last executing test programs: 10m24.943566181s ago: executing program 32 (id=162): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018010000643d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x10, 0x10, &(0x7f0000000080)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001100)={@fallback=r1, 0x2e, 0x0, 0xd, &(0x7f0000001000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c40)={{r2}, &(0x7f0000002900), &(0x7f0000002c00)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x5c3, &(0x7f0000000140)={0x0, 0x39fe, 0x10000, 0x6, 0x13f}, &(0x7f00000003c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffff6}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="140000"], &(0x7f0000000100), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000380)=r0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") 9m13.42841675s ago: executing program 33 (id=1624): unshare(0x2a020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000814000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000"], 0x50) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 7m31.546853238s ago: executing program 34 (id=3852): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x1c) write$sndseq(r1, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick, {0x1, 0x10}, {0x4, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1, 0x2}, {0x9, 0x81}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x70) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 7m27.280432955s ago: executing program 35 (id=4013): unshare(0x400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) 7m23.553118539s ago: executing program 36 (id=4086): move_pages(0x0, 0x0, 0x0, &(0x7f0000000000), 0xfffffffffffffffe, 0x0) 6m58.46782153s ago: executing program 37 (id=5017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 6m57.030626873s ago: executing program 38 (id=5088): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000440)) 6m56.050595132s ago: executing program 39 (id=5109): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) 6m54.400308887s ago: executing program 40 (id=5128): syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c830102030109022900010000000009042900000202010005240200000524"], 0x0) 6m51.520168735s ago: executing program 1 (id=5206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x1004, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x40400c0) 6m51.463636451s ago: executing program 1 (id=5209): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m51.412901956s ago: executing program 1 (id=5212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 6m51.365368241s ago: executing program 1 (id=5214): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 6m51.364877191s ago: executing program 1 (id=5216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40880) 6m50.4684615s ago: executing program 1 (id=5250): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021b00010000000a09041df301716c7500090501"], 0x0) 6m50.432151344s ago: executing program 41 (id=5250): syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000073864020720c1400ac390102030109021b00010000000a09041df301716c7500090501"], 0x0) 6m49.429906924s ago: executing program 8 (id=5273): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, 0x0) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 6m49.405400977s ago: executing program 8 (id=5275): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) 6m49.326033905s ago: executing program 8 (id=5277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @adiantum, 0x18, '\x00', @d}) 6m49.239474233s ago: executing program 8 (id=5279): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 6m49.204948087s ago: executing program 8 (id=5280): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r1, 0x103, 0x1) getdents(r1, 0x0, 0xffffffffffffff31) 6m48.97397706s ago: executing program 8 (id=5283): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x3, 0x81, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x20, 0x7c7, 0x10, 0x7}}) 6m48.955323442s ago: executing program 42 (id=5283): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x3, 0x81, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, 0x20, 0x7c7, 0x10, 0x7}}) 2m5.859071169s ago: executing program 3 (id=11392): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800"], 0x64}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYBLOB="0000000000000000b702000014003900b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x1, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x40001, 0x1, 0x2000007}, {0x5, 0x0, 0xf, 0xa}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000680), 0x2000006c, r3, 0x0, 0xc00}, 0x38) 2m5.797785545s ago: executing program 3 (id=11396): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x12279b640938fda4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005, 0x0, 0x4008815}, 0x810) 2m5.776258647s ago: executing program 3 (id=11397): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x0, 0x2, 0x0, 0x2, {0xa, 0x4e21, 0x63b, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7}}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1812e2ffffffffff0c0134f907000084afb718c300324cd50000000000"], 0x18}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="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", 0x5ff}], 0x1}}], 0x6, 0x200040d1) 2m5.692932495s ago: executing program 3 (id=11401): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b7fffa121ecba96f400000000000000000008040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@timestamping={{0x14, 0x1, 0x25, 0x87}}], 0x18}}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) wait4(0x0, &(0x7f00000002c0), 0x2, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x1, 0xb, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xb, 0x9, 0x9, 0x6, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_ignore}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$eJzs3c9rHGUfAPDvbJOmb9vXpODBimCgBwulG5vWUkGkogcpVop689Bud7ehZLdbspvShIpWFMGTSPHsj5M3/wFRBL15FDx7kkKRUi+CsDLb2bjt7jabNJtV9/OBCc8zM5tnvjszz/Mkz8NMAGNrNv2Ri9gfER8lEdPZ+iQiJlupiYiTd/e7c/taMV2SaDZf/y1p7ZPmo+MzqT1Z5rGI+O79iEO57nLrK6uLhUqlvJTl5xrVy3P1ldXDF6uFhfJC+dL88WePzp+Yf+bE/JbF+sd7r54/9dVLX9x498dfXnvr1JNJnIy92bbOOLbKbMxm38lk+hXe48WtLmzEklEfAJuS3po77t7lsT+mY0crBQD8l70dEU0AYMwk2n8AGDPt/wO0x/aGMQ72T3brhYjY1Sv+iWzMbldrHHT3neSekZEkIma2oPzZiLj65gdfp0sMaRwSoJd3rkfEuZnZ7vov6ZqzsFFPD7DP7H159R9sn2/T/s+JXv2f3Fr/J3r0f6Z63Lubsf79n7u5BcX0lfb/nuvZ/12btDazI8v9v9Xnm0wuXKyU07rtkYg4GJNTaf7IA8o49vHzP/Tb1tn/S5e0/HZfMDuOmxNT936mVGgUHibmTreuRzw+0Sv+ZO38J336v2cGLKPx/ROf99u2fvzD1fws4qme5//vGW1Jx/zEqeianzjXuh7m2ldFt/yH0/v6lT/q+NPzv/vB8c8knfM16xsv46dP/ny537bNXv87kzda6Z3ZuquFRmPpSMTO5JXu9R1TSNv59v5p/AcPPLj+63X9p38Tnhsw/sVPvzy/+fiHK42/tKHzv/HEgZ+/6R1PM5ttvO75P9ZKHczWDFL/DXqAD/PdAQAAAAAAAAAAAAAAAAAAAAAAAMCgchGxN5Jcfi2dy+Xzd9/h/WjszlVq9cahC7XlS6VovSt7JiZz7SddTnc8D/VI9jz8dn7+vvzRiNgXETem/tfK54u1SmnUwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZk+f9/+nfp0a9dEBAEOza9QHAABsO+0/AIwf7T8AjB/tPwCMH+0/AIwf7T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDdub06XRp/n77WjHNl66sLC/WrhwuleuL+epyMV+sLV3OL9RqC5Vyvlirrvf7KrXa5fnjsXx1rlGuN+bqK6tnq7XlS42zF6uFhfLZ8uS2RAUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG1NfWV0sVCrlJQkJCYm1xKhrJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB/h78CAAD//6LRHug=") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r6 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x20000009}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000001500)='./file0/../file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1a738a2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r8, &(0x7f00000001c0), 0x0}, 0x20) 2m5.503132734s ago: executing program 3 (id=11407): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) shmdt(0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$eJzs3U9vI2cZAPBnHHvZ7GabFDhAJUqhRdkVrJ00tI04lCIhOFUCyr2ExImiOHEUO+0mqtis+ABICAESJ7hwQeIDIKFKXDgipEpwBgECIdjCgQN00NjjNJv4X7tOnE1+P2ky78y8M8/zOprxvJ7RTACX1lMR8VJEvJOm6a2ImM7nF/IhDtpDVu/t+28sZ0MSafrKP5JI8nmdbSX5+Hq+2tWI+NqXI76ZnIzb2NvfWKrVqjv5dKW5uV1p7O3fXt9cWquuVbcWFuafX3xh8bnFuZG080ZEvPjFv3z/Oz/90ou//Mzrf3z1bze/laU1lS8/2o73qNhvYbvppdZncXSFnfcZ7DwqtlqYm+xWY+LEnHunnBMAAN1l5/gfjIhPRsStmI6J/qezAAAAwCMo/fxU/DeJSLu70mM+AAAA8AgptO6BTQrl/F6AqSgUyuX2PbwfjmuFWr3R/PRqfXdrpX2v7EyUCqvrtepcfq/wTJSSbHq+VX53+tlj0wsR8XhEfG96sjVdXq7XVsb94wcAAABcEteP9f//Pd3u/3fcHWdyAAAAwOjMjDsBAAAA4NQN2/+/dsp5AAAAAKfH9X8AAAC40L7y8svZkHbef73y2t7uRv212yvVxkZ5c3e5vFzf2S6v1etrrWf2bQ7aXq1e3/5sbO3eqTSrjWalsXc1Nuu7W81X1x94BTYAAABwhh7/+Ju/TyLi4HOTrSFzZbhVh6wGnFfFw1KSj7vs1n94rD3+8xklBZyJiXEnAIxNcdwJAGNTGncCwNglA5b3vHnnN/n4E6PNBwAAGL3Zj/a+/l/ou+ZB/8XAuWcnhsvL9X+4vFrX/4e9k7fgbeBwkZQGnQH07SA4HsBF8NDX/wdK0/eUEAAAMHJTrSEplIud6UKhXI640XotQClZXa9V5yLisYj43XTpA9n0fKtmMrDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pWkSKQAAAHChRRT+mvyq/Sz/2elnpo7/PnAl+c905K8Iff1Hr/zgzlKzuTOfzf/n4fzmD/P5z47jFwwAAAC4FAa8wP9BnX56px8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP09v03ljvDWcb9+xciYqZb/GJcbY2vRikirv0rieKR9ZKImBhB/Mnsz0e6xU+ytA5Ddos/OYL4B/f6xo+D/FPoFv/6COLDZfZmdvx5qdv+V4inWuPu+18x4oHp96v38S8Oj38TPfb/G0PGeOKtn1d6xr8X8UTxRPy7WYRO/KRH/KeHjP+Nr+/v91qW/jhituv3T9Kpkh0ho9Lc3K409vZvr28urVXXqlsLC/PPL76w+NziXGV1vVbN/3aN8d2P/eKdfu2/1iP+zID2P3Nia1e6xvjfW3fuf6hdLHWLf/PpLvF//ZO8xsn4hfy771N5OVs+2ykftMtHPfmz3z7Zr/0rPdo/6P9/s9dGj7n11W//aciqAMAZaOztbyzVatWdC1vIeulDVs7Ozs5FzgpDFCYefjt3R5pYmqZptk89xHaSGPenelgY95EJAAAYtXdP+sedCQAAAAAAAAAAAAAAAAAAAFxeZ/E4seMxDw5LySgeoQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBL/DwAA//9t9tlI") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[], 0x40}}, 0x0) add_key$keyring(&(0x7f0000000a40), &(0x7f0000000ac0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2m5.317811913s ago: executing program 3 (id=11414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m5.302218614s ago: executing program 43 (id=11414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m18.195932256s ago: executing program 7 (id=12127): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20550, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) socket(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/885], 0x290) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/205, 0xcd}], 0x1}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x99b1, 0x10100}, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c"], 0x34c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r2}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x87) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8, 0x11000}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$dupfd(r6, 0x406, r6) 1m17.648471021s ago: executing program 7 (id=12132): socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f00000002c0)="6e3cca035502", 0x6, 0x1, 0x5, 0x4000000}, 0x1}, 0x1) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x20000000002}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x4004) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 1m17.523077553s ago: executing program 7 (id=12135): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x388, &(0x7f0000000d00)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r2, @ANYRES8=r2, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRESOCT=r0, @ANYBLOB="6a0453d0ac1a76a9b50d3f7be2af5e136ff16776f33226c9719bd1d2f1132b0754aaee5ef60e3ab147209f958ad2521056b4e3cc724c93ebb216d8e356d1d96b51af15047c6b75538c5043703fc780e2eb32de824fb811a0", @ANYRESOCT=r1, @ANYRESDEC=r3, @ANYRESOCT=r3, @ANYBLOB="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", @ANYRES64=r3], 0x7c}, 0x1, 0x0, 0x0, 0x10001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000000b) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2040, 0x8a) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYBLOB="4b430aa30018a974ef9a25b28d6af8c88162f48054d6f1a3f25326ed5d6d762f4078186010425effdf247e20ece4de847cef3d252ab47df81788dc1799fe9fc59b7d861755365e950516ac5b3aefc18732dbfbe49a95542217c2c38ba0d9d1c5ea6fe04a"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) quotactl_fd$Q_GETQUOTA(r6, 0x2, 0x0, &(0x7f0000000840)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) sendmsg$kcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000", 0x2c}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.302985945s ago: executing program 7 (id=12136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000000001b000000b7000000000000009500000000000200ccd2ca31fef45b7e670ff9f0aa59bc9524cbf897700c6a139d4ec853449ce8fe57b1d7ba5df141615c7df03678ae73c562d91e33ed62316fc2fecb4711fb185d199a2e153c3298ce72c782b40e0dca4ea41da5ba9462f7e6ba8a7a601738f9954d159209f1cdf2af561d585503000000e20038f23322fba58e08c25a130ed45d16a8817b7763c02657cf1aba7830"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0)=r9, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000000540)) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m16.45849934s ago: executing program 7 (id=12144): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x12279b640938fda4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x4e21, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) 1m16.450059811s ago: executing program 7 (id=12145): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0xfff, @rand_addr=' \x01\x00', 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private0, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000180)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) 1m16.414697665s ago: executing program 44 (id=12145): r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x908, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0xfff, @rand_addr=' \x01\x00', 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @private0, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000180)=0x8000, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) 36.149635379s ago: executing program 2 (id=12823): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 36.113142362s ago: executing program 2 (id=12824): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000200)=""/115, 0x0, 0x73, 0x0, 0x2}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a001000010000100000000ddff000000fe880000000000000010000000000101ac1414bb1eba4da0df8bc05d81451b00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d616328616573290000"], 0x1a0}}, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu<20\t||') 36.026331221s ago: executing program 2 (id=12825): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(r0, &(0x7f00000003c0)='./mnt\x00', 0x0, 0x0, 0x1800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000000)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x4b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x6, &(0x7f0000000280)={0x1, 0x0, 0x33, 0x9}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x80000000000007, 0x401}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffff03ff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.025783621s ago: executing program 2 (id=12826): r0 = syz_io_uring_setup(0x43b5, &(0x7f0000000540)={0x0, 0x4c50e, 0x10000, 0x2, 0x3e8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) sendto$inet6(r3, &(0x7f0000000280)="b5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000090000000000000000000000850000004100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x2f, 0x0, 0x0) 35.94451512s ago: executing program 2 (id=12828): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f00000008c0)={[{@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@showassoc}, {@unhide}, {@nojoliet}, {@uid}, {@dmode={'dmode', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}]}, 0x0, 0x688, &(0x7f0000000100)="$eJzs3V2PE+f1APBjworV/iX0V1shhAiZQCuBRBbbGxatclPXO7s7iddjzXgjuEpR2I0QS9JCKhWuwk3aSu2HyG0/RPuJot72jspjGwz74g0Ja4J+PyuZxzPH85wZzBw9eF4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhae7Veb9Sik3W3biYHa68W+eYhy8fr+/cLk0P6jagN/ov5+Tg7nHX2V88Xnxn872KcH747H/ODyXw8/r8z///RL0+eGH/+kISOxcNHj+/d3t3dfjDrRGZkPe1mZZ5tttbTJCvzZGV5uX5tY61M1rJOWt4q++lm0i7SVj8vksvtK0ljZWUpSRdv5Vvd9dVWJx3PvPFBs15fTj5e7KWtosy71z5eLNsbWaeTddermMHiQcyNwRfxk6yf9NPWZpLs3N3dXpqW5CCocZSg5rSgZr3ZbDSazcby9ZXrN+r1k3tm1F8SeyJm/6Vltn7iIzi8uhOj+h+dyKIbW3Ezkn1f7ViNIvLYPGD5yLj+/+ZaOmx9s3+/k/X/neGs82efLz4XVf2/MHx34aD6f0Aux/d6GI/icdyL27Ebu7EdD2ae0fG+1iONbmRRRh5ZbEarmpOM5iSxEsuxHPX4LDZiLcpIYi2y6EQaZdyKMvqRVt+odhSRRiv6kUcRSVyOdlyJJBqxEiuxFEmksRi3Io+t6MZ6rEarWstO3K32+9IhOT4LahwlqHlIkPrPDzW/Z87rOZDDK3g6rv8AAADAW6tW/cY+GP/PxbtVay3rpPVZpwUAAAD8hKpf/s8PJnOD1rtRM/4HAACAt02tusauFhEL8d6wNb4SavyPAHMzThEAAAD4karf/y8MJguD1ntR2zP+BwAAAH7m/jr1HvvzvVO1f/0nimKu9qR389e1+61BXOv+6K691eS/T4cG7f7audrp0UqqyfLJ0bt2er42uvvls5tgjk4u+H5nWh61QxOYdHAC8fd4fxjz/p3h9M54ybCXhbWsky62885HjWi1Tp/opzf7f/ry7p+j2vy/dTdP12Ln7u724udf7d6pcnkyWMuT+6MbKO65j+I+uYwXfV3db6G65mLfLZ6rLsQY9bsw7Lc+uf0nhh8/8QO2/9u4OIy5uBBPT0XEwovbPz/os7F40NaPsmhUWcy/0OlRtvx5FpeGMZcuXxpO9smiOS2L5uT+f6V9cYQslqZlsfQjswCYlZ0pVai2t/C/wlHueKr7t3F5GHP5XHVgPXlunyN6fdoRvf6KdX3c1z/jyjDmyjj4oBo76PcfL1XV7wYf+O7AfstOszbYhe98ff8Pcebho8cf3L1/+4vtL7a/bDaXlusf1uvXmzFXbcZoovYAsI/pz9iZGlH7cMqo+hfPTilYjM/jq9iNO3G1utqgOuNg37UuxM5vY3QawtWJUWvlpVHrwsQTXq5OGdUtTDzo5eixS8fwJwEAx+filDp8lPp/dcq4e2HilMKrU0bHk7UcAHg90uL72kL/L7WiyHqfNVZWGq3+RpoUefuTpMhW19Mk6/bTor3R6q6nSa/I+3k77wwan2araZmUW71eXvSTtbxIenmZ3aye/J6MHv1epputbj9rl71O2irTpJ13+612P1nNynbS2/pdJys30qL6cNlL29la1m71s7yblPlW0U4Xk6RM04nAbDXt9rO1bNDsJr0i22wVt5JP887WZpqspmW7yHr9fLjCcV9Zdy0vNqvVLs56ZwPAG+Lho8f3bu/ubj94jY04NeutBAAmTVRpAAAAAAAAAAAAAADgDXUc1/+9hY0//px33ak3Iw2NmTS++f3wb/604FkfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgr/8FAAD//+8tWW4=") 