T17229] __nla_validate_parse: 14 callbacks suppressed [ 282.108349][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 282.155291][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4342'. [ 282.181808][T17248] netlink: 'syz.7.4350': attribute type 1 has an invalid length. [ 282.189662][T17248] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4350'. [ 282.200388][T17243] lo speed is unknown, defaulting to 1000 [ 282.207832][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.222039][T17248] loop7: detected capacity change from 0 to 1024 [ 282.229226][T17248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.235877][T17248] EXT4-fs: Ignoring removed orlov option [ 282.241647][T17248] ext2: Bad value for 'mb_optimize_scan' [ 282.354650][T17251] tipc: Started in network mode [ 282.359604][T17251] tipc: Node identity ced651822386, cluster identity 4711 [ 282.366787][T17251] tipc: Enabled bearer , priority 0 [ 282.428694][T17267] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 282.436112][T17267] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 282.463917][T17267] vhci_hcd: invalid port number 85 [ 282.469195][T17267] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 282.515969][T17270] vhci_hcd: invalid port number 65 [ 282.521162][T17270] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 282.548556][T17250] tipc: Resetting bearer [ 282.591035][T17250] tipc: Disabling bearer [ 282.607895][T17269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4359'. [ 282.717605][T17274] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 282.754609][T17277] loop9: detected capacity change from 0 to 512 [ 282.766187][T17278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.782116][T17279] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(14) [ 282.788864][T17279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 282.797141][T17279] vhci_hcd vhci_hcd.0: Device attached [ 282.847524][T17278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.980740][T17280] vhci_hcd: connection closed [ 282.981063][ T37] vhci_hcd: stop threads [ 282.990060][ T37] vhci_hcd: release socket [ 282.994559][ T37] vhci_hcd: disconnect device [ 283.025313][T17278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.209876][T17277] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 283.218019][T17277] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 283.278273][T17277] EXT4-fs (loop9): 1 truncate cleaned up [ 283.284688][T17277] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.299588][T17289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4363'. [ 283.317865][T17278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.332637][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.372450][T17289] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4363'. [ 283.399807][T17291] lo speed is unknown, defaulting to 1000 [ 283.420083][T17293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.460178][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.477110][T17293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.551752][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.568619][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.586007][ T4376] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.704006][T17308] loop7: detected capacity change from 0 to 512 [ 283.713084][T17308] EXT4-fs (loop7): failed to initialize system zone (-117) [ 283.728684][T17308] EXT4-fs (loop7): mount failed [ 283.743496][T17317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'. [ 283.755471][T17315] vhci_hcd: invalid port number 65 [ 283.760657][T17315] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 283.774465][T17308] lo speed is unknown, defaulting to 1000 [ 283.822377][T17324] siw: device registration error -23 [ 283.847144][T17324] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(14) [ 283.853866][T17324] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 283.862049][T17324] vhci_hcd vhci_hcd.0: Device attached [ 283.884577][T17327] vhci_hcd: connection closed [ 283.885428][ T4376] vhci_hcd: stop threads [ 283.894794][ T4376] vhci_hcd: release socket [ 283.899260][ T4376] vhci_hcd: disconnect device [ 284.020207][T17337] FAULT_INJECTION: forcing a failure. [ 284.020207][T17337] name failslab, interval 1, probability 0, space 0, times 0 [ 284.032895][T17337] CPU: 1 UID: 0 PID: 17337 Comm: syz.6.4382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 284.032929][T17337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.032943][T17337] Call Trace: [ 284.032950][T17337] [ 284.032959][T17337] __dump_stack+0x1d/0x30 [ 284.033066][T17337] dump_stack_lvl+0xe8/0x140 [ 284.033090][T17337] dump_stack+0x15/0x1b [ 284.033107][T17337] should_fail_ex+0x265/0x280 [ 284.033126][T17337] should_failslab+0x8c/0xb0 [ 284.033157][T17337] __kmalloc_noprof+0xa5/0x570 [ 284.033219][T17337] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 284.033251][T17337] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 284.033286][T17337] genl_start+0xe0/0x390 [ 284.033359][T17337] __netlink_dump_start+0x334/0x520 [ 284.033402][T17337] genl_family_rcv_msg_dumpit+0x115/0x180 [ 284.033491][T17337] ? __pfx_genl_start+0x10/0x10 [ 284.033513][T17337] ? __pfx_genl_dumpit+0x10/0x10 [ 