last executing test programs: 1m37.801338476s ago: executing program 32 (id=794): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000480)={[{@grpquota}, {@resuid}, {@resuid}, {@noload}, {@lazytime}, {@data_err_ignore}, {@discard}, {@data_err_abort}]}, 0x1, 0x5df, &(0x7f0000001980)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdir(0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000200)='console\x00'}, 0x18) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000001780)={0x3, {{0x2, 0x5, @multicast1}}, {{0x2, 0x100, @remote}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/81, 0x51}], 0x2, 0x800, 0x5) 1m21.146014375s ago: executing program 33 (id=1119): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 1m20.436036382s ago: executing program 1 (id=1130): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x2, 0x0) 1m19.566125178s ago: executing program 1 (id=1137): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000580)=ANY=[], 0xfe37, 0x0) 1m19.481772148s ago: executing program 1 (id=1138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x4000000000000}, 0x18) mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x5) 1m19.400244908s ago: executing program 1 (id=1140): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r6}, 0x18) personality(0x4100001) 1m18.929325536s ago: executing program 1 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (fail_nth: 1) 1m18.705924855s ago: executing program 2 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x4000000000000}, 0x18) mknodat(0xffffffffffffffff, 0x0, 0x8000, 0x5) 1m18.696355085s ago: executing program 2 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) close_range(r5, r6, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='mand\x00', 0x0, 0x0) close(r3) 1m18.630073535s ago: executing program 1 (id=1153): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x2, 0x0) 1m18.619677634s ago: executing program 34 (id=1153): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x2, 0x0) 1m18.614079674s ago: executing program 2 (id=1155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 1m18.533203644s ago: executing program 2 (id=1157): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r6}, 0x18) personality(0x4100001) 1m17.719884921s ago: executing program 2 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) close_range(r5, r6, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='mand\x00', 0x0, 0x0) close(r3) 1m17.328867279s ago: executing program 2 (id=1168): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118400000077b30000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2a020400) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x62000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd60000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bde900000000000000000000000000002bfea31d00000000"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0), 0x69) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000001c0)}, 0x20) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000e40)='(NPT\x00]\xd1v\xac\xcd7\'\x11\x92\xc3\xee8\xc7\xfa=\x99\xc4\xb4\xa9\x06\xb7\x9dqs\"\xbe\x17\x83\xdf3i\xf2\xddO\xd5\xf0\xfc@\xdb5\xc6=\xec\xc7\x13\xc8Z(\x97\xb2\'AL~\xa2\xc6\xf6\x8e\xbb\x93.\x98\xf7\xff\xd0\xc1\xad\xc1\xc2\x03\x00\x89EH\xd01.\x9b\xda\xb6I\xdb\xb2\x97\xe6M\xb1-ua\xe9bt\xe3\xc2w\xa9k\xc1\xac\x9f\xf3\x95\xc8^\xfa\b\xfd[Q\xe0\xf5b\xc8d\xf9\xb3\xe5', &(0x7f0000000f40)="b7f8388f5b63ca13a6c5dfa8e60402ac71e1b90f95517b29ffe295e10daee42852d77410d2573ebb69eec4562973e691738406ac58190d1481e7998335bd0567bea32661ea9b1745e1e69ee3f6812687db40652e2d0e900ddff7ce633efd9dee1c4e3060dedef67e573fcc63577456bb288338e10787e24e0042b170209db0a472cce0ab51d69823cd915a9e634becc994c08f6b1f4449764a0d9635508c29da97c10e1427f209d327d5c94bc06706eabae3f76854286f0a4f070d2510505ec9d3182939bb1346576a32fa00b0940000000000951f2693d1756b12a80ef0dc8d96faa78f815d8e740500"/245, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000200), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x1d0, 0x440, 0x310, 0xe8, 0x440, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffffff], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}, {0x0, 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local, 0x11}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) recvmsg$can_raw(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) 1m17.288311909s ago: executing program 35 (id=1168): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118400000077b30000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2a020400) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x62000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd60000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000bde900000000000000000000000000002bfea31d00000000"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0), 0x69) r4 = socket(0x15, 0x5, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000001c0)}, 0x20) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000e40)='(NPT\x00]\xd1v\xac\xcd7\'\x11\x92\xc3\xee8\xc7\xfa=\x99\xc4\xb4\xa9\x06\xb7\x9dqs\"\xbe\x17\x83\xdf3i\xf2\xddO\xd5\xf0\xfc@\xdb5\xc6=\xec\xc7\x13\xc8Z(\x97\xb2\'AL~\xa2\xc6\xf6\x8e\xbb\x93.\x98\xf7\xff\xd0\xc1\xad\xc1\xc2\x03\x00\x89EH\xd01.\x9b\xda\xb6I\xdb\xb2\x97\xe6M\xb1-ua\xe9bt\xe3\xc2w\xa9k\xc1\xac\x9f\xf3\x95\xc8^\xfa\b\xfd[Q\xe0\xf5b\xc8d\xf9\xb3\xe5', &(0x7f0000000f40)="b7f8388f5b63ca13a6c5dfa8e60402ac71e1b90f95517b29ffe295e10daee42852d77410d2573ebb69eec4562973e691738406ac58190d1481e7998335bd0567bea32661ea9b1745e1e69ee3f6812687db40652e2d0e900ddff7ce633efd9dee1c4e3060dedef67e573fcc63577456bb288338e10787e24e0042b170209db0a472cce0ab51d69823cd915a9e634becc994c08f6b1f4449764a0d9635508c29da97c10e1427f209d327d5c94bc06706eabae3f76854286f0a4f070d2510505ec9d3182939bb1346576a32fa00b0940000000000951f2693d1756b12a80ef0dc8d96faa78f815d8e740500"/245, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000200), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x1d0, 0x440, 0x310, 0xe8, 0x440, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffffff], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}, {0x0, 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local, 0x11}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) recvmsg$can_raw(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) 1m17.112354268s ago: executing program 6 (id=1175): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f00000000c0)=@abs={0xf771f38b97cad6c1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000010c0)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0xc0c0}}], 0x1, 0x0) sendmsg(r2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m16.997878447s ago: executing program 6 (id=1176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 1m16.899553257s ago: executing program 6 (id=1177): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) close_range(r5, r6, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='mand\x00', 0x0, 0x0) close(r3) 1m16.731154666s ago: executing program 6 (id=1178): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) personality(0x4100001) 1m16.395389175s ago: executing program 6 (id=1180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 1m15.26069014s ago: executing program 7 (id=1154): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000200)='console\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) 1m14.280546136s ago: executing program 6 (id=1199): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) personality(0x4100001) 1m14.231040346s ago: executing program 36 (id=1199): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) personality(0x4100001) 1m13.233535342s ago: executing program 7 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fsopen(&(0x7f0000000540)='ceph\x00', 0x200000000000000) 1m13.117803841s ago: executing program 7 (id=1213): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000a000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r3}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioperm(0x8, 0x7, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) personality(0x4100001) 1m12.81394087s ago: executing program 7 (id=1219): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000000500)}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) mq_unlink(&(0x7f0000000340)='eth0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000e4317765021a39f000000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100100, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0x3, r3, 0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) capset(0x0, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m11.647350575s ago: executing program 7 (id=1241): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 1m11.627329745s ago: executing program 37 (id=1241): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 40.965263724s ago: executing program 4 (id=1634): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') readlink(&(0x7f00000012c0)='./file0/../file0\x00', &(0x7f0000001580)=""/84, 0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x14, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYRES64=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x18a) 40.831651633s ago: executing program 4 (id=1637): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='kmem_cache_free\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000400"/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000009fa2000000008cfc2825a5954922ffffb703000000000040b7040000000000597298ada8b2880fe94b1dfce99d000000000000935d9c877abc66012609d232a2f3ad3202fa88f2e42636645a4d15d6f917852db10e6f6384c225f863d83e4bb6136d4a0875d16119faf185bd7811bd74857e5e63036cb0a4cd65e070b1143300"/175], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x94a00, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setgid(0x0) syslog(0x9, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, r4, 0x9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0xffff, 0x10}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setfsgid(0xee01) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0xfffffeaa, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0xa}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd, 0x0, 0x0, 0x3}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 40.692595423s ago: executing program 4 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 40.607046883s ago: executing program 4 (id=1644): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x1000000, &(0x7f0000000580)={[{@i_version}, {@jqfmt_vfsold}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x800004, &(0x7f0000002080), 0x1, 0x586, &(0x7f0000000f80)="$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") r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x20010, r0, 0x10000000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) r5 = io_uring_setup(0x6580, &(0x7f0000000440)={0x0, 0xd898, 0x40, 0x0, 0x2}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x16, 0x20000002, r6) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x21, 0x2004, @fd=r4, 0x5, 0x76a, 0x1000, 0x13, 0x0, {0x0, r6}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000000380)=[{&(0x7f0000000140)=""/42, 0x2a}], 0x1) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000080)) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r10, &(0x7f00000032c0)=[{&(0x7f0000000040)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="c5", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084000000000000000002000000000000000000000000000009030000000000000000000009"], 0x0, 0x4a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) lseek(r0, 0x0, 0x4) 40.388516222s ago: executing program 4 (id=1646): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x5, "90737f0000ffffffffffffffff1e277fffffeb"}) r4 = dup(r3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x20080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, &(0x7f0000000280)=""/1, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe13, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r7, r7, 0x0, 0x80000000) 40.261195141s ago: executing program 4 (id=1648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x1f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 40.260992661s ago: executing program 38 (id=1648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x1f}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 3.480724925s ago: executing program 3 (id=2269): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_clone3(0x0, 0x0) 3.339104244s ago: executing program 5 (id=2271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x2, 0x4eb, &(0x7f0000000a40)="$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") getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x60, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r7}, 0x10) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(0xffffffffffffffff, r8) 3.044749832s ago: executing program 3 (id=2274): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) 3.020937872s ago: executing program 3 (id=2275): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 2.925774822s ago: executing program 5 (id=2276): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f0000000500)}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000001600008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mq_unlink(&(0x7f0000000340)='eth0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000e4317765021a39f000000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100100, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0x3, r5, 0x8) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) capset(0x0, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.611538611s ago: executing program 0 (id=2279): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='{', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x7, r2, 0xffffffffffffffff, 0x0) fstatfs(0xffffffffffffffff, 0x0) 2.610606121s ago: executing program 8 (id=2280): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0xfffffeaa, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0xa}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd, 0x0, 0x0, 0x3}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 2.570048161s ago: executing program 5 (id=2281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1001, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000000b00)="1dfe4bd24b619aaebdc7bb4a51d41d738a9b3ac1711bb6a3a271f0ecc8a9cad4c12c5f669a4bf9b305ae77c036245cde1d326b6f66d0ad3fd457c83a09304821a4c6e3bc16bad1b8037807fa4ee01554e0527dcde9a2c4f5ee8ae61da14dadaeeaa1cf2ea1a77c5d7f5f94e521e64636b156a5d6c216ddaf54637b39e8ae893d5202c3193d2fe5078a1dc0bbd1ae9ffdd1cd65eceace8bc9841dfb2826b23c4cb4d62dd2776cff5804a2cbe530d9d41ee688fab02878c2e8b62d1606b93a571c5e01dc470d67b4d69d12374e218cbca75b9143065af68e4a23ef5d6eed2536ca", &(0x7f0000000980)=""/154, &(0x7f00000004c0)="ce46cef05f8b76c3c32a6ee4f4a3d8ca2301336d5547a23c0ef2e542e44d9cf94be3b38825ea0355213aa181d18f85528061782b1a28d0b599114405a1114463", &(0x7f0000000c00)="df799e5a01c93572b2a2b73b00265ac1721dc4a25e08b53b08dacc01381eb8016412869c02c07d7bbc51254ef1e9027f23be5be50f41a0a478dafa6d125c1cdb023d98bdead35d2228ed2daf184d7d5e9403c16d0ea181be2b41", 0x10000, r0, 0x4}, 0x38) fsopen(&(0x7f0000000180)='cgroup2\x00', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x47, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x10}, @enum={0x10}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @union={0x4, 0x3, 0x0, 0x5, 0x1, 0x8, [{0x10, 0x2}, {0x1, 0x1, 0x4}, {0x10, 0x5, 0x3}]}, @ptr={0x3}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000840)=""/70, 0x91, 0x46, 0x1, 0x8, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x6, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000100)={&(0x7f0000000180)={[0x101]}, 0x8}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000500)) 2.43152342s ago: executing program 0 (id=2282): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=ANY=[], 0x2c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001940), 0x0, 0x410242) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000005500000125bd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="00000100", @ANYRES32=r4, @ANYBLOB="00020200000000000000000000000000000000008edd0000"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0xc5, 0x7, 0x1000, 0x5, @mcast2, @mcast2, 0x8, 0x7800, 0xe1c, 0x33ac5eb1}}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r1, @ANYRESHEX=r6], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r9, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007d01e8955ac8cc80edb6787cecfa06f257fe379edbecf813cee6f2fdace9c6c10346396b0148448b0451832037a9e14c69087ef82653bcc347f8941fcb2d1eff0e7552ca84c221a6a3e31237157c51da28d6feaf447dc3195d99cbfbe28b9ff6bf08724886c576f60f688c338a002dc925761b1d9885b3022bbe78fad50ee50e958184898e7e87db131c6f9f19f894b8ca85375835b7e62aca629256bf79a10eb4c86e6166d2ce688605ef6d1306e3916b8d01d4bb937c7d00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x23ec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x100000, 0x0, 0x0, 0x1, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffefffffff7fffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x7b9b7fa202f9f033, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x8013) socket$inet6_sctp(0xa, 