last executing test programs: 5m18.472875722s ago: executing program 32 (id=2257): r0 = syz_io_uring_setup(0x82f, &(0x7f0000000500)={0x0, 0xdb02, 0x10, 0x40000, 0x3c6}, &(0x7f0000000100), &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d0000000003000500000000000200"], 0x78}, 0x1, 0x7}, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000001140)=""/102, 0x66}, {&(0x7f0000000280)=""/52, 0x34}], 0x2, 0x60, 0x7fffffff}}], 0x48, 0xc8d0}, 0x220600c1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r8, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r8, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000340)={r7}) timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x1}, &(0x7f0000000700)=0x0) timer_settime(r9, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380)) 5m12.95763397s ago: executing program 33 (id=2333): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 5m9.073739095s ago: executing program 34 (id=2389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r1, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0}) 5m2.645888298s ago: executing program 35 (id=2485): socket$inet6(0xa, 0x805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) 5m2.101606252s ago: executing program 36 (id=2493): recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)=@alg, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000680)=""/184, 0xb8}, 0x2100) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) process_vm_writev(0x0, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0xa0000001}) epoll_wait(r6, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r3, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)={0x30, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r7}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x30}], 0x1}, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000780)) ioprio_get$uid(0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f00000007c0)='9\v\xd0\a\xe8\xb5\x95\xf6\xc1\xcbc\r\x02iq\xd3k\xf0\xcb\x98\x1a\x1c\x8c\xcb\xf8r\"N>\xd6\x8el\x94\xaeZe\xb6\x0f\xec|R\x0e\xc3\xf0\xdaFR\xc0k\x7fj]l|\xdc\x9e\xeb.\xf4\xe7\x9b,\x014\xb0J\xa2d\xc1\xa0\x00\x00\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x122}}, 0x8010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305829, &(0x7f0000000040)) 4m55.149473167s ago: executing program 37 (id=2575): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000600)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x4) close(r2) 4m51.742278314s ago: executing program 38 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0x7) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x64851}, 0x48000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 4m43.212824837s ago: executing program 39 (id=2682): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001500db00004178288542d3bd40d71ad94e92589c4bd2f898d2dc0820202fb6964612c67f8d85ab7c840c2baa09ec94303a46a304626e9bbdeb3bd159beb7b59e8084ff5a2040ae3ca12b98d280f01d1adcbaf8f8f49fb8b8621ad507ccdfd3973e2f762111b3289e795791b7878df03384f4f8a890a98da1962108c0972b5c7c56e88e5eba25f042b7dde347560ba30133e8568e399406a00d77d62e1cf465758e3957b60cf15873026be0736595999f49a49759930a3f331c1900e5ccc23644db20a4184cfc0000000000"], 0x50) socket$kcm(0x10, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x1e73, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xccdc2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = syz_io_uring_complete(0x0) io_uring_setup(0x232, &(0x7f0000000700)={0x0, 0x3f94, 0x1, 0x1, 0x11ca, 0x0, r1}) fsetxattr$security_capability(r3, &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0xd5a, 0x10ba8}, {0x6}]}, 0x18, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000100)={0x6, 0x2, 0x800}) fsync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r7, 0x200100a) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0x10, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRES64=r6, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100f7ffffff00000000180000001800000002000000000000000000000d0200000000000200"/50], 0x0, 0x32, 0x0, 0x1}, 0x28) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES16=r9, @ANYRES32=0x0, @ANYRES32=r2], 0xfc}}, 0x0) 4m39.836837161s ago: executing program 40 (id=2570): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4m33.299803982s ago: executing program 41 (id=2776): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) umount2(0x0, 0x7) 4m19.285646712s ago: executing program 42 (id=2939): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000cdf29b00"/23, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f00000001c0)={'erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) 4m18.181259661s ago: executing program 43 (id=2962): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 4m17.611127477s ago: executing program 44 (id=2969): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)={0x2e4, r0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1200000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9789}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20400000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb18}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x30c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x450}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xee9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7a4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x4044001}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x2, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1f, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x9, 0x2, 0x7, 0x10, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}, @alu={0x4, 0x0, 0xd, 0x2, 0x0, 0xfffffffffffffffe, 0x4}, @generic={0xa, 0x0, 0x9, 0x3, 0xa}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0xe, 0xab, &(0x7f00000006c0)=""/171, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x0, 0xf, 0x2000, 0x77}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x80000000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000540)='mm_vmscan_kswapd_sleep\x00', r3, 0x0, 0x4}, 0x18) r5 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4200, r5, 0x8, 0x51) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x2, 0x1, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x34, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x92000000}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x404}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3004}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x50) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000a80)) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(r6, 0x4008662c, &(0x7f0000000ac0)={0x0, 0x0, "06aaa04d50c091ea4ca8f191d338737a"}) r7 = getpgid(r5) kcmp(r5, r7, 0x0, r6, r4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000b80)={0x0, 0x74, &(0x7f0000000b00)=[@in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e23, 0x26, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x8, @remote, 0xfffffffb}]}, &(0x7f0000000bc0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000c00)={r8, 0x8, 0x2, 0x1}, &(0x7f0000000c40)=0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000cc0), r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d40)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000e40)={'gretap0\x00', &(0x7f0000000d80)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x8, 0xfffffffd, {{0x1a, 0x4, 0x0, 0x0, 0x68, 0x68, 0x0, 0xb8, 0x29, 0x0, @local, @multicast1, {[@cipso={0x86, 0x49, 0x0, [{0x2, 0xf, "1244053494766f2be69dd715ea"}, {0x7, 0x6, "1a04ce53"}, {0x1, 0x10, "5c28a62d33b26f54aa018bd6ca5c"}, {0x5, 0xa, "a14ce4f2ee54d897"}, {0x0, 0x10, "732bf46c5484fbbe8489d533ae83"}, {0x1, 0x4, "41eb"}]}, @ra={0x94, 0x4, 0x1}, @generic={0xcd, 0x5, "5ad525"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000f00)={'syztnl1\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x7, 0x8, 0x5, 0x723, {{0x15, 0x4, 0x0, 0xc, 0x54, 0x66, 0x0, 0x4, 0x97467abbaa2e1920, 0x0, @private=0xa010102, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0xee, 0x0, 0x1, [0x3]}, @timestamp={0x44, 0x8, 0x3c, 0x0, 0x3, [0x3]}, @noop, @timestamp_prespec={0x44, 0x24, 0x95, 0x3, 0x5, [{@local, 0x6699}, {@loopback, 0x101}, {@private=0xa010102, 0xc49}, {@rand_addr=0x64010100, 0x765a}]}, @lsrr={0x83, 0xb, 0xee, [@local, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000fc0)={'syztnl2\x00', &(0x7f0000000f40)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x3, 0x8001, 0x10, @mcast2, @mcast1, 0x8, 0x8700, 0x9, 0x7b8b}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000001140)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xf8, r9, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4810}, 0x4000004) sched_setparam(r7, &(0x7f0000001180)=0x18) r14 = syz_open_dev$usbfs(&(0x7f00000011c0), 0xeead, 0x2000) ioctl$USBDEVFS_REAPURB(r14, 0x4008550c, &(0x7f0000001200)) r15 = socket$nl_rdma(0x10, 0x3, 0x14) listen(r15, 0x800) pipe(&(0x7f0000001240)={0xffffffffffffffff}) ioctl$int_in(r16, 0x5421, &(0x7f0000001280)=0x40) 4m16.726932159s ago: executing program 45 (id=2977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00d9e9574ac26126f306000000938859a4c628372276ac13827af6908eb5b9edbec300b386c601311dbba8d6e3bb270ec3a2e46ee142f2af26fcc7f7486b5edee2564a66aeb86ce081c71fe88e2f39a3c883530c7807308e42f6"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'wm\x00'}, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket(0x10, 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000ac0)={'a', ' *:* ', 'rwm\x00'}, 0xa) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000f14, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x29, 0x6, 0xbb, 0x81, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x20, 0x700, 0x4, 0x9}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0xc, &(0x7f0000000880)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="0660bbd36ee95b2e50364da2040d0d2e391001a0dd46d343c01122df386ea25164229ed3eaf0a3d64c782204f27461472a1c3693ff4778bdaf03e6428568ae9d50204c49751b04fad6d1600cf0ad4b1cf49fdac45aa9d00b1e4106ab2b9d00f51b350a8ab6178dfa2f923ca45b4072a48a3a1093e7f7e144aee22d3c0fa2e265fb39e6b682058ee4218308e2840b79a6519a8891d9072c52c2335b9dddd3e61b210bbb9d672ac16e1a757bb10b0cddaa3909cd6664a53764d4297b4773f4885e180c4c0c20b039275235d45178cbf803df894731e65e72da6b5aad3f7b03fe271a4dda678f7c37ff24441d11b740ac8b3e919126d6"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r9}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10, 0x0, 0x4b503a9}, 0x18) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') setsockopt$inet_tcp_int(r4, 0x6, 0x1b, &(0x7f00000006c0)=0x2, 0x4) faccessat2(r12, &(0x7f0000000040)='\x00', 0x1, 0x1300) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x7, &(0x7f0000000000)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xc3}], &(0x7f0000000140)='GPL\x00', 0x3, 0x43, &(0x7f00000002c0)=""/67, 0x40f00, 0x187353035ff9a195, '\x00', r5, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x2, 0x0, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[r0, r12, r0, r0], &(0x7f0000000580)=[{0x5, 0x2, 0x6, 0xa}], 0x10, 0x46b, @value=r13}, 0x94) 4m11.440126389s ago: executing program 46 (id=3008): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) sendfile(r1, 0xffffffffffffffff, 0x0, 0x104) 4m2.717524638s ago: executing program 47 (id=3109): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 3m58.425990497s ago: executing program 48 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a80016000800014009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) 3m55.821467798s ago: executing program 49 (id=3176): ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000000c0)={0x1, 0x0, [{0x8, 0x0, 0x2, [0x10, 0x4, 0x3, 0xfff, 0x3ff, 0x4, 0x401, 0x7]}]}) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0xa0000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) syz_open_dev$sg(&(0x7f0000000500), 0x9, 0x200000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@var={0xe, 0x0, 0x0, 0xe, 0x1, 0x1}, @fwd={0x7}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xd, 0x2}, {0x4, 0x4}, {0x0, 0x1003}, {0xc, 0x1}, {0xc, 0x3}, {0xc, 0x3}, {0x80000002, 0x4}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x0]}}, &(0x7f0000000140)=""/19, 0x7f, 0x13, 0x1, 0xe, 0x10000}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x20) 3m54.775892383s ago: executing program 50 (id=3186): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xc, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x2b, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d}]}}]}, 0x40}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='tOans=fd,rfdno=', @ANYBLOB="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", @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wg1\x00', @multicast}) r7 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x114, 0x1d, 0x0, 0xfea5) 3m49.853280533s ago: executing program 51 (id=3245): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4004085) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3m47.707364787s ago: executing program 52 (id=3267): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0)='wlan0\x00', 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2800010, &(0x7f0000000480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@inlinecrypt}, {@init_itable}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@mb_optimize_scan}]}, 0x80, 0x7a5, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r2 = dup3(0xffffffffffffffff, r1, 0x80000) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="f1a42428e29b14a1b5d229085a8282a3d788e6466cac89047b416e8f76a08016477f74c792d52796cee57e2ff9f43c33072bbceb5ab563b04de5772a371cbfcbf366ffbc419da1", 0x47}, {&(0x7f00000001c0)="46a0f7f2e660299177938933aed759d446c55c32a2a3b98f7c9bda1a", 0x1c}, {&(0x7f0000000140)="22cd3a4f52fef6879368f778c658901929e84fe3fd7aa3cf42a1563cf648e6867efc2c9841d6288cfb96037f480578", 0x2f}, {&(0x7f0000001740)="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", 0x1000}], 0x4, 0x25405, 0x3, 0x1b) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=r4, @ANYBLOB="000327bd7000fbdbdf250800000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000000000000df80040000000000000001"]) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 3m47.621835854s ago: executing program 53 (id=3270): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x6003}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x2}}, {@mpls_uc={0x8847, {[{0x3, 0x0, 0x1}, {}], @llc={@llc={0xff, 0xfc, '\\', "b6b0dd3df48bdf4f72509de7b345cc475a6a164e412f08b778fedc195920f5e0fd72e5dfad147509b960f99f075b179502b08d7a8a6f89a8063c027d20b0b1bb4e3ad3997141a5b551b2e8ed293217d95a003d2b03bcdd260869eb24321b551b952c62a6c49bcca888e35ce0384871c255b45ea89f7dbee15bc91576023de834d188558634b017f9353a6c45f40bbafae584e092406114ecaa91ed8dc8a1ebc8593a24221a0d5cadff953394b76439f4c95e9b5ba64488c4eeacb16f4bb2aaa79743b3519f7466a22c7a73d5cdc7807343ec44"}}}}}}}, 0xf4) 3m42.079204575s ago: executing program 54 (id=3304): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3m39.325429998s ago: executing program 55 (id=3336): bpf$MAP_CREATE(0x0, 0x0, 0x48) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r3 = socket(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x29}, {0x0, 0x6, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x8000000000000000, 0xffffffffffffffff}, 0x400000}}, 0xb8}}, 0x4004) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_emit_ethernet(0x58, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x4a, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x6071, 0x0, 0xe7}, {"54f40faf77e85bf2f624da854174f3b3450795ed4578295e6c09a01e2f6b4c1259b2"}}}}}}, 0x0) 3m35.531985847s ago: executing program 56 (id=3372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xa6, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 3m31.338386987s ago: executing program 57 (id=3441): r0 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b00)="6786e2123562ccbee9ec664324266af4eadbef3482a9045875adf5b27e308af9752860fe2d08df42ed74168be506f7f96e4bdb6c", 0x34}, {&(0x7f0000001d00)="df0d8d30c4a22b80d557eb3c5c89952628cd7be71355dc0b4d72bcc694f6da3475e756c22611c66dc46c458da2670ca2dc7d00d055183c1c3e94c91f93ecf9c10b32f76f057fa93554fd3b6c03b4e466f7c736fdb9319bbefd3c53a7629febfad58460470005b2910f368695ee0255349ebbc1fc0a594503fae9c9eadd2625", 0x7f}, {&(0x7f0000001b40)='Ga', 0x2}, {&(0x7f0000001d80)="599e8fa39365f890a1bd5b265100df39c04d28d0bd2ccf6cb92f3f6780b519b11901fe21fdf4053255c699455ad9af9b37fd2344a1d21b82ddcca7bcc1ac37363eb988bd1383685d622662c76d1920fdeb0570142217b98772858735ac73eb280ed924e2d2df5f1bafa5f8781f08b7659e7f770a14802d5e5631607b5bb42079ef8a47d87f3befae83628bb16716203a05c2269fdd3cc1038e192603", 0x9c}], 0x4, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001b80)="b82e52d2289d174b279e0e24909b43617f4fc2c73141899b634cf4c891f795861d8e8bf2df98cb7673cd67dbcac1528a805ecd8829abd282bbc28a1e104eb4c733ebe324a22dd32ee670c021d4eeb9b8555db099489a6e0e47009db2541528cea87e2fc6cc1bc0c540b2582cf0cca42ba8307dea048914955dca36f661d128d3801752539320cfcc87287ef42bc570a3623fc401026156374040a0c62851822257865e438dcbc79b2c54b39b35c36f89fda424f73951897cc6f23e9e9c9eac1fc1d69a64d4323afb55b7decbdc66ff73c0dc099aedfb077a02355425", 0xdc}], 0x1}}], 0x2, 0x2004c840) close(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0xffc8}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYRES8=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) getcwd(&(0x7f00000000c0)=""/127, 0x7f) 3m30.859617566s ago: executing program 58 (id=3450): getcwd(&(0x7f00000000c0)=""/127, 0x7f) 3m28.681846833s ago: executing program 59 (id=3469): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) tgkill(0xffffffffffffffff, r4, 0xb) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 3m24.496753573s ago: executing program 60 (id=3504): rt_sigprocmask(0x2, 0x0, &(0x7f0000000400), 0x0) 3m18.173709927s ago: executing program 61 (id=3598): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000540), 0x8000, &(0x7f0000001e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d9ff9a841e2eb21486e05ddee41240bc9d3ce3a9a5915be607c5cce0385d1db5d73fe4794696bea5234b5b7209ef99689157147ba0bea60c07affcc3d2706527418b3fbc67dbee9e29d93b4938d36a0e3f01c52cbea346f00e6bf6acce5d8e8eedf69af14bdb88bb7d2d40847bce82093fa40b6ed5f9ee97fdb7265d5342696d18c05b0278e21f98bb64d111424f71bdb84800a55ded9cbfb81313876006e513a28834022aed2e5e1784d02202fc9bca90c3c2552ae9b25346c12942e758c68ba6b3513fed39552171f78882a", @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,posixacl,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',loose,noextend,obj_user=,mask=^MAY_WRITE,audit,obj_role=geneve0\x00,rw,obj_type=&[],smackfshat=ceph\x00,\x00']) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffe9}, 