284.033581][T17337] ? __pfx_genl_done+0x10/0x10 [ 284.033617][T17337] genl_rcv_msg+0x3f0/0x460 [ 284.033645][T17337] ? __pfx_ethnl_default_start+0x10/0x10 [ 284.033664][T17337] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 284.033753][T17337] ? __pfx_ethnl_default_done+0x10/0x10 [ 284.033817][T17337] netlink_rcv_skb+0x123/0x220 [ 284.033853][T17337] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.033967][T17337] genl_rcv+0x28/0x40 [ 284.033991][T17337] netlink_unicast+0x5c0/0x690 [ 284.034035][T17337] netlink_sendmsg+0x58b/0x6b0 [ 284.034084][T17337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.034109][T17337] __sock_sendmsg+0x145/0x180 [ 284.034141][T17337] ____sys_sendmsg+0x31e/0x4e0 [ 284.034215][T17337] ___sys_sendmsg+0x17b/0x1d0 [ 284.034257][T17337] __x64_sys_sendmsg+0xd4/0x160 [ 284.034287][T17337] x64_sys_call+0x191e/0x3000 [ 284.034318][T17337] do_syscall_64+0xd2/0x200 [ 284.034394][T17337] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 284.034432][T17337] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 284.034516][T17337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.034543][T17337] RIP: 0033:0x7f5e6d90f6c9 [ 284.034562][T17337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.034585][T17337] RSP: 002b:00007f5e6c377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.034621][T17337] RAX: ffffffffffffffda RBX: 00007f5e6db65fa0 RCX: 00007f5e6d90f6c9 [ 284.034638][T17337] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000003 [ 284.034675][T17337] RBP: 00007f5e6c377090 R08: 0000000000000000 R09: 0000000000000000 [ 284.034692][T17337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.034715][T17337] R13: 00007f5e6db66038 R14: 00007f5e6db65fa0 R15: 00007ffefafc6a78 [ 284.034738][T17337] [ 284.095700][T17341] netlink: 'syz.7.4384': attribute type 1 has an invalid length. [ 284.173464][T17347] loop7: detected capacity change from 0 to 1024 [ 284.178031][T17341] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4384'. [ 284.334128][T17347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.340797][T17347] EXT4-fs: Ignoring removed orlov option [ 284.346558][T17347] ext2: Bad value for 'mb_optimize_scan' [ 284.353769][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4388'. [ 284.444432][T17365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.453341][T17365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.462445][T17363] loop7: detected capacity change from 0 to 1024 [ 284.489199][T17363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.519783][T17363] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.4392: Allocating blocks 449-513 which overlap fs metadata [ 284.535726][T17362] EXT4-fs (loop7): pa ffff88810722a930: logic 48, phys. 177, len 21 [ 284.543816][T17362] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 284.566325][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.575561][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4398'. [ 284.617277][T17382] loop7: detected capacity change from 0 to 1024 [ 284.630775][T17382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.700797][T17382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.709377][T17382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.848832][T17395] loop9: detected capacity change from 0 to 512 [ 284.856869][T17395] EXT4-fs (loop9): failed to initialize system zone (-117) [ 284.864446][T17395] EXT4-fs (loop9): mount failed [ 284.884898][T17395] lo speed is unknown, defaulting to 1000 [ 285.039685][T17402] loop6: detected capacity change from 0 to 1024 [ 285.062240][T17402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.092092][T17402] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.4408: Allocating blocks 449-513 which overlap fs metadata [ 285.108704][T17401] EXT4-fs (loop6): pa ffff888107119380: logic 48, phys. 177, len 21 [ 285.116769][T17401] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 285.140577][T13922] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.231729][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 285.231749][ T29] audit: type=1326 audit(1762664952.402:43516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3c7dc6567 code=0x7ffc0000 [ 285.261704][ T29] audit: type=1326 audit(1762664952.402:43517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3c7d6b779 code=0x7ffc0000 [ 285.285311][ T29] audit: type=1326 audit(1762664952.402:43518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 285.315091][ T29] audit: type=1326 audit(1762664952.412:43519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3c7dc6567 code=0x7ffc0000 [ 285.338701][ T29] audit: type=1326 audit(1762664952.412:43520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3c7d6b779 code=0x7ffc0000 [ 285.362449][ T29] audit: type=1326 audit(1762664952.412:43521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 285.385956][ T29] audit: type=1326 audit(1762664952.422:43522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff3c7dc6567 code=0x7ffc0000 [ 285.409454][ T29] audit: type=1326 audit(1762664952.422:43523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff3c7d6b779 code=0x7ffc0000 [ 285.432970][ T29] audit: type=1326 audit(1762664952.422:43524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17359 comm="syz.1.4391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff3c7dcf6c9 code=0x7ffc0000 [ 285.528568][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.705025][T17427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.733688][T17425] lo speed is unknown, defaulting to 1000 [ 285.748378][T17427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.135769][ T29] audit: type=1326 audit(1762664953.312:43525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17432 comm="syz.9.