0x1, 0x84) 2.4080093s ago: executing program 5 (id=2284): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x36c4, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r4, 0x0, 0x0) 2.166129099s ago: executing program 0 (id=2285): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) 2.164486729s ago: executing program 5 (id=2286): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) 2.135027179s ago: executing program 0 (id=2287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x2, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x60, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r7, r8) 2.075895719s ago: executing program 3 (id=2288): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000640)}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x3c}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1000002, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="00005b47ed6bf3660a076e46000000000000b7080000000000004c1328b668bbaeb6b217eabf43e6bd0000000007020000f8ffffffb703000008000000b704000000000000850000005900000095332d701e1e857442a3ba504fd44ab0cf034baebc5252a046c32a998957e42da8905ddc4fcb257dbfb739b2d6399c634aac161b7a1c45a601bbcea2776fa001641f313463f118fb3ae6186f7e790975c0503ba2896ae7dd1de94daa9f432500"/184], 0x0, 0x75525c2f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x26, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 2.052142188s ago: executing program 8 (id=2289): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb430fb655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r2, r1) 2.009099168s ago: executing program 8 (id=2290): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000380)=""/241) gettid() r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r6 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x1a, 0x0) pselect6(0x40, &(0x7f0000000240)={0x6, 0xfbb6, 0x401, 0x100000000, 0x1, 0x0, 0x798, 0xd3}, &(0x7f0000000280)={0x7, 0xdf, 0x9, 0x71, 0x7, 0x4, 0x2, 0x7}, &(0x7f00000002c0)={0x3a, 0x80000000, 0x800, 0x63d2, 0x8, 0x7, 0x1, 0xf9d}, 0x0, 0x0) 1.873463938s ago: executing program 0 (id=2292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x80, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r7, 0xfffffffffffffff5, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000000000000000000000000d8b0cfd2804b000000000000"]) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f0000000000)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) write$binfmt_script(r8, &(0x7f0000000580)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 1.872808858s ago: executing program 3 (id=2293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3b, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8308}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x80, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) lseek(r7, 0xfffffffffffffff5, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGSOFTCAR(r9, 0x5419, &(0x7f0000000000)) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) write$binfmt_script(r8, &(0x7f0000000580)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x40, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 913.341724ms ago: executing program 9 (id=2295): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000200)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4, 0x3a, '&^){.', 0x3a, '', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x43, 0x46, 0x50, 0x50]}, 0x32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002540)={{r2}, &(0x7f00000024c0), &(0x7f0000002500)}, 0x20) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x620140, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002cbd7000fbdbdf2503000000050005000700df47aa90999300000500"], 0x24}, 0x1, 0x0, 0x0, 0x40408c4}, 0x20000014) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) socket(0x2c, 0x5, 0x6) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000380)={{0x0, 0x2, 0x0, 0x7, 0x7, 0x339c, 0x4, 0x4, 0xd, 0x4, 0x8, 0x746101980, 0x2, 0x10000, 0xa8e9}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000002580)={0x0, r10, "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", "e894030996bc382d4563730201ce0b15e944134843732ddfb5f4ae8bd14c73754c5f0ef2438da73f17273f24c3c7cca9bcbc999f2472c10d930ed5c3557e6cbf15902725bd1f38937d7f64db89b604c56cddb7d65daeb0399387c32ac031d9d388ca067446f4a5799194d752621616dc5cd8a522ac9987650f67c2dc74aada8d8ac77ab41da321819dd9a4e1b040e37afaad2a74fbdc822f301e1e3421e5d01462a02c8ca31cc96922a35f572d958959e804dcff0ee5b40cb2adcf0b7e8b619e7f7fd938fa79cee38e8faecb76bcea8a6ebd9792b14b0686dc5c4e204148714e9e282e789e6e917726323a709600309a81f7a08b104dd253109a7df2280162771d3a75f4f4333bcc0efc1480e5ce2a65a74cf21b0a082e51c9adcf794e189d5ba295cd4c7e194aed76fd6aabb27697c855ea6043474ee73c6279cd7e00a827e597fe7f8be76c27dbba75d265b398322f62776e769979279987f5ff9152afce807f7846f83fafb00ed0f1b7dad06eac6a4c2e418416073bd67e9e773a6e8fd1ef32f4e0961f9d5bc98dbbeae272158e477cd39d1fd96268d68c4de39c29d26db64d44ec6e28115ca252d7532d7ac522e09d9eb43b868b92496ee3adf76436b5c81dc51e9a7b9cfc3f418b68f48a347d64d887322c662d2bc7ce936e79b3317ef443b641915e20d0dec080211f8ee05a787a37b83c18e85027a8327bc9579f7865d154d0315fd555ef89884096f15f34e8839187cd987f1bab2d2d13cfec1b2c0aa99039ae946d26accf46df2e54174691cb104cdbd7a88dd84f7feae3cd0fc76924bbf5dbb7ea75c2538a8ee6228ede8129cb1a883e7eb69df6d28c7ee3fb5a1bc366810533d1a76cfdfbf7005f5dc5b7c493c08a6b6d8f65027f7c892643e3f9ca5b218511bd4653fdbdc33b013b388eaccb940509e1abefd8637f3f61dfd5a4d7a4f95a3e12f5e555f1286c522d98d994041b4a1cd94bf0291602135e5398ababa412fa302b0523dd46350f0d7a1311a0c2e8cb3403010ca70468dc9e65c2072b533c4fd087aec8a073741fba96ac79a16d2b3c6de15001fddeb543055ff4bc19a7c35b58e25172ca078aa85ee0f86069ae54de1714e1089c5993bf2253feb4685cca81476762aa3bdbf98a8bd7a69ac84023ebfa9bf402091e672076c566e5bafa88ea4a6920b40a89f080e3fda94861c4460628893e865dd17cb7e78406fbbb9fc00fbb7a4ac5990b52714d0d600167b6818b0d6123711acd744519fdb8674d91df3ea3b65b05636d2a2effbe0c39e32b9e68d3f9faa9cdcb3bc3e32920d08d2c567b7130bc6564aac933d8930e371c451a92d465ac7dda55827a1b21ad1752dbfd5bfacce71be1e1f0d2820bbee5d9ec2828026b0183c25581a39fdf6a4506815908688fcc8fc791e6dbf22dac3edac97216b1385e3a15830f9df2274df9bd8edc534eca84a2d8500b2f082840925acee24ae7ea2bc05678feeedf13a916258849d07a13532394044d1ef39fb7d73b9a8930ae722e313daa55adbb0acbe9510ad1810cca7ab4832a3ef501d13ee01c7236a1d29a91c8e68553471f5b627b9d31f6a6db7e78c70e9e676e171c6d898d426c598fd72677f3adda3f8d79180992a16416f8340ef3b7f9fbc95d5f8e8378996db7e7318eaa854d50f73dc62730f4d906565249bc4e335bb15d52c2ab4a9ca7b495f928cdb337f028ac2e32aed29d9d4a4e647bd2a978d255e1d8e0d971aa126569c98932ea9a5e6b171666048840fa713ae649bfff41859083ded86e16119a8663e9137fa5f347d047bbc7d284e2d423b028a71db32b3ef062ca8a01e2fed9d9f92c99baadb9da646a83a1d4eb366dc81276ec0d09078b880c69f32549d90e547dd37c1ffa27fce1ec83b6a6e32a78ea59b85d3bcfa5b1ca0f4368836d567c463f635ccb7793386d4355f58d5887e0cd8f84240d5bd0712eb12818bccc29f1100dbabd871520a15d89c115d0d5e657c4b4c1f2816253ed3766163313e04ab58d5eb2ec3717111e1a718ec344487e0084b82107e5993475ce33f5e70f88f53bdf2fdf91cf1a1fb01299e259bd67e95db7701044ee67be8a6275ba8f3416881f2858af87ecec76ed186fdf904826038a510920248f9557c58d6ad522a0e8b3df634534e1f28cca7c4874acffa8fb436815f893a579e34fbc7ba9dbcaffeec9fd67f716d525f809aeb90c8478a153bdfc35d3c614b59c8fa9ade7764186add85f96cb7e7870cf5e882f27ecd3382ccb3316bc0da00be78b0ed8d41a30f481ac9d8e9c9216975053b44fbc37916141fc33cf950ae7ffa4c89f68766b9588e8266a2ab479afe563d4cf5f0ec5d12fe15573c18b210ee01b1a6ec0512879ed0c706f887227ef23be0ca89af370e21c65ea1c3699292da0ba4250141b43cda461bab4a25753b2d0cc1f87bdee8f5762acbaebe1bbae5858deb8871e2ab54fe24baa56b6464736bce21599c9efefd399c6b7ed36208cbe7ba3e672b675cf6d14c0c07142383aafce14e3a7bdcb31fd5294c1ba35b68ef02f26e77cda9b36574944a3f8fd0f206159b1d47869a9db8a9c9d8b144bcb72e97e9dcb5e8f91ec5dea4c662265fe5df8fe4ffbfac1c34e7acac7a84a997c143d77b154ef0b0dff5aea4ac65196ffd08c45fe2f5c56939cecb4d755d04eb743b0cac38f43171a463873601ad52cfc2fc594b87f2c09eb173f81be55ef7da0a187b9ecef5ddbc901eb1b09efa9f1940741080718fb5a4407ce5c18845ac940cf62bfc870d7b8de5bf35073e1315c9af5f5a434f3b0936911d0262b418844267b600ea03d4d38e5074b248c9dcbf99b78356d79801610e0408625c8a26e0a7838c9990fcf4dffe02202b4e37c444be90cc3d68dc100e3453914b692c1442963402048038ab1dbb2b2408647d0a1e915475e0b4fd6fa16bdf4f4bf32a15a680d540fc8183b36ee233910a025bdb36cfb535fd6f58be3ce6e223584edd7b82b8523ec8e5615896597e5ee627da60c90ce5e07ca422e9d63b80da8552eb2dc4a2aa5497095bbaa06325d9cda7ed5bcc7648c69a9d371484f9c92e88c305c50a9f210e46124612d147f2c9eed5a1eebbafb19115717751e84c79d3a17e63c0566ff3413299416f0d07474fc5009b513f65b5667b2127dc093ef6fbd354da6b1c76681f49a6cd35b26ffff99b84c966c3cbdd661c4e26f9d5cfeb6362d7aff5f561ba9595088e7406739592d9295382ae031675c87a6b86a406fc23f689e00b2de7516ad7e18ddd61c2713dd757047639b7c1510ec678a47a06b0a15ed4133b15c976da03cc4d6f524cc0dd73f698858a0b04410f1deb10426ddf7d2d65812f4d4f9b9ce02bc6742599edc36f5445f19f06634f20072fed255969438832438dbc31ebe8d2db1bf0939991056ecf826b0eb6b8bfefb450e2454e1bcf939669320873a4e0b06743201da3cf97c35f252c14e06ea0f345d1f23f062faf76596a5b868cf3991c3ac06802c84218884dd37d305378c7a1158f06c846c6129d4a5d903ca3a0b202a425695dad928e21d5023d2aef62b16ad1999dd473e3f81580e3b130dde458f4db3404b665de9d1401d24f0f35d5cb261698342846f08b64517f0016ab0932725f87d71489c6313b249d05c4dd46abbe272c9703f2df73909b7f98b8a17dd24b129b5c32ca7b72fa18b0c2c4dd5ccdb1abcdae7d6645232a0e1d793d0d879dd20c12bb1e448e0abb6529d5edde1bd8f5bc4bd4b8893b292c8b688887d31867df58b23d98508d71b8053c521f00b7ccadd04acd5c62e8dcf898e528fbe3f7a5416367bfc478df25d1ff71a001cdb99240092580070fc717e6a0caa7e4772f3796549e685bad6505d740ba33586c7d603d3f24a6a39392d77b637ba82fdaa81fc0fcc03f69ee1083ba8a962a06856a3b5f39c8aa6316dc2b41279a0ccc4bfdb8d3a0e46ad5d74dc2cdc76faf60e26f09da7c3d2c412049700b77c238bef28718646775954b7f96b58bffb2ae65cc118463aa3b81061b759986059fb98c3cec90428b5cef06f3fc7b0869f2336496078a10721c611c1e3dee4a9a0ea6247f62f1d6302fd42212f92e4c7d80cb8c538350184d92b6c21a788484ab6057bd3f48f3ba8389ada729b71280310192305924172e47fd2c3458f1dc55cb30422b95eabb98eb4fad1a2d306cd3812e7f33f02506b32c83ba2da3f5fc8b531ebeef9d5a99ce168d4b29e4c3267c2c9269be57c64f3eb631c3b1b4f0fd381ade76654455503b593fc840349901a70dde7a5ed88a97c421df057d85bdb42a23bcae9dbb661aa29259d64e32beaf7a7653befd3afce0fea5a32370f576b42c3812e63c548b7b34aae44fe49348c1cdeef5028c27ba282df37e4dec0182340fd98fef42168e14388903893ea899977e8832ba98eeee4761ec192152eaec01fbfc2b230148ff0c654476c2d6eaab41e02ce91dec0a3a99086e74481b129e6d7fbb8da776959605af9014a730884ba3b921a13524f3eaf71ad71a8da086ad57adffc9ba33ae2b7f39c9942fe6afcbebe5168df51f8853ac676689cd035f406a6ae10a5b7ccb8e0702c5d791febbbea151b5290c9d0b66504619eb45d4551dffb1d4b52a3cd6bfa597f0f3da143f36a8f2647ced772d10f32086169c2b2911819a8c36ca5e567dcc0b2be1a38e5cbb8fa3abc3be6c575db623d82260d6154a9550452e48361c6283459d1dfec0e5fb4e04d66b7b52a9b4c8ba694187d3877ac435398714dd34378b24fe22e82c0c954cbe95f39674ac51dd5df13376a00ac3eacf18950f068697c1e85656fef890bdb9c96b9b8c157042c9789270b7f3106aa6c9a265a8107312aef07e03bfc7a1d81a5d3259e3639819f9afdb211ab2a621d1b948eb3d6201843d8267b611819cf1b5b1a0332e504b383be1463ab03e149e1685e3bca264827a39dc873abbd00c7d9ce7fbbc86bf001b9644a58c99ac7730434cc21cd64be5ff20e3dfb7827f9b679e20b376f57360fdeded851d2833060b9c6422b6987361e8a9de702320b96b85e512c8fb6aba836d30f88ee60f57844936d2c26ab35bc6e12bccb1235c55a93bc6c1f2beec900c5ba1497750cfb3b1d33368d34cd0bfa7f9f011ea2181cc6c8911c203a3e5fd57cc0bbd0403a07dd9b0cf607b349151eac7047fb7d781a96eba4e5112d78249f37796679b79c7e47f54d9f1ec51d7e0a0eb87645cd2555b4be23895cea4e1cfca9b40927ebbefc149d5d7f3ed21ac09f1bc4282b3645fc35c3d9069fbf3741c4058e6199b99190c7d9efda1dcd344674f479d805809019ae9667e437ef1a8acaf2b729850df55ce6e69fd586593331c4505cb36694cbd21f82ae964fdf741da26ed0a07fe6d68191ce3158dfa7dba939ed027a781b503d80ef1f0a2e22"}) 866.480893ms ago: executing program 8 (id=2296): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000000)="742d238024ad11b9f2035b99", 0xc) sendfile(r1, r0, 0x0, 0x3ffff) (fail_nth: 2) 865.716254ms ago: executing program 5 (id=2297): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x5, 0x2e3, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000000)="742d238024ad11b9f2035b99", 0xc) sendfile(r1, r0, 0x0, 0x3ffff) 419.323821ms ago: executing program 8 (id=2298): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) 418.801562ms ago: executing program 9 (id=2299): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open$dir(&(0x7f0000000080)='./file0\x00', 0x105000, 0x48) move_mount(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b707000000000000000000009500000000000000000000000000000000a46f4d"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 418.277421ms ago: executing program 8 (id=2300): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x4, @perf_config_ext, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0x0, r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0xfffffeaa, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0xa}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd, 0x0, 0x0, 0x3}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 358.029312ms ago: executing program 9 (id=2301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb430fb655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r2, r1) 357.182631ms ago: executing program 9 (id=2302): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000480)={[{@grpquota}, {@resuid}, {@resuid}, {@noload}, {@lazytime}, {@data_err_ignore}, {@discard}, {@data_err_abort}]}, 0x1, 0x5df, &(0x7f0000001980)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCRKSwsYYlzA1pAGP+LGjZUWRAo0tEaLJpQENybGjTEmrlyI/4US2bLSlQs3rgwJUcPSxDF3em/ptHf6ZTu3cn+/ZOi558zlnOn0mXPmzDl3AqiswfSfWsT+iJhOIvqT+cWyzsgKBxfu9+DPj86mtyTq9dd+TyLJ8vL7J9nPvuzknoj48Yck9nWsrHdm7trF8ampyavZ8fDspenhmblrhy9cGj8/eX7y8ugLoyeOHzt+YuTIph7X9YK80zfffb//k7E3v/nqr2Tk21/GkjgZL2d3XPo4tspgDDZ+J8nKor4TW11ZSTqyv5OlT3HSWXzf3nY1inXLn7+uiHgi+qMjHj55/fHxK6U2DthW9SSiDlRUIv6hovJxQP7efvn74FopoxKgHe6fWpgAWBn/nQtzg9HTmBvY/SCJpdM6SURsbmau2Z6IuHtn7Oa5O2M3Y5vm4YBi8zci4smi+E8a8T8QPTHQiP9aU/yn44Iz2c80/9VN1r98qlj8Q/ssxH/PqvEfLeL/rSXx//Ym6x98mHyntyn+fVoEAAAAAAAAG3X7VEQ8X/T5f21x/U8UrP/pi4iTW1D/4LLjlZ//1+5tQTVAgfunIl4qXP9by1f/DnRkqf811gN0JecuTE0eiYj/R8Sh6NqVHo+0qmBXxOFP933ZqngwW/+X39L672ZrAbN23Ovc1XzOxPjs+BY8dKi8+zcinipc/5ss9v9JQf+fvh5Mr7OOfc/eOtOqbO34B7ZL/euIg4X9/8OrViSrX59juDEeGM5HBSs9/eFn37Wqf7Px3+ISE8AGpP3/7tXjfyBZer2emY3XcXSus96qbLPj/+7k9cYlZ7qzvA/GZ2evjkR0J6c70tym/NGNtxkeRXk85PGSxv+hZ1af/ysa//dGxPyy/zv5o3lPce7xv/t+bdUe438oTxr/Exvq/zeeGL018H2r+tfX/x9r9PWHshzzf7DgizxMu5vzC8Kxs6io3e0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdBLSL2RFIbWkzXakNDEX0R8Vjsrk1dmZl97tyV9y5PpGWN7/+v5d/0279wnOTf/z+w5Hh02fHRiNgbEZ939DaOh85emZoo+8EDAAAAAAAAAAAAAAAAAADADtHXYv9/6reOslsHbLvOshsAlKYg/n8qox1A++n/obrEP1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q8AAAAAAI+UvQdu/5xExPyLvY1bqjsr6yq1ZcB2q5XdAKA0LvED1WXpD1SX9/hAskZ5T8uT1jpzNdNn/8XJAAAAAAAAAAAAAFA5B/fb/w9VZf8/VJf9/1Bd+f7/AyW3A2g/7/GBWGMnf+H+/zXPAgAAAAAAAAAAAAC20szctYvjU1OTVyXe2BnNaGeiXq9fT/8Kdkp7/uOJfCn8TmnPskS+1299Z5X3mgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT7JwAA//8hASTV") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff14"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mkdir(0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x255}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4084040}, 0x800) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000), 0xf) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r8, &(0x7f0000000000)=[{&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/81, 0x51}], 0x2, 0x800, 0x5) 154.93778ms ago: executing program 9 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x2, 0x4eb, &(0x7f0000000a40)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x18) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x60, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80003, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) dup2(r7, r8) 75.22935ms ago: executing program 0 (id=2304): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESOCT=r3, @ANYRESDEC=r1], 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x20088801) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r7}, 0x10) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r8 = io_uring_setup(0x6282, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x5c, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r11, @ANYBLOB="05002f"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 10.84563ms ago: executing program 3 (id=2305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 0s ago: executing program 9 (id=2306): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b0ac16c0af"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) socket$inet6(0xa, 0x3, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x6, 0x8, {{0xc, 0x4, 0x2, 0x30, 0x30, 0x65, 0x0, 0x27, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xba, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x5}, {@multicast1, 