35.898210434s ago: executing program 2 (id=12829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 35.849825859s ago: executing program 45 (id=12829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3.587975639s ago: executing program 4 (id=13506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}}], 0x4, 0x200040d1) 3.300537938s ago: executing program 9 (id=13507): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000c3692000010000007a96400001000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000c1000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x52, &(0x7f00000001c0)=""/82, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0xb, 0x6, 0xb7f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000700)=[{0x0, 0x1, 0x4, 0x9}, {0x3, 0xb7, 0x5, 0xf}, {0x3, 0x5, 0x2, 0x2}, {0x0, 0x2, 0x5, 0x1}, {0x5, 0x5, 0x3, 0xa}, {0x1, 0x2, 0x5, 0x7}, {0x3, 0x4, 0xc, 0x9}], 0x10, 0x8}, 0x94) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd1, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x37, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0xd, 0x200000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r7, r6, 0x2e, 0x4608, @void}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x5, 0x3, 0x1, [0xe6, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x6, 0xd1a, 0x6, 0x1f, 0x2d, 0x5, 0x1, 0x7ff, 0x1f, 0x7c1a], 0xe}}, @common=@icmp6={{0x28}, {0x11, "428e", 0xf1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "2969e89bd29d77dcbca9e1b787828778322eba11c2a15d13961c8596125b"}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0x0, 0xff], [0xffffffff, 0xffffffff, 0xff, 0xff000000], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x6, 0x0, 0x4d}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) pwrite64(r0, &(0x7f0000000000)="8d", 0x1, 0x9) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x54, r10, 0xa01, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r11 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000cc0)={r4, &(0x7f0000000b80)="3cb2f3184250770957a72bb34c2ae33d63c4c3532c777b800ac8488ba953bffbb39387504ab089b74cc69cc8ff82e46a8b42d6e212f3affdc99c2658c67cb91732803b3c8bf9cc53fd13d436fba3327f963ac49e95bc3072f921", &(0x7f0000000c00)=""/152, 0x4}, 0x20) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000a00)="4749c2368bb8dd2c7f17323cf53a") sendfile(r11, r11, 0x0, 0x800000009) 3.263552782s ago: executing program 9 (id=13509): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300101a, &(0x7f00000005c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="584361ad18b926f6bfbeae13d092ebbfc557b9cd5c507400f36ba863fa038d93786ebb46259f21f7dedab70f7784b14897abf9543f22c7d9822fa13b1a1c67886979ccd57157d44c3649fdeee1fd84", @ANYRESOCT=r0], 0xfc, 0x2c7, &(0x7f0000000740)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x3e, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x3, 0x2, 0x5, 0x4470}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x20000084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f00000002c0)=@v3={0x3000000, [{0x80032a5, 0x81}, {0x1, 0x3}]}, 0x18, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbff, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1200000}, {}, {0x2}, {}, {}, {0x0, 0x4, 0x0, 0xffffffff, 0x3}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x6}, {0x6}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {0x536d}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xbe0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x9}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x2}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setown(r6, 0x8, 0x0) tkill(0x0, 0x13) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f00000001c0)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000180)=0x80000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.705740668s ago: executing program 4 (id=13520): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f0000000280)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4}, 0x9}], 0x1, 0x40012000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000004440)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) r6 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9, 0x0, r5}, &(0x7f0000000000)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@acl}, {@block_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x200000000080}}, {@resuid}, {@nodelalloc}, {@minixdf}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x0, 0x587, &(0x7f0000000f80)="$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") r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r10, 0x0, 0x4}, 0x18) ftruncate(r9, 0x2007ffc) r11 = syz_clone(0x2000, 0x0, 0x3, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x388, 0xfffffffffffbfffd) r12 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r12, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) 2.569512121s ago: executing program 4 (id=13523): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x14, 0x6, 0xa, @mcast2, @mcast1, 0x10, 0x7, 0xe, 0x2d4cbb87}}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x18e, &(0x7f0000000700)={[{@debug}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@data_err_abort}, {@nouid32}], [{@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot}, {@obj_user={'obj_user', 0x3d, 'staff_u'}}, {@uid_eq}, {@fowner_lt}]}, 0x3, 0x44f, &(0x7f0000001240)="$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") 2.550279193s ago: executing program 4 (id=13525): syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) getdents64(r4, &(0x7f0000000280)=""/119, 0x77) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r6}, 0x10) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a00000001010000fb7f0000cc"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x2000, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r7 = socket$pppoe(0x18, 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'ip_vti0\x00'}}, 0x1e) close(r8) 2.198000029s ago: executing program 9 (id=13527): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x72, 0x4}, @fwd={0x7}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x61]}}, &(0x7f0000000580)=""/68, 0x3b, 0x44, 0x1, 0x5}, 0x28) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r7}, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.933687986s ago: executing program 9 (id=13528): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) shutdown(r1, 0x1) 1.803347368s ago: executing program 9 (id=13530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}}], 0x4, 0x200040d1) 1.725357026s ago: executing program 4 (id=13533): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 1.576077292s ago: executing program 0 (id=13539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r1, r1, 0x0, 0x2) 1.568293002s ago: executing program 4 (id=13540): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r3, &(0x7f0000000900)=""/4113, 0x1011) 1.553249323s ago: executing program 0 (id=13541): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) shutdown(r1, 0x1) 1.429684486s ago: executing program 0 (id=13545): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) sendto$inet6(r0, &(0x7f0000000280)="b5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e24, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x8) 1.380453051s ago: executing program 0 (id=13546): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000d30000/0x1000)=nil, 0x1000, 0x2000002, 0x4000011, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) open_tree(0xffffffffffffff9c, 0x0, 0x80001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x987}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3000) msgctl$MSG_INFO(r1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x7fcd, 0x800, 0x8, 0x382}, &(0x7f0000000240), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) 1.08936657s ago: executing program 5 (id=13549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0xa02, 0xc1) sendfile(r1, r1, 0x0, 0x2) 945.105705ms ago: executing program 5 (id=13550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d8729fb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40010) 944.812995ms ago: executing program 5 (id=13551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 944.417295ms ago: executing program 9 (id=13552): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) unshare(0x2a020400) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x10000000, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x9) sendfile(r2, r3, 0x0, 0x20000023892) eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 928.327596ms ago: executing program 5 (id=13553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x44) 788.07159ms ago: executing program 5 (id=13555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[]) 723.208267ms ago: executing program 6 (id=13556): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000000)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 646.847685ms ago: executing program 5 (id=13557): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r3) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="43208a4c9ebf08a303d607"], 0x58}}, 0x0) 627.987606ms ago: executing program 6 (id=13558): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x5, 0x7ffc0001}]}) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) 548.325104ms ago: executing program 6 (id=13559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x3}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, r6, 0x301, 0x70bd28, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x40006) 507.783539ms ago: executing program 0 (id=13560): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x18) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) shutdown(r0, 0x1) 466.307563ms ago: executing program 6 (id=13561): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x18) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) shutdown(r1, 0x1) 184.593781ms ago: executing program 0 (id=13562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) fcntl$addseals(r0, 0x409, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r0, 0x15, 0x0, 0x2d, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000007c0)=[0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x49, &(0x7f0000000a40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@ifindex=r7, r0, 0x1, 0x34, r5, @void, @void, @void, @value=r8, r6}, 0x20) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xd}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0xff, 0x8, 0x8, 0x7, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x4}, @generic={0x0, 0x4, 0x7, 0xa506, 0x101}, @jmp={0x5, 0x0, 0x5, 0xb, 0xb, 0x18, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000380)='GPL\x00', 0xee, 0x45, &(0x7f00000003c0)=""/69, 0x40f00, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000004c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000540)=[{0x2, 0x5, 0x7, 0x1}, {0x0, 0x3, 0x5, 0x6}, {0x1, 0x5, 0x6, 0x7}, {0x5, 0x2, 0xa, 0xc}], 0x10, 0x80000000}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bind$rxrpc(r9, &(0x7f0000001280)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @private0, 0xfffffffc}}, 0x24) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x88) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_MARK_MASK={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x31}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffffb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x10000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 89.607211ms ago: executing program 6 (id=13563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 0s ago: executing program 6 (id=13564): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x5000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r2], 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r9, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r8}, 0x20) close(r8) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") lsm_get_self_attr(0x66, &(0x7f0000000ac0)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, &(0x7f0000000080)=0x1020, 0x0) ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0}) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'bridge_slave_1\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0xd, 0x60}, 0x0, 0xa8, 0xd8, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x5, 0x1}, {0xffffffffffffffff, 0x1, 0x2}, 0x96a2, 0x2}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x19}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kernel console output (not intermixed with test programs): 614.754865][ T4722] loop5: detected capacity change from 0 to 512 [ 614.757128][ T4717] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 614.794712][ T4717] lowmem_reserve[]: 0 0 4978 4978 [ 614.799823][ T4717] Node 0 Normal free:4011200kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16012kB inactive_anon:168kB active_file:41780kB inactive_file:80028kB unevictable:0kB writepending:1420kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:327572kB local_pcp:270208kB free_cma:0kB [ 614.815517][ T4722] EXT4-fs (loop5): 1 orphan inode deleted [ 614.834136][ T4717] lowmem_reserve[]: 0 0 0 0 [ 614.841435][ T4722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 614.844419][ T4717] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 614.862161][ T4722] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.869671][ T4717] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 614.896540][ T4717] Node 0 Normal: 1672*4kB (UE) 1155*8kB (UME) 491*16kB (UM) 672*32kB (UME) 635*64kB (UME) 663*128kB (UM) 440*256kB (UM) 217*512kB (UME) 111*1024kB (UM) 10*2048kB (UME) 850*4096kB (UM) = 4010280kB [ 614.915881][ T4717] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 614.925370][ T4717] 31063 total pagecache pages [ 614.930035][ T4717] 42 pages in swap cache [ 614.934309][ T4717] Free swap = 124828kB [ 614.938456][ T4717] Total swap = 124996kB [ 614.942697][ T4717] 2097051 pages RAM [ 614.942707][ T4717] 0 pages HighMem/MovableOnly [ 614.951359][ T4717] 81087 pages reserved [ 614.999921][ T4727] netlink: 'syz.2.12679': attribute type 46 has an invalid length. [ 614.999941][ T4727] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12679'. [ 615.015179][ T4730] bridge0: entered promiscuous mode [ 615.029161][ T4730] macvtap1: entered allmulticast mode [ 615.029179][ T4730] bridge0: entered allmulticast mode [ 615.031077][ T4730] batman_adv: batadv0: Adding interface: macvtap1 [ 615.031090][ T4730] batman_adv: batadv0: Interface activated: macvtap1 [ 615.154543][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.740007][ T4799] loop5: detected capacity change from 0 to 512 [ 616.749679][ T4799] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12704: error while reading EA inode 32 err=-116 [ 616.762488][ T4799] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.12704: error while reading EA inode 32 err=-116 [ 616.776935][ T4799] EXT4-fs (loop5): 1 orphan inode deleted [ 616.783227][ T4799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.810247][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.849891][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12707'. [ 616.864866][ T4807] team0 (unregistering): Port device team_slave_0 removed [ 616.875280][ T4807] team0 (unregistering): Port device team_slave_1 removed [ 616.884703][ T4807] team0 (unregistering): Port device dummy0 removed [ 616.901865][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12707'. [ 616.918838][ T4809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12707'. [ 617.064639][ T4825] netlink: 'syz.4.12715': attribute type 1 has an invalid length. [ 617.072600][ T4825] netlink: 'syz.4.12715': attribute type 2 has an invalid length. [ 617.505518][ T4838] loop5: detected capacity change from 0 to 1024 [ 617.524742][ T4838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 617.537079][ T4838] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.551633][ T4838] netlink: 'syz.5.12720': attribute type 29 has an invalid length. [ 617.560352][ T4838] netlink: 'syz.5.12720': attribute type 29 has an invalid length. [ 617.568938][ T4838] netlink: 