0x18) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214", 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffd3}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b000000070000000f0000000900000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/416], 0x1a0}, 0x1, 0x0, 0x0, 0x44098}, 0x44000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r3}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000007f1e1ca456a2a2eaf300"/37], 0x50) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1000000000000}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 3m17.861992682s ago: executing program 62 (id=3601): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r2, 0x200100a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0xff, 0x9, 0x52a0, 0x43, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x700, 0x8000, 0x6, 0x9}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) unshare(0x2c020400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) tee(r4, r4, 0xfffffffffffffc01, 0x7) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000300)={0x0, 0x1, 0x81, 0x3, @vifc_lcl_ifindex=r3, @multicast2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1804000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 3m17.621578492s ago: executing program 63 (id=3603): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYRESOCT=r1, @ANYBLOB="4486fc42807c98dc", @ANYRESHEX, @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77662c10a11a1c0864a89f0c646e6f3d0000000000998895daecf17a0589cda3ad22c8611003104ac1dcbcee769f026c6999196842bbdfe2b3f47c9d8d69a904b0c8bc083ba8aac5282c3a3df2d06c0254520ae0c8fbebc09002f1bd18f14e28459c881ab12a09f55f82ddbeee5b5d1108", @ANYRESHEX=r1, @ANYBLOB=',k']) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 3m3.767475257s ago: executing program 64 (id=3788): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000001780)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@journal_checksum}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2000000000000001, &(0x7f00000000c0)=[{0x9, 0xfd, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 2m56.640615297s ago: executing program 65 (id=3888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = mq_open(0x0, 0x42, 0x0, 0x0) mq_timedreceive(r3, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) 2m53.03124923s ago: executing program 66 (id=3946): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000440)={{{@in6}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) io_pgetevents(0x0, 0x0, 0x3, &(0x7f0000000200)=[{}, {}, {}], &(0x7f00000002c0), &(0x7f0000000400)={&(0x7f00000003c0)={[0x2]}, 0x8}) 2m50.862205366s ago: executing program 2 (id=3977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_u}], [], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m49.878373196s ago: executing program 2 (id=3984): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 2m49.82857389s ago: executing program 2 (id=3986): r0 = dup(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000240)="12", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0xc, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) 2m49.45944403s ago: executing program 2 (id=3988): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 2m49.273554235s ago: executing program 2 (id=3992): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1000000000000e) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) close(0xffffffffffffffff) 2m48.067470503s ago: executing program 2 (id=4013): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80c2, 0x13a) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa) fcntl$getflags(r0, 0x401) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m48.031381426s ago: executing program 67 (id=4013): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x80c2, 0x13a) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffff9c, &(0x7f0000000200)='./file1\x00', 0x46102, 0xa) fcntl$getflags(r0, 0x401) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m43.06923989s ago: executing program 9 (id=4086): r0 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) io_uring_enter(r0, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 2m43.005744404s ago: executing program 9 (id=4087): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) syz_open_dev$evdev(&(0x7f0000000500), 0x2, 0x4002) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r5, r6) 2m43.005462704s ago: executing program 9 (id=4088): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x100000}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) 2m42.963065428s ago: executing program 9 (id=4090): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYRESDEC, @ANYRES64], 0x8, 0x2ed, &(0x7f0000000a80)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6000021000103afffe8000070000000000000000000000bbff"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000740)={0x0}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', &(0x7f0000000300), 0x800) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f00000000c0)=0x800001, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000711065000000000006000000000000009500000000100000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='t']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0xffffffdb) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c26071907800e7"], 0x0) 2m42.407868093s ago: executing program 9 (id=4098): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@inlinecrypt}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) r3 = socket(0x80000000000000a, 0x1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@nolazytime}, {}, {@max_batch_time={'max_batch_time', 0x3d, 0x7fffffff}}, {@norecovery}, {@dioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@noacl}]}, 0xff, 0x573, &(0x7f0000002200)="$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") r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r5, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0xf, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000001}}}, 0x118) creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$usbfs(&(0x7f0000000280), 0x29b, 0x2) r7 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000640)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000200000000000000a7ff000000440c3681e00000010000000400000000"], 0x20}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x100, 0x22) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x10, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r10, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e20, 0x7, @mcast1, 0x401}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000300)={0x800, 0x2, 0x401, 0x7, r11}, 0x10) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0) 2m42.133973095s ago: executing program 9 (id=4105): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.133330585s ago: executing program 68 (id=4105): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.843587998s ago: executing program 8 (id=5057): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x400, &(0x7f00000001c0)={[{@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nombcache}, {@i_version}, {@barrier}, {@block_validity}, {@sysvgroups}]}, 0xdf, 0x4b8, &(0x7f0000000e40)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r4, r3) sendmmsg(r3, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 1m54.002274607s ago: executing program 8 (id=5088): r0 = open(0x0, 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 1m53.95073404s ago: executing program 8 (id=5091): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 1m53.889650156s ago: executing program 8 (id=5094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES8=r0], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) r3 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x5c}) r5 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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") r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r8}, 0x18) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r9}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) io_pgetevents(0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x7]}, 0x8}) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x28, 0x2, 0x6, 0xfffff034}, {0x6, 0x99, 0xff, 0x2}]}, 0x10) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40040) r10 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r11, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff2c9668e99d3185ae7ec7dd79ce4c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fedbdf25090000000800040003000000050005006700000008000400f8ffffff0800040000080000080003000700000008000200070000000500050004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8808) 1m53.456357181s ago: executing program 8 (id=5102): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m51.74129366s ago: executing program 8 (id=5114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xe4fa83411c7058eb) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 1m51.719478622s ago: executing program 69 (id=5114): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='sys_enter\x00', r2}, 0x18) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xe4fa83411c7058eb) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/FH50/9GTqJCAqqp7ypiIPbdaAjNKKBUS4sITjmWY2dtrEzVpNwCwJvuuimf9cVRAhCdBEEYhddhRLeddGdd15kV0lEJ+Y0N5tapk7y/brYHvZ8P4fv+bPD9h1s+vjda9GwY4TNlFTXV0l1u+RktkqapVoW5OTI9ZH3+85duHg6EAx2nFXtDHT7/KradGC09+bwobHUjvMvm17XyXjzpekZ/9T47vE909+7r0YcjTgai6fU1L54PGX22Zb233eihuoZ2zIdSyMxx0qW9MN2PJHIqBnrb2xIJC3HUTOW0aiV0VRcU8mMmlfMSEwNw9DGBsHKhtOPAst3Q89nXVdmUu9cty4nruvmX6zfxOmhwubOv+sWnf87lZ4SNlHRTb1exB5Kh9KhwnOhHwhLRGyxpFW88k3y14j7eMSdu1Tyjzf8I8HJo2/fqGqzDNrZ+Xw2HfKU5n3idT2FTEGh7jwV7PBpQWn+P2kozvvFK7vK5/1l87VyuKUob4hXJi9LXGyZGD34Zapr6MFCftCneqIruCT/v/QvHqZnnyt0fgAAAAAAAAAAWAtDfyq7fm/kB9weUNXGJf1CvtzvA0vX51vLrs/XyN6ayu47AAAAAADbhZMZiJq2bSX/ssh/lV+P7fx7xZNbvz94f+fKY1raPBPtH3KJrbBff1B87dkS0ygtZH71abXBnnV+pywWn9ZlO1Xz81t+zMnejy9W3U7tL8dnOWMbf1cCAAAAsBEWP/S3STb8Kp3tOXav0nMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGC7WcNfjk08LNfSfLHzablWpfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJT8CAAD//wva0Pw=") r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r3, &(0x7f0000000140)='./file1\x00', r3, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 56.778492586s ago: executing program 6 (id=6473): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000000, 0x0, &(0x7f0000000000), 0x40000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000780)={0xf97cff8c, 0x8, 'SE Linux', "5278ecc6fd82df21e7a70810cb3bdb488bb6b9a9ce0aa61e72b2e3fd94f21d68487c6d4713c76593c3de18d6912488006bf47e4c9d05b5a8ac29ef0d412c9253d6a5e11420e679eddcec3b88844420908a4ace99f5bdcc3129c95188e6f779dfac51efd1e66d2b6878f51b55f4c065b62ffca856bda7c8f24c79503eae4c991fee25c9ea034838935cb554b732379eadf9dc2e4e30c2ad157cbf076d6a55a9081eab5f8859a4e43df73615b4545d63989e175772f3ee597aef7731a082eb39d91526"}, 0xd2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000a80)='./file1\x00', 0x8, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@nomblk_io_submit}]}, 0x66, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlockall(0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x7, 0x8, r2, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r2}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1d, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000a851c38c2998af59f49665904c29efd5be94fc657db8fba183a59432d724f1abb560d760e588d1284d8555e4441de2db6514e05a77058cb1e08816df9fca442a0891885a101d8751e228bd82081ba4c9d5a9910bafbfb07bfcd908b588be71f96f7e319dc27b5b76a22392c9b622da687d18bac7e5f9562507f040d78b", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x1, 0x3, 0xfe, 0x34, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000740), 0x1}, 0x110403, 0x0, 0x5, 0x1, 0x63, 0x4, 0x79bf, 0x0, 0x8, 0x0, 0xa}, 0x0, 0xe, 0xffffffffffffffff, 0x1) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0xffffffff}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) close(r7) 55.923583576s ago: executing program 6 (id=6485): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000300)="37a81d359c993d7b1cdca6c41e", 0xd}, {&(0x7f0000000280)="3de496b26cb156fc17de651bb0059979575c10b71057fb", 0x17}], 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000000119078000000000000000000004e20004890780300000000000000ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c391aa94c42fca7ead0e17e59f1bea955800221ccbbdadfc61a4a9a2d00ed4c44"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4092}, 0x18) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000180)='cpu==0||!') socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x840, 0x0) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000000540)=""/177) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1808bd5d6b00ff00006f01040006110000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) syz_emit_ethernet(0x52, &(0x7f0000000600)={@local, @random="7b719c3217c1", @void, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}], @generic="4ad9123e0134de383220456f6459db64b33a0468caa226478c210bca1e3d2f7ef2433b4c5af1b9a60ac90551b3627f187ed5c08ece1549561b27087c6804ace6"}}}}, 0x0) 55.811289605s ago: executing program 6 (id=6486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0xa00d) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 55.668493367s ago: executing program 6 (id=6489): r0 = syz_io_uring_setup(0x1a5a, &(0x7f0000000200)={0x0, 0xcd3e, 0x10100, 0x4, 0x6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x79a5, 0x2, 0x46, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 55.549896676s ago: executing program 6 (id=6491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000140), 0x0) 55.516880779s ago: executing program 6 (id=6492): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x29, 0x6, 0x0, 0x0, @multicast1, @multicast1}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) unshare(0x64000600) r5 = socket$inet6(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x10000001) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) close(r6) 41.424409964s ago: executing program 70 (id=6492): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x29, 0x6, 0x0, 0x0, @multicast1, @multicast1}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4400}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_TTL={0x5, 0x8, 0x2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0) socket(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) unshare(0x64000600) r5 = socket$inet6(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000001c40)=0x10000001) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a670f, 0x40) close(r6) 13.940780007s ago: executing program 5 (id=7492): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x1a5a, &(0x7f0000000200)={0x0, 0xcd3e, 0x10100, 0x4, 0x6}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 13.755022282s ago: executing program 5 (id=7500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c08000340000000b008000740000000310800064000000000400000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003400000000204000280140000001000010000000000000000000084000a2cb384739537bde2695583a5e06cb021d1a78097f3fe5726f6518d5681c7cbe8edd33135493f7acae7d34b6de8b80ad59c9d853103ee6d02178956112193c94439e6d11a0f117601cf6e8d205fa851564455fc43"], 0xdc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000040)=[{0x3, 0x3, 0x3, 0x3}, {0x4, 0x2, 0x6, 0x2}]}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) 13.566599098s ago: executing program 5 (id=7505): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$eJzs3E1sVNUeAPD/nc70Ax6PPh6PJ4hJEY2NxhYKCgs3GE1caGLEhS6bthCkUENrIoRISQwuDYl749ItC7fqzrgycYsLFyaGhBgSA7gac2funU7no5/TjjC/XzKdc+49955z7rnn3jP3zDSAnjWS/kki/hURtyNidzW6PMFI9e3BvatTD+9dnYrFcvn0H0kl3f00nilk7zuzfY4WIgqfJg07rJq/fOX85OzszKUsPr5w4cPx+ctXXjx3YfLszNmZixMnTx4/dvTEyxMvrb9SLfJL63X/wCdzB/e/8f7Nt6aK+fLB7L2+Hp0yEiP1RblVX6xnO51Zl+2qCyfFLhaEdUnbLW2uUqX/746+0HjQK8rlcnmg/erFcqPrTUuAR1YSbVYMZpcH4DGV3+jTz7/5q3b3H9ry4UfX3T1V/QCU1vtB9qquKdaeZ5QaPt920khEvLf415fpK1Z6DvHrFhUAAOg5353KR4KN479C7KtL9+9sDmU4Iv4TEXsi4r8RsTci/hdRSfv/iHiiMYMkorxC/nsb4s3jn8KdzdRvNen475Vsbmv5+C8f/cVwXxbblX4eri6bOZIdk9EoDZw5NztzdIU8vn/t58/brasf/6WvNP98LJiV406x4QHd9OTC5IYr3ODu9YgDxcb6J8W04fKZgCQi9kfEgXXsd7gufO75rw/WIqXl6Vavf0W5xZRedGKqovxVxHPV9l+MZe2/lGOy8vzk+GDMzhwZT8+CIy3z+PGnG2+3y3/V+n/zW+Mmr5/49vRmq12Ttv+OuvM/8vnbpfoPJxFJbb52fv153Pjls8p+Rw43r9vo+d+fvFsJ92fLPp5cWLh0NKI/ebN5+cTStnk8T5/Wf/Rw6/6/J9smPRJPRkR6Ej9VdwKnZT8UEU9HRIuq1fzw6jMftFu3xvN/y6T1n25x/bu2vP2X5us3EOg7f+j2wzYXj7W1//FKaDRb0vr6lyy7RKy1gB05iAAAAPAPV4jKd/8LY7VwoTA2Vn0GtDd2FGbn5hdeODP30cXp6m8EhqNUyJ90VZ8Hl5L8+edwXXyiIX4se278Rd9QJT42NTc73e3KQ4/bWenzSVP/T/3e1+3SAVvOT36gd63W//fd3KaCANvO/R96V13/X2yTZNE3ZeDx5P4PvatV/7+2gW2AR0tZX4aepv9D7yrGO7VwoaslAbab+z/0pM38rn/1QHmgYclANTAYzYljcGuKMdQirxaBg1t2EPJAOrJa51Z/9kdsPvehjWyV/zeFtmmisL4dDkTzqr7o9HEuxRqO2Nl9HT/5y9l35Tt92tzaln7aKtCVyxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDH/R0AAP//b9HZQw==") 12.55245604s ago: executing program 5 (id=7528): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x800) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500), 0xfd, 0x57e, &(0x7f0000001940)="$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") openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x500082c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090e000000000000000000000005000600490000000a00000000000000ff0200000000000000000000000000010000000000000000020001000000000000000003010000d005000500008000000a0000"], 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 12.341973347s ago: executing program 5 (id=7537): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x1c}}, 0x0) 5.337831356s ago: executing program 4 (id=7663): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) getdents64(r0, &(0x7f00000002c0)=""/183, 0xb7) 5.194552618s ago: executing program 5 (id=7668): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa86, 0x0) 5.194261798s ago: executing program 71 (id=7668): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xa86, 0x0) 5.193028948s ago: executing program 4 (id=7671): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000800)={0x0, 0x6, 0x8}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$RTC_IRQP_READ(r2, 0x40187014, &(0x7f0000000140)) 5.158104121s ago: executing program 4 (id=7672): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x5, 0x100000000}, 0x4, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x4, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8000161) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 