0x8}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@initdev, @broadcast}, &(0x7f0000000480)=0xc) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000b318010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x388c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) kernel console output (not intermixed with test programs): ta tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 133.525158][ T8949] EXT4-fs (loop9): mount failed [ 133.648733][ T8953] pim6reg1: entered promiscuous mode [ 133.654061][ T8953] pim6reg1: entered allmulticast mode [ 133.732971][ T8957] loop8: detected capacity change from 0 to 1024 [ 133.740024][ T8957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.830225][ T8957] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.844735][ T8957] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1630: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 133.862490][ T8957] EXT4-fs (loop8): Remounting filesystem read-only [ 134.088431][ T8968] pim6reg1: entered promiscuous mode [ 134.093815][ T8968] pim6reg1: entered allmulticast mode [ 134.103386][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1636'. [ 134.112458][ T8973] netlink: 'syz.3.1636': attribute type 1 has an invalid length. [ 134.134707][ T8973] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.143043][ T8973] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.151390][ T8973] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.159893][ T8973] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.172666][ T8973] vxlan0: entered promiscuous mode [ 134.177865][ T8973] vxlan0: entered allmulticast mode [ 134.191707][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1633'. [ 134.275002][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.280094][ T8991] loop9: detected capacity change from 0 to 1024 [ 134.287260][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.298214][ T8991] EXT4-fs error (device loop9): ext4_quota_enable:7108: comm syz.9.1643: Bad quota inum: 9, type: 2 [ 134.309432][ T8991] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 134.324935][ T8991] EXT4-fs (loop9): mount failed [ 134.329149][ T8995] loop4: detected capacity change from 0 to 2048 [ 134.346019][ T8995] EXT4-fs: Ignoring removed i_version option [ 134.399018][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.422802][ T8995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.433661][ T9002] loop8: detected capacity change from 0 to 512 [ 134.447304][ T9002] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1645: corrupted in-inode xattr: invalid ea_ino [ 134.457280][ T8995] rdma_op ffff888102fc9580 conn xmit_rdma 0000000000000000 [ 134.467444][ T9004] pim6reg1: entered promiscuous mode [ 134.473249][ T9004] pim6reg1: entered allmulticast mode [ 134.483194][ T9002] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1645: couldn't read orphan inode 15 (err -117) [ 134.497316][ T9002] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.500542][ T3302] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 134.555655][ T5912] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.634740][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.698426][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.749703][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.824109][ T9012] lo speed is unknown, defaulting to 1000 [ 134.876660][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.033974][ T9042] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1653'. [ 135.061020][ T9042] 9pnet_fd: Insufficient options for proto=fd [ 135.157968][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.169451][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.179305][ T50] bond0 (unregistering): Released all slaves [ 135.213951][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 135.250309][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1653'. [ 135.315745][ T50] tipc: Disabling bearer [ 135.321005][ T50] tipc: Left network mode [ 135.458873][ T50] hsr_slave_0: left promiscuous mode [ 135.466321][ T50] hsr_slave_1: left promiscuous mode [ 135.476035][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.483475][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.511237][ T50] veth1_macvtap: left promiscuous mode [ 135.516908][ T50] veth0_macvtap: left promiscuous mode [ 135.522467][ T50] veth1_vlan: left promiscuous mode [ 135.527785][ T50] veth0_vlan: left promiscuous mode [ 135.539729][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.598637][ T9079] loop8: detected capacity change from 0 to 512 [ 135.651305][ T9087] FAULT_INJECTION: forcing a failure. [ 135.651305][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 135.664043][ T9087] CPU: 0 UID: 0 PID: 9087 Comm: syz.9.1671 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 135.669337][ T9079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.674725][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.674758][ T9087] Call Trace: [ 135.674768][ T9087] [ 135.687408][ T9079] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.697192][ T9087] dump_stack_lvl+0xf2/0x150 [ 135.718711][ T9087] dump_stack+0x15/0x1a [ 135.722896][ T9087] should_fail_ex+0x223/0x230 [ 135.727667][ T9087] should_failslab+0x8f/0xb0 [ 135.732323][ T9087] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 135.738734][ T9087] ? audit_log_vformat+0x23a/0x490 [ 135.743933][ T9087] ? sidtab_sid2str_get+0xb8/0x140 [ 135.749069][ T9087] kmemdup_noprof+0x2a/0x60 [ 135.753710][ T9087] sidtab_sid2str_get+0xb8/0x140 [ 135.758763][ T9087] security_sid_to_context_core+0x1eb/0x2f0 [ 135.764733][ T9087] security_sid_to_context+0x27/0x30 [ 135.770039][ T9087] avc_audit_post_callback+0x10d/0x530 [ 135.775568][ T9087] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 135.781570][ T9087] common_lsm_audit+0x90f/0x1010 [ 135.786557][ T9087] ? avc_denied+0xf1/0x110 [ 135.791010][ T9087] slow_avc_audit+0xf9/0x140 [ 135.795621][ T9087] avc_has_perm+0x129/0x160 [ 135.800183][ T9087] sel_write_checkreqprot+0xb0/0x220 [ 135.805556][ T9087] ? __pfx_sel_write_checkreqprot+0x10/0x10 [ 135.811497][ T9087] vfs_write+0x281/0x920 [ 135.815766][ T9087] ? __fget_files+0x17c/0x1c0 [ 135.820478][ T9087] ksys_write+0xe8/0x1b0 [ 135.824743][ T9087] __x64_sys_write+0x42/0x50 [ 135.829471][ T9087] x64_sys_call+0x287e/0x2dc0 [ 135.834278][ T9087] do_syscall_64+0xc9/0x1c0 [ 135.838816][ T9087] ? clear_bhb_loop+0x55/0xb0 [ 135.843522][ T9087] ? clear_bhb_loop+0x55/0xb0 [ 135.848271][ T9087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.854267][ T9087] RIP: 0033:0x7f4498785d29 [ 135.858694][ T9087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.878382][ T9087] RSP: 002b:00007f4496df1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.886818][ T9087] RAX: ffffffffffffffda RBX: 00007f4498975fa0 RCX: 00007f4498785d29 [ 135.894800][ T9087] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.902781][ T9087] RBP: 00007f4496df1090 R08: 0000000000000000 R09: 0000000000000000 [ 135.910790][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.918771][ T9087] R13: 0000000000000000 R14: 00007f4498975fa0 R15: 00007ffcfb020528 [ 135.926771][ T9087] [ 135.963045][ T50] team0 (unregistering): Port device team_slave_1 removed [ 135.973352][ T50] team0 (unregistering): Port device team_slave_0 removed [ 136.000117][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.057079][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.064262][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.074046][ T9012] bridge_slave_0: entered allmulticast mode [ 136.082557][ T9012] bridge_slave_0: entered promiscuous mode [ 136.105195][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.112487][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.123987][ T9012] bridge_slave_1: entered allmulticast mode [ 136.130816][ T9012] bridge_slave_1: entered promiscuous mode [ 136.162025][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.175105][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.198240][ T9012] team0: Port device team_slave_0 added [ 136.205189][ T9012] team0: Port device team_slave_1 added [ 136.285651][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.292740][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.318822][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.534336][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.541382][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.567576][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.625115][ T9012] hsr_slave_0: entered promiscuous mode [ 136.631379][ T9012] hsr_slave_1: entered promiscuous mode [ 136.638597][ T9012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.646891][ T9012] Cannot create hsr debugfs directory [ 136.707281][ T9012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.719999][ T9109] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1674'. [ 136.748294][ T9012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.778515][ T9012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.844056][ T9012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.889099][ T9116] loop9: detected capacity change from 0 to 1024 [ 136.898674][ T9116] EXT4-fs error (device loop9): ext4_quota_enable:7108: comm syz.9.1678: Bad quota inum: 9, type: 2 [ 136.909772][ T9116] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 136.924796][ T9116] EXT4-fs (loop9): mount failed [ 136.944107][ T9012] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.952949][ T9012] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.963216][ T9012] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.974667][ T9012] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.029753][ T9012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.051184][ T9116] pim6reg1: entered promiscuous mode [ 137.056711][ T9116] pim6reg1: entered allmulticast mode [ 137.080702][ T9012] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.082790][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 137.082805][ T29] audit: type=1326 audit(1734914922.055:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.101571][ T9012] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.117194][ T29] audit: type=1326 audit(1734914922.055:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.127558][ T9012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.164092][ T29] audit: type=1326 audit(1734914922.145:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.187669][ T29] audit: type=1326 audit(1734914922.145:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.211363][ T29] audit: type=1326 audit(1734914922.145:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.235782][ T29] audit: type=1326 audit(1734914922.145:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5bbed4690 code=0x7ffc0000 [ 137.274208][ T29] audit: type=1326 audit(1734914922.145:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc5bbed4690 code=0x7ffc0000 [ 137.298043][ T29] audit: type=1326 audit(1734914922.145:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.322029][ T29] audit: type=1326 audit(1734914922.145:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.345546][ T29] audit: type=1326 audit(1734914922.145:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9118 comm="syz.8.1679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 137.371025][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.378130][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.386991][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.394045][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.441652][ T9133] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 137.441717][ T9131] IPVS: stopping master sync thread 9133 ... [ 137.461286][ T9134] pim6reg1: entered promiscuous mode [ 137.466713][ T9134] pim6reg1: entered allmulticast mode [ 137.527364][ T9012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.548749][ T9144] loop9: detected capacity change from 0 to 512 [ 137.601206][ T9144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.771056][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.900065][ T9176] loop9: detected capacity change from 0 to 512 [ 137.944584][ T9012] veth0_vlan: entered promiscuous mode [ 137.953503][ T9012] veth1_vlan: entered promiscuous mode [ 137.965795][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.974290][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.139238][ T9012] veth0_macvtap: entered promiscuous mode [ 138.194055][ T9185] FAULT_INJECTION: forcing a failure. [ 138.194055][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.207196][ T9185] CPU: 1 UID: 0 PID: 9185 Comm: syz.3.1697 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 138.217953][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.228137][ T9185] Call Trace: [ 138.231428][ T9185] [ 138.234365][ T9185] dump_stack_lvl+0xf2/0x150 [ 138.239075][ T9185] dump_stack+0x15/0x1a [ 138.243258][ T9185] should_fail_ex+0x223/0x230 [ 138.248027][ T9185] should_fail+0xb/0x10 [ 138.252207][ T9185] should_fail_usercopy+0x1a/0x20 [ 138.257334][ T9185] _copy_to_user+0x20/0xa0 [ 138.261783][ T9185] simple_read_from_buffer+0xa0/0x110 [ 138.265386][ T9012] veth1_macvtap: entered promiscuous mode [ 138.267224][ T9185] proc_fail_nth_read+0xf9/0x140 [ 138.277905][ T9185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.283335][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.283486][ T9185] vfs_read+0x1a2/0x700 [ 138.294030][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.298124][ T9185] ? __rcu_read_unlock+0x4e/0x70 [ 138.298164][ T9185] ? __fget_files+0x17c/0x1c0 [ 138.307994][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.312944][ T9185] ksys_read+0xe8/0x1b0 [ 138.317650][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.327992][ T9185] __x64_sys_read+0x42/0x50 [ 138.328029][ T9185] x64_sys_call+0x2874/0x2dc0 [ 138.332168][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.341953][ T9185] do_syscall_64+0xc9/0x1c0 [ 138.341980][ T9185] ? clear_bhb_loop+0x55/0xb0 [ 138.346532][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.351178][ T9185] ? clear_bhb_loop+0x55/0xb0 [ 138.361605][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.366058][ T9185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.366103][ T9185] RIP: 0033:0x7f78a31e473c [ 138.370757][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.380538][ T9185] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.385232][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.385247][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.385262][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.385274][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.398657][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.401605][ T9185] RSP: 002b:00007f78a1851030 EFLAGS: 00000246 [ 138.443250][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.445850][ T9185] ORIG_RAX: 0000000000000000 [ 138.445862][ T9185] RAX: ffffffffffffffda RBX: 00007f78a33d5fa0 RCX: 00007f78a31e473c [ 138.445880][ T9185] RDX: 000000000000000f RSI: 00007f78a18510a0 RDI: 0000000000000007 [ 138.445895][ T9185] RBP: 00007f78a1851090 R08: 0000000000000000 R09: 0000000000000000 [ 138.445910][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.455731][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.466177][ T9185] R13: 0000000000000000 R14: 00007f78a33d5fa0 R15: 00007ffc750b7b78 [ 138.466203][ T9185] [ 138.559556][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.570317][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.571602][ T9176] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.580207][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.602623][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.612475][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.622953][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.632809][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.643290][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.653158][ T9012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.663593][ T9012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.710066][ T9012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.721653][ T9012] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.730521][ T9012] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.739271][ T9012] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.748016][ T9012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.782499][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.863772][ T9207] loop5: detected capacity change from 0 to 256 [ 139.142834][ T9228] loop9: detected capacity change from 0 to 512 [ 139.152836][ T9228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.226894][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.247956][ T9231] netlink: 133492 bytes leftover after parsing attributes in process `syz.9.1713'. [ 139.507041][ T9237] Falling back ldisc for ttyS3. [ 139.576890][ T9241] loop3: detected capacity change from 0 to 1024 [ 139.588629][ T9241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.638766][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.779682][ T9260] sd 0:0:1:0: device reset [ 