500 bytes leftover after parsing attributes in process `syz.5.12720'. [ 617.584753][ T4838] net_ratelimit: 256 callbacks suppressed [ 617.584771][ T4838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.608932][ T4838] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.12720: lblock 3 mapped to illegal pblock 3 (length 3) [ 617.623487][ T4838] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 617.635952][ T4838] EXT4-fs (loop5): This should not happen!! Data will be lost [ 617.635952][ T4838] [ 617.647077][ T4838] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.12720: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 617.668416][ T4838] EXT4-fs error (device loop5) in ext4_setattr:6050: Corrupt filesystem [ 617.689578][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 617.932381][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12725'. [ 617.965048][ T4855] team0 (unregistering): Port device team_slave_0 removed [ 617.984839][ T4855] team0 (unregistering): Port device team_slave_1 removed [ 617.994200][ T4855] team0 (unregistering): Port device dummy0 removed [ 618.002135][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12725'. [ 618.027011][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12725'. [ 618.072956][ T7365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 618.206736][ T4871] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12732'. [ 618.233716][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 618.233732][ T29] audit: type=1326 audit(2000002978.024:66184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.264531][ T29] audit: type=1326 audit(2000002978.054:66185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.288558][ T29] audit: type=1326 audit(2000002978.054:66186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.309424][ T4876] netlink: 'syz.2.12734': attribute type 46 has an invalid length. [ 618.312288][ T29] audit: type=1326 audit(2000002978.054:66187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.320197][ T4876] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12734'. [ 618.384196][ T4881] netlink: 'syz.4.12735': attribute type 46 has an invalid length. [ 618.392158][ T4881] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12735'. [ 618.420760][ T4882] loop2: detected capacity change from 0 to 512 [ 618.427191][ T29] audit: type=1326 audit(2000002978.144:66188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.451110][ T29] audit: type=1326 audit(2000002978.144:66189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.452451][ T4883] loop5: detected capacity change from 0 to 512 [ 618.475141][ T29] audit: type=1326 audit(2000002978.144:66190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.504626][ T29] audit: type=1326 audit(2000002978.144:66191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.528217][ T29] audit: type=1326 audit(2000002978.144:66192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.552575][ T29] audit: type=1326 audit(2000002978.144:66193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4870 comm="syz.5.12732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 618.577703][ T4882] EXT4-fs: Ignoring removed nobh option [ 618.636356][ T4883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.659568][ T4882] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12736: corrupted inode contents [ 618.682410][ T4882] EXT4-fs (loop2): Remounting filesystem read-only [ 618.697571][ T4882] EXT4-fs (loop2): 1 truncate cleaned up [ 618.703770][ T4882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.716478][ T4882] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.742224][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.773743][ T1307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.841810][ T4905] team0 (unregistering): Port device team_slave_0 removed [ 618.851330][ T4905] team0 (unregistering): Port device team_slave_1 removed [ 618.878304][ T4918] loop5: detected capacity change from 0 to 512 [ 618.885532][ T4918] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 618.902831][ T36] syz!: Port: 1 Link DOWN [ 619.621955][ T4931] loop2: detected capacity change from 0 to 128 [ 619.923308][ T4929] SELinux: policydb magic number 0xcfec9c78 does not match expected magic number 0xf97cff8c [ 619.923439][ T4929] SELinux: failed to load policy [ 619.952173][ T4928] loop5: detected capacity change from 0 to 8192 [ 620.555725][ T4969] netlink: 'syz.2.12768': attribute type 46 has an invalid length. [ 620.925946][ T4991] loop5: detected capacity change from 0 to 128 [ 620.976911][ T4994] loop2: detected capacity change from 0 to 512 [ 620.994772][ T4994] EXT4-fs (loop2): 1 orphan inode deleted [ 621.006513][ T4994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.034856][ T4994] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.377431][ T5003] 9pnet_fd: Insufficient options for proto=fd [ 621.487753][ T5013] netlink: 'syz.0.12783': attribute type 46 has an invalid length. [ 621.873545][ T1307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.898435][ T5034] loop2: detected capacity change from 0 to 128 [ 622.536636][ T5045] netlink: 'syz.0.12796': attribute type 46 has an invalid length. [ 622.544779][ T5045] __nla_validate_parse: 12 callbacks suppressed [ 622.544794][ T5045] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12796'. [ 622.611361][ T5048] SELinux: ebitmap: truncated map [ 622.618967][ T5048] SELinux: failed to load policy [ 622.662282][ T5056] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12799'. [ 622.694337][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12801'. [ 622.704697][ T5058] netem: change failed [ 622.713757][ T5058] loop5: detected capacity change from 0 to 1024 [ 622.723042][ T5058] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.12801: Failed to acquire dquot type 0 [ 622.735507][ T5058] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 622.751951][ T5058] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12801: corrupted inode contents [ 622.764363][ T5058] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.12801: mark_inode_dirty error [ 622.776639][ T5058] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12801: corrupted inode contents [ 622.789408][ T5058] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12801: mark_inode_dirty error [ 622.801688][ T5058] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12801: corrupted inode contents [ 622.814181][ T5058] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12801: mark_inode_dirty error [ 622.826040][ T5058] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12801: corrupted inode contents [ 622.833010][ T5066] loop2: detected capacity change from 0 to 512 [ 622.838340][ T5058] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 622.853266][ T5058] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12801: corrupted inode contents [ 622.855118][ T5066] EXT4-fs: Ignoring removed nobh option [ 622.865568][ T5058] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.12801: mark_inode_dirty error [ 622.883278][ T5058] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 622.893688][ T5058] EXT4-fs (loop5): 1 truncate cleaned up [ 622.899719][ T5058] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.914074][ T5066] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.12804: corrupted inode contents [ 622.931800][ T5066] EXT4-fs (loop2): Remounting filesystem read-only [ 622.945376][ T5066] EXT4-fs (loop2): 1 truncate cleaned up [ 622.952203][ T5066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.965097][ T5066] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.965766][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.998832][ T1307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.017865][ T5072] 9pnet_fd: Insufficient options for proto=fd [ 623.049288][ T5074] usb usb1: usbfs: process 5074 (syz.5.12805) did not claim interface 63 before use [ 623.067177][ T5076] netlink: 'syz.2.12807': attribute type 46 has an invalid length. [ 623.075159][ T5076] netlink: 55 bytes leftover after parsing attributes in process `syz.2.12807'. [ 623.268918][ T5090] SELinux: ebitmap: truncated map [ 623.279876][ T5090] SELinux: failed to load policy [ 623.354797][ T29] kauditd_printk_skb: 1256 callbacks suppressed [ 623.354811][ T29] audit: type=1400 audit(2000002983.144:67444): avc: denied { ioctl } for pid=5091 comm="syz.5.12814" path="socket:[133535]" dev="sockfs" ino=133535 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 623.389818][ T29] audit: type=1400 audit(2000002983.174:67445): avc: denied { write } for pid=5083 comm="syz.2.12810" name="file0" dev="tmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 623.479783][ T5098] loop2: detected capacity change from 0 to 512 [ 623.487248][ T5098] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 623.522158][ T5098] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 623.534376][ T5098] netlink: 'syz.2.12816': attribute type 39 has an invalid length. [ 623.589111][ T5101] netlink: 'syz.2.12816': attribute type 10 has an invalid length. [ 623.648207][ T29] audit: type=1326 audit(2000002983.424:67446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.671983][ T29] audit: type=1326 audit(2000002983.434:67447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.695582][ T29] audit: type=1326 audit(2000002983.434:67448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.719173][ T29] audit: type=1326 audit(2000002983.434:67449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.742773][ T29] audit: type=1326 audit(2000002983.434:67450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.766525][ T29] audit: type=1326 audit(2000002983.434:67451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.790254][ T29] audit: type=1326 audit(2000002983.434:67452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.814467][ T29] audit: type=1326 audit(2000002983.434:67453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.12817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 623.962541][ T5119] netlink: 256 bytes leftover after parsing attributes in process `syz.5.12822'. [ 624.062465][T27753] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.074721][ T5129] loop2: detected capacity change from 0 to 1024 [ 624.075086][ T5129] EXT4-fs: Ignoring removed nobh option [ 624.075114][ T5129] EXT4-fs: Ignoring removed bh option [ 624.103609][ T5129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.142243][ T5129] loop2: detected capacity change from 1024 to 64 [ 624.159588][ T1307] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /252/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 624.159879][ T1307] EXT4-fs (loop2): Remounting filesystem read-only [ 624.189582][ T1307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.203896][ T5131] kmmpd-loop2: attempt to access beyond end of device [ 624.203896][ T5131] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 624.203965][ T5131] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 624.231351][T32483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.245954][ T5137] netlink: 'syz.6.12830': attribute type 46 has an invalid length. [ 624.254055][ T5137] netlink: 55 bytes leftover after parsing attributes in process `syz.6.12830'. [ 624.276347][T32483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.325844][T32483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.375828][T32483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.379097][ T5147] SELinux: ebitmap: truncated map [ 624.392307][ T5147] SELinux: failed to load policy [ 624.459402][T32483] bridge_slave_1: left allmulticast mode [ 624.459421][T32483] bridge_slave_1: left promiscuous mode [ 624.459545][T32483] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.466496][T32483] bridge_slave_0: left allmulticast mode [ 624.484888][T32483] bridge_slave_0: left promiscuous mode [ 624.485010][T32483] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.714491][T32483] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 624.736167][T32483] bond_slave_0: left promiscuous mode [ 624.760402][T32483] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 624.771520][T32483] bond_slave_1: left promiscuous mode [ 624.777808][T32483] $Hÿ (unregistering): Released all slaves [ 624.796451][ T5142] lo speed is unknown, defaulting to 1000 [ 624.826298][T32483] tipc: Disabling bearer [ 624.831637][T32483] tipc: Disabling bearer [ 624.836724][T32483] tipc: Left network mode [ 624.871228][ T5173] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12843'. [ 624.920254][ T5179] netlink: 108 bytes leftover after parsing attributes in process `syz.5.12846'. [ 624.946941][ T5179] netlink: '+}[@': attribute type 6 has an invalid length. [ 625.017202][T32483] hsr_slave_0: left promiscuous mode [ 625.032040][T32483] hsr_slave_1: left promiscuous mode [ 625.039287][T32483] veth1_macvtap: left promiscuous mode [ 625.044868][T32483] veth0_macvtap: left promiscuous mode [ 625.090936][T32482] smc: removing ib device syz! [ 625.119525][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12848'. [ 625.128688][ T5185] tipc: Enabling of bearer rejected, media not registered [ 625.186194][ T5191] loop5: detected capacity change from 0 to 128 [ 625.213004][ T5191] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 625.227170][ T5142] chnl_net:caif_netlink_parms(): no params data found [ 625.244811][ T5191] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 625.252730][ T5191] FAT-fs (loop5): Filesystem has been set read-only [ 625.390773][ T5191] syz.5.12849: attempt to access beyond end of device [ 625.390773][ T5191] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 625.405611][ T5191] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 625.413526][ T5191] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 625.431831][ T5191] syz.5.12849: attempt to access beyond end of device [ 625.431831][ T5191] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 625.517921][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12855'. [ 625.528370][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.535489][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.543075][ T5142] bridge_slave_0: entered allmulticast mode [ 625.549754][ T5142] bridge_slave_0: entered promiscuous mode [ 625.557421][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.564575][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.572475][ T5142] bridge_slave_1: entered allmulticast mode [ 625.579190][ T5142] bridge_slave_1: entered promiscuous mode [ 625.603503][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.607924][ T5216] loop6: detected capacity change from 0 to 512 [ 625.619630][ T5216] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 625.633269][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.658354][ T5142] team0: Port device team_slave_0 added [ 625.667698][ T5142] team0: Port device team_slave_1 added [ 625.689282][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.696292][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.722353][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.734291][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.739633][ T5220] loop6: detected capacity change from 0 to 512 [ 625.741247][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.752599][ T5220] EXT4-fs: Ignoring removed nobh option [ 625.773692][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.805932][ T5220] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #3: comm syz.6.12861: corrupted inode contents [ 625.820389][ T5142] hsr_slave_0: entered promiscuous mode [ 625.826615][ T5142] hsr_slave_1: entered promiscuous mode [ 625.832648][ T5220] EXT4-fs (loop6): Remounting filesystem read-only [ 625.839724][ T5220] EXT4-fs (loop6): 1 truncate cleaned up [ 625.846160][ T5220] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.868016][ T5220] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.910235][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.130833][ T5243] syzkaller1: entered promiscuous mode [ 626.136384][ T5243] syzkaller1: entered allmulticast mode [ 626.170087][ T5142] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 626.179830][ T5142] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 626.189217][ T5142] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 626.198291][ T5142] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 626.236249][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.243451][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.250943][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.258042][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.289261][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.300027][T32482] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.328710][T32482] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.347299][ T5256] loop5: detected capacity change from 0 to 512 [ 626.354753][ T5256] EXT4-fs: Ignoring removed nobh option [ 626.362918][ T5142] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.373126][T32482] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.373786][ T5256] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.12871: corrupted inode contents [ 626.380384][T32482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.412338][ T5256] EXT4-fs (loop5): Remounting filesystem read-only [ 626.421192][ T5256] EXT4-fs (loop5): 1 truncate cleaned up [ 626.433752][T32482] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.440901][T32482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.450542][ T5256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.483388][ T5256] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.537839][ T5271] netlink: 'syz.4.12875': attribute type 46 has an invalid length. [ 626.585392][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.609147][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.805294][ T5142] veth0_vlan: entered promiscuous mode [ 626.815583][ T5142] veth1_vlan: entered promiscuous mode [ 626.836279][ T5142] veth0_macvtap: entered promiscuous mode [ 626.844658][ T5142] veth1_macvtap: entered promiscuous mode [ 626.856734][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.890916][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.902982][T32483] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.912120][T32483] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.935669][T32483] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.944629][ T5306] netem: change failed [ 626.949089][T32483] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.962388][ T5306] loop5: detected capacity change from 0 to 1024 [ 626.983016][ T5306] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.12883: Failed to acquire dquot type 0 [ 626.988141][ T5315] netlink: 'syz.4.12886': attribute type 46 has an invalid length. [ 626.998287][ T5306] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 627.024226][ T5306] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12883: corrupted inode contents [ 627.041542][ T5306] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.12883: mark_inode_dirty error [ 627.060710][ T5306] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12883: corrupted inode contents [ 627.085713][ T5306] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12883: mark_inode_dirty error [ 627.086225][ T5324] loop9: detected capacity change from 0 to 128 [ 627.103777][ T5306] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12883: corrupted inode contents [ 627.126123][ T5306] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12883: mark_inode_dirty error [ 627.138414][ T5306] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12883: corrupted inode contents [ 627.152956][ T5306] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 627.162055][ T5306] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12883: corrupted inode contents [ 627.175044][ T5306] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.12883: mark_inode_dirty error [ 627.191425][ T5306] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 627.201244][ T5306] EXT4-fs (loop5): 1 truncate cleaned up [ 627.208493][ T5306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.238892][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.289308][ T5345] loop5: detected capacity change from 0 to 4096 [ 627.292410][ T5349] netlink: 'syz.0.12900': attribute type 46 has an invalid length. [ 627.297953][ T5345] EXT4-fs: Ignoring removed nomblk_io_submit option [ 627.316902][ T5345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.338284][ T5352] loop6: detected capacity change from 0 to 1024 [ 627.347592][ T5352] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.12901: Failed to acquire dquot type 0 [ 627.359723][ T5352] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 627.374821][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.12901: corrupted inode contents [ 627.387962][ T5352] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.12901: mark_inode_dirty error [ 627.401087][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.12901: corrupted inode contents [ 627.403622][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.414578][ T5352] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.12901: mark_inode_dirty error [ 627.434581][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.12901: corrupted inode contents [ 627.447039][ T5352] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.12901: mark_inode_dirty error [ 627.459343][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.12901: corrupted inode contents [ 627.471849][ T5352] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 627.480848][ T5352] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.12901: corrupted inode contents [ 627.494246][ T5352] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.12901: mark_inode_dirty error [ 627.507290][ T5352] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 627.516936][ T5352] EXT4-fs (loop6): 1 truncate cleaned up [ 627.523912][ T5352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.557409][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.607009][ T5370] __nla_validate_parse: 9 callbacks suppressed [ 627.607061][ T5370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12908'. [ 627.623729][ T5370] netem: change failed [ 627.660121][ T5373] loop6: detected capacity change from 0 to 512 [ 627.667876][ T5373] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 627.707045][ T5379] netlink: 'syz.5.12912': attribute type 46 has an invalid length. [ 627.715071][ T5379] netlink: 55 bytes leftover after parsing attributes in process `syz.5.12912'. [ 627.954896][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12914'. [ 628.089778][ T5404] tmpfs: Unknown parameter 'quota' [ 628.125971][ T5409] loop5: detected capacity change from 0 to 512 [ 628.132987][ T5409] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 628.285669][ T5420] FAULT_INJECTION: forcing a failure. [ 628.285669][ T5420] name failslab, interval 1, probability 0, space 0, times 0 [ 628.298362][ T5420] CPU: 1 UID: 0 PID: 5420 Comm: syz.9.12926 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 628.298394][ T5420] Tainted: [W]=WARN [ 628.298401][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 628.298503][ T5420] Call Trace: [ 628.298568][ T5420] [ 628.298576][ T5420] __dump_stack+0x1d/0x30 [ 628.298596][ T5420] dump_stack_lvl+0xe8/0x140 [ 628.298638][ T5420] dump_stack+0x15/0x1b [ 628.298653][ T5420] should_fail_ex+0x265/0x280 [ 628.298787][ T5420] should_failslab+0x8c/0xb0 [ 628.298810][ T5420] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 628.298834][ T5420] ? __alloc_skb+0x101/0x320 [ 628.298925][ T5420] __alloc_skb+0x101/0x320 [ 628.298949][ T5420] alloc_skb_with_frags+0x7d/0x470 [ 628.298974][ T5420] ? kernel_text_address+0x94/0xb0 [ 628.299027][ T5420] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.299056][ T5420] ? __kernel_text_address+0xd/0x40 [ 628.299139][ T5420] sock_alloc_send_pskb+0x430/0x4e0 [ 628.299160][ T5420] __ip_append_data+0x18bd/0x2440 [ 628.299225][ T5420] ? __sys_sendmmsg+0x178/0x300 [ 628.299241][ T5420] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 628.299304][ T5420] ? ipv4_mtu+0x210/0x230 [ 628.299325][ T5420] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 628.299383][ T5420] ip_make_skb+0x137/0x2c0 [ 628.299407][ T5420] udp_sendmsg+0x1013/0x13c0 [ 628.299431][ T5420] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 628.299458][ T5420] ? __pfx_udp_sendmsg+0x10/0x10 [ 628.299577][ T5420] inet_sendmsg+0xac/0xd0 [ 628.299596][ T5420] __sock_sendmsg+0x102/0x180 [ 628.299691][ T5420] ____sys_sendmsg+0x345/0x4e0 [ 628.299767][ T5420] ___sys_sendmsg+0x17b/0x1d0 [ 628.299822][ T5420] __sys_sendmmsg+0x178/0x300 [ 628.299846][ T5420] __x64_sys_sendmmsg+0x57/0x70 [ 628.299862][ T5420] x64_sys_call+0x1c4a/0x3000 [ 628.299881][ T5420] do_syscall_64+0xd2/0x200 [ 628.299898][ T5420] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 628.299989][ T5420] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 628.300015][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.300033][ T5420] RIP: 0033:0x7f11d6d9f6c9 [ 628.300097][ T5420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.300112][ T5420] RSP: 002b:00007f11d57ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 628.300211][ T5420] RAX: ffffffffffffffda RBX: 00007f11d6ff5fa0 RCX: 00007f11d6d9f6c9 [ 628.300223][ T5420] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 628.300235][ T5420] RBP: 00007f11d57ff090 R08: 0000000000000000 R09: 0000000000000000 [ 628.300245][ T5420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.300256][ T5420] R13: 00007f11d6ff6038 R14: 00007f11d6ff5fa0 R15: 00007fff76991b98 [ 628.300355][ T5420] [ 628.456471][ T5429] loop5: detected capacity change from 0 to 764 [ 628.531632][ T4919] IPVS: starting estimator thread 0... [ 628.536587][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 628.536601][ T29] audit: type=1326 audit(2000002988.305:68129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.0.12927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 628.612715][ T29] audit: type=1326 audit(2000002988.305:68130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.0.12927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 628.613573][ T5429] iso9660: Unknown parameter 'nojoiet' [ 628.642047][ T5433] IPVS: using max 2592 ests per chain, 129600 per kthread [ 628.686758][ T5438] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12930'. [ 628.715753][ T29] audit: type=1400 audit(2000002988.505:68131): avc: denied { mounton } for pid=5439 comm="syz.0.12932" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 628.758593][ T29] audit: type=1400 audit(2000002988.525:68132): avc: denied { watch watch_reads } for pid=5441 comm="syz.9.12933" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 628.782480][ T29] audit: type=1400 audit(2000002988.535:68133): avc: denied { create } for pid=5439 comm="syz.0.12932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 628.802146][ T29] audit: type=1400 audit(2000002988.545:68134): avc: denied { unmount } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 628.822012][ T29] audit: type=1400 audit(2000002988.545:68135): avc: denied { unmount } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 628.844729][ T5444] loop5: detected capacity change from 0 to 512 [ 628.851460][ T5444] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 628.855086][ T5447] 9pnet_fd: Insufficient options for proto=fd [ 628.881961][ T29] audit: type=1400 audit(2000002988.635:68136): avc: denied { create } for pid=5446 comm="syz.0.12935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 628.901797][ T29] audit: type=1400 audit(2000002988.635:68137): avc: denied { read write } for pid=5446 comm="syz.0.12935" dev="sockfs" ino=135471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 628.971038][ T5459] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 628.996249][ T5460] loop5: detected capacity change from 0 to 1024 [ 629.005211][ T5460] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 629.014422][ T5460] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.12939: Failed to acquire dquot type 0 [ 629.056683][ T5460] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 629.071954][ T5460] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12939: corrupted inode contents [ 629.085164][ T5460] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.12939: mark_inode_dirty error [ 629.097975][ T5460] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12939: corrupted inode contents [ 629.125436][ T5460] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12939: mark_inode_dirty error [ 629.138818][ T5460] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12939: corrupted inode contents [ 629.157982][ T5460] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.12939: mark_inode_dirty error [ 629.176371][ T5460] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12939: corrupted inode contents [ 629.204415][ T5460] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 629.214309][ T5460] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.12939: corrupted inode contents [ 629.231692][ T5460] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.12939: mark_inode_dirty error [ 629.271892][ T5460] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 629.280943][ T5500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12955'. [ 629.287242][ T5460] EXT4-fs (loop5): 1 truncate cleaned up [ 629.307812][ T5460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.351220][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.366477][ T5509] loop6: detected capacity change from 0 to 512 [ 629.379871][ T5509] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 629.396470][ T4919] IPVS: starting estimator thread 0... [ 629.406827][ T5512] 9pnet_virtio: no channels available for device [ 629.429422][ T5514] loop5: detected capacity change from 0 to 4096 [ 629.436283][ T5518] loop6: detected capacity change from 0 to 128 [ 629.445872][ T5514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 629.467510][ T5514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.491539][ T5516] IPVS: using max 2832 ests per chain, 141600 per kthread [ 629.574846][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12970'. [ 629.584011][ T5534] netlink: 'syz.0.12970': attribute type 5 has an invalid length. [ 629.591937][ T5534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12970'. [ 629.604833][ T5534] geneve0: entered promiscuous mode [ 629.610057][ T5534] geneve0: entered allmulticast mode [ 629.618662][T32485] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 629.627735][T32485] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 629.636015][T32485] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 629.644333][T32485] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 629.653612][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.687495][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12972'. [ 629.696616][ T5539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 629.730269][ T5540] lo speed is unknown, defaulting to 1000 [ 630.340471][ T5542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12972'. [ 630.351073][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12972'. [ 630.408310][ T5547] loop9: detected capacity change from 0 to 512 [ 630.419914][ T5547] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 630.493967][ T5549] netlink: 'syz.0.12975': attribute type 39 has an invalid length. [ 630.542145][ T5549] netlink: 'syz.0.12975': attribute type 10 has an invalid length. [ 630.759085][ T5568] loop9: detected capacity change from 0 to 512 [ 630.818054][ T5570] random: crng reseeded on system resumption [ 631.526264][ T5587] netem: change failed [ 631.590091][ T5589] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20000 [ 631.717926][ T5568] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 631.751488][ T5568] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 631.764363][ T5568] netlink: 'syz.9.12982': attribute type 39 has an invalid length. [ 631.892703][ T5610] netlink: 'syz.9.12982': attribute type 10 has an invalid length. [ 631.928929][ T5609] loop5: detected capacity change from 0 to 4096 [ 631.939344][ T5610] team0: Port device dummy0 added [ 631.953704][ T5609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 631.968217][ T5612] netem: change failed [ 632.014109][ T5609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.080097][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.112145][ T5624] loop5: detected capacity change from 0 to 512 [ 632.118999][ T5624] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 632.178310][ T5624] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 632.199296][ T5624] netlink: 'syz.5.13002': attribute type 39 has an invalid length. [ 632.208099][ T5624] netlink: 'syz.5.13002': attribute type 10 has an invalid length. [ 632.257773][ T5644] 9pnet_fd: Insufficient options for proto=fd [ 632.317558][ T5652] FAULT_INJECTION: forcing a failure. [ 632.317558][ T5652] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.330988][ T5652] CPU: 0 UID: 0 PID: 5652 Comm: syz.0.13014 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 632.331101][ T5652] Tainted: [W]=WARN [ 632.331112][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.331125][ T5652] Call Trace: [ 632.331132][ T5652] [ 632.331140][ T5652] __dump_stack+0x1d/0x30 [ 632.331228][ T5652] dump_stack_lvl+0xe8/0x140 [ 632.331249][ T5652] dump_stack+0x15/0x1b [ 632.331269][ T5652] should_fail_ex+0x265/0x280 [ 632.331303][ T5652] should_fail_alloc_page+0xf2/0x100 [ 632.331356][ T5652] __alloc_frozen_pages_noprof+0xff/0x360 [ 632.331393][ T5652] alloc_pages_mpol+0xb3/0x260 [ 632.331443][ T5652] folio_alloc_mpol_noprof+0x39/0x80 [ 632.331466][ T5652] shmem_get_folio_gfp+0x3cf/0xd60 [ 632.331501][ T5652] ? simple_xattr_get+0xb9/0x120 [ 632.331590][ T5652] shmem_write_begin+0xa8/0x190 [ 632.331612][ T5652] generic_perform_write+0x184/0x490 [ 632.331636][ T5652] shmem_file_write_iter+0xc5/0xf0 [ 632.331692][ T5652] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 632.331729][ T5652] vfs_write+0x52a/0x960 [ 632.331756][ T5652] __x64_sys_pwrite64+0xfd/0x150 [ 632.331781][ T5652] x64_sys_call+0xc4d/0x3000 [ 632.331841][ T5652] do_syscall_64+0xd2/0x200 [ 632.331864][ T5652] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 632.331890][ T5652] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 632.331981][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.332007][ T5652] RIP: 0033:0x7fb899a7f6c9 [ 632.332077][ T5652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.332096][ T5652] RSP: 002b:00007fb8984e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 632.332158][ T5652] RAX: ffffffffffffffda RBX: 00007fb899cd5fa0 RCX: 00007fb899a7f6c9 [ 632.332170][ T5652] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006 [ 632.332181][ T5652] RBP: 00007fb8984e7090 R08: 0000000000000000 R09: 0000000000000000 [ 632.332193][ T5652] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 632.332207][ T5652] R13: 00007fb899cd6038 R14: 00007fb899cd5fa0 R15: 00007ffd0e04e548 [ 632.332227][ T5652] [ 632.550373][ T5648] loop5: detected capacity change from 0 to 4096 [ 632.558202][ T5648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 632.572250][ T5648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.601024][ T5659] FAULT_INJECTION: forcing a failure. [ 632.601024][ T5659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 632.614382][ T5659] CPU: 0 UID: 0 PID: 5659 Comm: syz.0.13017 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 632.614418][ T5659] Tainted: [W]=WARN [ 632.614424][ T5659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.614435][ T5659] Call Trace: [ 632.614441][ T5659] [ 632.614448][ T5659] __dump_stack+0x1d/0x30 [ 632.614471][ T5659] dump_stack_lvl+0xe8/0x140 [ 632.614501][ T5659] dump_stack+0x15/0x1b [ 632.614516][ T5659] should_fail_ex+0x265/0x280 [ 632.614561][ T5659] should_fail_alloc_page+0xf2/0x100 [ 632.614677][ T5659] __alloc_frozen_pages_noprof+0xff/0x360 [ 632.614713][ T5659] alloc_pages_mpol+0xb3/0x260 [ 632.614734][ T5659] vma_alloc_folio_noprof+0x1aa/0x300 [ 632.614805][ T5659] do_wp_page+0xf60/0x2510 [ 632.614827][ T5659] ? __rcu_read_lock+0x37/0x50 [ 632.614855][ T5659] handle_mm_fault+0x77d/0x2be0 [ 632.614876][ T5659] ? __rcu_read_unlock+0x4f/0x70 [ 632.614925][ T5659] ? mt_find+0x21b/0x330 [ 632.614957][ T5659] do_user_addr_fault+0x3fe/0x1080 [ 632.614985][ T5659] exc_page_fault+0x62/0xa0 [ 632.615094][ T5659] asm_exc_page_fault+0x26/0x30 [ 632.615115][ T5659] RIP: 0010:__put_user_4+0xd/0x20 [ 632.615141][ T5659] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 632.615160][ T5659] RSP: 0018:ffffc90003c8fd80 EFLAGS: 00050202 [ 632.615177][ T5659] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 632.615191][ T5659] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 632.615205][ T5659] RBP: 0000000000040000 R08: 0001c900024bd047 R09: 0000000000000000 [ 632.615218][ T5659] R10: ffffc90003c8faf8 R11: 0001c90003c8faf8 R12: 0000000000000000 [ 632.615290][ T5659] R13: 0000200000007fc0 R14: 0000200000007fc0 R15: 00000000000003ff [ 632.615309][ T5659] __sys_sendmmsg+0x19b/0x300 [ 632.615341][ T5659] __x64_sys_sendmmsg+0x57/0x70 [ 632.615362][ T5659] x64_sys_call+0x1c4a/0x3000 [ 632.615416][ T5659] do_syscall_64+0xd2/0x200 [ 632.615438][ T5659] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 632.615467][ T5659] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 632.615571][ T5659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.615594][ T5659] RIP: 0033:0x7fb899a7f6c9 [ 632.615609][ T5659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.615706][ T5659] RSP: 002b:00007fb8984e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 632.615727][ T5659] RAX: ffffffffffffffda RBX: 00007fb899cd5fa0 RCX: 00007fb899a7f6c9 [ 632.615740][ T5659] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 632.615753][ T5659] RBP: 00007fb8984e7090 R08: 0000000000000000 R09: 0000000000000000 [ 632.615766][ T5659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.615780][ T5659] R13: 00007fb899cd6038 R14: 00007fb899cd5fa0 R15: 00007ffd0e04e548 [ 632.615799][ T5659] [ 632.924019][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.941617][ T5666] 9pnet_fd: Insufficient options for proto=fd [ 633.040738][ T5690] __nla_validate_parse: 14 callbacks suppressed [ 633.040755][ T5690] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13030'. [ 633.051801][ T5687] ipip0: entered promiscuous mode [ 633.121487][ T5700] loop5: detected capacity change from 0 to 4096 [ 633.128925][ T5700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 633.145140][ T5700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.222119][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.239615][ T5723] x_tables: duplicate underflow at hook 3 [ 633.303243][ T5730] IPv6: Can't replace route, no match found [ 633.536897][ T5736] loop6: detected capacity change from 0 to 8192 [ 633.611399][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 633.611413][ T29] audit: type=1400 audit(2000002993.396:68589): avc: denied { mount } for pid=5735 comm="syz.6.13046" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 633.691040][ T5736] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 633.691082][ T5736] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 633.691161][ T5736] vhci_hcd vhci_hcd.0: Device attached [ 633.698844][ T5737] vhci_hcd: connection closed [ 633.707244][T32480] vhci_hcd: stop threads [ 633.707255][T32480] vhci_hcd: release socket [ 633.707301][T32480] vhci_hcd: disconnect device [ 634.019460][ T5743] x_tables: duplicate underflow at hook 3 [ 634.027667][ T36] hid_parser_main: 16 callbacks suppressed [ 634.027686][ T36] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 634.027761][ T36] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 634.027799][ T36] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 634.028327][ T29] audit: type=1400 audit(2000002993.816:68590): avc: denied { read write } for pid=5742 comm="syz.9.13048" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 634.081034][ T29] audit: type=1400 audit(2000002993.816:68591): avc: denied { open } for pid=5742 comm="syz.9.13048" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 634.081259][ T36] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 634.161997][ T5744] IPv6: Can't replace route, no match found [ 634.163082][ T5744] loop9: detected capacity change from 0 to 128 [ 634.177433][ T5744] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 634.177608][ T5744] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 634.192522][ T29] audit: type=1400 audit(2000002993.966:68592): avc: denied { add_name } for pid=5742 comm="syz.9.13048" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 634.192555][ T29] audit: type=1400 audit(2000002993.966:68593): avc: denied { create } for pid=5742 comm="syz.9.13048" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 634.192648][ T29] audit: type=1400 audit(2000002993.966:68594): avc: denied { read write open } for pid=5742 comm="syz.9.13048" path="/19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 634.248882][ T29] audit: type=1400 audit(2000002994.036:68595): avc: denied { cpu } for pid=5746 comm="syz.4.13049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 634.444364][ T5757] vhci_hcd: invalid port number 224 [ 634.453385][ T29] audit: type=1400 audit(2000002994.206:68596): avc: denied { write } for pid=5756 comm="syz.0.13052" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 634.498790][ T29] audit: type=1400 audit(2000002994.286:68597): avc: denied { write } for pid=5752 comm="syz.6.13051" name="anycast6" dev="proc" ino=4026532808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 634.522482][T27753] Bluetooth: hci0: sending frame failed (-49) [ 634.528937][ T7365] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 634.532508][ T5764] netlink: 104 bytes leftover after parsing attributes in process `syz.5.13053'. [ 634.554847][ T29] audit: type=1400 audit(2000002994.346:68598): avc: denied { listen } for pid=5762 comm="syz.6.13054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 634.555496][ T5765] netlink: 'syz.6.13054': attribute type 1 has an invalid length. [ 634.595787][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13054'. [ 634.605145][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13054'. [ 634.608762][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13056'. [ 634.672009][ T5776] loop5: detected capacity change from 0 to 1024 [ 634.682191][ T5776] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.13059: Failed to acquire dquot type 0 [ 634.694911][ T5776] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 634.719541][ T5776] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13059: corrupted inode contents [ 634.732573][ T5776] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.13059: mark_inode_dirty error [ 634.744934][ T5776] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13059: corrupted inode contents [ 634.760243][ T5776] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13059: mark_inode_dirty error [ 634.775462][ T5776] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13059: corrupted inode contents [ 634.789409][ T5772] block device autoloading is deprecated and will be removed. [ 634.799141][ T5772] FAULT_INJECTION: forcing a failure. [ 634.799141][ T5772] name failslab, interval 1, probability 0, space 0, times 0 [ 634.811868][ T5772] CPU: 0 UID: 0 PID: 5772 Comm: syz.0.13055 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 634.811905][ T5772] Tainted: [W]=WARN [ 634.811913][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.811927][ T5772] Call Trace: [ 634.811935][ T5772] [ 634.811943][ T5772] __dump_stack+0x1d/0x30 [ 634.811965][ T5772] dump_stack_lvl+0xe8/0x140 [ 634.811996][ T5772] dump_stack+0x15/0x1b [ 634.812051][ T5772] should_fail_ex+0x265/0x280 [ 634.812086][ T5772] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 634.812111][ T5772] should_failslab+0x8c/0xb0 [ 634.812142][ T5772] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 634.812242][ T5772] ? debugfs_alloc_inode+0x34/0x40 [ 634.812265][ T5772] ? lookup_noperm+0xc9/0x180 [ 634.812287][ T5772] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 634.812359][ T5772] debugfs_alloc_inode+0x34/0x40 [ 634.812382][ T5772] alloc_inode+0x40/0x170 [ 634.812444][ T5772] new_inode+0x1d/0xe0 [ 634.812467][ T5772] __debugfs_create_file+0x109/0x330 [ 634.812491][ T5772] debugfs_create_file_full+0x3f/0x60 [ 634.812514][ T5772] do_blk_trace_setup+0x2e9/0x4d0 [ 634.812539][ T5772] blk_trace_setup+0xa5/0x140 [ 634.812634][ T5772] ? __pfx_blkdev_ioctl+0x10/0x10 [ 634.812652][ T5772] blk_trace_ioctl+0xf5/0x300 [ 634.812740][ T5772] ? do_vfs_ioctl+0x866/0xe10 [ 634.812764][ T5772] ? selinux_file_ioctl+0x308/0x3a0 [ 634.812818][ T5772] ? __pfx_blkdev_ioctl+0x10/0x10 [ 634.812835][ T5772] blkdev_ioctl+0x25f/0x440 [ 634.812854][ T5772] ? __pfx_blkdev_ioctl+0x10/0x10 [ 634.812888][ T5772] __se_sys_ioctl+0xce/0x140 [ 634.812911][ T5772] __x64_sys_ioctl+0x43/0x50 [ 634.812932][ T5772] x64_sys_call+0x1816/0x3000 [ 634.812953][ T5772] do_syscall_64+0xd2/0x200 [ 634.812972][ T5772] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 634.813035][ T5772] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 634.813065][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.813129][ T5772] RIP: 0033:0x7fb899a7f6c9 [ 634.813144][ T5772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.813163][ T5772] RSP: 002b:00007fb8984c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.813184][ T5772] RAX: ffffffffffffffda RBX: 00007fb899cd6090 RCX: 00007fb899a7f6c9 [ 634.813199][ T5772] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000009 [ 634.813212][ T5772] RBP: 00007fb8984c6090 R08: 0000000000000000 R09: 0000000000000000 [ 634.813240][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.813254][ T5772] R13: 00007fb899cd6128 R14: 00007fb899cd6090 R15: 00007ffd0e04e548 [ 634.813311][ T5772] [ 634.813362][ T5772] debugfs: out of free dentries, can not create file 'msg' [ 634.931205][ T5776] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13059: mark_inode_dirty error [ 635.106961][ T5776] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13059: corrupted inode contents [ 635.119636][ T5142] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.130087][ T5776] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 635.139887][ T5776] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13059: corrupted inode contents [ 635.152594][ T5776] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.13059: mark_inode_dirty error [ 635.170703][ T5776] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 635.184996][ T5784] loop9: detected capacity change from 0 to 1024 [ 635.194130][ T5776] EXT4-fs (loop5): 1 truncate cleaned up [ 635.217291][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13061'. [ 635.223955][ T5784] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.13060: Failed to acquire dquot type 0 [ 635.227025][ T5776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.241403][ T5784] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 635.253916][ T5786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13061'. [ 635.264666][ T5784] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13060: corrupted inode contents [ 635.292142][ T5784] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.13060: mark_inode_dirty error [ 635.303826][ T5784] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13060: corrupted inode contents [ 635.316614][ T5784] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13060: mark_inode_dirty error [ 635.330923][ T5784] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13060: corrupted inode contents [ 635.349922][ T5784] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13060: mark_inode_dirty error [ 635.350689][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.371319][ T5784] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13060: corrupted inode contents [ 635.387465][ T5784] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 635.417422][ T5784] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13060: corrupted inode contents [ 635.433389][ T5784] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.13060: mark_inode_dirty error [ 635.445227][ T5784] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 635.455227][ T5784] EXT4-fs (loop9): 1 truncate cleaned up [ 635.461784][ T5784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.521245][ T5794] FAULT_INJECTION: forcing a failure. [ 635.521245][ T5794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.534354][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz.0.13064 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 635.534459][ T5794] Tainted: [W]=WARN [ 635.534467][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 635.534480][ T5794] Call Trace: [ 635.534487][ T5794] [ 635.534530][ T5794] __dump_stack+0x1d/0x30 [ 635.534555][ T5794] dump_stack_lvl+0xe8/0x140 [ 635.534578][ T5794] dump_stack+0x15/0x1b [ 635.534597][ T5794] should_fail_ex+0x265/0x280 [ 635.534715][ T5794] should_fail+0xb/0x20 [ 635.534745][ T5794] should_fail_usercopy+0x1a/0x20 [ 635.534778][ T5794] _copy_to_user+0x20/0xa0 [ 635.534803][ T5794] rng_dev_read+0x3ef/0x740 [ 635.534835][ T5794] ? __pfx_rng_dev_read+0x10/0x10 [ 635.534860][ T5794] vfs_readv+0x3fb/0x690 [ 635.534962][ T5794] __x64_sys_preadv+0xfd/0x1c0 [ 635.534993][ T5794] x64_sys_call+0x282e/0x3000 [ 635.535072][ T5794] do_syscall_64+0xd2/0x200 [ 635.535120][ T5794] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 635.535151][ T5794] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 635.535184][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.535242][ T5794] RIP: 0033:0x7fb899a7f6c9 [ 635.535280][ T5794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.535299][ T5794] RSP: 