5.021263002s ago: executing program 4 (id=7674): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 4.100965836s ago: executing program 4 (id=7688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c00008004000180"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) 3.998656595s ago: executing program 4 (id=7689): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) tgkill(0xffffffffffffffff, r4, 0xb) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.039031764s ago: executing program 7 (id=7722): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x1000080, 0x0) 1.942426082s ago: executing program 7 (id=7724): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) close(r0) 1.895407926s ago: executing program 7 (id=7726): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d, 0x4}, @mpls={[], @ipv4=@tcp={{0x12, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local, {[@timestamp_prespec={0x44, 0x34, 0xf8, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast2, 0x2}, {@broadcast, 0xfffffeff}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}, {@rand_addr=0x64010100, 0x1}, {@broadcast, 0x45}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @mss={0x2, 0x4, 0x6}]}}}}}}, 0x7e) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0) signalfd4(r2, &(0x7f0000000340), 0x8, 0x80800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 902.578346ms ago: executing program 3 (id=7746): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000800)={0x0, 0x6, 0x8}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$RTC_IRQP_READ(r2, 0x40187014, &(0x7f0000000140)) 901.929977ms ago: executing program 3 (id=7747): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 837.386772ms ago: executing program 3 (id=7748): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) 752.056989ms ago: executing program 3 (id=7751): bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="341000003b0007010000000000000000017c00000400000014000180080016000000030006000600800a0000080002"], 0x1034}}, 0x0) 582.535552ms ago: executing program 1 (id=7755): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0xb6}}, 0x10) close(r2) 560.407644ms ago: executing program 1 (id=7757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) stat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xc00, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x82040, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 498.346679ms ago: executing program 1 (id=7758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40101) 485.69771ms ago: executing program 0 (id=7759): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffffff, @loopback, 0xfffffffd}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r1) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r0}}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x9, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xa, 0x2b7, 0x27, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x700, 0x10, 0x6, 0x4}}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r11, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x80}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=@can_newroute={0x64, 0x18, 0x100, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0xb}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x4, 0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "a0c475a7e6c9a7a5"}, 0x5}}, @CGW_MOD_UID={0x8, 0xe, r5}, @CGW_MOD_OR={0x15, 0x2, {{{0x1}, 0x6, 0x0, 0x0, 0x0, "af89bcc112b9fbd8"}}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffa, 0xfffffffffffffff8, 0xfffffffffffffffd, 0xf5}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040020}, 0x0) 484.95695ms ago: executing program 7 (id=7760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x2000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0xffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000006c0)) fcntl$setlease(r5, 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4cd, &(0x7f00000000c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) write$binfmt_script(r6, &(0x7f00000005c0)={'#! ', './file1', [{0x20, 'ext4\x00'}], 0xa, "2394709166894b4d69e622f17bad589118e7f228a76aeb860e5afeb2fe2e6022d257504310a5fd114c57c71b2828437c400ab72bb67aed07c73b0b2f24facb01e1639124e6aaba67f4dd42881eff35fc24076ddb0d81bc70004d8606fe31af507928deb579cc8efc94ccbd407df6a50d18"}, 0x1001) 461.233772ms ago: executing program 1 (id=7761): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)={0x64, r3, 0x201, 0xfffffffc, 0x25dfdbfd, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x64}, 0x8, 0x3000000000002}, 0x0) 400.646317ms ago: executing program 1 (id=7762): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d850000000700000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 398.666128ms ago: executing program 3 (id=7763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r3], 0x34}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 341.939772ms ago: executing program 1 (id=7764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4042, &(0x7f00000000c0), 0x7, 0x4c6, &(0x7f0000000b00)="$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") 289.588366ms ago: executing program 0 (id=7765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x2000}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0xffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000006c0)) fcntl$setlease(r5, 0x400, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000680)=0x145) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_TSC(0x1a, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', './file1', [{0x20, 'ext4\x00'}], 0xa, "2394709166894b4d69e622f17bad589118e7f228a76aeb860e5afeb2fe2e6022d257504310a5fd114c57c71b2828437c400ab72bb67aed07c73b0b2f24facb01e1639124e6aaba67f4dd42881eff35fc24076ddb0d81bc70004d8606fe31af507928deb579cc8efc94ccbd407df6a50d18"}, 0x1001) 255.894109ms ago: executing program 3 (id=7766): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000002000000850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) tgkill(0xffffffffffffffff, r4, 0xb) keyctl$KEYCTL_MOVE(0x4, r6, r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 237.607441ms ago: executing program 0 (id=7767): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3, 0xb6}}, 0x10) close(r2) 194.665404ms ago: executing program 7 (id=7768): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setregid(0xee00, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000001600000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 153.713647ms ago: executing program 0 (id=7769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000080)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) stat(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xc00, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") unlink(&(0x7f0000000180)='./file1\x00') 77.989034ms ago: executing program 7 (id=7770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000004000000020000000c0000000014b66c738f345faea3fb048d56896824f2929cabdee6c484f5e60e00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000003c0)='./file0\x00', 0x1018000, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x2f5, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./control\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x73, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r2, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0xa86, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000070200000100", @ANYRES32, @ANYBLOB="00000000000019640000000010000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000ff000000000000000011f122603d34c585a63f9557b7a7e1d508c6b387b0a56b5d6be9b996a4ef24a881c66a22e0e540f2c3a94885977a27fd11c41fb03c0b858791bfe2c38a6e15f34b77262df8172823c6a5e6486db405515f345c336f72b7dc4566a71ed71f882c00a6519f645a26eb399c1cb19d1dafa10e4bc382f77ad55ffa50304e0cf326ca9fb5b1e3e045ab02a0835ed83322aeff41e8b0eb0cac9281fb73b0a5b2c387bb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='mm_page_free\x00', r11, 0x0, 0xd}, 0x18) 59.790495ms ago: executing program 0 (id=7771): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 0s ago: executing program 0 (id=7772): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x7f, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) syz_open_dev$evdev(0x0, 0x2, 0x822b01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) kernel console output (not intermixed with test programs): journaling mode [ 502.032135][T24978] EXT4-fs (loop4): 1 truncate cleaned up [ 502.040189][T24988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7146'. [ 502.043430][T24978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.079580][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7150'. [ 502.088650][T24991] tipc: Enabling of bearer rejected, media not registered [ 502.136959][T24993] loop3: detected capacity change from 0 to 512 [ 502.182360][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.207326][T24997] FAULT_INJECTION: forcing a failure. [ 502.207326][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.220473][T24997] CPU: 0 UID: 0 PID: 24997 Comm: syz.1.7153 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 502.220583][T24997] Tainted: [W]=WARN [ 502.220593][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.220610][T24997] Call Trace: [ 502.220619][T24997] [ 502.220629][T24997] __dump_stack+0x1d/0x30 [ 502.220653][T24997] dump_stack_lvl+0xe8/0x140 [ 502.220673][T24997] dump_stack+0x15/0x1b [ 502.220739][T24997] should_fail_ex+0x265/0x280 [ 502.220780][T24997] should_fail+0xb/0x20 [ 502.220897][T24997] should_fail_usercopy+0x1a/0x20 [ 502.220923][T24997] _copy_to_user+0x20/0xa0 [ 502.220958][T24997] simple_read_from_buffer+0xb5/0x130 [ 502.221044][T24997] proc_fail_nth_read+0x10e/0x150 [ 502.221091][T24997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.221126][T24997] vfs_read+0x19d/0x6f0 [ 502.221209][T24997] ? __rcu_read_unlock+0x4f/0x70 [ 502.221243][T24997] ? __fget_files+0x184/0x1c0 [ 502.221277][T24997] ksys_read+0xda/0x1a0 [ 502.221301][T24997] __x64_sys_read+0x40/0x50 [ 502.221379][T24997] x64_sys_call+0x27bc/0x2ff0 [ 502.221401][T24997] do_syscall_64+0xd2/0x200 [ 502.221428][T24997] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.221482][T24997] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 502.221507][T24997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.221532][T24997] RIP: 0033:0x7f3c640ad57c [ 502.221552][T24997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 502.221576][T24997] RSP: 002b:00007f3c62717030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.221616][T24997] RAX: ffffffffffffffda RBX: 00007f3c642d5fa0 RCX: 00007f3c640ad57c [ 502.221628][T24997] RDX: 000000000000000f RSI: 00007f3c627170a0 RDI: 0000000000000005 [ 502.221641][T24997] RBP: 00007f3c62717090 R08: 0000000000000000 R09: 0000000000000000 [ 502.221656][T24997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.221671][T24997] R13: 0000000000000000 R14: 00007f3c642d5fa0 R15: 00007ffc16e72588 [ 502.221741][T24997] [ 502.232204][T24993] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 502.444510][T24993] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.465964][T24993] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7151: iget: bad i_size value: 38620345925642 [ 502.483554][T24993] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7151: couldn't read orphan inode 15 (err -117) [ 502.484571][T24993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.632236][T25013] loop5: detected capacity change from 0 to 1024 [ 502.668946][T25013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.719062][T25013] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 502.755363][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.961285][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.178335][T25051] serio: Serial port pts0 [ 503.219635][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 503.219654][ T29] audit: type=1107 audit(1754349932.189:21087): pid=25054 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 503.243355][T25049] audit: audit_lost=19 audit_rate_limit=0 audit_backlog_limit=64 [ 503.252767][T25049] audit: out of memory in audit_log_start [ 503.271074][ T29] audit: type=1326 audit(1754349932.210:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ace1eb69 code=0x7ffc0000 [ 503.295654][ T29] audit: type=1326 audit(1754349932.210:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1ace1d4d0 code=0x7ffc0000 [ 503.319954][ T29] audit: type=1400 audit(1754349932.210:21090): avc: denied { read } for pid=25034 comm="syz.4.7169" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 503.343483][ T29] audit: type=1326 audit(1754349932.210:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1ace1eb69 code=0x7ffc0000 [ 503.367789][ T29] audit: type=1326 audit(1754349932.210:21092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff1ace1d4d0 code=0x7ffc0000 [ 503.367827][ T29] audit: type=1326 audit(1754349932.210:21093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff1ace1d61f code=0x7ffc0000 [ 503.398024][T25062] loop3: detected capacity change from 0 to 512 [ 503.398290][T25062] EXT4-fs: Ignoring removed orlov option [ 503.398704][T25062] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 503.405686][ T29] audit: type=1326 audit(1754349932.382:21094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25034 comm="syz.4.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff1ace51425 code=0x7ffc0000 [ 503.426723][T25062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 503.460030][T25060] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7177'. [ 503.467729][T25062] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.7176: corrupted in-inode xattr: e_value size too large [ 503.474533][T25060] netlink: zone id is out of range [ 503.502785][T25060] netlink: set zone limit has 4 unknown bytes [ 503.509710][T25062] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7176: couldn't read orphan inode 15 (err -117) [ 503.522836][T25062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.555492][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.587308][T25073] loop1: detected capacity change from 0 to 512 [ 503.594623][T25073] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 503.610882][T25075] loop3: detected capacity change from 0 to 1024 [ 503.613875][T25073] EXT4-fs (loop1): 1 truncate cleaned up [ 503.623433][T25073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.646796][T25075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.661715][T25075] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.668960][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.678951][T25075] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 13) [ 503.696261][T25075] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 503.708899][T25075] EXT4-fs (loop3): This should not happen!! Data will be lost [ 503.708899][T25075] [ 503.736765][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.752295][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.770020][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.789615][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.807567][T25074] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.827156][T25074] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.846614][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.869828][T25082] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 503.891021][T25074] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7182: lblock 3 mapped to illegal pblock 3 (length 1) [ 504.002837][T25099] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7193'. [ 504.014148][T25099] netlink: zone id is out of range [ 504.019317][T25099] netlink: set zone limit has 4 unknown bytes [ 504.103993][T25103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7196'. [ 504.166309][T25105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7194'. [ 504.231630][T25107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7199'. [ 504.277642][T25113] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 504.286214][T25075] lo speed is unknown, defaulting to 1000 [ 504.323368][T25110] proc: Bad value for 'gid' [ 504.464389][T25132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7207'. [ 504.543105][T25136] loop4: detected capacity change from 0 to 512 [ 504.563957][T25136] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 504.691522][T25139] loop1: detected capacity change from 0 to 1024 [ 504.699360][T25139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 504.718090][T25136] EXT4-fs (loop4): 1 truncate cleaned up [ 504.727160][T25136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.790046][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.884755][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.935889][T25161] bond1: entered promiscuous mode [ 504.941137][T25161] bond1: entered allmulticast mode [ 504.964285][T25161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.113658][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7220'. [ 505.153845][T25179] 9pnet_fd: Insufficient options for proto=fd [ 505.254191][T25192] loop4: detected capacity change from 0 to 512 [ 505.272347][T25192] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 505.294003][T25192] EXT4-fs (loop4): 1 truncate cleaned up [ 505.301244][T25192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.337304][T25202] bond3: entered promiscuous mode [ 505.343269][T25202] bond3: entered allmulticast mode [ 505.348755][T25202] 8021q: adding VLAN 0 to HW filter on device bond3 [ 505.349872][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.401673][T25175] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.7221'. [ 505.415796][T25175] netlink: zone id is out of range [ 505.420939][T25175] netlink: set zone limit has 4 unknown bytes [ 505.491430][T25216] FAULT_INJECTION: forcing a failure. [ 505.491430][T25216] name failslab, interval 1, probability 0, space 0, times 0 [ 505.504181][T25216] CPU: 0 UID: 0 PID: 25216 Comm: syz.3.7237 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 505.504225][T25216] Tainted: [W]=WARN [ 505.504235][T25216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.504250][T25216] Call Trace: [ 505.504258][T25216] [ 505.504266][T25216] __dump_stack+0x1d/0x30 [ 505.504318][T25216] dump_stack_lvl+0xe8/0x140 [ 505.504340][T25216] dump_stack+0x15/0x1b [ 505.504376][T25216] should_fail_ex+0x265/0x280 [ 505.504413][T25216] should_failslab+0x8c/0xb0 [ 505.504440][T25216] kmem_cache_alloc_noprof+0x50/0x310 [ 505.504495][T25216] ? getname_flags+0x80/0x3b0 [ 505.504528][T25216] getname_flags+0x80/0x3b0 [ 505.504558][T25216] __x64_sys_unlink+0x21/0x40 [ 505.504583][T25216] x64_sys_call+0x2dc0/0x2ff0 [ 505.504652][T25216] do_syscall_64+0xd2/0x200 [ 505.504697][T25216] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 505.504733][T25216] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 505.504757][T25216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.504781][T25216] RIP: 0033:0x7f7f66ebeb69 [ 505.504797][T25216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.504907][T25216] RSP: 002b:00007f7f6551f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 505.504929][T25216] RAX: ffffffffffffffda RBX: 00007f7f670e5fa0 RCX: 00007f7f66ebeb69 [ 505.504943][T25216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 505.504957][T25216] RBP: 00007f7f6551f090 R08: 0000000000000000 R09: 0000000000000000 [ 505.504977][T25216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.504990][T25216] R13: 0000000000000000 R14: 00007f7f670e5fa0 R15: 00007fff7437f978 [ 505.505011][T25216] [ 505.770387][T25220] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7240'. [ 505.803244][T25220] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 505.861772][T25232] bond1: entered promiscuous mode [ 505.866906][T25232] bond1: entered allmulticast mode [ 505.880517][T25232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.958249][T25242] loop4: detected capacity change from 0 to 512 [ 505.972277][T25242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 506.053665][T25242] EXT4-fs (loop4): 1 truncate cleaned up [ 506.062391][T25242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.124279][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.171210][T25260] FAULT_INJECTION: forcing a failure. [ 506.171210][T25260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.177005][T25266] bond4: entered promiscuous mode [ 506.184424][T25260] CPU: 0 UID: 0 PID: 25260 Comm: syz.3.7255 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 506.184466][T25260] Tainted: [W]=WARN [ 506.184475][T25260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.184492][T25260] Call Trace: [ 506.184501][T25260] [ 506.184510][T25260] __dump_stack+0x1d/0x30 [ 506.184536][T25260] dump_stack_lvl+0xe8/0x140 [ 506.184583][T25260] dump_stack+0x15/0x1b [ 506.184602][T25260] should_fail_ex+0x265/0x280 [ 506.184646][T25260] should_fail+0xb/0x20 [ 506.184685][T25260] should_fail_usercopy+0x1a/0x20 [ 506.184782][T25260] _copy_to_user+0x20/0xa0 [ 506.184884][T25260] simple_read_from_buffer+0xb5/0x130 [ 506.184911][T25260] proc_fail_nth_read+0x10e/0x150 [ 506.184949][T25260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.185035][T25260] vfs_read+0x19d/0x6f0 [ 506.185104][T25260] ? __rcu_read_unlock+0x4f/0x70 [ 506.185132][T25260] ? __fget_files+0x184/0x1c0 [ 506.185165][T25260] ksys_read+0xda/0x1a0 [ 506.185197][T25260] __x64_sys_read+0x40/0x50 [ 506.185248][T25260] x64_sys_call+0x27bc/0x2ff0 [ 506.185279][T25260] do_syscall_64+0xd2/0x200 [ 506.185316][T25260] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 506.185451][T25260] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 506.185482][T25260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.185514][T25260] RIP: 0033:0x7f7f66ebd57c [ 506.185593][T25260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 506.185622][T25260] RSP: 002b:00007f7f6551f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.185651][T25260] RAX: ffffffffffffffda RBX: 00007f7f670e5fa0 RCX: 00007f7f66ebd57c [ 506.185668][T25260] RDX: 000000000000000f RSI: 00007f7f6551f0a0 RDI: 0000000000000004 [ 506.185687][T25260] RBP: 00007f7f6551f090 R08: 0000000000000000 R09: 0000000000000000 [ 506.185736][T25260] R10: 0000000040010022 R11: 0000000000000246 R12: 0000000000000001 [ 506.185754][T25260] R13: 0000000000000000 R14: 00007f7f670e5fa0 R15: 00007fff7437f978 [ 506.185781][T25260] [ 506.231915][T25214] netlink: 'syz.0.7238': attribute type 13 has an invalid length. [ 506.234038][T25266] bond4: entered allmulticast mode [ 506.238375][T25214] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7238'. [ 506.425606][T25266] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.438216][T25281] loop1: detected capacity change from 0 to 512 [ 506.467301][T25214] erspan0: refused to change device tx_queue_len [ 506.474745][T25281] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 506.483399][T25214] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 506.510791][T25281] EXT4-fs (loop1): orphan cleanup on readonly fs [ 506.520100][T25281] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7261: iget: bad i_size value: 38620345925642 [ 506.624912][T25281] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7261: couldn't read orphan inode 15 (err -117) [ 506.676732][T25290] loop3: detected capacity change from 0 to 512 [ 506.684564][T25281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 506.708925][T25295] loop4: detected capacity change from 0 to 512 [ 506.720559][T25290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 506.774992][T25290] EXT4-fs (loop3): 1 truncate cleaned up [ 506.782386][T25295] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 506.790495][T25300] loop5: detected capacity change from 0 to 512 [ 506.801287][T25300] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 506.822765][T25300] EXT4-fs (loop5): 1 truncate cleaned up [ 506.829136][T25290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.851326][T25300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.867464][T25304] FAULT_INJECTION: forcing a failure. [ 506.867464][T25304] name failslab, interval 1, probability 0, space 0, times 0 [ 506.880379][T25304] CPU: 0 UID: 0 PID: 25304 Comm: syz.0.7269 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 506.880420][T25304] Tainted: [W]=WARN [ 506.880427][T25304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.880440][T25304] Call Trace: [ 506.880446][T25304] [ 506.880454][T25304] __dump_stack+0x1d/0x30 [ 506.880521][T25304] dump_stack_lvl+0xe8/0x140 [ 506.880540][T25304] dump_stack+0x15/0x1b [ 506.880560][T25304] should_fail_ex+0x265/0x280 [ 506.880599][T25304] should_failslab+0x8c/0xb0 [ 506.880633][T25304] kmem_cache_alloc_node_noprof+0x57/0x320 [ 506.880747][T25304] ? __alloc_skb+0x101/0x320 [ 506.880778][T25304] __alloc_skb+0x101/0x320 [ 506.880807][T25304] netlink_alloc_large_skb+0xba/0xf0 [ 506.880845][T25304] netlink_sendmsg+0x3cf/0x6b0 [ 506.880940][T25304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.881004][T25304] __sock_sendmsg+0x145/0x180 [ 506.881030][T25304] ____sys_sendmsg+0x31e/0x4e0 [ 506.881066][T25304] ___sys_sendmsg+0x17b/0x1d0 [ 506.881188][T25304] __x64_sys_sendmsg+0xd4/0x160 [ 506.881271][T25304] x64_sys_call+0x191e/0x2ff0 [ 506.881297][T25304] do_syscall_64+0xd2/0x200 [ 506.881427][T25304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 506.881460][T25304] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 506.881511][T25304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.881533][T25304] RIP: 0033:0x7f4140d2eb69 [ 506.881549][T25304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.881567][T25304] RSP: 002b:00007f413f397038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.881593][T25304] RAX: ffffffffffffffda RBX: 00007f4140f55fa0 RCX: 00007f4140d2eb69 [ 506.881611][T25304] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 506.881624][T25304] RBP: 00007f413f397090 R08: 0000000000000000 R09: 0000000000000000 [ 506.881637][T25304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.881650][T25304] R13: 0000000000000000 R14: 00007f4140f55fa0 R15: 00007fff71ab6398 [ 506.881669][T25304] [ 506.886218][T25295] EXT4-fs (loop4): orphan cleanup on readonly fs [ 507.110268][T25295] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7263: iget: bad i_size value: 38620345925642 [ 507.110494][T25295] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7263: couldn't read orphan inode 15 (err -117) [ 507.111169][T25295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.196358][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.211187][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.227053][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.259430][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.306361][T25321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.382339][T25315] loop5: detected capacity change from 0 to 512 [ 507.389540][T25315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 507.401432][T25321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.414789][T25315] EXT4-fs (loop5): 1 truncate cleaned up [ 507.439473][T25315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.456323][T25321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.469697][T25340] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7282'. [ 507.497930][T25321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.543978][T25327] netlink: zone id is out of range [ 507.549182][T25327] netlink: set zone limit has 4 unknown bytes [ 507.558906][T25347] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 507.578755][T11432] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.600348][T11413] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.620214][T11413] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.629292][T11413] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.677145][T25355] loop1: detected capacity change from 0 to 1024 [ 507.695280][T25355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.758348][T25367] loop4: detected capacity change from 0 to 128 [ 507.765209][T25367] msdos: Unknown parameter 'ÿÿ0x0000000000000000' [ 507.782690][T25355] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.7289: Allocating blocks 497-513 which overlap fs metadata [ 507.814988][T25355] EXT4-fs (loop1): pa ffff8881072a6bd0: logic 256, phys. 369, len 9 [ 507.823190][T25355] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 507.858959][T25355] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 507.881085][T25373] bond2: entered promiscuous mode [ 507.887008][T25373] bond2: entered allmulticast mode [ 507.894262][T25375] loop3: detected capacity change from 0 to 512 [ 507.897400][T25373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.928365][T25375] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 507.940301][T25375] EXT4-fs (loop3): orphan cleanup on readonly fs [ 507.969985][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.007841][T25384] loop4: detected capacity change from 0 to 512 [ 508.021808][T25375] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7294: iget: bad i_size value: 38620345925642 [ 508.056309][T25384] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 508.070476][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.080316][T25375] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7294: couldn't read orphan inode 15 (err -117) [ 508.102454][T25384] EXT4-fs (loop4): 1 truncate cleaned up [ 508.114130][T25384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.143607][T25375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.215317][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.250391][T25389] netlink: zone id is out of range [ 508.255547][T25389] netlink: set zone limit has 4 unknown bytes [ 508.324668][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 508.324685][ T29] audit: type=1326 audit(1754349937.671:21349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.373240][ T29] audit: type=1326 audit(1754349937.671:21350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.396991][ T29] audit: type=1326 audit(1754349937.671:21351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.420599][ T29] audit: type=1326 audit(1754349937.671:21352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.444342][ T29] audit: type=1326 audit(1754349937.671:21353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.468105][ T29] audit: type=1326 audit(1754349937.671:21354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.491808][ T29] audit: type=1326 audit(1754349937.671:21355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.515481][ T29] audit: type=1326 audit(1754349937.671:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.539107][ T29] audit: type=1326 audit(1754349937.671:21357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.562994][ T29] audit: type=1326 audit(1754349937.671:21358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25397 comm="syz.5.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 508.611176][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.615397][T25409] bond2: entered promiscuous mode [ 508.625663][T25409] bond2: entered allmulticast mode [ 508.631173][T25409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.762936][T25429] __nla_validate_parse: 3 callbacks suppressed [ 508.762963][T25429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7316'. [ 509.020067][T25459] loop4: detected capacity change from 0 to 512 [ 509.031367][T25455] bond5: entered promiscuous mode [ 509.037232][T25455] bond5: entered allmulticast mode [ 509.052362][T25465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7332'. [ 509.061862][T25455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.115301][T25469] FAULT_INJECTION: forcing a failure. [ 509.115301][T25469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.128569][T25469] CPU: 0 UID: 0 PID: 25469 Comm: syz.4.7334 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 509.128616][T25469] Tainted: [W]=WARN [ 509.128625][T25469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.128679][T25469] Call Trace: [ 509.128685][T25469] [ 509.128692][T25469] __dump_stack+0x1d/0x30 [ 509.128713][T25469] dump_stack_lvl+0xe8/0x140 [ 509.128735][T25469] dump_stack+0x15/0x1b [ 509.128756][T25469] should_fail_ex+0x265/0x280 [ 509.128791][T25469] should_fail+0xb/0x20 [ 509.128914][T25469] should_fail_usercopy+0x1a/0x20 [ 509.128939][T25469] _copy_from_user+0x1c/0xb0 [ 509.128973][T25469] ___sys_recvmsg+0xaa/0x370 [ 509.128994][T25469] ? _parse_integer+0x27/0x40 [ 509.129090][T25469] do_recvmmsg+0x1ef/0x540 [ 509.129124][T25469] __x64_sys_recvmmsg+0xe5/0x170 [ 509.129152][T25469] x64_sys_call+0x27a6/0x2ff0 [ 509.129181][T25469] do_syscall_64+0xd2/0x200 [ 509.129218][T25469] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 509.129311][T25469] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 509.129339][T25469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.129365][T25469] RIP: 0033:0x7ff1ace1eb69 [ 509.129381][T25469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.129410][T25469] RSP: 002b:00007ff1ab487038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 509.129434][T25469] RAX: ffffffffffffffda RBX: 00007ff1ad045fa0 RCX: 00007ff1ace1eb69 [ 509.129447][T25469] RDX: 0000000000000001 RSI: 0000200000003c40 RDI: 0000000000000009 [ 509.129485][T25469] RBP: 00007ff1ab487090 R08: 0000000000000000 R09: 0000000000000000 [ 509.129499][T25469] R10: 0000000060010002 R11: 0000000000000246 R12: 0000000000000001 [ 509.129515][T25469] R13: 0000000000000000 R14: 00007ff1ad045fa0 R15: 00007ffd8691fa18 [ 509.129540][T25469] [ 509.328810][T25470] delete_channel: no stack [ 509.361657][T25476] loop4: detected capacity change from 0 to 512 [ 509.372437][T25478] bridge1: entered promiscuous mode [ 509.377818][T25478] bridge1: entered allmulticast mode [ 509.391035][T25476] EXT4-fs: Ignoring removed orlov option [ 509.395353][T25484] FAULT_INJECTION: forcing a failure. [ 509.395353][T25484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.402207][T25478] team0: Port device bridge1 added [ 509.409877][T25484] CPU: 0 UID: 0 PID: 25484 Comm: syz.1.7340 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 509.409933][T25484] Tainted: [W]=WARN [ 509.409945][T25484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.409964][T25484] Call Trace: [ 509.409975][T25484] [ 509.409987][T25484] __dump_stack+0x1d/0x30 [ 509.410017][T25484] dump_stack_lvl+0xe8/0x140 [ 509.410047][T25484] dump_stack+0x15/0x1b [ 509.410072][T25484] should_fail_ex+0x265/0x280 [ 509.410147][T25484] should_fail+0xb/0x20 [ 509.410213][T25484] should_fail_usercopy+0x1a/0x20 [ 509.410242][T25484] _copy_from_user+0x1c/0xb0 [ 509.410281][T25484] memdup_user+0x5e/0xd0 [ 509.410389][T25484] strndup_user+0x68/0xb0 [ 509.410435][T25484] __se_sys_mount+0x8e/0x2e0 [ 509.410467][T25484] ? fput+0x8f/0xc0 [ 509.410576][T25484] ? ksys_write+0x192/0x1a0 [ 509.410611][T25484] __x64_sys_mount+0x67/0x80 [ 509.410643][T25484] x64_sys_call+0x2b4d/0x2ff0 [ 509.410756][T25484] do_syscall_64+0xd2/0x200 [ 509.410792][T25484] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 509.410874][T25484] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 509.410907][T25484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.410937][T25484] RIP: 0033:0x7f3c640aeb69 [ 509.410960][T25484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.410987][T25484] RSP: 002b:00007f3c62717038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 509.411091][T25484] RAX: ffffffffffffffda RBX: 00007f3c642d5fa0 RCX: 00007f3c640aeb69 [ 509.411111][T25484] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000000 [ 509.411129][T25484] RBP: 00007f3c62717090 R08: 0000000000000000 R09: 0000000000000000 [ 509.411148][T25484] R10: 0000000000101097 R11: 0000000000000246 R12: 0000000000000001 [ 509.411166][T25484] R13: 0000000000000000 R14: 00007f3c642d5fa0 R15: 00007ffc16e72588 [ 509.411194][T25484] [ 509.431244][T25476] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 509.621521][T25476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 509.633738][T25476] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7336: corrupted in-inode xattr: e_value size too large [ 509.649525][T25476] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7336: couldn't read orphan inode 15 (err -117) [ 509.674657][T25499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7343'. [ 509.699019][T25476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.714610][T25497] veth1_to_bond: entered allmulticast mode [ 509.773337][T25499] sd 0:0:1:0: device reset [ 509.784732][T25496] veth1_to_bond: left allmulticast mode [ 509.802610][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.847351][T25513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7348'. [ 509.857770][T25511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7349'. [ 509.881643][T25519] loop1: detected capacity change from 0 to 512 [ 509.890707][T25519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.912191][T25519] EXT4-fs (loop1): Online resizing not supported with sparse_super2 [ 509.926734][T25508] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.7345'. [ 509.939469][T25524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7352'. [ 509.955249][T25508] netlink: zone id is out of range [ 509.960442][T25508] netlink: set zone limit has 4 unknown bytes [ 510.057696][T25521] sz1: rxe_newlink: already configured on lo [ 510.146440][T25536] bridge0: port 3(ipvlan2) entered blocking state [ 510.153149][T25536] bridge0: port 3(ipvlan2) entered disabled state [ 510.163426][T25536] ipvlan2: entered allmulticast mode [ 510.168804][T25536] bridge0: entered allmulticast mode [ 510.174910][T25536] ipvlan2: left allmulticast mode [ 510.180150][T25536] bridge0: left allmulticast mode [ 510.212966][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.371165][T25555] loop5: detected capacity change from 0 to 1024 [ 510.397641][T25551] ipvlan2: entered promiscuous mode [ 510.405491][T25551] bridge0: port 3(ipvlan2) entered blocking state [ 510.406275][T25555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.412077][T25551] bridge0: port 3(ipvlan2) entered disabled state [ 510.446882][T25555] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 510.462337][T25551] ipvlan2: entered allmulticast mode [ 510.468427][T25551] bridge0: entered allmulticast mode [ 510.478595][T25551] ipvlan2: left allmulticast mode [ 510.483739][T25551] bridge0: left allmulticast mode [ 510.527358][T25561] loop3: detected capacity change from 0 to 1024 [ 510.542548][T25561] EXT4-fs: Ignoring removed orlov option [ 510.557309][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.563131][T25561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.636067][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.651485][T25569] : renamed from lo (while UP) [ 510.692763][T25569] random: crng reseeded on system resumption [ 510.847022][T25590] smc: net device bond0 applied user defined pnetid SYZ2 [ 510.868398][T25590] FAULT_INJECTION: forcing a failure. [ 510.868398][T25590] name failslab, interval 1, probability 0, space 0, times 0 [ 510.881226][T25590] CPU: 1 UID: 0 PID: 25590 Comm: syz.5.7378 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 510.881333][T25590] Tainted: [W]=WARN [ 510.881340][T25590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 510.881353][T25590] Call Trace: [ 510.881421][T25590] [ 510.881429][T25590] __dump_stack+0x1d/0x30 [ 510.881466][T25590] dump_stack_lvl+0xe8/0x140 [ 510.881492][T25590] dump_stack+0x15/0x1b [ 510.881514][T25590] should_fail_ex+0x265/0x280 [ 510.881634][T25590] should_failslab+0x8c/0xb0 [ 510.881668][T25590] kmem_cache_alloc_node_noprof+0x57/0x320 [ 510.881704][T25590] ? __alloc_skb+0x101/0x320 [ 510.881735][T25590] __alloc_skb+0x101/0x320 [ 510.881779][T25590] netlink_alloc_large_skb+0xba/0xf0 [ 510.881813][T25590] netlink_sendmsg+0x3cf/0x6b0 [ 510.881873][T25590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.881910][T25590] __sock_sendmsg+0x145/0x180 [ 510.881944][T25590] ____sys_sendmsg+0x31e/0x4e0 [ 510.882094][T25590] ___sys_sendmsg+0x17b/0x1d0 [ 510.882157][T25590] __x64_sys_sendmsg+0xd4/0x160 [ 510.882207][T25590] x64_sys_call+0x191e/0x2ff0 [ 510.882280][T25590] do_syscall_64+0xd2/0x200 [ 510.882357][T25590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 510.882400][T25590] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 510.882428][T25590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.882450][T25590] RIP: 0033:0x7fdd28bfeb69 [ 510.882465][T25590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.882548][T25590] RSP: 002b:00007fdd27267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.882573][T25590] RAX: ffffffffffffffda RBX: 00007fdd28e25fa0 RCX: 00007fdd28bfeb69 [ 510.882588][T25590] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 510.882603][T25590] RBP: 00007fdd27267090 R08: 0000000000000000 R09: 0000000000000000 [ 510.882614][T25590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.882626][T25590] R13: 0000000000000000 R14: 00007fdd28e25fa0 R15: 00007fff5bb80ba8 [ 510.882649][T25590] [ 511.115725][T25594] batadv1: entered promiscuous mode [ 511.149691][T25603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25603 comm=syz.0.7380 [ 511.162511][T25603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25603 comm=syz.0.7380 [ 511.185158][T25604] loop4: detected capacity change from 0 to 128 [ 511.192482][T25604] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 511.214143][T25604] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 511.256543][T25609] random: crng reseeded on system resumption [ 511.303304][T11425] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 511.330949][T25623] loop4: detected capacity change from 0 to 1024 [ 511.369309][T25623] EXT4-fs: Ignoring removed orlov option [ 511.389193][T25623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.406768][T25630] FAULT_INJECTION: forcing a failure. [ 511.406768][T25630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.420155][T25630] CPU: 1 UID: 0 PID: 25630 Comm: syz.5.7392 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 511.420190][T25630] Tainted: [W]=WARN [ 511.420197][T25630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.420283][T25630] Call Trace: [ 511.420291][T25630] [ 511.420299][T25630] __dump_stack+0x1d/0x30 [ 511.420375][T25630] dump_stack_lvl+0xe8/0x140 [ 511.420396][T25630] dump_stack+0x15/0x1b [ 511.420412][T25630] should_fail_ex+0x265/0x280 [ 511.420490][T25630] should_fail+0xb/0x20 [ 511.420553][T25630] should_fail_usercopy+0x1a/0x20 [ 511.420642][T25630] _copy_from_user+0x1c/0xb0 [ 511.420670][T25630] sctp_getsockopt_connectx3+0xda/0x300 [ 511.420709][T25630] sctp_getsockopt+0x910/0xaa0 [ 511.420740][T25630] sock_common_getsockopt+0x5d/0x70 [ 511.420768][T25630] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 511.420846][T25630] do_sock_getsockopt+0x1fd/0x240 [ 511.420884][T25630] __x64_sys_getsockopt+0x11e/0x1a0 [ 511.420923][T25630] x64_sys_call+0x2bc6/0x2ff0 [ 511.420949][T25630] do_syscall_64+0xd2/0x200 [ 511.421006][T25630] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 511.421031][T25630] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 511.421055][T25630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.421091][T25630] RIP: 0033:0x7fdd28bfeb69 [ 511.421111][T25630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.421149][T25630] RSP: 002b:00007fdd27267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 511.421168][T25630] RAX: ffffffffffffffda RBX: 00007fdd28e25fa0 RCX: 00007fdd28bfeb69 [ 511.421186][T25630] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 511.421202][T25630] RBP: 00007fdd27267090 R08: 0000200000000180 R09: 0000000000000000 [ 511.421219][T25630] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.421237][T25630] R13: 0000000000000000 R14: 00007fdd28e25fa0 R15: 00007fff5bb80ba8 [ 511.421263][T25630] [ 511.632850][T25634] loop1: detected capacity change from 0 to 512 [ 511.673147][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.718552][T25628] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.7388'. [ 511.729892][T25634] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 511.741752][T25628] netlink: zone id is out of range [ 511.746976][T25628] netlink: set zone limit has 4 unknown bytes [ 511.748284][T25643] loop5: detected capacity change from 0 to 1024 [ 511.760157][T25634] EXT4-fs (loop1): orphan cleanup on readonly fs [ 511.793904][T25643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.869697][T25656] : renamed from lo (while UP) [ 511.882289][T25656] random: crng reseeded on system resumption [ 511.888645][T25634] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7391: iget: bad i_size value: 38620345925642 [ 511.970582][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.990643][T25634] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7391: couldn't read orphan inode 15 (err -117) [ 512.036240][T25634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.088566][T25665] loop3: detected capacity change from 0 to 512 [ 512.104822][T25672] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7407'. [ 512.105927][T25665] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7404: iget: bad i_size value: 38620345925642 [ 512.136237][T25665] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7404: couldn't read orphan inode 15 (err -117) [ 512.150309][T25665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.221927][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.237842][T25681] loop4: detected capacity change from 0 to 1024 [ 512.246349][T25684] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 512.254981][T25665] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7404: bg 0: block 5: invalid block bitmap [ 512.256742][T25665] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 512.281785][T25665] EXT4-fs (loop3): This should not happen!! Data will be lost [ 512.281785][T25665] [ 512.291710][T25665] EXT4-fs (loop3): Total free blocks count 0 [ 512.297756][T25665] EXT4-fs (loop3): Free/Dirty block details [ 512.304400][T25665] EXT4-fs (loop3): free_blocks=0 [ 512.309356][T25665] EXT4-fs (loop3): dirty_blocks=5 [ 512.314464][T25665] EXT4-fs (loop3): Block reservation details [ 512.320494][T25665] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 512.333524][T25681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.360891][T25681] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.378017][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.392764][T25681] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 13) [ 512.410593][T25681] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 512.423817][T25681] EXT4-fs (loop4): This should not happen!! Data will be lost [ 512.423817][T25681] [ 512.442048][T25697] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.475333][T25687] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.7414'. [ 512.479750][T25697] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.512706][T25687] netlink: zone id is out of range [ 512.518026][T25687] netlink: set zone limit has 4 unknown bytes [ 512.546329][T25697] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.563606][T25680] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.603481][T25697] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.654135][T25680] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.676729][T25718] bridge0: port 3(ipvlan2) entered blocking state [ 512.683258][T25718] bridge0: port 3(ipvlan2) entered disabled state [ 512.692064][T25718] ipvlan2: entered allmulticast mode [ 512.697457][T25718] bridge0: entered allmulticast mode [ 512.703563][T25718] ipvlan2: left allmulticast mode [ 512.708647][T25718] bridge0: left allmulticast mode [ 512.715833][T25680] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.739429][T25697] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.763354][T25680] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7411: lblock 3 mapped to illegal pblock 3 (length 1) [ 512.992014][T25746] loop5: detected capacity change from 0 to 128 [ 512.998598][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 512.998615][ T29] audit: type=1326 audit(1754349942.682:21647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd28bfd7ca code=0x7ffc0000 [ 513.018552][T25746] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 513.028884][ T29] audit: type=1326 audit(1754349942.703:21648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdd28bfd7ca code=0x7ffc0000 [ 513.029093][ T29] audit: type=1326 audit(1754349942.703:21649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdd28bfd3d7 code=0x7ffc0000 [ 513.070340][T25746] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.088219][ T29] audit: type=1326 audit(1754349942.703:21650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdd28c0030a code=0x7ffc0000 [ 513.101506][T25750] loop1: detected capacity change from 0 to 1024 [ 513.129803][T25749] loop3: detected capacity change from 0 to 1024 [ 513.130250][ T29] audit: type=1326 audit(1754349942.821:21651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd28bfd4d0 code=0x7ffc0000 [ 513.155209][T25750] journal_path: Non-blockdev passed as './file1' [ 513.160905][ T29] audit: type=1326 audit(1754349942.821:21652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdd28bfd8b7 code=0x7ffc0000 [ 513.166376][T25750] EXT4-fs: error: could not find journal device path [ 513.190631][ T29] audit: type=1326 audit(1754349942.821:21653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd28bfd4d0 code=0x7ffc0000 [ 513.220700][ T29] audit: type=1326 audit(1754349942.821:21654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 513.244464][ T29] audit: type=1326 audit(1754349942.821:21655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 513.271530][ T29] audit: type=1326 audit(1754349942.832:21656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25745 comm="syz.5.7429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fdd28bfeb69 code=0x7ffc0000 [ 513.306592][T25681] lo speed is unknown, defaulting to 1000 [ 513.313293][T11437] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 513.333626][T25749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.393640][T25749] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 513.481175][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.514479][T25770] bond6: entered promiscuous mode [ 513.519792][T25770] bond6: entered allmulticast mode [ 513.526915][T25770] 8021q: adding VLAN 0 to HW filter on device bond6 [ 513.575985][T25776] loop3: detected capacity change from 0 to 1024 [ 513.591675][T25776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.611523][T24037] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.629105][T25776] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 513.679356][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.766320][T25801] netlink: 'syz.5.7451': attribute type 10 has an invalid length. [ 513.774973][T25801] __nla_validate_parse: 2 callbacks suppressed [ 513.774995][T25801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7451'. [ 513.794136][T25801] dummy0: entered promiscuous mode [ 513.829992][T25806] bond3: entered promiscuous mode [ 513.835510][T25806] bond3: entered allmulticast mode [ 513.888280][T25806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.915957][T25818] loop5: detected capacity change from 0 to 1024 [ 513.934763][T25819] loop1: detected capacity change from 0 to 164 [ 513.977740][T25824] FAULT_INJECTION: forcing a failure. [ 513.977740][T25824] name failslab, interval 1, probability 0, space 0, times 0 [ 513.984184][T25818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.991292][T25824] CPU: 1 UID: 0 PID: 25824 Comm: syz.4.7459 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 513.991348][T25824] Tainted: [W]=WARN [ 513.991359][T25824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.991378][T25824] Call Trace: [ 513.991388][T25824] [ 513.991398][T25824] __dump_stack+0x1d/0x30 [ 513.991467][T25824] dump_stack_lvl+0xe8/0x140 [ 513.991496][T25824] dump_stack+0x15/0x1b [ 513.991520][T25824] should_fail_ex+0x265/0x280 [ 513.991570][T25824] should_failslab+0x8c/0xb0 [ 513.991606][T25824] kmem_cache_alloc_noprof+0x50/0x310 [ 513.991667][T25824] ? getname_flags+0x80/0x3b0 [ 513.991789][T25824] getname_flags+0x80/0x3b0 [ 513.991892][T25824] io_openat_prep+0x129/0x2b0 [ 513.991930][T25824] io_submit_sqes+0x5db/0x1050 [ 513.991991][T25824] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 513.992051][T25824] ? 0xffffffff81000000 [ 513.992069][T25824] ? __rcu_read_unlock+0x4f/0x70 [ 513.992102][T25824] ? get_pid_task+0x96/0xd0 [ 513.992131][T25824] ? proc_fail_nth_write+0x13b/0x160 [ 513.992188][T25824] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 513.992228][T25824] ? vfs_write+0x75e/0x8e0 [ 513.992258][T25824] ? __rcu_read_unlock+0x4f/0x70 [ 513.992289][T25824] ? __fget_files+0x184/0x1c0 [ 513.992366][T25824] ? fput+0x8f/0xc0 [ 513.992414][T25824] __x64_sys_io_uring_enter+0x78/0x90 [ 513.992531][T25824] x64_sys_call+0x2de1/0x2ff0 [ 513.992563][T25824] do_syscall_64+0xd2/0x200 [ 513.992598][T25824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 513.992647][T25824] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 513.992679][T25824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.992710][T25824] RIP: 0033:0x7ff1ace1eb69 [ 513.992732][T25824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.992791][T25824] RSP: 002b:00007ff1ab487038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 513.992818][T25824] RAX: ffffffffffffffda RBX: 00007ff1ad045fa0 RCX: 00007ff1ace1eb69 [ 513.992837][T25824] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 513.992856][T25824] RBP: 00007ff1ab487090 R08: 0000000000000000 R09: 0000000000000000 [ 513.992874][T25824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.992892][T25824] R13: 0000000000000000 R14: 00007ff1ad045fa0 R15: 00007ffd8691fa18 [ 513.992931][T25824] [ 514.251117][T25818] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 514.284780][T25836] FAULT_INJECTION: forcing a failure. [ 514.284780][T25836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.298782][T25836] CPU: 1 UID: 0 PID: 25836 Comm: syz.0.7465 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 514.298876][T25836] Tainted: [W]=WARN [ 514.298886][T25836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.298903][T25836] Call Trace: [ 514.298911][T25836] [ 514.298921][T25836] __dump_stack+0x1d/0x30 [ 514.298979][T25836] dump_stack_lvl+0xe8/0x140 [ 514.299005][T25836] dump_stack+0x15/0x1b [ 514.299021][T25836] should_fail_ex+0x265/0x280 [ 514.299081][T25836] should_fail+0xb/0x20 [ 514.299180][T25836] should_fail_usercopy+0x1a/0x20 [ 514.299270][T25836] copy_fpstate_to_sigframe+0x628/0x7d0 [ 514.299315][T25836] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 514.299356][T25836] ? x86_task_fpu+0x36/0x60 [ 514.299389][T25836] get_sigframe+0x34d/0x490 [ 514.299529][T25836] ? get_signal+0xdc8/0xf70 [ 514.299597][T25836] x64_setup_rt_frame+0xa8/0x580 [ 514.299626][T25836] arch_do_signal_or_restart+0x27c/0x480 [ 514.299655][T25836] exit_to_user_mode_loop+0x7a/0x100 [ 514.299687][T25836] do_syscall_64+0x1d6/0x200 [ 514.299719][T25836] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 514.299751][T25836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 514.299843][T25836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.299870][T25836] RIP: 0033:0x7f4140d2eb69 [ 514.299886][T25836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.299911][T25836] RSP: 