139.799397][ T9256] pim6reg1: entered promiscuous mode [ 139.804771][ T9256] pim6reg1: entered allmulticast mode [ 139.920906][ T9269] syz.8.1727[9269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.921071][ T9269] syz.8.1727[9269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.932717][ T9269] syz.8.1727[9269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.131384][ T9292] pim6reg1: entered promiscuous mode [ 140.148123][ T9292] pim6reg1: entered allmulticast mode [ 140.158227][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1734'. [ 140.168228][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1734'. [ 140.270368][ T9301] syz.3.1739[9301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.270513][ T9301] syz.3.1739[9301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.287572][ T9297] loop8: detected capacity change from 0 to 2048 [ 140.308106][ T9301] syz.3.1739[9301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.335891][ T9297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.347109][ T9305] loop9: detected capacity change from 0 to 512 [ 140.354230][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.385228][ T9305] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.1736: corrupted in-inode xattr: invalid ea_ino [ 140.407948][ T9307] FAULT_INJECTION: forcing a failure. [ 140.407948][ T9307] name failslab, interval 1, probability 0, space 0, times 0 [ 140.420803][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.3.1740 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 140.431506][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.441624][ T9307] Call Trace: [ 140.444955][ T9307] [ 140.447899][ T9307] dump_stack_lvl+0xf2/0x150 [ 140.452554][ T9307] dump_stack+0x15/0x1a [ 140.456741][ T9307] should_fail_ex+0x223/0x230 [ 140.461491][ T9307] ? inet6_rtm_newroute+0x647/0x1260 [ 140.466805][ T9307] should_failslab+0x8f/0xb0 [ 140.471490][ T9307] __kmalloc_cache_noprof+0x4e/0x320 [ 140.476794][ T9307] inet6_rtm_newroute+0x647/0x1260 [ 140.481967][ T9307] ? perf_tp_event+0xfc1/0x1000 [ 140.486836][ T9307] ? memcg_list_lru_alloc+0xce/0x4e0 [ 140.492188][ T9307] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 140.497684][ T9307] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 140.503314][ T9307] rtnetlink_rcv_msg+0x6aa/0x710 [ 140.508301][ T9307] ? ref_tracker_free+0x3a5/0x410 [ 140.513419][ T9307] ? __dev_queue_xmit+0x186/0x2090 [ 140.518554][ T9307] netlink_rcv_skb+0x12c/0x230 [ 140.523364][ T9307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.528974][ T9307] rtnetlink_rcv+0x1c/0x30 [ 140.533496][ T9307] netlink_unicast+0x599/0x670 [ 140.538333][ T9307] netlink_sendmsg+0x5cc/0x6e0 [ 140.543146][ T9307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.548446][ T9307] __sock_sendmsg+0x140/0x180 [ 140.553147][ T9307] ____sys_sendmsg+0x312/0x410 [ 140.557962][ T9307] __sys_sendmsg+0x19d/0x230 [ 140.558265][ T9333] FAULT_INJECTION: forcing a failure. [ 140.558265][ T9333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 140.562690][ T9307] __x64_sys_sendmsg+0x46/0x50 [ 140.580683][ T9307] x64_sys_call+0x2734/0x2dc0 [ 140.585367][ T9307] do_syscall_64+0xc9/0x1c0 [ 140.589874][ T9307] ? clear_bhb_loop+0x55/0xb0 [ 140.594636][ T9307] ? clear_bhb_loop+0x55/0xb0 [ 140.599322][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.605305][ T9307] RIP: 0033:0x7f78a31e5d29 [ 140.609777][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.629401][ T9307] RSP: 002b:00007f78a1851038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.637825][ T9307] RAX: ffffffffffffffda RBX: 00007f78a33d5fa0 RCX: 00007f78a31e5d29 [ 140.645851][ T9307] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 140.653842][ T9307] RBP: 00007f78a1851090 R08: 0000000000000000 R09: 0000000000000000 [ 140.661826][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.669884][ T9307] R13: 0000000000000000 R14: 00007f78a33d5fa0 R15: 00007ffc750b7b78 [ 140.677882][ T9307] [ 140.680959][ T9333] CPU: 1 UID: 0 PID: 9333 Comm: syz.8.1741 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 140.691663][ T9333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.695649][ T9305] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.1736: couldn't read orphan inode 15 (err -117) [ 140.701720][ T9333] Call Trace: [ 140.716882][ T9333] [ 140.716950][ T9305] EXT4-fs (loop9): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.719810][ T9333] dump_stack_lvl+0xf2/0x150 [ 140.736388][ T9333] dump_stack+0x15/0x1a [ 140.740573][ T9333] should_fail_ex+0x223/0x230 [ 140.745324][ T9333] should_fail_alloc_page+0xfd/0x110 [ 140.750758][ T9333] __alloc_pages_noprof+0x109/0x340 [ 140.755990][ T9333] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 140.761379][ T9333] folio_alloc_mpol_noprof+0x36/0x70 [ 140.766689][ T9333] __read_swap_cache_async+0x152/0x480 [ 140.772300][ T9333] swap_cluster_readahead+0x279/0x3f0 [ 140.777797][ T9333] swapin_readahead+0xe4/0x6f0 [ 140.782574][ T9333] ? __rcu_read_unlock+0x34/0x70 [ 140.787620][ T9333] ? swap_cache_get_folio+0x77/0x210 [ 140.792921][ T9333] do_swap_page+0x31b/0x2550 [ 140.797528][ T9333] ? __rcu_read_lock+0x36/0x50 [ 140.802386][ T9333] ? __pfx_default_wake_function+0x10/0x10 [ 140.808220][ T9333] handle_mm_fault+0x8e4/0x2ac0 [ 140.813084][ T9333] ? __rcu_read_unlock+0x4e/0x70 [ 140.818064][ T9333] ? __rcu_read_lock+0x36/0x50 [ 140.822874][ T9333] __get_user_pages+0xf2c/0x2670 [ 140.827855][ T9333] __gup_longterm_locked+0x932/0xf90 [ 140.833251][ T9333] ? down_read_killable+0x172/0x6b0 [ 140.838473][ T9333] ? process_vm_rw+0x2ca/0x890 [ 140.843247][ T9333] ? should_fail_ex+0xd7/0x230 [ 140.848029][ T9333] ? down_read+0x171/0x4b0 [ 140.852482][ T9333] pin_user_pages_remote+0x7f/0xb0 [ 140.857607][ T9333] process_vm_rw+0x4bc/0x890 [ 140.862428][ T9333] ? ksys_write+0x176/0x1b0 [ 140.867016][ T9333] __x64_sys_process_vm_writev+0x7a/0x90 [ 140.872779][ T9333] x64_sys_call+0x2c48/0x2dc0 [ 140.877490][ T9333] do_syscall_64+0xc9/0x1c0 [ 140.882040][ T9333] ? clear_bhb_loop+0x55/0xb0 [ 140.886728][ T9333] ? clear_bhb_loop+0x55/0xb0 [ 140.891412][ T9333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.897331][ T9333] RIP: 0033:0x7fc5bbed5d29 [ 140.901755][ T9333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.921372][ T9333] RSP: 002b:00007fc5ba547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 140.929805][ T9333] RAX: ffffffffffffffda RBX: 00007fc5bc0c5fa0 RCX: 00007fc5bbed5d29 [ 140.937808][ T9333] RDX: 0000000000000001 RSI: 0000000020c22000 RDI: 000000000000013c [ 140.945788][ T9333] RBP: 00007fc5ba547090 R08: 0000000000000001 R09: 0000000000000000 [ 140.953794][ T9333] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.961780][ T9333] R13: 0000000000000000 R14: 00007fc5bc0c5fa0 R15: 00007ffcb18b5628 [ 140.969773][ T9333] [ 140.988179][ T9305] FAULT_INJECTION: forcing a failure. [ 140.988179][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.001396][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.9.1736 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 141.012341][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.022418][ T9305] Call Trace: [ 141.025734][ T9305] [ 141.028680][ T9305] dump_stack_lvl+0xf2/0x150 [ 141.033342][ T9305] dump_stack+0x15/0x1a [ 141.037600][ T9305] should_fail_ex+0x223/0x230 [ 141.042313][ T9305] should_fail+0xb/0x10 [ 141.046555][ T9305] should_fail_usercopy+0x1a/0x20 [ 141.051655][ T9305] _copy_from_user+0x1e/0xb0 [ 141.056465][ T9305] kstrtouint_from_user+0x76/0xe0 [ 141.061521][ T9305] ? 0xffffffff81000000 [ 141.065777][ T9305] ? selinux_file_permission+0x22a/0x360 [ 141.071567][ T9305] proc_fail_nth_write+0x4f/0x150 [ 141.076623][ T9305] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 141.082314][ T9305] vfs_write+0x281/0x920 [ 141.086667][ T9305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.092363][ T9305] ? __fget_files+0x17c/0x1c0 [ 141.097179][ T9305] ksys_write+0xe8/0x1b0 [ 141.101480][ T9305] __x64_sys_write+0x42/0x50 [ 141.106096][ T9305] x64_sys_call+0x287e/0x2dc0 [ 141.110783][ T9305] do_syscall_64+0xc9/0x1c0 [ 141.115337][ T9305] ? clear_bhb_loop+0x55/0xb0 [ 141.120017][ T9305] ? clear_bhb_loop+0x55/0xb0 [ 141.124744][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.130791][ T9305] RIP: 0033:0x7f44987847df [ 141.135258][ T9305] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 141.154931][ T9305] RSP: 002b:00007f4496df1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 141.163400][ T9305] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f44987847df [ 141.171387][ T9305] RDX: 0000000000000001 RSI: 00007f4496df10a0 RDI: 0000000000000005 [ 141.179402][ T9305] RBP: 00007f4496df1090 R08: 0000000000000000 R09: 0000000000000000 [ 141.187466][ T9305] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 141.195523][ T9305] R13: 0000000000000000 R14: 00007f4498975fa0 R15: 00007ffcfb020528 [ 141.203505][ T9305] [ 141.209467][ T9373] rdma_rxe: rxe_newlink: failed to add sit0 [ 141.230558][ T7529] EXT4-fs (loop9): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 141.295513][ T9379] pim6reg1: entered promiscuous mode [ 141.300917][ T9379] pim6reg1: entered allmulticast mode [ 141.441914][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 141.451525][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'. [ 141.868017][ T9402] loop3: detected capacity change from 0 to 4096 [ 141.883113][ T9402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.894133][ T9409] 9pnet: Could not find request transport: r [ 141.926134][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.960794][ T9412] IPv6: Can't replace route, no match found [ 142.099720][ T9431] loop3: detected capacity change from 0 to 512 [ 142.118224][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 142.118239][ T29] audit: type=1326 audit(1734914927.095:11421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.148083][ T29] audit: type=1326 audit(1734914927.095:11422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.205259][ T29] audit: type=1326 audit(1734914927.145:11423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.229057][ T29] audit: type=1326 audit(1734914927.145:11424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.252853][ T29] audit: type=1326 audit(1734914927.145:11425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.276445][ T29] audit: type=1326 audit(1734914927.145:11426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.276547][ T9431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.299994][ T29] audit: type=1326 audit(1734914927.145:11427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.317134][ T9438] loop5: detected capacity change from 0 to 2048 [ 142.336064][ T29] audit: type=1326 audit(1734914927.145:11428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.365838][ T29] audit: type=1326 audit(1734914927.145:11429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9432 comm="syz.0.1764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 142.371343][ T9431] ext4 filesystem being mounted at /340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.458840][ T9450] wireguard0: entered promiscuous mode [ 142.464488][ T9450] wireguard0: entered allmulticast mode [ 142.471010][ T9452] loop5: p1 < > p4 [ 142.491142][ T9452] loop5: p4 size 8388608 extends beyond EOD, truncated [ 142.512430][ T29] audit: type=1326 audit(1734914927.485:11430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 142.519413][ T9438] loop5: p1 < > p4 [ 142.541409][ T9438] loop5: p4 size 8388608 extends beyond EOD, truncated [ 142.547166][ T9454] loop9: detected capacity change from 0 to 2048 [ 142.555189][ T9454] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.568332][ T2999] loop5: p1 < > p4 [ 142.572855][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 142.623085][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 142.623749][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 142.658076][ T9454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.666128][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 142.681500][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 142.703517][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 142.714834][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 142.736703][ T9471] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 142.761046][ T9470] loop5: detected capacity change from 0 to 2048 [ 142.771427][ T9477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.780001][ T9477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.786019][ T9454] IPVS: stopping master sync thread 9471 ... [ 142.789526][ T9477] FAULT_INJECTION: forcing a failure. [ 142.789526][ T9477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.807106][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.1776 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 142.817802][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.827942][ T9477] Call Trace: [ 142.831242][ T9477] [ 142.834181][ T9477] dump_stack_lvl+0xf2/0x150 [ 142.838901][ T9477] dump_stack+0x15/0x1a [ 142.843073][ T9477] should_fail_ex+0x223/0x230 [ 142.847781][ T9477] should_fail+0xb/0x10 [ 142.852060][ T9477] should_fail_usercopy+0x1a/0x20 [ 142.857109][ T9477] _copy_from_user+0x1e/0xb0 [ 142.861811][ T9477] do_ipt_set_ctl+0x423/0x8b0 [ 142.866541][ T9477] ? tcp_release_cb+0xfe/0x380 [ 142.871393][ T9477] nf_setsockopt+0x195/0x1b0 [ 142.876061][ T9477] ip_setsockopt+0xea/0x100 [ 142.880612][ T9477] ipv6_setsockopt+0xef/0x130 [ 142.885320][ T9477] tcp_setsockopt+0x93/0xb0 [ 142.889868][ T9477] sock_common_setsockopt+0x64/0x80 [ 142.895193][ T9477] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 142.901119][ T9477] __sys_setsockopt+0x187/0x200 [ 142.906003][ T9477] __x64_sys_setsockopt+0x66/0x80 [ 142.911108][ T9477] x64_sys_call+0x282e/0x2dc0 [ 142.915812][ T9477] do_syscall_64+0xc9/0x1c0 [ 142.920460][ T9477] ? clear_bhb_loop+0x55/0xb0 [ 142.925171][ T9477] ? clear_bhb_loop+0x55/0xb0 [ 142.929924][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.936005][ T9477] RIP: 0033:0x7f26d62a5d29 [ 142.940442][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.960162][ T9477] RSP: 002b:00007f26d4917038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.968653][ T9477] RAX: ffffffffffffffda RBX: 00007f26d6495fa0 RCX: 00007f26d62a5d29 [ 142.976644][ T9477] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 142.984621][ T9477] RBP: 00007f26d4917090 R08: 0000000000000248 R09: 0000000000000000 [ 142.992624][ T9477] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.000657][ T9477] R13: 0000000000000000 R14: 00007f26d6495fa0 R15: 00007ffc1bcd3838 [ 143.008671][ T9477] [ 143.016121][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.084749][ T9481] loop3: detected capacity change from 0 to 2048 [ 143.101198][ T9485] Cannot find del_set index 0 as target [ 143.102700][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.148014][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 143.155466][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.162962][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.170405][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.177843][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.185255][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.192730][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.200235][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.207650][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.215058][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.218239][ T9487] loop5: detected capacity change from 0 to 8192 [ 143.222472][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.236365][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.243778][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.267864][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.270677][ T9481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.275291][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.294704][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.296246][ T9481] 9pnet_fd: Insufficient options for proto=fd [ 143.302190][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.315654][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.323100][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.330618][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.338042][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.345460][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.352933][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.360465][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.367898][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.375310][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.382833][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.390300][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.397724][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.405136][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.412605][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.420037][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.427596][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.435170][ T1069] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 143.453982][ T1069] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 143.515233][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.527948][ T9504] loop5: detected capacity change from 0 to 512 [ 143.536835][ T9505] loop8: detected capacity change from 0 to 256 [ 143.572310][ T9505] FAT-fs (loop8): Directory bread(block 64) failed [ 143.572565][ T9504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.583509][ T9505] FAT-fs (loop8): Directory bread(block 65) failed [ 143.601435][ T9505] FAT-fs (loop8): Directory bread(block 66) failed [ 143.608411][ T9505] FAT-fs (loop8): Directory bread(block 67) failed [ 143.615056][ T9505] FAT-fs (loop8): Directory bread(block 68) failed [ 143.638896][ T9505] FAT-fs (loop8): Directory bread(block 69) failed [ 143.645762][ T9505] FAT-fs (loop8): Directory bread(block 70) failed [ 143.652587][ T9505] FAT-fs (loop8): Directory bread(block 71) failed [ 143.659339][ T9505] FAT-fs (loop8): Directory bread(block 72) failed [ 143.666229][ T9505] FAT-fs (loop8): Directory bread(block 73) failed [ 143.714341][ T9500] syz.8.1783: attempt to access beyond end of device [ 143.714341][ T9500] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 143.728915][ T9500] syz.8.1783: attempt to access beyond end of device [ 143.728915][ T9500] loop8: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 143.730940][ T9520] syz.0.1791[9520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.788967][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.875307][ T9523] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 143.934360][ T9540] netlink: 133492 bytes leftover after parsing attributes in process `syz.5.1793'. [ 144.043316][ T9553] FAULT_INJECTION: forcing a failure. [ 144.043316][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 144.056069][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.5.1801 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 144.066813][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.076995][ T9553] Call Trace: [ 144.080420][ T9553] [ 144.083389][ T9553] dump_stack_lvl+0xf2/0x150 [ 144.088046][ T9553] dump_stack+0x15/0x1a [ 144.092221][ T9553] should_fail_ex+0x223/0x230 [ 144.096977][ T9553] should_failslab+0x8f/0xb0 [ 144.101598][ T9553] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 144.107949][ T9553] ? sidtab_sid2str_get+0xb8/0x140 [ 144.113160][ T9553] kmemdup_noprof+0x2a/0x60 [ 144.117742][ T9553] sidtab_sid2str_get+0xb8/0x140 [ 144.122724][ T9553] security_sid_to_context_core+0x1eb/0x2f0 [ 144.128791][ T9553] security_sid_to_context+0x27/0x30 [ 144.134153][ T9553] selinux_lsmprop_to_secctx+0x2c/0x40 [ 144.139759][ T9553] security_lsmprop_to_secctx+0x4a/0x90 [ 144.145361][ T9553] audit_log_task_context+0x93/0x1c0 [ 144.150710][ T9553] audit_log_task+0xf9/0x1c0 [ 144.155398][ T9553] audit_seccomp+0x68/0x130 [ 144.159928][ T9553] __seccomp_filter+0x6fa/0x1180 [ 144.165065][ T9553] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.170729][ T9553] ? vfs_write+0x596/0x920 [ 144.175268][ T9553] ? __schedule+0x6fa/0x930 [ 144.179865][ T9553] __secure_computing+0x9f/0x1c0 [ 144.184897][ T9553] syscall_trace_enter+0xd1/0x1f0 [ 144.189987][ T9553] do_syscall_64+0xaa/0x1c0 [ 144.194588][ T9553] ? clear_bhb_loop+0x55/0xb0 [ 144.199293][ T9553] ? clear_bhb_loop+0x55/0xb0 [ 144.204022][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.210029][ T9553] RIP: 0033:0x7fe6c3fc5d29 [ 144.214471][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.234169][ T9553] RSP: 002b:00007fe6c2637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 144.242728][ T9553] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3fc5d29 [ 144.250726][ T9553] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000000020400000 [ 144.258723][ T9553] RBP: 00007fe6c2637090 R08: 0000000000000000 R09: 0000000000000002 [ 144.266759][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.274753][ T9553] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffc2672ccd8 [ 144.282846][ T9553] [ 144.368224][ T9559] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 144.417176][ T9560] GUP no longer grows the stack in syz.5.1804 (9560): 20004000-20008000 (20002000) [ 144.426659][ T9560] CPU: 0 UID: 0 PID: 9560 Comm: syz.5.1804 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 144.437671][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.447825][ T9560] Call Trace: [ 144.451105][ T9560] [ 144.454038][ T9560] dump_stack_lvl+0xf2/0x150 [ 144.458656][ T9560] dump_stack+0x15/0x1a [ 144.462923][ T9560] __get_user_pages+0x209b/0x2670 [ 144.467982][ T9560] ? __rcu_read_unlock+0x4e/0x70 [ 144.472939][ T9560] get_user_pages_remote+0x1df/0x790 [ 144.478242][ T9560] __access_remote_vm+0x15b/0x580 [ 144.483391][ T9560] access_remote_vm+0x34/0x50 [ 144.488084][ T9560] proc_pid_cmdline_read+0x3e6/0x660 [ 144.493415][ T9560] vfs_readv+0x3e2/0x660 [ 144.497675][ T9560] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 144.503586][ T9560] __x64_sys_preadv+0xf4/0x1c0 [ 144.508629][ T9560] x64_sys_call+0x2680/0x2dc0 [ 144.513401][ T9560] do_syscall_64+0xc9/0x1c0 [ 144.517917][ T9560] ? clear_bhb_loop+0x55/0xb0 [ 144.522629][ T9560] ? clear_bhb_loop+0x55/0xb0 [ 144.527326][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.533316][ T9560] RIP: 0033:0x7fe6c3fc5d29 [ 144.537737][ T9560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.557385][ T9560] RSP: 002b:00007fe6c2637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 144.565822][ T9560] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3fc5d29 [ 144.573864][ T9560] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 000000000000000b [ 144.581909][ T9560] RBP: 00007fe6c4041aa8 R08: 0000000000000000 R09: 0000000000000000 [ 144.589940][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.597927][ T9560] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffc2672ccd8 [ 144.605946][ T9560] [ 145.026405][ T9585] lo speed is unknown, defaulting to 1000 [ 145.062923][ T9584] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1814'. [ 145.094898][ T9584] vlan2: entered allmulticast mode [ 145.367778][ T9596] loop8: detected capacity change from 0 to 512 [ 145.418092][ T9596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 145.555238][ T9604] xt_TCPMSS: Only works on TCP SYN packets [ 145.728596][ T9607] lo speed is unknown, defaulting to 1000 [ 145.762970][ T9611] netlink: 'syz.5.1821': attribute type 10 has an invalid length. [ 145.795839][ T9611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.836227][ T9611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.867113][ T9611] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 146.138850][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.147392][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.329812][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.504270][ T9641] loop8: detected capacity change from 0 to 512 [ 146.517827][ T9641] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 146.593132][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.624139][ T9654] loop5: detected capacity change from 0 to 128 [ 146.717101][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 146.728678][ T9648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1835'. [ 146.745926][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1837'. [ 146.755102][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1837'. [ 146.836769][ T9667] loop5: detected capacity change from 0 to 1024 [ 146.876861][ T9667] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 146.900534][ T9669] loop9: detected capacity change from 0 to 2048 [ 146.946453][ T9669] loop9: p1 < > p4 [ 146.956875][ T9669] loop9: p4 size 8388608 extends beyond EOD, truncated [ 146.975341][ T2999] loop9: p1 < > p4 [ 146.985939][ T2999] loop9: p4 size 8388608 extends beyond EOD, truncated [ 147.015038][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.035978][ T2999] loop9: p1 < > p4 [ 147.041002][ T2999] loop9: p4 size 8388608 extends beyond EOD, truncated [ 147.061850][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.062911][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 147.086942][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 147.099045][ T9673] batadv0: entered promiscuous mode [ 147.104350][ T9673] macsec1: entered promiscuous mode [ 147.109868][ T9673] macsec1: entered allmulticast mode [ 147.115229][ T9673] batadv0: entered allmulticast mode [ 147.128392][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 147.128832][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 147.152142][ T29] kauditd_printk_skb: 824 callbacks suppressed [ 147.152164][ T29] audit: type=1326 audit(1734914932.125:12254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 147.183470][ T29] audit: type=1326 audit(1734914932.165:12255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 147.195203][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 147.215650][ T29] audit: type=1326 audit(1734914932.195:12256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 147.240498][ T29] audit: type=1326 audit(1734914932.195:12257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 147.243670][ T9681] loop5: detected capacity change from 0 to 8192 [ 147.264072][ T29] audit: type=1326 audit(1734914932.195:12258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.0.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 147.319661][ T9681] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.475019][ T29] audit: type=1400 audit(1734914932.445:12259): avc: denied { read } for pid=9696 comm="syz.5.1852" path="socket:[25554]" dev="sockfs" ino=25554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 147.512912][ T9700] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 147.524083][ T9700] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 147.596463][ T9706] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1853'. [ 147.610898][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1853'. [ 147.695309][ T9711] loop9: detected capacity change from 0 to 512 [ 147.724102][ T9711] EXT4-fs: Ignoring removed orlov option [ 147.747656][ T9711] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 147.776831][ T9711] EXT4-fs (loop9): 1 orphan inode deleted [ 147.782610][ T9711] EXT4-fs (loop9): 1 truncate cleaned up [ 147.796094][ T9711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.860403][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.246194][ T9751] lo speed is unknown, defaulting to 1000 [ 148.942011][ T9805] bond1: entered promiscuous mode [ 148.947204][ T9805] bond1: entered allmulticast mode [ 148.952681][ T9805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.986019][ T29] audit: type=1326 audit(1734914933.955:12260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 149.009759][ T29] audit: type=1326 audit(1734914933.955:12261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 149.038258][ T29] audit: type=1326 audit(1734914933.965:12262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 149.061909][ T29] audit: type=1326 audit(1734914933.965:12263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9807 comm="syz.5.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 149.258724][ T9827] loop3: detected capacity change from 0 to 8192 [ 149.592006][ T9899] loop5: detected capacity change from 0 to 512 [ 149.605539][ T9899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.649040][ T9905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9905 comm=syz.3.1891 [ 149.661644][ T9905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9905 comm=syz.3.1891 [ 149.676341][ T9905] SELinux: Context system_u:object_r:updpwd_exec_t:s0 is not valid (left unmapped). [ 149.704111][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.735953][ T9917] tipc: Started in network mode [ 149.740861][ T9917] tipc: Node identity 9, cluster identity 4711 [ 149.747172][ T9917] tipc: Node number set to 9 [ 149.782665][ T9917] tipc: Enabled bearer , priority 31 [ 149.818982][ T9917] ªªªªªª: renamed from syzkaller0 [ 149.846441][ T9917] tipc: Disabling bearer [ 149.955560][ T9934] loop3: detected capacity change from 0 to 512 [ 149.984429][ T9934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.015809][ T9934] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.070584][ T9953] __nla_validate_parse: 4 callbacks suppressed [ 150.070599][ T9953] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 150.076135][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 150.095444][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1893'. [ 150.106027][ T9953] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 150.117082][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.153017][ T9962] syz.5.1903[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.153156][ T9962] syz.5.1903[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.170222][ T9962] syz.5.1903[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.174016][ T9964] loop3: detected capacity change from 0 to 512 [ 150.215111][ T9964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.233468][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'. [ 150.294194][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.374560][ T9982] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 150.523509][ T9995] loop5: detected capacity change from 0 to 1024 [ 150.543467][ T9995] EXT4-fs error (device loop5): ext4_quota_enable:7108: comm syz.5.1912: Bad quota inum: 9, type: 2 [ 150.558525][ T9995] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 150.598612][ T9995] EXT4-fs (loop5): mount failed [ 150.606606][ T9999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.635279][ T9999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.678124][T10002] FAULT_INJECTION: forcing a failure. [ 150.678124][T10002] name failslab, interval 1, probability 0, space 0, times 0 [ 150.690894][T10002] CPU: 0 UID: 0 PID: 10002 Comm: syz.0.1913 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 150.701686][T10002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 150.711761][T10002] Call Trace: [ 150.715046][T10002] [ 150.717988][T10002] dump_stack_lvl+0xf2/0x150 [ 150.722747][T10002] dump_stack+0x15/0x1a [ 150.726940][T10002] should_fail_ex+0x223/0x230 [ 150.731693][T10002] should_failslab+0x8f/0xb0 [ 150.736313][T10002] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 150.742711][T10002] ? sidtab_sid2str_get+0xb8/0x140 [ 150.747858][T10002] kmemdup_noprof+0x2a/0x60 [ 150.752396][T10002] sidtab_sid2str_get+0xb8/0x140 [ 150.757449][T10002] security_sid_to_context_core+0x1eb/0x2f0 [ 150.763406][T10002] security_sid_to_context+0x27/0x30 [ 150.768716][T10002] selinux_lsmprop_to_secctx+0x2c/0x40 [ 150.774260][T10002] security_lsmprop_to_secctx+0x4a/0x90 [ 150.779903][T10002] audit_log_task_context+0x93/0x1c0 [ 150.785258][T10002] audit_log_task+0xf9/0x1c0 [ 150.789964][T10002] audit_seccomp+0x68/0x130 [ 150.794489][T10002] __seccomp_filter+0x6fa/0x1180 [ 150.799542][T10002] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 150.805262][T10002] ? vfs_write+0x596/0x920 [ 150.809773][T10002] ? __schedule+0x6fa/0x930 [ 150.814316][T10002] __secure_computing+0x9f/0x1c0 [ 150.819287][T10002] syscall_trace_enter+0xd1/0x1f0 [ 150.824339][T10002] do_syscall_64+0xaa/0x1c0 [ 150.828863][T10002] ? clear_bhb_loop+0x55/0xb0 [ 150.833564][T10002] ? clear_bhb_loop+0x55/0xb0 [ 150.838302][T10002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.844262][T10002] RIP: 0033:0x7f26d62a5d29 [ 150.848686][T10002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.868322][T10002] RSP: 002b:00007f26d48f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ac [ 150.876756][T10002] RAX: ffffffffffffffda RBX: 00007f26d6496080 RCX: 00007f26d62a5d29 [ 150.884863][T10002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 150.892858][T10002] RBP: 00007f26d48f6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.900942][T10002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.908930][T10002] R13: 0000000000000000 R14: 00007f26d6496080 R15: 00007ffc1bcd3838 [ 150.916990][T10002] [ 150.967066][T10010] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 150.977200][T10010] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 151.007346][T10012] syz.5.1915[10012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.007490][T10012] syz.5.1915[10012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.024817][T10012] syz.5.1915[10012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.060524][T10012] wireguard0: entered promiscuous mode [ 151.077633][T10012] wireguard0: entered allmulticast mode [ 151.227982][T10046] vlan2: entered allmulticast mode [ 151.300336][T10057] loop5: detected capacity change from 0 to 512 [ 151.329212][T10057] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.164626][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 152.164644][ T29] audit: type=1326 audit(1734914937.135:12644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26d62a47df