002b:00007fb8984e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 635.535321][ T5794] RAX: ffffffffffffffda RBX: 00007fb899cd5fa0 RCX: 00007fb899a7f6c9 [ 635.535353][ T5794] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 635.535364][ T5794] RBP: 00007fb8984e7090 R08: 0000000000000000 R09: 0000000000000000 [ 635.535375][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.535387][ T5794] R13: 00007fb899cd6038 R14: 00007fb899cd5fa0 R15: 00007ffd0e04e548 [ 635.535403][ T5794] [ 635.540063][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.823438][ T5802] loop9: detected capacity change from 0 to 4096 [ 635.830644][ T5802] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.846126][ T5802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.991886][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.038970][ T5819] loop9: detected capacity change from 0 to 1024 [ 636.045849][ T5819] EXT4-fs: Ignoring removed nobh option [ 636.051484][ T5819] EXT4-fs: Ignoring removed bh option [ 636.062262][ T5819] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.101343][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.015130][ T5872] loop9: detected capacity change from 0 to 1024 [ 637.031210][ T5872] EXT4-fs: Ignoring removed nobh option [ 637.040662][ T5872] EXT4-fs: Ignoring removed bh option [ 637.063149][ T5872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.094071][ T5869] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 637.135837][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13099'. [ 637.156239][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.202319][ T5886] sctp: [Deprecated]: syz.0.13100 (pid 5886) Use of int in max_burst socket option. [ 637.202319][ T5886] Use struct sctp_assoc_value instead [ 637.241034][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13104'. [ 637.243689][ T5891] netlink: 256 bytes leftover after parsing attributes in process `syz.6.13102'. [ 637.250333][ T5890] netem: change failed [ 637.271960][ T5890] loop9: detected capacity change from 0 to 1024 [ 637.280580][ T5890] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.13104: Failed to acquire dquot type 0 [ 637.292666][ T5890] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 637.307702][ T5890] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13104: corrupted inode contents [ 637.321795][ T5890] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.13104: mark_inode_dirty error [ 637.333603][ T5890] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13104: corrupted inode contents [ 637.346119][ T5890] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13104: mark_inode_dirty error [ 637.357738][ T5890] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13104: corrupted inode contents [ 637.370011][ T5890] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13104: mark_inode_dirty error [ 637.381902][ T5890] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13104: corrupted inode contents [ 637.394360][ T5890] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 637.403373][ T5890] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13104: corrupted inode contents [ 637.415536][ T5890] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.13104: mark_inode_dirty error [ 637.420752][T27753] Bluetooth: hci0: command 0x1003 tx timeout [ 637.427034][ T7365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 637.440356][ T5890] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 637.449681][ T5890] EXT4-fs (loop9): 1 truncate cleaned up [ 637.456519][ T5890] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.481828][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.020675][T32482] Bluetooth: hci0: Frame reassembly failed (-84) [ 639.032550][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 639.032566][ T29] audit: type=1326 audit(2000005576.819:68753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.074589][ T29] audit: type=1400 audit(2000005576.829:68754): avc: denied { bind } for pid=5927 comm="syz.4.13115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 639.094329][ T29] audit: type=1326 audit(2000005576.829:68755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.117913][ T29] audit: type=1326 audit(2000005576.829:68756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.141588][ T29] audit: type=1326 audit(2000005576.839:68757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.165324][ T29] audit: type=1326 audit(2000005576.839:68758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.189235][ T29] audit: type=1326 audit(2000005576.839:68759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.212939][ T29] audit: type=1326 audit(2000005576.839:68760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.236773][ T29] audit: type=1326 audit(2000005576.839:68761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.260419][ T29] audit: type=1326 audit(2000005576.839:68762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5937 comm="syz.5.13120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 639.634274][ T5962] __nla_validate_parse: 1 callbacks suppressed [ 639.634298][ T5962] netlink: 168 bytes leftover after parsing attributes in process `syz.4.13129'. [ 640.037140][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13138'. [ 640.099997][ T5988] loop5: detected capacity change from 0 to 512 [ 640.107009][ T5988] EXT4-fs: Ignoring removed nobh option [ 640.116382][ T5991] loop6: detected capacity change from 0 to 512 [ 640.123351][ T5991] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 640.133369][ T5988] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.13140: corrupted inode contents [ 640.145870][ T5988] EXT4-fs (loop5): Remounting filesystem read-only [ 640.157351][ T5988] EXT4-fs (loop5): 1 truncate cleaned up [ 640.164382][ T5988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.177021][ T5988] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.206983][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13147'. [ 640.216329][ T6003] netem: change failed [ 640.216349][ T6001] loop6: detected capacity change from 0 to 4096 [ 640.227935][ T6001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 640.253470][ T6001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.299294][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.367593][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.394179][ T6016] netlink: 'syz.0.13148': attribute type 4 has an invalid length. [ 640.402187][ T6016] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13148'. [ 640.429010][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13153'. [ 640.493613][ T6020] loop6: detected capacity change from 0 to 164 [ 640.504883][ T6020] ISOFS: unable to read i-node block [ 640.510869][ T6020] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 640.524478][ T6020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6020 comm=syz.6.13152 [ 641.100413][T27753] Bluetooth: hci0: command 0x1003 tx timeout [ 641.106459][ T7365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 641.132095][ T6031] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 641.322190][ T6055] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13166'. [ 641.812441][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13172'. [ 642.073193][ T6077] loop9: detected capacity change from 0 to 512 [ 642.091839][ T6077] EXT4-fs: Ignoring removed nobh option [ 642.122677][ T6077] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #3: comm syz.9.13174: corrupted inode contents [ 642.150123][ T6077] EXT4-fs (loop9): Remounting filesystem read-only [ 642.162368][ T6077] EXT4-fs (loop9): 1 truncate cleaned up [ 642.170818][ T6077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.222855][ T6077] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.376723][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.422875][ T6094] loop9: detected capacity change from 0 to 512 [ 642.434226][ T6094] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 642.578979][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13189'. [ 642.588698][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13189'. [ 642.731993][ T6123] loop6: detected capacity change from 0 to 512 [ 642.738928][ T6123] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 642.768175][ T6123] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 642.780776][ T6123] netlink: 'syz.6.13193': attribute type 39 has an invalid length. [ 642.789399][ T6123] netlink: 'syz.6.13193': attribute type 10 has an invalid length. [ 643.218115][ T6134] FAULT_INJECTION: forcing a failure. [ 643.218115][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 643.230888][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.0.13198 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.230921][ T6134] Tainted: [W]=WARN [ 643.230928][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 643.230941][ T6134] Call Trace: [ 643.230948][ T6134] [ 643.230955][ T6134] __dump_stack+0x1d/0x30 [ 643.230993][ T6134] dump_stack_lvl+0xe8/0x140 [ 643.231012][ T6134] dump_stack+0x15/0x1b [ 643.231029][ T6134] should_fail_ex+0x265/0x280 [ 643.231117][ T6134] should_failslab+0x8c/0xb0 [ 643.231204][ T6134] kmem_cache_alloc_noprof+0x50/0x480 [ 643.231228][ T6134] ? getname_flags+0x80/0x3b0 [ 643.231257][ T6134] getname_flags+0x80/0x3b0 [ 643.231340][ T6134] user_path_at+0x28/0x130 [ 643.231363][ T6134] vfs_open_tree+0x19c/0x530 [ 643.231396][ T6134] __x64_sys_open_tree+0x45/0xc0 [ 643.231417][ T6134] x64_sys_call+0x2a8b/0x3000 [ 643.231446][ T6134] do_syscall_64+0xd2/0x200 [ 643.231470][ T6134] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 643.231546][ T6134] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 643.231577][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.231602][ T6134] RIP: 0033:0x7fb899a7f6c9 [ 643.231616][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.231638][ T6134] RSP: 002b:00007fb8984e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 643.231656][ T6134] RAX: ffffffffffffffda RBX: 00007fb899cd5fa0 RCX: 00007fb899a7f6c9 [ 643.231668][ T6134] RDX: 0000000000080001 RSI: 0000200000001080 RDI: ffffffffffffff9c [ 643.231682][ T6134] RBP: 00007fb8984e7090 R08: 0000000000000000 R09: 0000000000000000 [ 643.231706][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.231717][ T6134] R13: 00007fb899cd6038 R14: 00007fb899cd5fa0 R15: 00007ffd0e04e548 [ 643.231737][ T6134] [ 643.722239][ T6174] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13213'. [ 644.290919][ T29] kauditd_printk_skb: 1219 callbacks suppressed [ 644.290935][ T29] audit: type=1400 audit(2000005582.080:69978): avc: denied { shutdown } for pid=6194 comm="syz.9.13220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 644.371077][ T29] audit: type=1400 audit(2000005582.100:69979): avc: denied { name_connect } for pid=6194 comm="syz.9.13220" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 644.452309][ T29] audit: type=1326 audit(2000005582.240:69980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.536019][ T29] audit: type=1326 audit(2000005582.260:69981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.559767][ T29] audit: type=1326 audit(2000005582.260:69982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.583638][ T29] audit: type=1326 audit(2000005582.260:69983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.607357][ T29] audit: type=1326 audit(2000005582.270:69984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.631079][ T29] audit: type=1326 audit(2000005582.270:69985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.654765][ T29] audit: type=1326 audit(2000005582.270:69986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.678536][ T29] audit: type=1326 audit(2000005582.270:69987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6202 comm="syz.4.13222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf1731f6c9 code=0x7ffc0000 [ 644.716849][ T6207] loop5: detected capacity change from 0 to 512 [ 644.723481][ T6207] EXT4-fs: Ignoring removed mblk_io_submit option [ 644.730417][ T6207] ext4: Unknown parameter 'mblk_io_submit..' [ 645.427366][ T6237] loop5: detected capacity change from 0 to 512 [ 645.466091][ T6237] EXT4-fs: Ignoring removed nobh option [ 645.504317][ T6237] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #3: comm syz.5.13235: corrupted inode contents [ 645.560697][ T6237] EXT4-fs (loop5): Remounting filesystem read-only [ 645.590819][ T6237] EXT4-fs (loop5): 1 truncate cleaned up [ 645.596747][ T6237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.670818][ T6237] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.749905][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.013121][ T6253] __nla_validate_parse: 1 callbacks suppressed [ 646.013138][ T6253] netlink: 27 bytes leftover after parsing attributes in process `syz.5.13241'. [ 646.153115][ T6262] loop9: detected capacity change from 0 to 1024 [ 646.185961][ T6262] EXT4-fs: inline encryption not supported [ 646.191877][ T6262] EXT4-fs: Ignoring removed i_version option [ 646.234897][ T6262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.251670][ T6265] loop5: detected capacity change from 0 to 4096 [ 646.271138][ T6265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 646.280928][ T6262] FAULT_INJECTION: forcing a failure. [ 646.280928][ T6262] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 646.294181][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.9.13245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 646.294363][ T6262] Tainted: [W]=WARN [ 646.294369][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 646.294380][ T6262] Call Trace: [ 646.294388][ T6262] [ 646.294398][ T6262] __dump_stack+0x1d/0x30 [ 646.294422][ T6262] dump_stack_lvl+0xe8/0x140 [ 646.294511][ T6262] dump_stack+0x15/0x1b [ 646.294527][ T6262] should_fail_ex+0x265/0x280 [ 646.294573][ T6262] should_fail_alloc_page+0xf2/0x100 [ 646.294664][ T6262] __alloc_frozen_pages_noprof+0xff/0x360 [ 646.294775][ T6262] alloc_pages_mpol+0xb3/0x260 [ 646.294800][ T6262] folio_alloc_noprof+0x97/0x150 [ 646.294825][ T6262] filemap_alloc_folio_noprof+0x66/0x210 [ 646.294860][ T6262] __filemap_get_folio+0x28f/0x650 [ 646.294946][ T6262] ext4_convert_inline_data_to_extent+0x1f5/0x7d0 [ 646.295088][ T6262] ext4_try_to_write_inline_data+0x54/0x90 [ 646.295202][ T6262] ext4_write_begin+0x1b3/0xeb0 [ 646.295239][ T6262] ext4_da_write_begin+0x1fb/0x6e0 [ 646.295270][ T6262] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 646.295302][ T6262] generic_perform_write+0x184/0x490 [ 646.295392][ T6262] ext4_buffered_write_iter+0x1ee/0x3c0 [ 646.295457][ T6262] ext4_file_write_iter+0x387/0xf60 [ 646.295476][ T6262] ? kstrtouint_from_user+0x9f/0xf0 [ 646.295501][ T6262] ? 