002b:00007f413f397038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 514.299936][T25836] RAX: 0000000000000000 RBX: 00007f4140f55fa0 RCX: 00007f4140d2eb69 [ 514.299989][T25836] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000025f [ 514.300001][T25836] RBP: 00007f413f397090 R08: 0000000000000000 R09: 0000000000000000 [ 514.300013][T25836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.300025][T25836] R13: 0000000000000000 R14: 00007f4140f55fa0 R15: 00007fff71ab6398 [ 514.300049][T25836] [ 514.518322][T22857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.566486][T25845] loop1: detected capacity change from 0 to 512 [ 514.585940][T25849] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7471'. [ 514.614532][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7472'. [ 514.618636][T25845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.660903][T25845] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.704334][T25856] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 514.731449][T25838] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.7466'. [ 514.740805][T25838] netlink: zone id is out of range [ 514.745985][T25838] netlink: set zone limit has 4 unknown bytes [ 514.759988][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7475'. [ 514.842847][T25865] loop3: detected capacity change from 0 to 512 [ 514.856526][T25865] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 514.871816][T25865] EXT4-fs (loop3): 1 truncate cleaned up [ 514.878721][T25865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.913872][T25879] loop4: detected capacity change from 0 to 512 [ 514.930528][T25877] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 514.937193][T25877] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 514.944488][T25879] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 514.945029][T25877] vhci_hcd vhci_hcd.0: Device attached [ 514.983228][T25879] EXT4-fs (loop4): 1 truncate cleaned up [ 514.993811][T25880] vhci_hcd: connection closed [ 514.995166][T11413] vhci_hcd: stop threads [ 515.004374][T11413] vhci_hcd: release socket [ 515.004393][T11413] vhci_hcd: disconnect device [ 515.039774][T25886] loop3: detected capacity change from 0 to 512 [ 515.056730][T25886] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 515.097673][T25886] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.7487: invalid indirect mapped block 2683928664 (level 1) [ 515.128358][T25886] EXT4-fs (loop3): 1 truncate cleaned up [ 515.137382][T25895] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 515.188341][T25898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7490'. [ 515.198323][T25886] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.7487: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 515.288146][T25905] bridge0: port 3(ipvlan2) entered blocking state [ 515.294717][T25905] bridge0: port 3(ipvlan2) entered disabled state [ 515.312130][T25905] ipvlan2: entered allmulticast mode [ 515.317632][T25905] bridge0: entered allmulticast mode [ 515.333309][T25905] ipvlan2: left allmulticast mode [ 515.338401][T25905] bridge0: left allmulticast mode [ 515.407031][T25916] loop1: detected capacity change from 0 to 512 [ 515.417000][T25916] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.433208][T25918] loop3: detected capacity change from 0 to 512 [ 515.444164][T25921] batadv1: entered promiscuous mode [ 515.445330][T25916] EXT4-fs (loop1): 1 truncate cleaned up [ 515.450934][T25918] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7499: iget: bad i_size value: 38620345925642 [ 515.484035][T25918] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7499: couldn't read orphan inode 15 (err -117) [ 515.526682][T25918] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7499: bg 0: block 5: invalid block bitmap [ 515.541435][T25918] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 515.554590][T25918] EXT4-fs (loop3): This should not happen!! Data will be lost [ 515.554590][T25918] [ 515.564328][T25918] EXT4-fs (loop3): Total free blocks count 0 [ 515.570383][T25918] EXT4-fs (loop3): Free/Dirty block details [ 515.577198][T25918] EXT4-fs (loop3): free_blocks=0 [ 515.582171][T25918] EXT4-fs (loop3): dirty_blocks=5 [ 515.587329][T25918] EXT4-fs (loop3): Block reservation details [ 515.593410][T25918] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 515.620918][T25934] loop1: detected capacity change from 0 to 512 [ 515.627689][T25934] EXT4-fs: Ignoring removed orlov option [ 515.635111][T25934] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 515.644048][T25932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7504'. [ 515.704359][T25944] loop5: detected capacity change from 0 to 512 [ 515.712604][T25934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 515.738942][T25943] loop3: detected capacity change from 0 to 512 [ 515.782213][T25943] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.795338][T25934] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7502: corrupted in-inode xattr: e_value size too large [ 515.813046][T25948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7510'. [ 515.831319][T25943] EXT4-fs (loop3): 1 truncate cleaned up [ 515.831478][T25944] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 515.856021][T25934] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7502: couldn't read orphan inode 15 (err -117) [ 515.868075][T25944] EXT4-fs (loop5): orphan cleanup on readonly fs [ 515.877820][T25944] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7505: iget: bad i_size value: 38620345925642 [ 515.883596][T25952] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7511'. [ 515.901229][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7511'. [ 515.934960][T25944] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7505: couldn't read orphan inode 15 (err -117) [ 515.951513][T25954] FAULT_INJECTION: forcing a failure. [ 515.951513][T25954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.964782][T25954] CPU: 0 UID: 0 PID: 25954 Comm: syz.4.7512 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 515.964883][T25954] Tainted: [W]=WARN [ 515.964892][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 515.964906][T25954] Call Trace: [ 515.964912][T25954] [ 515.964919][T25954] __dump_stack+0x1d/0x30 [ 515.964942][T25954] dump_stack_lvl+0xe8/0x140 [ 515.965016][T25954] dump_stack+0x15/0x1b [ 515.965033][T25954] should_fail_ex+0x265/0x280 [ 515.965075][T25954] should_fail+0xb/0x20 [ 515.965162][T25954] should_fail_usercopy+0x1a/0x20 [ 515.965182][T25954] _copy_from_user+0x1c/0xb0 [ 515.965217][T25954] sctp_getsockopt_connectx3+0xda/0x300 [ 515.965301][T25954] sctp_getsockopt+0x910/0xaa0 [ 515.965330][T25954] sock_common_getsockopt+0x5d/0x70 [ 515.965365][T25954] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 515.965427][T25954] do_sock_getsockopt+0x1fd/0x240 [ 515.965539][T25954] __x64_sys_getsockopt+0x11e/0x1a0 [ 515.965575][T25954] x64_sys_call+0x2bc6/0x2ff0 [ 515.965597][T25954] do_syscall_64+0xd2/0x200 [ 515.965622][T25954] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 515.965696][T25954] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 515.965718][T25954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.965744][T25954] RIP: 0033:0x7ff1ace1eb69 [ 515.965802][T25954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.965821][T25954] RSP: 002b:00007ff1ab487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 515.965844][T25954] RAX: ffffffffffffffda RBX: 00007ff1ad045fa0 RCX: 00007ff1ace1eb69 [ 515.965858][T25954] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 515.965871][T25954] RBP: 00007ff1ab487090 R08: 0000200000000180 R09: 0000000000000000 [ 515.965883][T25954] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.965896][T25954] R13: 0000000000000000 R14: 00007ff1ad045fa0 R15: 00007ffd8691fa18 [ 515.965923][T25954] [ 516.396413][T25986] FAULT_INJECTION: forcing a failure. [ 516.396413][T25986] name failslab, interval 1, probability 0, space 0, times 0 [ 516.409157][T25986] CPU: 1 UID: 0 PID: 25986 Comm: syz.4.7525 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 516.409218][T25986] Tainted: [W]=WARN [ 516.409227][T25986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.409241][T25986] Call Trace: [ 516.409247][T25986] [ 516.409254][T25986] __dump_stack+0x1d/0x30 [ 516.409276][T25986] dump_stack_lvl+0xe8/0x140 [ 516.409296][T25986] dump_stack+0x15/0x1b [ 516.409323][T25986] should_fail_ex+0x265/0x280 [ 516.409368][T25986] should_failslab+0x8c/0xb0 [ 516.409397][T25986] kmem_cache_alloc_noprof+0x50/0x310 [ 516.409443][T25986] ? do_timer_create+0x127/0x990 [ 516.409482][T25986] do_timer_create+0x127/0x990 [ 516.409532][T25986] __x64_sys_timer_create+0xb9/0xe0 [ 516.409565][T25986] ? __secure_computing+0x82/0x150 [ 516.409587][T25986] ? syscall_trace_enter+0x102/0x1e0 [ 516.409613][T25986] x64_sys_call+0x29d7/0x2ff0 [ 516.409679][T25986] do_syscall_64+0xd2/0x200 [ 516.409710][T25986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 516.409771][T25986] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 516.409793][T25986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.409868][T25986] RIP: 0033:0x7ff1ace1eb69 [ 516.409883][T25986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.409904][T25986] RSP: 002b:00007ff1ab487038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 516.409979][T25986] RAX: ffffffffffffffda RBX: 00007ff1ad045fa0 RCX: 00007ff1ace1eb69 [ 516.410048][T25986] RDX: 0000200000bbdffc RSI: 0000000000000000 RDI: 0000000000000000 [ 516.410061][T25986] RBP: 00007ff1ab487090 R08: 0000000000000000 R09: 0000000000000000 [ 516.410078][T25986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.410095][T25986] R13: 0000000000000000 R14: 00007ff1ad045fa0 R15: 00007ffd8691fa18 [ 516.410182][T25986] [ 516.616941][T25977] loop3: detected capacity change from 0 to 512 [ 516.647936][T25977] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 516.656827][T25995] loop5: detected capacity change from 0 to 1024 [ 516.664556][T25977] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.7522: invalid indirect mapped block 2683928664 (level 1) [ 516.680478][T25977] EXT4-fs (loop3): 1 truncate cleaned up [ 516.711372][T26002] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 516.742370][T25977] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.7522: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 516.885584][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 516.955587][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.015444][T26031] bond2: entered promiscuous mode [ 517.021312][T26031] bond2: entered allmulticast mode [ 517.070072][T26031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.157256][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.244206][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.317140][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.342908][T26048] loop3: detected capacity change from 0 to 512 [ 517.354214][T26048] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7543: iget: bad i_size value: 38620345925642 [ 517.372112][T26048] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7543: couldn't read orphan inode 15 (err -117) [ 517.413092][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.437798][T26041] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7543: bg 0: block 5: invalid block bitmap [ 517.453024][T26041] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 517.465281][T26041] EXT4-fs (loop3): This should not happen!! Data will be lost [ 517.465281][T26041] [ 517.475108][T26041] EXT4-fs (loop3): Total free blocks count 0 [ 517.481194][T26041] EXT4-fs (loop3): Free/Dirty block details [ 517.487239][T26041] EXT4-fs (loop3): free_blocks=0 [ 517.492194][T26041] EXT4-fs (loop3): dirty_blocks=5 [ 517.497242][T26041] EXT4-fs (loop3): Block reservation details [ 517.503285][T26041] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 517.541595][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.581659][T26047] loop1: detected capacity change from 0 to 512 [ 517.595343][T26047] EXT4-fs: Ignoring removed orlov option [ 517.674953][T26047] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 517.694840][T26047] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 517.705458][T26047] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7545: corrupted in-inode xattr: e_value size too large [ 517.724994][T26047] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7545: couldn't read orphan inode 15 (err -117) [ 517.734968][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.823754][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 517.823770][ T29] audit: type=1326 audit(1754349947.864:22012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.824441][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.830767][ T29] audit: type=1326 audit(1754349947.864:22013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.894288][ T29] audit: type=1326 audit(1754349947.864:22014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.917944][ T29] audit: type=1326 audit(1754349947.864:22015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.924288][T26066] loop4: detected capacity change from 0 to 512 [ 517.941663][ T29] audit: type=1326 audit(1754349947.864:22016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.942061][ T29] audit: type=1326 audit(1754349947.960:22017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 517.971239][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 517.995861][ T29] audit: type=1326 audit(1754349948.025:22018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 518.037819][ T29] audit: type=1326 audit(1754349948.025:22019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 518.061473][ T29] audit: type=1326 audit(1754349948.025:22020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 518.061807][T26064] loop3: detected capacity change from 0 to 512 [ 518.093351][ T29] audit: type=1326 audit(1754349948.089:22021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26061 comm="syz.3.7547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f66ebeb69 code=0x7ffc0000 [ 518.094395][T26066] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 518.152347][T26064] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7547: iget: bad i_size value: 38620345925642 [ 518.173636][T26066] EXT4-fs (loop4): 1 truncate cleaned up [ 518.186736][T26064] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7547: couldn't read orphan inode 15 (err -117) [ 518.203260][T26074] bridge0: port 3(ipvlan0) entered blocking state [ 518.209787][T26074] bridge0: port 3(ipvlan0) entered disabled state [ 518.230597][T26074] ipvlan0: entered allmulticast mode [ 518.235995][T26074] bridge0: entered allmulticast mode [ 518.241770][T26074] ipvlan0: left allmulticast mode [ 518.241793][T26074] bridge0: left allmulticast mode [ 518.269147][T26076] loop1: detected capacity change from 0 to 512 [ 518.277387][T26076] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 518.288644][T26064] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7547: bg 0: block 5: invalid block bitmap [ 518.301253][T26076] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7553: invalid indirect mapped block 2683928664 (level 1) [ 518.319747][T26064] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 518.332098][T26064] EXT4-fs (loop3): This should not happen!! Data will be lost [ 518.332098][T26064] [ 518.332382][T26076] EXT4-fs (loop1): 1 truncate cleaned up [ 518.341798][T26064] EXT4-fs (loop3): Total free blocks count 0 [ 518.341845][T26064] EXT4-fs (loop3): Free/Dirty block details [ 518.341861][T26064] EXT4-fs (loop3): free_blocks=0 [ 518.341878][T26064] EXT4-fs (loop3): dirty_blocks=5 [ 518.341907][T26064] EXT4-fs (loop3): Block reservation details [ 518.341918][T26064] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 518.413492][T26079] batadv1: entered promiscuous mode [ 518.423105][T26076] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.7553: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 518.488368][T26084] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 518.488368][T26084] program syz.0.7558 not setting count and/or reply_len properly [ 518.507864][T26082] : renamed from lo (while UP) [ 518.516444][T26082] random: crng reseeded on system resumption [ 518.544215][T26086] batadv1: entered promiscuous mode [ 518.597174][T26091] loop4: detected capacity change from 0 to 512 [ 518.604255][T26091] EXT4-fs: Ignoring removed orlov option [ 518.617879][T26091] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 518.629926][T26091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 518.638524][T26091] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7561: corrupted in-inode xattr: e_value size too large [ 518.649266][T26093] bond3: entered promiscuous mode [ 518.653774][T26091] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7561: couldn't read orphan inode 15 (err -117) [ 518.657612][T26093] bond3: entered allmulticast mode [ 518.677409][T26093] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.730785][T26102] __nla_validate_parse: 2 callbacks suppressed [ 518.730804][T26102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7565'. [ 518.770354][T26104] loop1: detected capacity change from 0 to 512 [ 518.777600][T26104] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 518.830098][T26104] EXT4-fs (loop1): 1 truncate cleaned up [ 518.845898][T26113] loop4: detected capacity change from 0 to 128 [ 518.897246][T26117] loop4: detected capacity change from 0 to 512 [ 518.945172][T26117] syzkaller1: entered promiscuous mode [ 518.950774][T26117] syzkaller1: entered allmulticast mode [ 518.974133][T26120] loop1: detected capacity change from 0 to 512 [ 518.987723][T26120] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7573: iget: bad i_size value: 38620345925642 [ 519.022196][T26124] loop3: detected capacity change from 0 to 1024 [ 519.047947][T26127] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7576'. [ 519.062099][T26120] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7573: couldn't read orphan inode 15 (err -117) [ 519.103072][T26124] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 519.105724][T26128] loop4: detected capacity change from 0 to 512 [ 519.161184][T26128] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7577: iget: bad i_size value: 38620345925642 [ 519.192182][T26128] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7577: couldn't read orphan