code=0x7ffc0000 [ 152.255716][ T29] audit: type=1326 audit(1734914937.205:12645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f26d62a5db7 code=0x7ffc0000 [ 152.279346][ T29] audit: type=1326 audit(1734914937.205:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26d62a4690 code=0x7ffc0000 [ 152.303003][ T29] audit: type=1326 audit(1734914937.205:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f26d62a498a code=0x7ffc0000 [ 152.326537][ T29] audit: type=1326 audit(1734914937.215:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 152.350242][ T29] audit: type=1326 audit(1734914937.215:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 152.373965][ T29] audit: type=1326 audit(1734914937.225:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 152.397455][ T29] audit: type=1326 audit(1734914937.225:12651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 152.421069][ T29] audit: type=1326 audit(1734914937.225:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10105 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26d62a5d29 code=0x7ffc0000 [ 152.527472][T10119] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 152.548084][T10119] netlink: 172 bytes leftover after parsing attributes in process `kmem_cache_free'. [ 152.583037][ T29] audit: type=1326 audit(1734914937.555:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.3.1927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 152.617988][T10125] loop3: detected capacity change from 0 to 8192 [ 152.812476][T10141] pim6reg1: entered promiscuous mode [ 152.817877][T10141] pim6reg1: entered allmulticast mode [ 152.913538][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1931'. [ 153.236452][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.244985][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.811124][T10235] loop9: detected capacity change from 0 to 2048 [ 153.847572][T10235] loop9: p1 < > p4 [ 153.853086][T10235] loop9: p4 size 8388608 extends beyond EOD, truncated [ 155.062270][T10428] FAULT_INJECTION: forcing a failure. [ 155.062270][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 155.075092][T10428] CPU: 0 UID: 0 PID: 10428 Comm: syz.8.1958 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 155.085937][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.096011][T10428] Call Trace: [ 155.099343][T10428] [ 155.102367][T10428] dump_stack_lvl+0xf2/0x150 [ 155.107007][T10428] dump_stack+0x15/0x1a [ 155.111201][T10428] should_fail_ex+0x223/0x230 [ 155.115958][T10428] should_failslab+0x8f/0xb0 [ 155.120731][T10428] kmem_cache_alloc_noprof+0x52/0x320 [ 155.126120][T10428] ? mas_alloc_nodes+0x1e3/0x490 [ 155.131084][T10428] mas_alloc_nodes+0x1e3/0x490 [ 155.135894][T10428] mas_preallocate+0x44a/0x650 [ 155.140667][T10428] __mmap_region+0x809/0x1400 [ 155.145404][T10428] mmap_region+0x164/0x1e0 [ 155.149936][T10428] do_mmap+0x718/0xb60 [ 155.154025][T10428] vm_mmap_pgoff+0x133/0x290 [ 155.158636][T10428] ksys_mmap_pgoff+0xd0/0x330 [ 155.163335][T10428] ? fpregs_assert_state_consistent+0x83/0xa0 [ 155.169427][T10428] x64_sys_call+0x1940/0x2dc0 [ 155.174271][T10428] do_syscall_64+0xc9/0x1c0 [ 155.178799][T10428] ? clear_bhb_loop+0x55/0xb0 [ 155.183503][T10428] ? clear_bhb_loop+0x55/0xb0 [ 155.188259][T10428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.194172][T10428] RIP: 0033:0x7fc5bbed5d63 [ 155.198591][T10428] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 155.218286][T10428] RSP: 002b:00007fc5ba546e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 155.226704][T10428] RAX: ffffffffffffffda RBX: 000000000000050b RCX: 00007fc5bbed5d63 [ 155.234689][T10428] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 155.242659][T10428] RBP: 00000000200012c2 R08: 00000000ffffffff R09: 0000000000000000 [ 155.250723][T10428] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 155.258749][T10428] R13: 00007fc5ba546ef0 R14: 00007fc5ba546eb0 R15: 00000000200000c0 [ 155.266796][T10428] [ 155.345520][T10445] __nla_validate_parse: 2 callbacks suppressed [ 155.345540][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1963'. [ 155.373161][T10447] ip6gre1: entered allmulticast mode [ 155.412226][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1964'. [ 155.422922][T10447] smc: net device bond0 applied user defined pnetid SYZ0 [ 155.448115][T10447] bond1: entered promiscuous mode [ 155.453270][T10447] bond1: entered allmulticast mode [ 155.464602][T10447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.488449][T10447] bond1 (unregistering): Released all slaves [ 155.558875][T10460] loop9: detected capacity change from 0 to 1024 [ 155.579273][T10460] EXT4-fs error (device loop9): ext4_quota_enable:7108: comm syz.9.1968: Bad quota inum: 9, type: 2 [ 155.590581][T10460] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 155.605607][T10460] EXT4-fs (loop9): mount failed [ 155.653821][T10460] pim6reg1: entered promiscuous mode [ 155.659291][T10460] pim6reg1: entered allmulticast mode [ 156.217082][T10543] loop8: detected capacity change from 0 to 512 [ 156.659033][T10600] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1991'. [ 156.853025][T10624] loop5: detected capacity change from 0 to 2048 [ 156.854360][T10615] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 156.886342][T10624] loop5: p1 < > p4 [ 156.901407][T10624] loop5: p4 size 8388608 extends beyond EOD, truncated [ 156.927460][ T2999] loop5: p1 < > p4 [ 156.932009][ T2999] loop5: p4 size 8388608 extends beyond EOD, truncated [ 157.251073][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 157.251093][ T29] audit: type=1326 audit(1734914942.225:13103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.285023][ T29] audit: type=1326 audit(1734914942.225:13104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.308806][ T29] audit: type=1326 audit(1734914942.265:13105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.340819][ T29] audit: type=1326 audit(1734914942.265:13106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.364699][ T29] audit: type=1326 audit(1734914942.265:13107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.388437][ T29] audit: type=1326 audit(1734914942.265:13108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.412045][ T29] audit: type=1326 audit(1734914942.315:13109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.435728][ T29] audit: type=1326 audit(1734914942.315:13110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.459422][ T29] audit: type=1326 audit(1734914942.315:13111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.483162][ T29] audit: type=1326 audit(1734914942.315:13112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10677 comm="syz.5.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 157.555009][T10687] loop8: detected capacity change from 0 to 512 [ 157.566879][T10687] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 157.602182][T10687] EXT4-fs (loop8): 1 truncate cleaned up [ 157.648845][T10687] EXT4-fs mount: 4 callbacks suppressed [ 157.648864][T10687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.689086][T10687] FAULT_INJECTION: forcing a failure. [ 157.689086][T10687] name failslab, interval 1, probability 0, space 0, times 0 [ 157.701766][T10687] CPU: 0 UID: 0 PID: 10687 Comm: syz.8.2001 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 157.706995][T10705] loop3: detected capacity change from 0 to 512 [ 157.712545][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.712589][T10687] Call Trace: [ 157.712597][T10687] [ 157.712606][T10687] dump_stack_lvl+0xf2/0x150 [ 157.712650][T10687] dump_stack+0x15/0x1a [ 157.743873][T10687] should_fail_ex+0x223/0x230 [ 157.748604][T10687] should_failslab+0x8f/0xb0 [ 157.753444][T10687] kmem_cache_alloc_noprof+0x52/0x320 [ 157.758954][T10687] ? __es_insert_extent+0x563/0xed0 [ 157.764185][T10687] __es_insert_extent+0x563/0xed0 [ 157.769242][T10687] ext4_es_insert_extent+0x45a/0x1c60 [ 157.774649][T10687] ext4_map_query_blocks+0x107/0x180 [ 157.779959][T10687] ext4_map_blocks+0x23c/0xd20 [ 157.784853][T10687] ? selinux_file_open+0x34a/0x3b0 [ 157.790129][T10687] ? __rcu_read_unlock+0x34/0x70 [ 157.795154][T10687] ext4_getblk+0x11f/0x530 [ 157.799653][T10687] ext4_bread_batch+0x5b/0x360 [ 157.804481][T10687] __ext4_find_entry+0xa1d/0x1090 [ 157.809609][T10687] ? __rcu_read_unlock+0x4e/0x70 [ 157.814574][T10687] ? kmem_cache_alloc_lru_noprof+0x230/0x320 [ 157.820575][T10687] ? __d_alloc+0x3d/0x340 [ 157.824919][T10687] ? d_set_d_op+0xa0/0x1f0 [ 157.829349][T10687] ext4_lookup+0xba/0x390 [ 157.833700][T10687] lookup_one_qstr_excl+0xc7/0x1a0 [ 157.838823][T10687] do_unlinkat+0x144/0x4d0 [ 157.843260][T10687] __x64_sys_unlink+0x2e/0x40 [ 157.848036][T10687] x64_sys_call+0x2329/0x2dc0 [ 157.852739][T10687] do_syscall_64+0xc9/0x1c0 [ 157.857257][T10687] ? clear_bhb_loop+0x55/0xb0 [ 157.861971][T10687] ? clear_bhb_loop+0x55/0xb0 [ 157.866656][T10687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.872575][T10687] RIP: 0033:0x7fc5bbed5d29 [ 157.877025][T10687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.896655][T10687] RSP: 002b:00007fc5ba547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 157.905252][T10687] RAX: ffffffffffffffda RBX: 00007fc5bc0c5fa0 RCX: 00007fc5bbed5d29 [ 157.913247][T10687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 157.921229][T10687] RBP: 00007fc5ba547090 R08: 0000000000000000 R09: 0000000000000000 [ 157.929334][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.937311][T10687] R13: 0000000000000000 R14: 00007fc5bc0c5fa0 R15: 00007ffcb18b5628 [ 157.945297][T10687] [ 157.982019][T10708] netlink: 133492 bytes leftover after parsing attributes in process `syz.9.2006'. [ 158.001399][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.006113][T10705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.027654][T10704] netlink: 736 bytes leftover after parsing attributes in process `syz.5.2005'. [ 158.085649][T10716] loop8: detected capacity change from 0 to 2048 [ 158.099447][T10720] FAULT_INJECTION: forcing a failure. [ 158.099447][T10720] name failslab, interval 1, probability 0, space 0, times 0 [ 158.112213][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.5.2011 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 158.123052][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.133199][T10720] Call Trace: [ 158.136506][T10720] [ 158.139463][T10720] dump_stack_lvl+0xf2/0x150 [ 158.144133][T10720] dump_stack+0x15/0x1a [ 158.148396][T10720] should_fail_ex+0x223/0x230 [ 158.153111][T10720] should_failslab+0x8f/0xb0 [ 158.157742][T10720] kmem_cache_alloc_noprof+0x52/0x320 [ 158.163176][T10720] ? vm_area_dup+0x98/0x130 [ 158.167764][T10720] vm_area_dup+0x98/0x130 [ 158.172353][T10720] __split_vma+0xf7/0x6a0 [ 158.176832][T10720] vms_gather_munmap_vmas+0x171/0x7a0 [ 158.182248][T10720] ? mas_walk+0x204/0x320 [ 158.186632][T10720] __mmap_region+0x306/0x1400 [ 158.187683][T10716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.191317][T10720] ? __rcu_read_unlock+0x4e/0x70 [ 158.208258][T10720] ? mntput_no_expire+0x70/0x3c0 [ 158.213345][T10720] mmap_region+0x164/0x1e0 [ 158.217808][T10720] do_mmap+0x718/0xb60 [ 158.221908][T10720] vm_mmap_pgoff+0x133/0x290 [ 158.226568][T10720] ksys_mmap_pgoff+0x286/0x330 [ 158.231454][T10720] x64_sys_call+0x1940/0x2dc0 [ 158.236175][T10720] do_syscall_64+0xc9/0x1c0 [ 158.240705][T10720] ? clear_bhb_loop+0x55/0xb0 [ 158.245439][T10720] ? clear_bhb_loop+0x55/0xb0 [ 158.250223][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.256153][T10720] RIP: 0033:0x7fe6c3fc5d29 [ 158.260618][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.280286][T10720] RSP: 002b:00007fe6c2637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.288874][T10720] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3fc5d29 [ 158.296880][T10720] RDX: 000000000000001e RSI: 0000000000003000 RDI: 0000000020002000 [ 158.304855][T10720] RBP: 00007fe6c2637090 R08: 0000000000000007 R09: 0000000000000000 [ 158.312832][T10720] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 158.320861][T10720] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffc2672ccd8 [ 158.328885][T10720] [ 158.341237][T10719] uprobe: syz.5.2011:10719 failed to unregister, leaking uprobe [ 158.344680][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.454904][T10731] loop3: detected capacity change from 0 to 512 [ 158.476905][T10739] ^§}ì: renamed from bond_slave_0 (while UP) [ 158.537528][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.562299][T10748] loop8: detected capacity change from 0 to 512 [ 158.581619][T10748] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.606655][T10753] loop5: detected capacity change from 0 to 512 [ 158.634439][T10753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.649350][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.657394][T10756] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2022'. [ 158.710556][T10759] loop8: detected capacity change from 0 to 2048 [ 158.721016][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.776472][T10759] loop8: p1 < > p4 [ 158.781113][T10759] loop8: p4 size 8388608 extends beyond EOD, truncated [ 158.800600][ T2999] loop8: p1 < > p4 [ 158.808205][ T2999] loop8: p4 size 8388608 extends beyond EOD, truncated [ 158.840350][T10772] FAULT_INJECTION: forcing a failure. [ 158.840350][T10772] name failslab, interval 1, probability 0, space 0, times 0 [ 158.853053][T10772] CPU: 0 UID: 0 PID: 10772 Comm: syz.5.2030 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 158.863879][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.873979][T10772] Call Trace: [ 158.877263][T10772] [ 158.880202][T10772] dump_stack_lvl+0xf2/0x150 [ 158.884820][T10772] dump_stack+0x15/0x1a [ 158.889099][T10772] should_fail_ex+0x223/0x230 [ 158.893896][T10772] should_failslab+0x8f/0xb0 [ 158.898510][T10772] kmem_cache_alloc_noprof+0x52/0x320 [ 158.904079][T10772] ? vm_area_alloc+0x2c/0x130 [ 158.908778][T10772] vm_area_alloc+0x2c/0x130 [ 158.913337][T10772] __mmap_region+0x6b5/0x1400 [ 158.918127][T10772] mmap_region+0x18c/0x1e0 [ 158.922583][T10772] do_mmap+0x718/0xb60 [ 158.926673][T10772] __se_sys_remap_file_pages+0x617/0x770 [ 158.932362][T10772] ? __bpf_trace_sys_enter+0x10/0x30 [ 158.937709][T10772] ? trace_sys_enter+0xcd/0x110 [ 158.942723][T10772] __x64_sys_remap_file_pages+0x67/0x80 [ 158.948276][T10772] x64_sys_call+0x10b2/0x2dc0 [ 158.952964][T10772] do_syscall_64+0xc9/0x1c0 [ 158.957506][T10772] ? clear_bhb_loop+0x55/0xb0 [ 158.962187][T10772] ? clear_bhb_loop+0x55/0xb0 [ 158.966947][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.972899][T10772] RIP: 0033:0x7fe6c3fc5d29 [ 158.977375][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.997128][T10772] RSP: 002b:00007fe6c2637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 159.005552][T10772] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3fc5d29 [ 159.013529][T10772] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 159.021654][T10772] RBP: 00007fe6c2637090 R08: 0000000000000000 R09: 0000000000000000 [ 159.029685][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.037724][T10772] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffc2672ccd8 [ 159.045726][T10772] [ 159.064539][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 159.064661][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 159.109965][ T3746] udevd[3746]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 159.147367][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 159.186134][T10780] 9pnet_fd: p9_fd_create_tcp (10780): problem connecting socket to 127.0.0.1 [ 159.241840][T10789] netlink: 'syz.9.2038': attribute type 13 has an invalid length. [ 159.249910][T10789] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2038'. [ 159.262390][T10791] FAULT_INJECTION: forcing a failure. [ 159.262390][T10791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.275709][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.0.2036 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 159.286497][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.296714][T10791] Call Trace: [ 159.300016][T10791] [ 159.302960][T10791] dump_stack_lvl+0xf2/0x150 [ 159.307600][T10791] dump_stack+0x15/0x1a [ 159.311840][T10791] should_fail_ex+0x223/0x230 [ 159.316592][T10791] should_fail+0xb/0x10 [ 159.320788][T10791] should_fail_usercopy+0x1a/0x20 [ 159.325842][T10791] strncpy_from_user+0x25/0x210 [ 159.330729][T10791] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 159.336397][T10791] ? getname_flags+0x81/0x3b0 [ 159.341100][T10791] getname_flags+0xb0/0x3b0 [ 159.341688][T10782] loop5: detected capacity change from 0 to 8192 [ 159.345638][T10791] user_path_at+0x26/0x120 [ 159.356392][T10791] __se_sys_mount+0x248/0x2d0 [ 159.361117][T10791] __x64_sys_mount+0x67/0x80 [ 159.365771][T10791] x64_sys_call+0x2c84/0x2dc0 [ 159.370492][T10791] do_syscall_64+0xc9/0x1c0 [ 159.375023][T10791] ? clear_bhb_loop+0x55/0xb0 [ 159.379797][T10791] ? clear_bhb_loop+0x55/0xb0 [ 159.384552][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.390560][T10791] RIP: 0033:0x7f26d62a5d29 [ 