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13beaf6c9 code=0x7ffc0000 [ 286.214504][T17438] loop9: detected capacity change from 0 to 1024 [ 286.231756][T17438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.284881][T17438] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.4421: Allocating blocks 449-513 which overlap fs metadata [ 286.307319][T17437] EXT4-fs (loop9): pa ffff88810722a850: logic 48, phys. 177, len 21 [ 286.315402][T17437] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 286.329230][T17445] loop7: detected capacity change from 0 to 1024 [ 286.347708][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.365300][T17445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.372902][T17450] loop9: detected capacity change from 0 to 1024 [ 286.388870][T17450] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.439280][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.447912][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.461917][T17450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.470516][T17450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.604691][T17467] netlink: 'syz.6.4429': attribute type 1 has an invalid length. [ 286.618482][T17467] loop6: detected capacity change from 0 to 1024 [ 286.625444][T17467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.632113][T17467] EXT4-fs: Ignoring removed orlov option [ 286.637875][T17467] ext2: Bad value for 'mb_optimize_scan' [ 287.088273][T15755] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.145717][T17480] serio: Serial port ptm0 [ 287.151098][T15271] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.167259][T17482] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.174739][T17482] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.182107][T17482] vhci_hcd: invalid port number 85 [ 287.187328][T17482] vhci_hcd: default hub control req: 1f12 v0000 i0055 l0 [ 287.205319][T17484] netdevsim netdevsim9: Direct firmware load for þ failed with error -2 [ 287.363308][T17498] loop9: detected capacity change from 0 to 2048 [ 287.378131][T17500] loop7: detected capacity change from 0 to 512 [ 287.386630][T17500] EXT4-fs (loop7): failed to initialize system zone (-117) [ 287.396106][T17500] EXT4-fs (loop7): mount failed [ 287.401881][T17500] ================================================================== [ 287.410027][T17500] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 287.417588][T17500] [ 287.419934][T17500] read-write to 0xffff888237d25ee8 of 1 bytes by task 17486 on cpu 1: [ 287.428106][T17500] folio_add_lru+0xa5/0x1f0 [ 287.432624][T17500] shmem_get_folio_gfp+0x7ab/0xd60 [ 287.437769][T17500] shmem_write_begin+0xa8/0x190 [ 287.442638][T17500] generic_perform_write+0x184/0x490 [ 287.447968][T17500] shmem_file_write_iter+0xc5/0xf0 [ 287.453115][T17500] __kernel_write_iter+0x2d6/0x540 [ 287.458331][T17500] dump_user_range+0x61e/0x8f0 [ 287.463129][T17500] elf_core_dump+0x1de7/0x1f80 [ 287.467924][T17500] coredump_write+0xb12/0xe30 [ 287.472662][T17500] vfs_coredump+0x143a/0x20d0 [ 287.477362][T17500] get_signal+0xd84/0xf70 [ 287.481715][T17500] arch_do_signal_or_restart+0x96/0x440 [ 287.487283][T17500] irqentry_exit_to_user_mode+0x5b/0xa0 [ 287.492860][T17500] irqentry_exit+0x12/0x50 [ 287.497319][T17500] exc_general_protection+0x15b/0x1f0 [ 287.502708][T17500] asm_exc_general_protection+0x26/0x30 [ 287.508272][T17500] [ 287.510611][T17500] read to 0xffff888237d25ee8 of 1 bytes by task 17500 on cpu 0: [ 287.518237][T17500] __lru_add_drain_all+0x17e/0x450 [ 287.523369][T17500] lru_add_drain_all+0x10/0x20 [ 287.528163][T17500] invalidate_bdev+0x47/0x70 [ 287.532760][T17500] ext4_fill_super+0x2d2c/0x3810 [ 287.537719][T17500] get_tree_bdev_flags+0x291/0x300 [ 287.542853][T17500] get_tree_bdev+0x1f/0x30 [ 287.547292][T17500] ext4_get_tree+0x1c/0x30 [ 287.551724][T17500] vfs_get_tree+0x57/0x1d0 [ 287.556170][T17500] do_new_mount+0x24d/0x660 [ 287.560711][T17500] path_mount+0x4a5/0xb70 [ 287.565082][T17500] __se_sys_mount+0x28c/0x2e0 [ 287.569804][T17500] __x64_sys_mount+0x67/0x80 [ 287.574429][T17500] x64_sys_call+0x2b51/0x3000 [ 287.579123][T17500] do_syscall_64+0xd2/0x200 [ 287.583659][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.589570][T17500] [ 287.591905][T17500] value changed: 0x0a -> 0x0c [ 287.596579][T17500] [ 287.598926][T17500] Reported by Kernel Concurrency Sanitizer on: [ 287.605097][T17500] CPU: 0 UID: 0 PID: 17500 Comm: syz.7.4442 Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.614907][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.625055][T17500] ================================================================== [ 287.655719][T17500] lo speed is unknown, defaulting to 1000 [ 287.683003][T17498] loop9: p2 p3 p7