inode 15 (err -117) [ 519.250555][T26142] loop3: detected capacity change from 0 to 512 [ 519.287988][T26142] EXT4-fs: Ignoring removed orlov option [ 519.303351][T26142] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 519.342324][T26142] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 519.363388][T26150] loop1: detected capacity change from 0 to 512 [ 519.372021][T26150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 519.391961][T26150] EXT4-fs (loop1): 1 truncate cleaned up [ 519.411741][T26142] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.7580: corrupted in-inode xattr: e_value size too large [ 519.428397][T26142] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7580: couldn't read orphan inode 15 (err -117) [ 519.484731][T26159]  speed is unknown, defaulting to 1000 [ 519.655492][T26173] loop3: detected capacity change from 0 to 1024 [ 519.685168][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7593'. [ 519.717399][T26173] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.798346][T26173] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 13) [ 519.852302][T26173] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 519.864865][T26173] EXT4-fs (loop3): This should not happen!! Data will be lost [ 519.864865][T26173] [ 519.902810][T26172] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 519.924437][T26192] loop1: detected capacity change from 0 to 512 [ 519.931448][T26192] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 519.934643][T26184]  speed is unknown, defaulting to 1000 [ 519.954796][T26172] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 519.995173][T26190] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.010868][T26192] EXT4-fs (loop1): 1 truncate cleaned up [ 520.053822][T26172] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.129219][T26190] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.196207][T26172] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.215249][T26172] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.238043][T26190] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.286973][T26190] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7592: lblock 3 mapped to illegal pblock 3 (length 1) [ 520.387446][T26218] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 520.606650][T26226] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7606'. [ 520.619929][T26226] netlink: zone id is out of range [ 520.625079][T26226] netlink: set zone limit has 4 unknown bytes [ 520.697486][T26173]  speed is unknown, defaulting to 1000 [ 520.805191][T26234] FAULT_INJECTION: forcing a failure. [ 520.805191][T26234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.818548][T26234] CPU: 1 UID: 0 PID: 26234 Comm: syz.4.7613 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 520.818630][T26234] Tainted: [W]=WARN [ 520.818639][T26234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.818692][T26234] Call Trace: [ 520.818701][T26234] [ 520.818777][T26234] __dump_stack+0x1d/0x30 [ 520.818799][T26234] dump_stack_lvl+0xe8/0x140 [ 520.818818][T26234] dump_stack+0x15/0x1b [ 520.818838][T26234] should_fail_ex+0x265/0x280 [ 520.818883][T26234] should_fail+0xb/0x20 [ 520.818954][T26234] should_fail_usercopy+0x1a/0x20 [ 520.818979][T26234] _copy_from_user+0x1c/0xb0 [ 520.819008][T26234] sg_write+0x610/0x750 [ 520.819058][T26234] vfs_writev+0x406/0x8b0 [ 520.819166][T26234] ? __pfx_sg_write+0x10/0x10 [ 520.819205][T26234] do_writev+0xe7/0x210 [ 520.819235][T26234] __x64_sys_writev+0x45/0x50 [ 520.819262][T26234] x64_sys_call+0x1e9a/0x2ff0 [ 520.819292][T26234] do_syscall_64+0xd2/0x200 [ 520.819329][T26234] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 520.819353][T26234] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.819379][T26234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.819409][T26234] RIP: 0033:0x7ff1ace1eb69 [ 520.819429][T26234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.819483][T26234] RSP: 002b:00007ff1ab487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 520.819503][T26234] RAX: ffffffffffffffda RBX: 00007ff1ad045fa0 RCX: 00007ff1ace1eb69 [ 520.819516][T26234] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 520.819541][T26234] RBP: 00007ff1ab487090 R08: 0000000000000000 R09: 0000000000000000 [ 520.819557][T26234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.819574][T26234] R13: 0000000000000000 R14: 00007ff1ad045fa0 R15: 00007ffd8691fa18 [ 520.819599][T26234] [ 521.095026][T26241] loop4: detected capacity change from 0 to 512 [ 521.101702][T26241] EXT4-fs: Ignoring removed orlov option [ 521.132815][T26241] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 521.148181][T26241] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 521.158423][T26241] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7616: corrupted in-inode xattr: e_value size too large [ 521.219063][T26245] loop1: detected capacity change from 0 to 512 [ 521.227628][T26241] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7616: couldn't read orphan inode 15 (err -117) [ 521.243364][T26245] EXT4-fs: Ignoring removed orlov option [ 521.252739][T26245] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 521.265086][T26245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 521.278718][T26245] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7618: corrupted in-inode xattr: e_value size too large [ 521.296751][T26245] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7618: couldn't read orphan inode 15 (err -117) [ 521.311164][T26249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 521.354743][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 521.364594][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 521.394245][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7619'. [ 521.400972][T26255] loop4: detected capacity change from 0 to 512 [ 521.412655][T26253] loop3: detected capacity change from 0 to 512 [ 521.426519][T26255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.436622][T26253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 521.460444][T26255] EXT4-fs (loop4): 1 truncate cleaned up [ 521.496536][T26253] EXT4-fs (loop3): 1 truncate cleaned up [ 521.553321][T22857] EXT4-fs error: 60 callbacks suppressed [ 521.553342][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 521.580918][T26267] loop1: detected capacity change from 0 to 512 [ 521.587806][T26268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7626'. [ 521.602452][T26267] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 521.634035][T26267] EXT4-fs (loop1): orphan cleanup on readonly fs [ 521.648359][T26267] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7625: iget: bad i_size value: 38620345925642 [ 521.670709][T26275] loop4: detected capacity change from 0 to 512 [ 521.688241][T26277] bridge0: port 3(ipvlan0) entered blocking state [ 521.694892][T26277] bridge0: port 3(ipvlan0) entered disabled state [ 521.708197][T26278] loop3: detected capacity change from 0 to 128 [ 521.715111][T26275] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 521.743907][T26267] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7625: couldn't read orphan inode 15 (err -117) [ 521.761782][T26277] ipvlan0: entered allmulticast mode [ 521.767217][T26277] bridge0: entered allmulticast mode [ 521.783370][T26277] ipvlan0: left allmulticast mode [ 521.788515][T26277] bridge0: left allmulticast mode [ 521.795974][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7631'. [ 521.799470][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 521.825542][T26275] EXT4-fs (loop4): 1 truncate cleaned up [ 521.879314][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 521.965012][T26289] loop4: detected capacity change from 0 to 512 [ 521.966728][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.005694][T26289] EXT4-fs: Ignoring removed orlov option [ 522.029246][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.048785][T26289] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 522.077921][T26292] bond3: entered promiscuous mode [ 522.083048][T26292] bond3: entered allmulticast mode [ 522.088438][T26292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.096309][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.130096][T26289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 522.148555][T26289] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7632: corrupted in-inode xattr: e_value size too large [ 522.192792][T26289] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7632: couldn't read orphan inode 15 (err -117) [ 522.224100][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.253609][T26300] loop3: detected capacity change from 0 to 512 [ 522.270816][T26300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.282445][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.284818][T26300] EXT4-fs (loop3): 1 truncate cleaned up [ 522.420500][T26311] loop3: detected capacity change from 0 to 512 [ 522.445717][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.468594][T26311] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 522.495688][T26319] loop4: detected capacity change from 0 to 512 [ 522.509792][T26311] EXT4-fs (loop3): 1 truncate cleaned up [ 522.563225][T22857] EXT4-fs error (device loop5): ext4_empty_dir:3113: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 522.628326][T26319] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 522.644084][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 522.644105][ T29] audit: type=1400 audit(1754349953.024:22365): avc: denied { getopt } for pid=26320 comm="syz.3.7647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 522.670839][ T29] audit: type=1400 audit(1754349953.024:22366): avc: denied { setattr } for pid=26320 comm="syz.3.7647" name="ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 522.710332][T26327] loop1: detected capacity change from 0 to 512 [ 522.714438][T26319] EXT4-fs (loop4): orphan cleanup on readonly fs [ 522.723421][T26319] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7644: iget: bad i_size value: 38620345925642 [ 522.739979][T26319] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7644: couldn't read orphan inode 15 (err -117) [ 522.752828][T26327] EXT4-fs: Ignoring removed orlov option [ 522.771029][T26327] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 522.783364][T26327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 522.793184][T26327] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7649: corrupted in-inode xattr: e_value size too large [ 522.827094][T26327] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7649: couldn't read orphan inode 15 (err -117) [ 522.970910][T26336] loop1: detected capacity change from 0 to 512 [ 522.986088][T26336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 523.242989][T26336] EXT4-fs (loop1): 1 truncate cleaned up [ 523.362744][T26343] loop4: detected capacity change from 0 to 512 [ 523.390197][ T29] audit: type=1326 audit(1754349953.829:22367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.418459][T26343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 523.425760][ T29] audit: type=1326 audit(1754349953.861:22368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.436086][T26345] loop1: detected capacity change from 0 to 512 [ 523.452208][ T29] audit: type=1326 audit(1754349953.861:22369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.452252][ T29] audit: type=1326 audit(1754349953.861:22370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.452288][ T29] audit: type=1326 audit(1754349953.861:22371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.499207][ T29] audit: type=1326 audit(1754349953.872:22372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.513011][T26345] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7658: iget: bad i_size value: 38620345925642 [ 523.530991][ T29] audit: type=1326 audit(1754349953.872:22373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.591024][ T29] audit: type=1326 audit(1754349953.872:22374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26344 comm="syz.1.7658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3c640aeb69 code=0x7ffc0000 [ 523.605678][T26345] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7658: couldn't read orphan inode 15 (err -117) [ 523.630328][T26343] EXT4-fs (loop4): 1 truncate cleaned up [ 523.640377][T26334] binfmt_misc: register: failed to install interpreter file ./file0/file0 [ 523.669623][T26334] netlink: zone id is out of range [ 523.675187][T26345] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7658: bg 0: block 5: invalid block bitmap [ 523.692868][T26334] netlink: zone id is out of range [ 523.713774][T26345] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 523.726156][T26345] EXT4-fs (loop1): This should not happen!! Data will be lost [ 523.726156][T26345] [ 523.736547][T26345] EXT4-fs (loop1): Total free blocks count 0 [ 523.742574][T26345] EXT4-fs (loop1): Free/Dirty block details [ 523.746977][T26334] netlink: zone id is out of range [ 523.748521][T26345] EXT4-fs (loop1): free_blocks=0 [ 523.748540][T26345] EXT4-fs (loop1): dirty_blocks=5 [ 523.748557][T26345] EXT4-fs (loop1): Block reservation details [ 523.748620][T26345] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 523.781311][T26334] netlink: zone id is out of range [ 523.806812][T26334] netlink: zone id is out of range [ 523.838213][T26361] loop4: detected capacity change from 0 to 512 [ 523.848453][T26361] EXT4-fs: Ignoring removed orlov option [ 523.856512][T26334] netlink: zone id is out of range [ 523.865406][T26361] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 523.873821][T26334] netlink: zone id is out of range [ 523.881759][T26334] netlink: zone id is out of range [ 523.887989][T26361] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 523.907017][T26361] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.7663: corrupted in-inode xattr: e_value size too large [ 523.921488][T26361] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7663: couldn't read orphan inode 15 (err -117) [ 524.009637][T26375] ipvlan2: entered promiscuous mode [ 524.030856][T26375] bridge0: port 3(ipvlan2) entered blocking state [ 524.036919][T26380] netlink: 'syz.4.7672': attribute type 10 has an invalid length. [ 524.037445][T26375] bridge0: port 3(ipvlan2) entered disabled state [ 524.054922][T26375] ipvlan2: entered allmulticast mode [ 524.060426][T26375] bridge0: entered allmulticast mode [ 524.072186][T26375] ipvlan2: left allmulticast mode [ 524.077330][T26375] bridge0: left allmulticast mode [ 524.090282][T26380] ipvlan0: entered allmulticast mode [ 524.096447][T26380] veth0_vlan: entered allmulticast mode [ 524.106397][T26380] team0: Device ipvlan0 failed to register rx_handler [ 524.215479][T26399] __nla_validate_parse: 1 callbacks suppressed [ 524.215500][T26399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7676'. [ 524.223050][T26397] loop1: detected capacity change from 0 to 512 [ 524.236879][T26400] loop4: detected capacity change from 0 to 512 [ 524.267376][T26383]  speed is unknown, defaulting to 1000 [ 524.271663][T26400] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 524.283992][T26397] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7675: iget: bad i_size value: 38620345925642 [ 524.290381][T26400] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.322898][T26400] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.7674: iget: bad i_size value: 38620345925642 [ 524.328136][T26397] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7675: couldn't read orphan inode 15 (err -117) [ 524.356297][T26404] FAULT_INJECTION: forcing a failure. [ 524.356297][T26404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.359928][T26400] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7674: couldn't read orphan inode 15 (err -117) [ 524.369462][T26404] CPU: 1 UID: 0 PID: 26404 Comm: syz.3.7677 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 524.369500][T26404] Tainted: [W]=WARN [ 524.369508][T26404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.369592][T26404] Call Trace: [ 524.369604][T26404] [ 524.369616][T26404] __dump_stack+0x1d/0x30 [ 524.369648][T26404] dump_stack_lvl+0xe8/0x140 [ 524.369677][T26404] dump_stack+0x15/0x1b [ 524.369765][T26404] should_fail_ex+0x265/0x280 [ 524.369859][T26404] should_fail+0xb/0x20 [ 524.369912][T26404] should_fail_usercopy+0x1a/0x20 [ 524.369941][T26404] _copy_from_user+0x1c/0xb0 [ 524.369978][T26404] sg_write+0x610/0x750 [ 524.370037][T26404] vfs_writev+0x406/0x8b0 [ 524.370103][T26404] ? __pfx_sg_write+0x10/0x10 [ 524.370189][T26404] do_writev+0xe7/0x210 [ 524.370233][T26404] __x64_sys_writev+0x45/0x50 [ 524.370269][T26404] x64_sys_call+0x1e9a/0x2ff0 [ 524.370301][T26404] do_syscall_64+0xd2/0x200 [ 524.370399][T26404] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 524.370436][T26404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 524.370467][T26404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.370578][T26404] RIP: 0033:0x7f7f66ebeb69 [ 524.370601][T26404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.370627][T26404] RSP: 002b:00007f7f6551f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 524.370655][T26404] RAX: ffffffffffffffda RBX: 00007f7f670e5fa0 RCX: 00007f7f66ebeb69 [ 524.370705][T26404] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000005 [ 524.370723][T26404] RBP: 00007f7f6551f090 R08: 0000000000000000 R09: 0000000000000000 [ 524.370741][T26404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.370759][T26404] R13: 0000000000000000 R14: 00007f7f670e5fa0 R15: 00007fff7437f978 [ 524.370787][T26404] [ 524.414736][T26397] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7675: bg 0: block 5: invalid block bitmap [ 524.589457][T26397] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 524.601783][T26397] EXT4-fs (loop1): This should not happen!! Data will be lost [ 524.601783][T26397] [ 524.611540][T26397] EXT4-fs (loop1): Total free blocks count 0 [ 524.617622][T26397] EXT4-fs (loop1): Free/Dirty block details [ 524.623519][T26397] EXT4-fs (loop1): free_blocks=0 [ 524.628589][T26397] EXT4-fs (loop1): dirty_blocks=5 [ 524.633664][T26397] EXT4-fs (loop1): Block reservation details [ 524.639706][T26397] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 524.670271][T26407] batadv1: entered promiscuous mode [ 524.692621][T26383] chnl_net:caif_netlink_parms(): no params data found [ 524.763377][T26413] loop1: detected capacity change from 0 to 128 [ 524.769744][T26411] hub 9-0:1.0: USB hub