159.394989][T10791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.414762][T10791] RSP: 002b:00007f26d48f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.423184][T10791] RAX: ffffffffffffffda RBX: 00007f26d6496080 RCX: 00007f26d62a5d29 [ 159.431355][T10791] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 159.439380][T10791] RBP: 00007f26d48f6090 R08: 0000000020000400 R09: 0000000000000000 [ 159.447374][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.455367][T10791] R13: 0000000000000000 R14: 00007f26d6496080 R15: 00007ffc1bcd3838 [ 159.463407][T10791] [ 159.592270][T10805] pim6reg1: entered promiscuous mode [ 159.597663][T10805] pim6reg1: entered allmulticast mode [ 159.732801][T10830] FAULT_INJECTION: forcing a failure. [ 159.732801][T10830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.745977][T10830] CPU: 1 UID: 0 PID: 10830 Comm: syz.9.2054 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 159.756937][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 159.767023][T10830] Call Trace: [ 159.770326][T10830] [ 159.773264][T10830] dump_stack_lvl+0xf2/0x150 [ 159.777887][T10830] dump_stack+0x15/0x1a [ 159.782207][T10830] should_fail_ex+0x223/0x230 [ 159.786921][T10830] should_fail+0xb/0x10 [ 159.791103][T10830] should_fail_usercopy+0x1a/0x20 [ 159.796209][T10830] strncpy_from_user+0x25/0x210 [ 159.801175][T10830] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 159.806821][T10830] ? getname_flags+0x81/0x3b0 [ 159.811594][T10830] getname_flags+0xb0/0x3b0 [ 159.816128][T10830] user_path_at+0x26/0x120 [ 159.820646][T10830] __se_sys_fspick+0x9f/0x260 [ 159.825333][T10830] __x64_sys_fspick+0x43/0x50 [ 159.830064][T10830] x64_sys_call+0x2806/0x2dc0 [ 159.834805][T10830] do_syscall_64+0xc9/0x1c0 [ 159.839343][T10830] ? clear_bhb_loop+0x55/0xb0 [ 159.844077][T10830] ? clear_bhb_loop+0x55/0xb0 [ 159.848828][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.854984][T10830] RIP: 0033:0x7f4498785d29 [ 159.859455][T10830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.879078][T10830] RSP: 002b:00007f4496df1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 159.887602][T10830] RAX: ffffffffffffffda RBX: 00007f4498975fa0 RCX: 00007f4498785d29 [ 159.895576][T10830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 159.903549][T10830] RBP: 00007f4496df1090 R08: 0000000000000000 R09: 0000000000000000 [ 159.911521][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.919491][T10830] R13: 0000000000000000 R14: 00007f4498975fa0 R15: 00007ffcfb020528 [ 159.927541][T10830] [ 159.933825][T10832] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2053'. [ 159.943192][T10832] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2053'. [ 159.956547][T10831] netlink: 'syz.8.2051': attribute type 21 has an invalid length. [ 160.164675][T10841] loop3: detected capacity change from 0 to 8192 [ 160.202260][T10851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.210863][T10851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.312095][T10845] loop8: detected capacity change from 0 to 512 [ 160.390312][T10845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.548417][T10845] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.610027][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.682014][T10877] x_tables: duplicate underflow at hook 1 [ 160.725693][T10880] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 160.770146][T10883] loop8: detected capacity change from 0 to 256 [ 160.812093][T10883] FAT-fs (loop8): Directory bread(block 64) failed [ 160.820992][T10883] FAT-fs (loop8): Directory bread(block 65) failed [ 160.837173][T10883] FAT-fs (loop8): Directory bread(block 66) failed [ 160.839381][T10895] loop5: detected capacity change from 0 to 1024 [ 160.852728][T10883] FAT-fs (loop8): Directory bread(block 67) failed [ 160.862602][T10883] FAT-fs (loop8): Directory bread(block 68) failed [ 160.872556][T10883] FAT-fs (loop8): Directory bread(block 69) failed [ 160.881260][T10883] FAT-fs (loop8): Directory bread(block 70) failed [ 160.888101][T10895] EXT4-fs error (device loop5): ext4_quota_enable:7108: comm syz.5.2078: Bad quota inum: 9, type: 2 [ 160.889582][T10883] FAT-fs (loop8): Directory bread(block 71) failed [ 160.906103][T10883] FAT-fs (loop8): Directory bread(block 72) failed [ 160.907376][T10895] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 160.913100][T10883] FAT-fs (loop8): Directory bread(block 73) failed [ 160.929226][T10895] EXT4-fs (loop5): mount failed [ 161.025388][T10895] pim6reg1: entered promiscuous mode [ 161.030793][T10895] pim6reg1: entered allmulticast mode [ 161.081695][T10919] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 161.081695][T10919] program syz.0.2085 not setting count and/or reply_len properly [ 161.124615][T10923] FAULT_INJECTION: forcing a failure. [ 161.124615][T10923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.137821][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.3.2087 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 161.148753][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.158831][T10923] Call Trace: [ 161.162137][T10923] [ 161.165085][T10923] dump_stack_lvl+0xf2/0x150 [ 161.169771][T10923] dump_stack+0x15/0x1a [ 161.174033][T10923] should_fail_ex+0x223/0x230 [ 161.178814][T10923] should_fail+0xb/0x10 [ 161.183017][T10923] should_fail_usercopy+0x1a/0x20 [ 161.188069][T10923] _copy_from_user+0x1e/0xb0 [ 161.192696][T10923] sg_write+0x1f8/0x710 [ 161.196963][T10923] ? terminate_walk+0x260/0x280 [ 161.201857][T10923] vfs_writev+0x3fb/0x880 [ 161.206287][T10923] ? __pfx_sg_write+0x10/0x10 [ 161.211041][T10923] do_writev+0xf4/0x220 [ 161.215260][T10923] __x64_sys_writev+0x45/0x50 [ 161.220029][T10923] x64_sys_call+0x1fab/0x2dc0 [ 161.224720][T10923] do_syscall_64+0xc9/0x1c0 [ 161.229238][T10923] ? clear_bhb_loop+0x55/0xb0 [ 161.233928][T10923] ? clear_bhb_loop+0x55/0xb0 [ 161.238617][T10923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.244619][T10923] RIP: 0033:0x7f78a31e5d29 [ 161.249042][T10923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.268749][T10923] RSP: 002b:00007f78a1851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 161.277399][T10923] RAX: ffffffffffffffda RBX: 00007f78a33d5fa0 RCX: 00007f78a31e5d29 [ 161.285461][T10923] RDX: 0000000000000002 RSI: 0000000020000400 RDI: 0000000000000003 [ 161.293499][T10923] RBP: 00007f78a1851090 R08: 0000000000000000 R09: 0000000000000000 [ 161.301590][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.309591][T10923] R13: 0000000000000000 R14: 00007f78a33d5fa0 R15: 00007ffc750b7b78 [ 161.317686][T10923] [ 161.372202][T10936] loop3: detected capacity change from 0 to 512 [ 161.382899][T10936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.397841][T10936] EXT4-fs (loop3): 1 orphan inode deleted [ 161.403622][T10936] EXT4-fs (loop3): 1 truncate cleaned up [ 161.415951][T10936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.435971][T10944] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 161.453820][T10944] EXT4-fs (loop3): Remounting filesystem read-only [ 161.504368][T10936] hub 6-0:1.0: USB hub found [ 161.515290][T10936] hub 6-0:1.0: 8 ports detected [ 161.558437][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.624206][T10958] pim6reg1: entered promiscuous mode [ 161.629723][T10958] pim6reg1: entered allmulticast mode [ 161.649111][T10965] loop5: detected capacity change from 0 to 512 [ 161.670613][T10965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.713036][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.756897][T10972] loop5: detected capacity change from 0 to 512 [ 161.770712][T10972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.821121][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.271326][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 162.271388][ T29] audit: type=1400 audit(1734914947.245:13585): avc: denied { cpu } for pid=10981 comm="syz.5.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 162.556231][T11006] loop8: detected capacity change from 0 to 2048 [ 162.596159][T11006] loop8: p1 < > p4 [ 162.601287][T11006] loop8: p4 size 8388608 extends beyond EOD, truncated [ 162.686645][ T29] audit: type=1326 audit(1734914947.665:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.8.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.719854][ T29] audit: type=1326 audit(1734914947.665:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.8.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.743667][ T29] audit: type=1326 audit(1734914947.665:13588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.8.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.767341][ T29] audit: type=1326 audit(1734914947.665:13589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11011 comm="syz.8.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.820265][ T29] audit: type=1326 audit(1734914947.775:13590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.8.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.844003][ T29] audit: type=1326 audit(1734914947.775:13591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.8.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.844047][ T29] audit: type=1326 audit(1734914947.775:13592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.8.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.844078][ T29] audit: type=1326 audit(1734914947.775:13593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.8.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 162.844162][ T29] audit: type=1326 audit(1734914947.775:13594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11016 comm="syz.8.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5bbed5d29 code=0x7ffc0000 [ 163.223440][T11049] lo speed is unknown, defaulting to 1000 [ 163.423156][T11058] netlink: 'syz.8.2133': attribute type 21 has an invalid length. [ 164.566534][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.575068][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.808818][T11092] bond1: entered promiscuous mode [ 164.813955][T11092] bond1: entered allmulticast mode [ 164.819486][T11092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.865109][T11092] bond1 (unregistering): Released all slaves [ 164.889955][T11096] loop3: detected capacity change from 0 to 1024 [ 164.898746][T11096] EXT4-fs: Ignoring removed i_version option [ 164.904777][T11096] EXT4-fs: Ignoring removed i_version option [ 164.924037][T11096] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.939013][T11096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.968830][T11096] hub 9-0:1.0: USB hub found [ 164.973768][T11096] hub 9-0:1.0: 8 ports detected [ 164.993765][T11103] loop9: detected capacity change from 0 to 512 [ 165.027844][T11103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.040538][T11103] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.078576][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.096623][T11109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11109 comm=syz.3.2151 [ 165.111402][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'. [ 165.120443][T11109] netlink: 'syz.3.2151': attribute type 30 has an invalid length. [ 165.162629][T11108] infiniband syz0: set active [ 165.167373][T11108] infiniband syz0: added bond0 [ 165.183529][T11108] RDS/IB: syz0: added [ 165.187739][T11108] smc: adding ib device syz0 with port count 1 [ 165.194006][T11108] smc: ib device syz0 port 1 has pnetid [ 166.120349][T11125] syzkaller1: entered promiscuous mode [ 166.122573][T11127] xt_hashlimit: max too large, truncated to 1048576 [ 166.125971][T11125] syzkaller1: entered allmulticast mode [ 166.168171][T11131] loop9: detected capacity change from 0 to 512 [ 166.188887][T11131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.238558][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.277126][T11138] loop3: detected capacity change from 0 to 1024 [ 166.286773][T11138] EXT4-fs error (device loop3): ext4_quota_enable:7108: comm syz.3.2163: Bad quota inum: 9, type: 2 [ 166.300839][T11138] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 166.316605][T11138] EXT4-fs (loop3): mount failed [ 166.336644][T11143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'. [ 166.392976][T11138] pim6reg1: entered promiscuous mode [ 166.398459][T11138] pim6reg1: entered allmulticast mode [ 166.507436][T11151] syzkaller0: entered allmulticast mode [ 166.693218][T11158] syzkaller1: entered promiscuous mode [ 166.698813][T11158] syzkaller1: entered allmulticast mode [ 166.881213][T11170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2175'. [ 166.940752][T11176] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.173161][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.181729][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.423148][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 167.423166][ T29] audit: type=1326 audit(1734914952.385:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.453099][ T29] audit: type=1326 audit(1734914952.385:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.476798][ T29] audit: type=1326 audit(1734914952.385:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.500384][ T29] audit: type=1326 audit(1734914952.395:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.533621][ T29] audit: type=1326 audit(1734914952.505:13836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.557238][ T29] audit: type=1326 audit(1734914952.505:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.580830][ T29] audit: type=1326 audit(1734914952.505:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.604543][ T29] audit: type=1326 audit(1734914952.505:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.628127][ T29] audit: type=1326 audit(1734914952.505:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.3.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a31e5d29 code=0x7ffc0000 [ 167.651757][ T29] audit: type=1400 audit(1734914952.505:13841): avc: denied { setopt } for pid=11201 comm="syz.3.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.795609][T11214] loop5: detected capacity change from 0 to 1024 [ 167.815062][T11214] EXT4-fs: Ignoring removed nobh option [ 167.820797][T11214] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.833448][T11214] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.850378][T11214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.938852][T11214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2189'. [ 168.006661][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.134643][T11231] FAULT_INJECTION: forcing a failure. [ 168.134643][T11231] name failslab, interval 1, probability 0, space 0, times 0 [ 168.147388][T11231] CPU: 1 UID: 0 PID: 11231 Comm: syz.5.2195 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 168.158172][T11231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.168248][T11231] Call Trace: [ 168.171542][T11231] [ 168.174480][T11231] dump_stack_lvl+0xf2/0x150 [ 168.179164][T11231] dump_stack+0x15/0x1a [ 168.183351][T11231] should_fail_ex+0x223/0x230 [ 168.188051][T11231] ? ip_mc_add_src+0x2e8/0x5e0 [ 168.192836][T11231] should_failslab+0x8f/0xb0 [ 168.197547][T11231] __kmalloc_cache_noprof+0x4e/0x320 [ 168.202917][T11231] ip_mc_add_src+0x2e8/0x5e0 [ 168.207533][T11231] ip_mc_msfilter+0x370/0x590 [ 168.212238][T11231] ? should_failslab+0x8f/0xb0 [ 168.217091][T11231] ? __kmalloc_noprof+0x1e3/0x3f0 [ 168.222211][T11231] ? set_mcast_msfilter+0x3b/0x190 [ 168.227359][T11231] set_mcast_msfilter+0x164/0x190 [ 168.232412][T11231] ip_set_mcast_msfilter+0x260/0x290 [ 168.237754][T11231] do_ip_setsockopt+0x184d/0x2340 [ 168.242828][T11231] ip_setsockopt+0x63/0x100 [ 168.247394][T11231] udp_setsockopt+0x95/0xb0 [ 168.251920][T11231] sock_common_setsockopt+0x64/0x80 [ 168.257137][T11231] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.263199][T11231] __sys_setsockopt+0x187/0x200 [ 168.268076][T11231] __x64_sys_setsockopt+0x66/0x80 [ 168.273157][T11231] x64_sys_call+0x282e/0x2dc0 [ 168.277959][T11231] do_syscall_64+0xc9/0x1c0 [ 168.282547][T11231] ? clear_bhb_loop+0x55/0xb0 [ 168.287264][T11231] ? clear_bhb_loop+0x55/0xb0 [ 168.291961][T11231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.297895][T11231] RIP: 0033:0x7fe6c3fc5d29 [ 168.302348][T11231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.322009][T11231] RSP: 002b:00007fe6c2637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.330445][T11231] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3fc5d29 [ 168.338438][T11231] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000005 [ 168.346421][T11231] RBP: 00007fe6c2637090 R08: 0000000000000210 R09: 0000000000000000 [ 168.354408][T11231] R10: 0000000020000980 R11: 0000000000000246 R12: 0000000000000001 [ 168.362422][T11231] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffc2672ccd8 [ 168.370447][T11231] [ 168.456773][T11236] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 168.542545][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 168.579110][T11248] loop3: detected capacity change from 0 to 1024 [ 