0xffffffff81000000 [ 646.295574][ T6262] ? __rcu_read_unlock+0x4f/0x70 [ 646.295648][ T6262] ? avc_policy_seqno+0x15/0x30 [ 646.295686][ T6262] ? selinux_file_permission+0x1e4/0x320 [ 646.295722][ T6262] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 646.295810][ T6262] vfs_write+0x52a/0x960 [ 646.295836][ T6262] __x64_sys_pwrite64+0xfd/0x150 [ 646.295944][ T6262] x64_sys_call+0xc4d/0x3000 [ 646.295969][ T6262] do_syscall_64+0xd2/0x200 [ 646.296067][ T6262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 646.296156][ T6262] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 646.296192][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.296213][ T6262] RIP: 0033:0x7f11d6d9f6c9 [ 646.296226][ T6262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.296318][ T6262] RSP: 002b:00007f11d57ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 646.296340][ T6262] RAX: ffffffffffffffda RBX: 00007f11d6ff5fa0 RCX: 00007f11d6d9f6c9 [ 646.296352][ T6262] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 646.296364][ T6262] RBP: 00007f11d57ff090 R08: 0000000000000000 R09: 0000000000000000 [ 646.296375][ T6262] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 646.296443][ T6262] R13: 00007f11d6ff6038 R14: 00007f11d6ff5fa0 R15: 00007fff76991b98 [ 646.296463][ T6262] [ 646.657912][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.680703][ T6265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.858242][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.902950][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13249'. [ 647.367632][ T6296] loop9: detected capacity change from 0 to 164 [ 647.460966][ T6301] hub 1-0:1.0: USB hub found [ 647.470100][ T6301] hub 1-0:1.0: 8 ports detected [ 647.667858][ T6310] 9pnet_fd: Insufficient options for proto=fd [ 647.771312][ T6316] loop6: detected capacity change from 0 to 512 [ 647.778027][ T6316] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 648.177759][ T6362] loop5: detected capacity change from 0 to 1024 [ 648.201633][ T6362] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.13284: Failed to acquire dquot type 0 [ 648.223460][ T6362] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 648.255017][ T6362] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13284: corrupted inode contents [ 648.306403][ T6362] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.13284: mark_inode_dirty error [ 648.346274][ T6362] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13284: corrupted inode contents [ 648.368278][ T6352] lo speed is unknown, defaulting to 1000 [ 648.376041][ T6362] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13284: mark_inode_dirty error [ 648.403783][ T6362] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13284: corrupted inode contents [ 648.432432][ T6362] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13284: mark_inode_dirty error [ 648.456608][ T6362] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13284: corrupted inode contents [ 648.480050][ T6362] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 648.501858][ T6362] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13284: corrupted inode contents [ 648.514914][ T6362] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.13284: mark_inode_dirty error [ 648.530305][ T6362] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 648.590221][ T6362] EXT4-fs (loop5): 1 truncate cleaned up [ 648.615873][ T6362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.693723][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.920453][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13298'. [ 649.045131][ T6391] loop5: detected capacity change from 0 to 1764 [ 649.053447][ T6391] grow_buffers: requested out-of-range block 18446744071681881834 for device loop5 [ 649.062864][ T6391] isofs_fill_super: bread failed, dev=loop5, iso_blknum=1133648757, block=-2027669782 [ 649.142433][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13306'. [ 649.192575][ T6421] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13307'. [ 649.201940][ T6423] loop5: detected capacity change from 0 to 512 [ 649.208577][ T6423] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 649.303588][ T6445] loop9: detected capacity change from 0 to 512 [ 649.318268][ T6445] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 649.352683][ T6445] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 649.366401][ T6445] netlink: 'syz.9.13315': attribute type 39 has an invalid length. [ 649.370446][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 649.370476][ T29] audit: type=1326 audit(2000005587.160:70435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.375272][ T6445] netlink: 'syz.9.13315': attribute type 10 has an invalid length. [ 649.404559][ T29] audit: type=1326 audit(2000005587.180:70436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.435836][ T29] audit: type=1326 audit(2000005587.180:70437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.470987][ T29] audit: type=1326 audit(2000005587.250:70438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.495068][ T29] audit: type=1326 audit(2000005587.290:70439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.549252][ T6468] loop9: detected capacity change from 0 to 512 [ 649.557299][ T29] audit: type=1326 audit(2000005587.310:70440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.559141][ T6468] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 649.581082][ T29] audit: type=1326 audit(2000005587.310:70441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.612960][ T29] audit: type=1326 audit(2000005587.310:70442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.636620][ T29] audit: type=1326 audit(2000005587.310:70443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.660421][ T29] audit: type=1326 audit(2000005587.310:70444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6456 comm="syz.0.13317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb899a7f6c9 code=0x7ffc0000 [ 649.712294][ T6485] FAULT_INJECTION: forcing a failure. [ 649.712294][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.725595][ T6485] CPU: 0 UID: 0 PID: 6485 Comm: syz.9.13324 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 649.725632][ T6485] Tainted: [W]=WARN [ 649.725639][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.725653][ T6485] Call Trace: [ 649.725671][ T6485] [ 649.725679][ T6485] __dump_stack+0x1d/0x30 [ 649.725703][ T6485] dump_stack_lvl+0xe8/0x140 [ 649.725789][ T6485] dump_stack+0x15/0x1b [ 649.725809][ T6485] should_fail_ex+0x265/0x280 [ 649.725844][ T6485] should_fail+0xb/0x20 [ 649.725874][ T6485] should_fail_usercopy+0x1a/0x20 [ 649.725968][ T6485] _copy_from_user+0x1c/0xb0 [ 649.725995][ T6485] ___sys_sendmsg+0xc1/0x1d0 [ 649.726029][ T6485] __x64_sys_sendmsg+0xd4/0x160 [ 649.726053][ T6485] x64_sys_call+0x191e/0x3000 [ 649.726076][ T6485] do_syscall_64+0xd2/0x200 [ 649.726143][ T6485] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 649.726191][ T6485] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 649.726225][ T6485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.726322][ T6485] RIP: 0033:0x7f11d6d9f6c9 [ 649.726338][ T6485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.726357][ T6485] RSP: 002b:00007f11d57ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.726378][ T6485] RAX: ffffffffffffffda RBX: 00007f11d6ff5fa0 RCX: 00007f11d6d9f6c9 [ 649.726471][ T6485] RDX: 0000000010000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 649.726484][ T6485] RBP: 00007f11d57ff090 R08: 0000000000000000 R09: 0000000000000000 [ 649.726497][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.726580][ T6485] R13: 00007f11d6ff6038 R14: 00007f11d6ff5fa0 R15: 00007fff76991b98 [ 649.726600][ T6485] [ 649.942166][ T6487] sd 0:0:1:0: device reset [ 650.011886][ T6503] loop6: detected capacity change from 0 to 512 [ 650.019791][ T6506] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20000 [ 650.034555][ T6503] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 650.062420][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13339'. [ 650.088643][ T6517] SET target dimension over the limit! [ 650.099847][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13338'. [ 650.167242][ T6521] lo speed is unknown, defaulting to 1000 [ 650.186845][ T6519] loop9: detected capacity change from 0 to 512 [ 650.193845][ T6519] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 650.206668][ T6519] EXT4-fs (loop9): 1 truncate cleaned up [ 650.212985][ T6519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.346048][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13350'. [ 650.363551][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13350'. [ 650.407733][T32483] Bluetooth: hci0: Frame reassembly failed (-84) [ 650.902626][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.985160][ T6562] loop9: detected capacity change from 0 to 8192 [ 651.071139][ T6573] loop5: detected capacity change from 0 to 512 [ 651.100912][ T6573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.148793][ T6573] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.163425][ T6562] SELinux: failed to load policy [ 651.215739][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.393972][ T6589] loop9: detected capacity change from 0 to 1024 [ 651.402336][ T6589] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.13367: Failed to acquire dquot type 0 [ 651.414199][ T6589] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 651.428901][ T6589] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13367: corrupted inode contents [ 651.441877][ T6589] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.13367: mark_inode_dirty error [ 651.454681][ T6589] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13367: corrupted inode contents [ 651.468490][ T6589] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13367: mark_inode_dirty error [ 651.480126][ T6589] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13367: corrupted inode contents [ 651.492813][ T6589] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.13367: mark_inode_dirty error [ 651.520148][ T6589] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13367: corrupted inode contents [ 651.548256][ T6593] macsec0: entered promiscuous mode [ 651.566122][ T6589] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 651.575546][ T6589] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.13367: corrupted inode contents [ 651.588379][ T6589] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.13367: mark_inode_dirty error [ 651.600158][ T6589] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 651.609536][ T6589] EXT4-fs (loop9): 1 truncate cleaned up [ 651.616087][ T6589] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.641382][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.731929][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13373'. [ 651.980005][ T6627] netlink: 'syz.0.13381': attribute type 39 has an invalid length. [ 651.988789][ T6627] netlink: 'syz.0.13381': attribute type 10 has an invalid length. [ 652.081330][ T6632] loop9: detected capacity change from 0 to 512 [ 652.098499][ T6632] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 652.113543][ T6634] loop5: detected capacity change from 0 to 512 [ 652.120870][ T6634] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 652.133587][ T6632] EXT4-fs (loop9): 1 truncate cleaned up [ 652.139708][ T6632] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.183521][ T6634] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 652.200497][ T6634] netlink: 'syz.5.13383': attribute type 39 has an invalid length. [ 652.210763][ T6634] netlink: 'syz.5.13383': attribute type 10 has an invalid length. [ 652.458004][ T7365] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 652.788271][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13396'. [ 652.814253][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13396'. [ 652.987611][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13401'. [ 653.007509][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13401'. [ 653.149028][ T6692] netlink: 57 bytes leftover after parsing attributes in process `syz.6.13405'. [ 653.756198][ T6718] loop5: detected capacity change from 0 to 1024 [ 653.774887][ T6718] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.13418: Failed to acquire dquot type 0 [ 653.798183][ T6718] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 653.827727][ T6718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13418: corrupted inode contents [ 653.857848][ T6718] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.13418: mark_inode_dirty error [ 653.876411][ T6718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13418: corrupted inode contents [ 653.901300][ T6718] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13418: mark_inode_dirty error [ 653.927867][ T6718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13418: corrupted inode contents [ 653.953336][ T6718] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13418: mark_inode_dirty error [ 653.979432][ T6718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13418: corrupted inode contents [ 654.023990][ T6718] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 654.118329][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13423'. [ 654.127910][ T6718] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13418: corrupted inode contents [ 654.140900][ T6718] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.13418: mark_inode_dirty error [ 654.167886][ T6718] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 654.178381][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13423'. [ 654.187608][ T6718] EXT4-fs (loop5): 1 truncate cleaned up [ 654.194166][ T6718] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.240217][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.305140][ T6748] loop6: detected capacity change from 0 to 512 [ 654.337873][ T6748] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 654.356842][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13429'. [ 654.421635][ T6748] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 654.443127][ T6748] netlink: 'syz.6.13428': attribute type 39 has an invalid length. [ 654.453778][ T6748] netlink: 'syz.6.13428': attribute type 10 has an invalid length. [ 654.491342][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 654.491375][ T29] audit: type=1326 audit(2000005592.281:70694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.534364][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13436'. [ 654.545507][ T29] audit: type=1326 audit(2000005592.281:70695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.569826][ T29] audit: type=1326 audit(2000005592.321:70696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.593442][ T29] audit: type=1326 audit(2000005592.321:70697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.617118][ T29] audit: type=1326 audit(2000005592.321:70698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.640756][ T29] audit: type=1326 audit(2000005592.321:70699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.664423][ T29] audit: type=1326 audit(2000005592.321:70700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.688116][ T29] audit: type=1326 audit(2000005592.321:70701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.711687][ T29] audit: type=1326 audit(2000005592.321:70702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.735584][ T29] audit: type=1326 audit(2000005592.321:70703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.5.13437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91ef5f6c9 code=0x7ffc0000 [ 654.903530][ T6796] netlink: 'syz.0.13447': attribute type 39 has an invalid length. [ 654.911974][ T6796] netlink: 'syz.0.13447': attribute type 10 has an invalid length. [ 655.093857][ T6816] syzkaller1: entered promiscuous mode [ 655.099515][ T6816] syzkaller1: entered allmulticast mode [ 655.240788][ T6824] netlink: 'syz.0.13459': attribute type 39 has an invalid length. [ 655.248991][ T6824] netlink: 'syz.0.13459': attribute type 10 has an invalid length. [ 655.493524][ T5142] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.628813][ T6865] loop5: detected capacity change from 0 to 512 [ 655.635447][ T6865] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 655.925512][ T6892] loop6: detected capacity change from 0 to 512 [ 655.932504][ T6892] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 656.027755][ T6903] loop6: detected capacity change from 0 to 1024 [ 656.050968][ T6903] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.13490: Failed to acquire dquot type 0 [ 656.070623][ T6903] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 656.085394][ T6903] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13490: corrupted inode contents [ 656.100314][ T6903] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.13490: mark_inode_dirty error [ 656.112901][ T6903] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13490: corrupted inode contents [ 656.137476][ T6903] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.13490: mark_inode_dirty error [ 656.158151][ T6903] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13490: corrupted inode contents [ 656.182724][ T6903] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.13490: mark_inode_dirty error [ 656.216181][ T6903] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13490: corrupted inode contents [ 656.229305][ T6903] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 656.251057][ T6903] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13490: corrupted inode contents [ 656.344720][ T6903] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.13490: mark_inode_dirty error [ 656.356075][ T6903] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 656.377729][ T6903] EXT4-fs (loop6): 1 truncate cleaned up [ 656.383836][ T6903] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.442440][ T6923] blktrace: Concurrent blktraces are not allowed on sg0 [ 656.452008][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.520670][ T6940] FAULT_INJECTION: forcing a failure. [ 656.520670][ T6940] name failslab, interval 1, probability 0, space 0, times 0 [ 656.533433][ T6940] CPU: 0 UID: 0 PID: 6940 Comm: syz.5.13505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 656.533469][ T6940] Tainted: [W]=WARN [ 656.533476][ T6940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 656.533489][ T6940] Call Trace: [ 656.533496][ T6940] [ 656.533520][ T6940] __dump_stack+0x1d/0x30 [ 656.533541][ T6940] dump_stack_lvl+0xe8/0x140 [ 656.533563][ T6940] dump_stack+0x15/0x1b [ 656.533586][ T6940] should_fail_ex+0x265/0x280 [ 656.533695][ T6940] should_failslab+0x8c/0xb0 [ 656.533725][ T6940] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 656.533757][ T6940] ? sidtab_sid2str_get+0xa0/0x130 [ 656.533890][ T6940] kmemdup_noprof+0x2b/0x70 [ 656.533919][ T6940] sidtab_sid2str_get+0xa0/0x130 [ 656.534015][ T6940] security_sid_to_context_core+0x1eb/0x2e0 [ 656.534045][ T6940] security_sid_to_context+0x27/0x40 [ 656.534112][ T6940] selinux_lsmprop_to_secctx+0x67/0xf0 [ 656.534205][ T6940] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 656.534228][ T6940] audit_log_subj_ctx+0xa4/0x3e0 [ 656.534251][ T6940] ? skb_put+0xa9/0xf0 [ 656.534348][ T6940] audit_log_task_context+0x48/0x70 [ 656.534373][ T6940] audit_log_task+0xf4/0x250 [ 656.534401][ T6940] ? kstrtouint+0x76/0xc0 [ 656.534475][ T6940] audit_seccomp+0x61/0x100 [ 656.534505][ T6940] ? __seccomp_filter+0x82d/0x1250 [ 656.534532][ T6940] __seccomp_filter+0x83e/0x1250 [ 656.534560][ T6940] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 656.534615][ T6940] ? vfs_write+0x7e8/0x960 [ 656.534645][ T6940] __secure_computing+0x82/0x150 [ 656.534734][ T6940] syscall_trace_enter+0xcf/0x1e0 [ 656.534759][ T6940] do_syscall_64+0xac/0x200 [ 656.534779][ T6940] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 656.534840][ T6940] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 656.534944][ T6940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.534996][ T6940] RIP: 0033:0x7ff91ef5f6c9 [ 656.535013][ T6940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.535030][ T6940] RSP: 002b:00007ff91d9bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 656.535048][ T6940] RAX: ffffffffffffffda RBX: 00007ff91f1b5fa0 RCX: 00007ff91ef5f6c9 [ 656.535059][ T6940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 656.535071][ T6940] RBP: 00007ff91d9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 656.535136][ T6940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.535148][ T6940] R13: 00007ff91f1b6038 R14: 00007ff91f1b5fa0 R15: 00007ffd8daa2f88 [ 656.535164][ T6940] [ 656.848364][ T6952] loop5: detected capacity change from 0 to 1024 [ 656.859855][ T6957] __nla_validate_parse: 10 callbacks suppressed [ 656.859873][ T6957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13512'. [ 656.881665][ T6957] loop6: detected capacity change from 0 to 512 [ 656.889065][ T6952] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.13510: Failed to acquire dquot type 0 [ 656.901579][ T6952] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 656.927689][ T6952] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13510: corrupted inode contents [ 656.939167][ T6957] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 656.947671][ T6963] loop9: detected capacity change from 0 to 256 [ 656.948604][ T6952] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.13510: mark_inode_dirty error [ 656.954686][ T6957] EXT4-fs (loop6): orphan cleanup on readonly fs [ 656.974109][ T6957] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #16: comm syz.6.13512: corrupted inode contents [ 656.986342][ T6957] EXT4-fs (loop6): Remounting filesystem read-only [ 656.993051][ T6957] EXT4-fs (loop6): 1 truncate cleaned up [ 656.999099][T32482] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 657.007318][ T6952] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13510: corrupted inode contents [ 657.009750][T32482] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 657.032321][T32482] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 657.032836][ T6952] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13510: mark_inode_dirty error [ 657.044720][ T6957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 657.056584][ T6965] FAULT_INJECTION: forcing a failure. [ 657.056584][ T6965] name failslab, interval 1, probability 0, space 0, times 0 [ 657.066842][ T6952] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13510: corrupted inode contents [ 657.079099][ T6965] CPU: 1 UID: 0 PID: 6965 Comm: syz.0.13513 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 657.079132][ T6965] Tainted: [W]=WARN [ 657.079139][ T6965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 657.079152][ T6965] Call Trace: [ 657.079160][ T6965] [ 657.079169][ T6965] __dump_stack+0x1d/0x30 [ 657.079193][ T6965] dump_stack_lvl+0xe8/0x140 [ 657.079274][ T6965] dump_stack+0x15/0x1b [ 657.079292][ T6965] should_fail_ex+0x265/0x280 [ 657.079325][ T6965] ? alloc_lookup_fw_priv+0x147/0x350 [ 657.079352][ T6965] should_failslab+0x8c/0xb0 [ 657.079436][ T6965] __kmalloc_cache_noprof+0x4c/0x4a0 [ 657.079469][ T6965] alloc_lookup_fw_priv+0x147/0x350 [ 657.079496][ T6965] _request_firmware+0x28b/0xbb0 [ 657.079527][ T6965] ? __rtnl_unlock+0x95/0xb0 [ 657.079585][ T6965] ? netdev_run_todo+0x7b4/0x810 [ 657.079621][ T6965] request_firmware+0x36/0x50 [ 657.079646][ T6965] reg_reload_regdb+0x53/0x240 [ 657.079782][ T6965] nl80211_reload_regdb+0xe/0x20 [ 657.079811][ T6965] genl_family_rcv_msg_doit+0x143/0x1b0 [ 657.079843][ T6965] genl_rcv_msg+0x422/0x460 [ 657.079948][ T6965] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 657.079971][ T6965] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 657.079999][ T6965] ? __pfx_nl80211_post_doit+0x10/0x10 [ 657.080090][ T6965] netlink_rcv_skb+0x123/0x220 [ 657.080121][ T6965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 657.080150][ T6965] genl_rcv+0x28/0x40 [ 657.080242][ T6965] netlink_unicast+0x5c0/0x690 [ 657.080335][ T6965] netlink_sendmsg+0x58b/0x6b0 [ 657.080356][ T6965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.080377][ T6965] __sock_sendmsg+0x145/0x180 [ 657.080402][ T6965] ____sys_sendmsg+0x31e/0x4e0 [ 657.080424][ T6965] ___sys_sendmsg+0x17b/0x1d0 [ 657.080521][ T6965] __x64_sys_sendmsg+0xd4/0x160 [ 657.080617][ T6965] x64_sys_call+0x191e/0x3000 [ 657.080640][ T6965] do_syscall_64+0xd2/0x200 [ 657.080724][ T6965] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 657.080753][ T6965] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 657.080797][ T6965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.080847][ T6965] RIP: 0033:0x7fb899a7f6c9 [ 657.080864][ T6965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.080883][ T6965] RSP: 002b:00007fb8984e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.080903][ T6965] RAX: ffffffffffffffda RBX: 00007fb899cd5fa0 RCX: 00007fb899a7f6c9 [ 657.080916][ T6965] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 657.080929][ T6965] RBP: 00007fb8984e7090 R08: 0000000000000000 R09: 0000000000000000 [ 657.080942][ T6965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.080994][ T6965] R13: 00007fb899cd6038 R14: 00007fb899cd5fa0 R15: 00007ffd0e04e548 [ 657.081012][ T6965] [ 657.142983][ T6967] 9pnet: Could not find request transport: fdÀ [ 657.146139][ T6952] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.13510: mark_inode_dirty error [ 657.387067][ T6952] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13510: corrupted inode contents [ 657.406118][ T6952] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 657.415779][ T6952] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.13510: corrupted inode contents [ 657.428091][ T6952] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.13510: mark_inode_dirty error [ 657.439635][ T6952] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 657.449132][ T6952] EXT4-fs (loop5): 1 truncate cleaned up [ 657.455447][ T6952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.513833][ T1762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.624789][ T6995] lo speed is unknown, defaulting to 1000 [ 657.848635][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.319279][ T7010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13526'. [ 658.393936][ T7020] loop6: detected capacity change from 0 to 1024 [ 658.408894][ T7020] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.13534: Failed to acquire dquot type 0 [ 658.423979][ T7020] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 658.440797][ T7020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13534: corrupted inode contents [ 658.460832][ T7020] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.13534: mark_inode_dirty error [ 658.476729][ T7020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13534: corrupted inode contents [ 658.489282][ T7020] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.13534: mark_inode_dirty error [ 658.501114][ T7020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13534: corrupted inode contents [ 658.513787][ T7020] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.13534: mark_inode_dirty error [ 658.535878][ T7020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13534: corrupted inode contents [ 658.552843][ T7020] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 658.562254][ T7020] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.13534: corrupted inode contents [ 658.578230][ T7020] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.13534: mark_inode_dirty error [ 658.578493][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13542'. [ 658.607358][ T7020] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 658.631437][ T7020] EXT4-fs (loop6): 1 truncate cleaned up [ 658.658750][ T7020] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.721691][ T723] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.845884][ T7057] loop6: detected capacity change from 0 to 512 [ 658.860983][T32482] bridge_slave_1: left allmulticast mode [ 658.867079][T32482] bridge_slave_1: left promiscuous mode [ 658.868499][ T7057] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 658.873045][T32482] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.925754][T32482] bridge_slave_0: left allmulticast mode [ 658.931452][T32482] bridge_slave_0: left promiscuous mode [ 658.937175][T32482] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.001558][ T7057] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 659.050977][ T7057] netlink: 'syz.6.13548': attribute type 39 has an invalid length. [ 659.102425][ T7062] netlink: 'syz.6.13548': attribute type 10 has an invalid length. [ 659.179515][T32482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.211578][T32482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.227994][T32482] bond0 (unregistering): Released all slaves [ 659.250884][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13553'. [ 659.286537][T32482] tipc: Left network mode [ 659.334920][ T7076] program syz.5.13555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 659.389003][T32482] hsr_slave_0: left promiscuous mode [ 659.431731][T32482] hsr_slave_1: left promiscuous mode [ 659.455212][T32482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.462931][T32482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.488366][ T7083] netlink: 23 bytes leftover after parsing attributes in process `syz.5.13557'. [ 659.509478][ T29] kauditd_printk_skb: 2968 callbacks suppressed [ 659.509492][ T29] audit: type=1326 audit(2000005597.302:73659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf17316567 code=0x7ffc0000 [ 659.585934][T32482] veth1_macvtap: left promiscuous mode [ 659.603494][T32482] veth0_macvtap: left promiscuous mode [ 659.629285][T32482] veth1_vlan: left promiscuous mode [ 659.647794][ T29] audit: type=1326 audit(2000005597.302:73660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf172bb789 code=0x7ffc0000 [ 659.671445][ T29] audit: type=1326 audit(2000005597.302:73661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf17316567 code=0x7ffc0000 [ 659.695058][ T29] audit: type=1326 audit(2000005597.302:73662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf172bb789 code=0x7ffc0000 [ 659.718654][ T29] audit: type=1326 audit(2000005597.302:73663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf17316567 code=0x7ffc0000 [ 659.742466][ T29] audit: type=1326 audit(2000005597.302:73664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf172bb789 code=0x7ffc0000 [ 659.766581][ T29] audit: type=1326 audit(2000005597.302:73665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf17316567 code=0x7ffc0000 [ 659.790245][ T29] audit: type=1326 audit(2000005597.302:73666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf172bb789 code=0x7ffc0000 [ 659.813880][ T29] audit: type=1326 audit(2000005597.302:73667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcf17316567 code=0x7ffc0000 [ 659.837509][ T29] audit: type=1326 audit(2000005597.302:73668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7034 comm="syz.4.13540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcf172bb789 code=0x7ffc0000 [ 659.861829][T32482] veth0_vlan: left promiscuous mode [ 660.121996][T32482] team0 (unregistering): Port device team_slave_1 removed [ 660.140764][ T7072] ================================================================== [ 660.148889][ T7072] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 660.155944][ T7072] [ 660.158262][ T7072] read-write to 0xffff888237c1b294 of 4 bytes by interrupt on cpu 0: [ 660.166333][ T7072] hrtimer_interrupt+0x70/0x460 [ 660.171207][ T7072] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 660.177122][ T7072] sysvec_apic_timer_interrupt+0x6f/0x80 [ 660.182768][ T7072] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 660.188750][ T7072] do_syscall_64+0x9c/0x200 [ 660.193275][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.199180][ T7072] [ 660.201504][ T7072] read to 0xffff888237c1b294 of 4 bytes by task 7072 on cpu 1: [ 660.209034][ T7072] print_cpu+0x338/0x660 [ 660.213276][ T7072] timer_list_show+0x107/0x170 [ 660.218028][ T7072] seq_read_iter+0x636/0x950 [ 660.222609][ T7072] proc_reg_read_iter+0x110/0x180 [ 660.227626][ T7072] copy_splice_read+0x442/0x660 [ 660.232472][ T7072] splice_direct_to_actor+0x26f/0x680 [ 660.237845][ T7072] do_splice_direct+0xda/0x150 [ 660.242606][ T7072] do_sendfile+0x380/0x650 [ 660.247018][ T7072] __x64_sys_sendfile64+0x105/0x150 [ 660.252211][ T7072] x64_sys_call+0x2bb4/0x3000 [ 660.256875][ T7072] do_syscall_64+0xd2/0x200 [ 660.261364][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.267243][ T7072] [ 660.269560][ T7072] value changed: 0x0009eabe -> 0x0009eac1 [ 660.275261][ T7072] [ 660.277563][ T7072] Reported by Kernel Concurrency Sanitizer on: [ 660.283696][ T7072] CPU: 1 UID: 0 PID: 7072 Comm: syz.9.13552 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.295236][ T7072] Tainted: [W]=WARN [ 660.299020][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.309060][ T7072] ================================================================== [ 660.372173][T32482] team0 (unregistering): Port device team_slave_0 removed [ 660.422413][ T7080] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.555961][ T7080] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.648319][ T7080] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.713268][T32482] IPVS: stop unused estimator thread 0... [ 660.725888][ T7080] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.799062][T32477] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.819432][T32478] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.841364][T32478] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.857099][T32478] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.979716][T32482] bridge_slave_1: left allmulticast mode [ 663.985400][T32482] bridge_slave_1: left promiscuous mode [ 663.991153][T32482] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.999023][T32482] bridge_slave_0: left allmulticast mode [ 664.004742][T32482] bridge_slave_0: left promiscuous mode [ 664.010468][T32482] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.099405][T32482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.109417][T32482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.118997][T32482] bond0 (unregistering): Released all slaves [ 664.164539][T32482] hsr_slave_0: left promiscuous mode [ 664.170251][T32482] hsr_slave_1: left promiscuous mode [ 664.175799][T32482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 664.183492][T32482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.191170][T32482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 664.198578][T32482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.215372][T32482] veth1_macvtap: left promiscuous mode [ 664.221036][T32482] veth0_macvtap: left promiscuous mode [ 664.226593][T32482] veth1_vlan: left promiscuous mode [ 664.231793][T32482] veth0_vlan: left promiscuous mode [ 664.264441][T32482] team0 (unregistering): Port device batadv1 removed [ 664.299033][T32482] team0 (unregistering): Port device team_slave_1 removed [ 664.308216][T32482] team0 (unregistering): Port device team_slave_0 removed [ 664.630117][T32482] IPVS: stop unused estimator thread 0...