found [ 524.781218][T26411] hub 9-0:1.0: 8 ports detected [ 524.819804][T26383] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.826985][T26383] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.834283][T26383] bridge_slave_0: entered allmulticast mode [ 524.840857][T26383] bridge_slave_0: entered promiscuous mode [ 524.847996][T26383] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.855192][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.862799][T26383] bridge_slave_1: entered allmulticast mode [ 524.870127][T26383] bridge_slave_1: entered promiscuous mode [ 524.889420][T26422] loop1: detected capacity change from 0 to 128 [ 524.907332][T26383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.918441][T26383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.955308][T26383] team0: Port device team_slave_0 added [ 524.981452][T26383] team0: Port device team_slave_1 added [ 525.004011][T26429] random: crng reseeded on system resumption [ 525.027506][T26383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.034480][T26383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.060573][T26383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.084310][T26431] batadv1: entered promiscuous mode [ 525.100994][T26438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7688'. [ 525.101287][T26383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.110034][T26438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7688'. [ 525.116973][T26383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.151837][T26383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.169579][T26439] loop1: detected capacity change from 0 to 512 [ 525.187269][T26439] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 525.197097][T26439] EXT4-fs (loop1): orphan cleanup on readonly fs [ 525.203817][T26439] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7687: iget: bad i_size value: 38620345925642 [ 525.219161][T26442] loop4: detected capacity change from 0 to 1024 [ 525.226942][T26439] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7687: couldn't read orphan inode 15 (err -117) [ 525.249946][T26442] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.282506][T26442] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 13) [ 525.298886][T26383] hsr_slave_0: entered promiscuous mode [ 525.305622][T26383] hsr_slave_1: entered promiscuous mode [ 525.311750][T26383] debugfs: 'hsr0' already exists in 'hsr' [ 525.318127][T26383] Cannot create hsr debugfs directory [ 525.326235][T26448] ref_ctr_offset mismatch. inode: 0x6c8 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0xae5f348f736cb614 [ 525.344603][T26442] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 525.357057][T26442] EXT4-fs (loop4): This should not happen!! Data will be lost [ 525.357057][T26442] [ 525.368579][T26449] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.397023][T26441] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.431129][T26449] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.451878][T26441] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.470345][T26449] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.489247][T26441] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.506905][T26449] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.524832][T26441] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.557839][T26441] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.7689: lblock 3 mapped to illegal pblock 3 (length 1) [ 525.604998][T26458] loop3: detected capacity change from 0 to 128 [ 525.675735][T26465] random: crng reseeded on system resumption [ 525.794454][T26383] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 525.906514][T26383] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 525.928781][T26383] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 525.958873][T26472] loop1: detected capacity change from 0 to 1024 [ 525.965929][T26472] EXT4-fs: Ignoring removed orlov option [ 525.974170][T26464] loop3: detected capacity change from 0 to 128 [ 525.983660][T26383] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 526.001663][T26464] msdos: Bad value for 'fmask' [ 526.118766][T26383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.129037][T26442]  speed is unknown, defaulting to 1000 [ 526.143294][T26491] loop3: detected capacity change from 0 to 128 [ 526.160573][T26383] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.199057][T11437] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.206250][T11437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.232146][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.239293][T11425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.302222][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7706'. [ 526.376683][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7706'. [ 526.387686][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7706'. [ 526.408231][T26508] loop1: detected capacity change from 0 to 512 [ 526.416261][T26498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7706'. [ 526.428400][T26508] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 526.436917][T26510] loop3: detected capacity change from 0 to 512 [ 526.451533][T26498] loop1: detected capacity change from 0 to 512 [ 526.465858][T26510] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.7711: iget: bad i_size value: 38620345925642 [ 526.482809][T26510] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.7711: couldn't read orphan inode 15 (err -117) [ 526.499856][T26498] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.520178][T26383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.527828][T26510] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7711: bg 0: block 5: invalid block bitmap [ 526.547911][T26510] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 526.561018][T26510] EXT4-fs (loop3): This should not happen!! Data will be lost [ 526.561018][T26510] [ 526.570879][T26510] EXT4-fs (loop3): Total free blocks count 0 [ 526.576939][T26510] EXT4-fs (loop3): Free/Dirty block details [ 526.583700][T26510] EXT4-fs (loop3): free_blocks=0 [ 526.588697][T26510] EXT4-fs (loop3): dirty_blocks=5 [ 526.593789][T26510] EXT4-fs (loop3): Block reservation details [ 526.599805][T26510] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 526.746092][T26539] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.7713'. [ 526.769437][T26539] net_ratelimit: 3 callbacks suppressed [ 526.769454][T26539] netlink: zone id is out of range [ 526.780305][T26539] netlink: set zone limit has 4 unknown bytes [ 526.791433][T26383] veth0_vlan: entered promiscuous mode [ 526.803187][T26520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=26520 comm=syz.0.7712 [ 526.818891][T26383] veth1_vlan: entered promiscuous mode [ 526.840833][T26383] veth0_macvtap: entered promiscuous mode [ 526.854977][T26383] veth1_macvtap: entered promiscuous mode [ 526.870887][T26383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.891814][T26383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.913265][T11443] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.930288][T26544] bridge0: port 3(ipvlan2) entered blocking state [ 526.937831][T26544] bridge0: port 3(ipvlan2) entered disabled state [ 526.944869][T26544] ipvlan2: entered allmulticast mode [ 526.950248][T26544] bridge0: entered allmulticast mode [ 526.956359][T26544] ipvlan2: left allmulticast mode [ 526.961426][T26544] bridge0: left allmulticast mode [ 526.970951][T11443] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.980697][T11443] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.989534][T11443] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.043363][T26550] loop1: detected capacity change from 0 to 512 [ 527.068545][T26550] EXT4-fs: Ignoring removed orlov option [ 527.072952][T26554] loop3: detected capacity change from 0 to 1024 [ 527.085077][T26550] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 527.094461][T26550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 527.096760][T26554] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.103396][T26550] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.7720: corrupted in-inode xattr: e_value size too large [ 527.128982][T26550] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7720: couldn't read orphan inode 15 (err -117) [ 527.149012][T26554] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 13) [ 527.163653][T26554] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 527.176299][T26554] EXT4-fs (loop3): This should not happen!! Data will be lost [ 527.176299][T26554] [ 527.188504][T26554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.207102][T26554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.224396][T26554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.264422][T26552] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.290516][T26554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.319210][T26552] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.336146][T26554] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.351733][T26552] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.380573][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 527.380593][ T29] audit: type=1326 audit(1754349958.110:22648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.381086][T26552] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7721: lblock 3 mapped to illegal pblock 3 (length 1) [ 527.388047][ T29] audit: type=1326 audit(1754349958.121:22649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.473489][T26578] ref_ctr_offset mismatch. inode: 0x715 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0xae5f348f736cb614 [ 527.497611][ T29] audit: type=1326 audit(1754349958.174:22650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.521391][ T29] audit: type=1326 audit(1754349958.174:22651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.545009][ T29] audit: type=1326 audit(1754349958.174:22652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.568686][ T29] audit: type=1326 audit(1754349958.174:22653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.592378][ T29] audit: type=1326 audit(1754349958.174:22654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.616072][ T29] audit: type=1326 audit(1754349958.174:22655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.639786][ T29] audit: type=1326 audit(1754349958.185:22656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.663505][ T29] audit: type=1326 audit(1754349958.185:22657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26575 comm="syz.0.7728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4140d2eb69 code=0x7ffc0000 [ 527.785486][T26567]  speed is unknown, defaulting to 1000 [ 527.945686][T26597] loop1: detected capacity change from 0 to 128 [ 527.961238][T26597] ref_ctr_offset mismatch. inode: 0x53 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0xae5f348f736cb614 [ 528.050877][T24391] EXT4-fs unmount: 94 callbacks suppressed [ 528.050897][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.133015][T26610] loop1: detected capacity change from 0 to 512 [ 528.148216][T26610] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7743: iget: bad i_size value: 38620345925642 [ 528.183039][T26610] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7743: couldn't read orphan inode 15 (err -117) [ 528.217101][T26610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.267029][T26610] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7743: bg 0: block 5: invalid block bitmap [ 528.285858][T26610] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 528.299085][T26610] EXT4-fs (loop1): This should not happen!! Data will be lost [ 528.299085][T26610] [ 528.308785][T26610] EXT4-fs (loop1): Total free blocks count 0 [ 528.314844][T26610] EXT4-fs (loop1): Free/Dirty block details [ 528.320806][T26610] EXT4-fs (loop1): free_blocks=0 [ 528.326501][T26610] EXT4-fs (loop1): dirty_blocks=5 [ 528.331538][T26610] EXT4-fs (loop1): Block reservation details [ 528.337579][T26610] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 528.355573][T26623] loop3: detected capacity change from 0 to 1024 [ 528.362388][T26623] EXT4-fs: Ignoring removed orlov option [ 528.383349][T23752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.397097][T26623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.433781][T24391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.504644][T26626]  speed is unknown, defaulting to 1000 [ 528.554523][T26638] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7754'. [ 528.634267][T26643] ref_ctr_offset mismatch. inode: 0x73d offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0xae5f348f736cb614 [ 528.653482][T26645] loop1: detected capacity change from 0 to 128 [ 528.655748][T26633] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.7751'. [ 528.684016][T26633] netlink: zone id is out of range [ 528.689886][T26633] netlink: set zone limit has 4 unknown bytes [ 528.711707][T26651] loop7: detected capacity change from 0 to 512 [ 528.733214][T26651] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.7760: iget: bad i_size value: 38620345925642 [ 528.752639][T26651] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.7760: couldn't read orphan inode 15 (err -117) [ 528.785601][T26651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.801914][T26651] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.7760: bg 0: block 5: invalid block bitmap [ 528.844709][T26651] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 528.857792][T26651] EXT4-fs (loop7): This should not happen!! Data will be lost [ 528.857792][T26651] [ 528.867494][T26651] EXT4-fs (loop7): Total free blocks count 0 [ 528.873498][T26651] EXT4-fs (loop7): Free/Dirty block details [ 528.879534][T26651] EXT4-fs (loop7): free_blocks=0 [ 528.884484][T26651] EXT4-fs (loop7): dirty_blocks=5 [ 528.890288][T26651] EXT4-fs (loop7): Block reservation details [ 528.896671][T26651] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 528.911213][T26662] loop1: detected capacity change from 0 to 512 [ 528.949044][T26666] loop3: detected capacity change from 0 to 1024 [ 528.988895][T26383] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.000959][T26662] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 529.009970][T26666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.031632][T26666] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.070613][T26662] EXT4-fs (loop1): orphan cleanup on readonly fs [ 529.105298][T26662] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7764: iget: bad i_size value: 38620345925642 [ 529.131140][T26666] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.7766: lblock 3 mapped to illegal pblock 3 (length 13) [ 529.132946][T26677] loop7: detected capacity change from 0 to 128 [ 529.148365][T26666] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 529.165090][T26666] EXT4-fs (loop3): This should not happen!! Data will be lost [ 529.165090][T26666] [ 529.185189][T26662] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7764: couldn't read orphan inode 15 (err -117) [ 529.185192][T26677] ref_ctr_offset mismatch. inode: 0x55 offset: 0x0 ref_ctr_offset(old): 0xc000000 ref_ctr_offset(new): 0xae5f348f736cb614 [ 529.185340][T26662] ================================================================== [ 529.185382][T26662] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 529.185441][T26662] [ 529.185451][T26662] write to 0xffffffff88e40f40 of 36 bytes by task 26677 on cpu 1: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 529.185475][T26662] vsnprintf+0x2ce/0x890 [ 529.185513][T26662] vscnprintf+0x41/0x90 [ 529.185552][T26662] printk_sprint+0x30/0x2d0 [ 529.185589][T26662] vprintk_store+0x599/0x860 [ 529.185621][T26662] vprintk_emit+0x178/0x650 [ 529.185639][T26662] vprintk_default+0x26/0x30 [ 529.185658][T26662] vprintk+0x1d/0x30 [ 529.185690][T26662] _printk+0x79/0xa0 [ 529.185726][T26662] uprobe_register+0x62b/0x750 [ 529.185759][T26662] bpf_uprobe_multi_link_attach+0x7e3/0x910 [ 529.185795][T26662] link_create+0x680/0x6e0 [ 529.185835][T26662] __sys_bpf+0x61d/0x7b0 [ 529.185870][T26662] __x64_sys_bpf+0x41/0x50 [ 529.185902][T26662] x64_sys_call+0x2aea/0x2ff0 [ 529.185931][T26662] do_syscall_64+0xd2/0x200 [ 529.185960][T26662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.185988][T26662] [ 529.185997][T26662] read to 0xffffffff88e40f40 of 8 bytes by task 26662 on cpu 0: [ 529.186019][T26662] data_push_tail+0xfd/0x420 [ 529.186062][T26662] data_alloc+0xbf/0x2b0 [ 529.186109][T26662] prb_reserve+0x808/0xaf0 [ 529.186141][T26662] vprintk_store+0x56d/0x860 [ 529.186185][T26662] vprintk_emit+0x178/0x650 [ 529.186209][T26662] vprintk_default+0x26/0x30 [ 529.186233][T26662] vprintk+0x1d/0x30 [ 529.186264][T26662] _printk+0x79/0xa0 [ 529.186300][T26662] __ext4_error+0x248/0x320 [ 529.186341][T26662] ext4_orphan_get+0x189/0x430 [ 529.186361][T26662] ext4_orphan_cleanup+0x5fa/0xa00 [ 529.186381][T26662] ext4_fill_super+0x3171/0x34e0 [ 529.186424][T26662] get_tree_bdev_flags+0x28e/0x300 [ 529.186456][T26662] get_tree_bdev+0x1f/0x30 [ 529.186484][T26662] ext4_get_tree+0x1c/0x30 [ 529.186523][T26662] vfs_get_tree+0x57/0x1d0 [ 529.186553][T26662] do_new_mount+0x207/0x5e0 [ 529.186581][T26662] path_mount+0x4a4/0xb20 [ 529.186607][T26662] __se_sys_mount+0x28f/0x2e0 [ 529.186636][T26662] __x64_sys_mount+0x67/0x80 [ 529.186665][T26662] x64_sys_call+0x2b4d/0x2ff0 [ 529.186695][T26662] do_syscall_64+0xd2/0x200 [ 529.186723][T26662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.186745][T26662] [ 529.186750][T26662] value changed: 0x000000010000264d -> 0x5f7274635f666572 [ 529.186763][T26662] [ 529.186768][T26662] Reported by Kernel Concurrency Sanitizer on: [ 529.186784][T26662] CPU: 0 UID: 0 PID: 26662 Comm: syz.1.7764 Tainted: G W 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 529.186827][T26662] Tainted: [W]=WARN [ 529.186839][T26662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.186858][T26662] ================================================================== [ 529.385515][T26666]  speed is unknown, defaulting to 1000 [ 529.393707][T26682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.7766: lblock 3 mapped to illegal pblock 3 (length 1) [ 529.559083][T26662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 529.612915][T26662] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.770743][T26480] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 529.870100][T26666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.