168.600444][T11248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.832142][T11257] loop5: detected capacity change from 0 to 512 [ 168.844067][T11257] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.859095][T11257] EXT4-fs (loop5): 1 orphan inode deleted [ 168.864869][T11257] EXT4-fs (loop5): 1 truncate cleaned up [ 168.875327][T11257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.918747][T11257] hub 6-0:1.0: USB hub found [ 168.923541][T11257] hub 6-0:1.0: 8 ports detected [ 168.931545][T11257] EXT4-fs error (device loop5): ext4_lookup:1813: inode #15: comm syz.5.2205: iget: bad extra_isize 46 (inode size 256) [ 168.945401][T11257] EXT4-fs (loop5): Remounting filesystem read-only [ 168.974892][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.039351][T11267] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 169.153348][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.165924][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.174941][T11284] loop5: detected capacity change from 0 to 128 [ 169.200936][T11284] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.213506][T11284] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.283020][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2216'. [ 169.384046][ T9012] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.415449][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.693396][T11309] loop3: detected capacity change from 0 to 128 [ 169.888970][T11309] syz.3.2223: attempt to access beyond end of device [ 169.888970][T11309] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 170.026321][T11327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2231'. [ 170.030271][T11330] loop3: detected capacity change from 0 to 512 [ 170.047805][T11330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.093765][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.121170][T11336] hub 6-0:1.0: USB hub found [ 170.130099][T11336] hub 6-0:1.0: 8 ports detected [ 170.187247][T11346] loop3: detected capacity change from 0 to 512 [ 170.244090][T11346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.264670][T11346] ext4 filesystem being mounted at /439/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.318260][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.413747][T11368] loop8: detected capacity change from 0 to 512 [ 170.430986][T11371] netlink: 'syz.3.2246': attribute type 21 has an invalid length. [ 170.443563][T11368] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 170.460969][T11368] EXT4-fs (loop8): 1 orphan inode deleted [ 170.466810][T11368] EXT4-fs (loop8): 1 truncate cleaned up [ 170.472810][T11368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.518384][T11368] hub 6-0:1.0: USB hub found [ 170.525183][T11368] hub 6-0:1.0: 8 ports detected [ 170.562707][T11379] vxcan3: entered promiscuous mode [ 170.567935][T11379] vxcan3: entered allmulticast mode [ 170.586258][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.792284][T11398] FAULT_INJECTION: forcing a failure. [ 170.792284][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 170.805037][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.9.2258 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 170.815908][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.825984][T11398] Call Trace: [ 170.829291][T11398] [ 170.832247][T11398] dump_stack_lvl+0xf2/0x150 [ 170.836964][T11398] dump_stack+0x15/0x1a [ 170.841265][T11398] should_fail_ex+0x223/0x230 [ 170.845962][T11398] should_failslab+0x8f/0xb0 [ 170.850623][T11398] kmem_cache_alloc_node_noprof+0x59/0x320 [ 170.856528][T11398] ? __alloc_skb+0x10b/0x310 [ 170.861131][T11398] __alloc_skb+0x10b/0x310 [ 170.865557][T11398] netlink_alloc_large_skb+0xad/0xe0 [ 170.870874][T11398] netlink_sendmsg+0x3b4/0x6e0 [ 170.875679][T11398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.880989][T11398] __sock_sendmsg+0x140/0x180 [ 170.885750][T11398] ____sys_sendmsg+0x312/0x410 [ 170.890587][T11398] __sys_sendmsg+0x19d/0x230 [ 170.895231][T11398] __x64_sys_sendmsg+0x46/0x50 [ 170.900080][T11398] x64_sys_call+0x2734/0x2dc0 [ 170.904771][T11398] do_syscall_64+0xc9/0x1c0 [ 170.909438][T11398] ? clear_bhb_loop+0x55/0xb0 [ 170.914123][T11398] ? clear_bhb_loop+0x55/0xb0 [ 170.918981][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.924897][T11398] RIP: 0033:0x7f4498785d29 [ 170.929358][T11398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.948985][T11398] RSP: 002b:00007f4496df1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.957492][T11398] RAX: ffffffffffffffda RBX: 00007f4498975fa0 RCX: 00007f4498785d29 [ 170.965514][T11398] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 170.973499][T11398] RBP: 00007f4496df1090 R08: 0000000000000000 R09: 0000000000000000 [ 170.981510][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.989543][T11398] R13: 0000000000000000 R14: 00007f4498975fa0 R15: 00007ffcfb020528 [ 170.997531][T11398] [ 171.059913][T11405] loop5: detected capacity change from 0 to 512 [ 171.074249][T11405] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 171.085891][T11405] EXT4-fs (loop5): orphan cleanup on readonly fs [ 171.116235][T11405] EXT4-fs warning (device loop5): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.138377][T11405] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 171.149918][T11405] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #16: comm syz.5.2260: casefold flag without casefold feature [ 171.171268][T11411] loop9: detected capacity change from 0 to 512 [ 171.195202][T11413] loop8: detected capacity change from 0 to 512 [ 171.217346][T11411] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #2: comm syz.9.2263: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 255(255) [ 171.238302][T11405] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.2260: couldn't read orphan inode 16 (err -117) [ 171.278075][T11413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.297293][T11411] EXT4-fs (loop9): get root inode failed [ 171.303039][T11411] EXT4-fs (loop9): mount failed [ 171.313254][T11405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.327334][T11405] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.2260: corrupted xattr block 19: invalid header [ 171.373241][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2263'. [ 171.452091][T11425] netlink: 'syz.0.2267': attribute type 298 has an invalid length. [ 171.462381][T11405] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 171.475774][ T7373] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.496872][T11411] loop9: detected capacity change from 0 to 512 [ 171.523439][T11411] EXT4-fs: Ignoring removed oldalloc option [ 171.523866][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.547050][T11411] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 171.576084][T11411] EXT4-fs (loop9): 1 truncate cleaned up [ 171.586916][T11411] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.604762][T11435] loop5: detected capacity change from 0 to 512 [ 171.631141][T11439] FAULT_INJECTION: forcing a failure. [ 171.631141][T11439] name failslab, interval 1, probability 0, space 0, times 0 [ 171.643893][T11439] CPU: 1 UID: 0 PID: 11439 Comm: syz.8.2272 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 171.654675][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.665356][T11439] Call Trace: [ 171.668650][T11439] [ 171.671842][T11439] dump_stack_lvl+0xf2/0x150 [ 171.676501][T11439] dump_stack+0x15/0x1a [ 171.680715][T11439] should_fail_ex+0x223/0x230 [ 171.685405][T11439] should_failslab+0x8f/0xb0 [ 171.690149][T11439] kmem_cache_alloc_node_noprof+0x59/0x320 [ 171.696000][T11439] ? __alloc_skb+0x10b/0x310 [ 171.700720][T11439] __alloc_skb+0x10b/0x310 [ 171.705174][T11439] netlink_alloc_large_skb+0xad/0xe0 [ 171.710575][T11439] netlink_sendmsg+0x3b4/0x6e0 [ 171.715417][T11439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.720777][T11439] __sock_sendmsg+0x140/0x180 [ 171.725471][T11439] ____sys_sendmsg+0x312/0x410 [ 171.730249][T11439] __sys_sendmsg+0x19d/0x230 [ 171.734950][T11439] __x64_sys_sendmsg+0x46/0x50 [ 171.740072][T11439] x64_sys_call+0x2734/0x2dc0 [ 171.744853][T11439] do_syscall_64+0xc9/0x1c0 [ 171.749440][T11439] ? clear_bhb_loop+0x55/0xb0 [ 171.754124][T11439] ? clear_bhb_loop+0x55/0xb0 [ 171.758851][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.764798][T11439] RIP: 0033:0x7fc5bbed5d29 [ 171.769296][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.788922][T11439] RSP: 002b:00007fc5ba547038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.797363][T11439] RAX: ffffffffffffffda RBX: 00007fc5bc0c5fa0 RCX: 00007fc5bbed5d29 [ 171.805331][T11439] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 171.813309][T11439] RBP: 00007fc5ba547090 R08: 0000000000000000 R09: 0000000000000000 [ 171.821296][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.829358][T11439] R13: 0000000000000000 R14: 00007fc5bc0c5fa0 R15: 00007ffcb18b5628 [ 171.837342][T11439] [ 171.863931][T11441] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 171.887226][T11411] pimreg: entered allmulticast mode [ 171.902698][T11435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.915392][T11435] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.950664][ T9012] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.977175][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.406044][T11468] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2280'. [ 172.427683][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 172.427702][ T29] audit: type=1326 audit(1734914957.395:14648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.457485][ T29] audit: type=1326 audit(1734914957.405:14649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.471165][T11468] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2280'. [ 172.529290][ T29] audit: type=1326 audit(1734914957.475:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.552928][ T29] audit: type=1326 audit(1734914957.475:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.576664][ T29] audit: type=1326 audit(1734914957.475:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.600252][ T29] audit: type=1326 audit(1734914957.475:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.623783][ T29] audit: type=1326 audit(1734914957.475:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.647421][ T29] audit: type=1326 audit(1734914957.475:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.670921][ T29] audit: type=1326 audit(1734914957.475:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.675775][T11475] netlink: 'syz.9.2283': attribute type 21 has an invalid length. [ 172.694541][ T29] audit: type=1326 audit(1734914957.475:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11466 comm="syz.5.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6c3fc5d29 code=0x7ffc0000 [ 172.876253][T11487] syz.3.2288[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.876362][T11487] syz.3.2288[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.890963][T11487] syz.3.2288[11487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.012017][T11516] binfmt_misc: register: failed to install interpreter file ./file0 [ 174.070610][T11519] loop8: detected capacity change from 0 to 128 [ 174.081861][T11519] FAULT_INJECTION: forcing a failure. [ 174.081861][T11519] name failslab, interval 1, probability 0, space 0, times 0 [ 174.094686][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.8.2296 Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 174.105461][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.116010][T11519] Call Trace: [ 174.119316][T11519] [ 174.122263][T11519] dump_stack_lvl+0xf2/0x150 [ 174.127009][T11519] dump_stack+0x15/0x1a [ 174.131212][T11519] should_fail_ex+0x223/0x230 [ 174.135946][T11519] should_failslab+0x8f/0xb0 [ 174.140646][T11519] __kmalloc_noprof+0xab/0x3f0 [ 174.145434][T11519] ? alloc_pipe_info+0x1cb/0x360 [ 174.150453][T11519] alloc_pipe_info+0x1cb/0x360 [ 174.155256][T11519] splice_direct_to_actor+0x60f/0x670 [ 174.160681][T11519] ? __pfx_direct_splice_actor+0x10/0x10 [ 174.166389][T11519] ? __cond_resched+0x28/0x50 [ 174.171131][T11519] ? avc_policy_seqno+0x15/0x20 [ 174.176046][T11519] ? selinux_file_permission+0x22a/0x360 [ 174.181752][T11519] do_splice_direct+0xd7/0x150 [ 174.186531][T11519] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 174.192486][T11519] do_sendfile+0x398/0x660 [ 174.196918][T11519] __x64_sys_sendfile64+0x110/0x150 [ 174.202182][T11519] x64_sys_call+0xfbd/0x2dc0 [ 174.206788][T11519] do_syscall_64+0xc9/0x1c0 [ 174.211356][T11519] ? clear_bhb_loop+0x55/0xb0 [ 174.216068][T11519] ? clear_bhb_loop+0x55/0xb0 [ 174.220757][T11519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.226696][T11519] RIP: 0033:0x7fc5bbed5d29 [ 174.231137][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.250761][T11519] RSP: 002b:00007fc5ba547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.259190][T11519] RAX: ffffffffffffffda RBX: 00007fc5bc0c5fa0 RCX: 00007fc5bbed5d29 [ 174.267244][T11519] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 174.275268][T11519] RBP: 00007fc5ba547090 R08: 0000000000000000 R09: 0000000000000000 [ 174.283245][T11519] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000001 [ 174.291229][T11519] R13: 0000000000000000 R14: 00007fc5bc0c5fa0 R15: 00007ffcb18b5628 [ 174.299237][T11519] [ 174.347154][T11521] loop5: detected capacity change from 0 to 128 [ 174.435855][T11516] Falling back ldisc for ttyS3. [ 174.547284][T11534] loop9: detected capacity change from 0 to 1024 [ 174.556423][T11534] EXT4-fs error (device loop9): ext4_quota_enable:7108: comm syz.9.2302: Bad quota inum: 9, type: 2 [ 174.560208][T11535] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2300'. [ 174.568461][T11534] EXT4-fs warning (device loop9): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 174.576629][T11535] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2300'. [ 174.593909][T11534] EXT4-fs (loop9): mount failed [ 174.681586][T11534] pim6reg1: entered promiscuous mode [ 174.686951][T11534] pim6reg1: entered allmulticast mode [ 174.774938][T11539] loop9: detected capacity change from 0 to 512 [ 174.857477][T11539] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.870926][T11539] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.903024][ T7529] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.936503][ T7529] ================================================================== [ 174.944630][ T7529] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 174.951972][ T7529] [ 174.954303][ T7529] read-write to 0xffff888237c2ba28 of 8 bytes by task 11521 on cpu 0: [ 174.962498][ T7529] __find_get_block+0x434/0x8a0 [ 174.967369][ T7529] bdev_getblk+0x30/0x3b0 [ 174.971720][ T7529] __bread_gfp+0x52/0x280 [ 174.976069][ T7529] __fat_write_inode+0x14c/0x530 [ 174.981031][ T7529] fat_write_inode+0xbd/0xd0 [ 174.985631][ T7529] __writeback_single_inode+0x340/0x850 [ 174.991193][ T7529] writeback_single_inode+0x16c/0x3f0 [ 174.996578][ T7529] sync_inode_metadata+0x5c/0x90 [ 175.001521][ T7529] __generic_file_fsync+0xed/0x140 [ 175.006651][ T7529] fat_file_fsync+0x46/0x100 [ 175.011257][ T7529] vfs_fsync_range+0x116/0x130 [ 175.016057][ T7529] generic_file_write_iter+0x185/0x1c0 [ 175.021547][ T7529] iter_file_splice_write+0x5f1/0x980 [ 175.026928][ T7529] direct_splice_actor+0x160/0x2c0 [ 175.032051][ T7529] splice_direct_to_actor+0x302/0x670 [ 175.037459][ T7529] do_splice_direct+0xd7/0x150 [ 175.042254][ T7529] do_sendfile+0x398/0x660 [ 175.046678][ T7529] __x64_sys_sendfile64+0x110/0x150 [ 175.051902][ T7529] x64_sys_call+0xfbd/0x2dc0 [ 175.056506][ T7529] do_syscall_64+0xc9/0x1c0 [ 175.061020][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.066935][ T7529] [ 175.069261][ T7529] read to 0xffff888237c2ba28 of 8 bytes by task 7529 on cpu 1: [ 175.076810][ T7529] has_bh_in_lru+0x35/0x1f0 [ 175.081327][ T7529] __lru_add_drain_all+0x23f/0x3f0 [ 175.086450][ T7529] lru_add_drain_all+0x10/0x20 [ 175.091225][ T7529] invalidate_bdev+0x47/0x70 [ 175.095824][ T7529] ext4_put_super+0x571/0x840 [ 175.100524][ T7529] generic_shutdown_super+0xe5/0x220 [ 175.105818][ T7529] kill_block_super+0x2a/0x70 [ 175.110510][ T7529] ext4_kill_sb+0x44/0x80 [ 175.114854][ T7529] deactivate_locked_super+0x7d/0x1c0 [ 175.120238][ T7529] deactivate_super+0x9f/0xb0 [ 175.124928][ T7529] cleanup_mnt+0x268/0x2e0 [ 175.129353][ T7529] __cleanup_mnt+0x19/0x20 [ 175.133776][ T7529] task_work_run+0x13a/0x1a0 [ 175.138396][ T7529] syscall_exit_to_user_mode+0xa8/0x120 [ 175.143958][ T7529] do_syscall_64+0xd6/0x1c0 [ 175.148462][ T7529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.154373][ T7529] [ 175.156693][ T7529] value changed: 0x0000000000000000 -> 0xffff888123046dd0 [ 175.163800][ T7529] [ 175.166119][ T7529] Reported by Kernel Concurrency Sanitizer on: [ 175.172261][ T7529] CPU: 1 UID: 0 PID: 7529 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00301-gbcde95ce32b6 #0 [ 175.183108][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.193165][ T7529] ==================================================================