last executing test programs: 1m30.54629734s ago: executing program 32 (id=147): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x1, 0x1}) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) write$sndseq(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB="67badc82c5cb301f4b027a3ce32aeed517d9f68f9499b1590710924591a9449bd0e9af789f84aafd0220dca8bb038a655a7f78e7326799ca2a1d542855f9c5e7113cebbf3bae91cb77ec99878158f33c168473d3d0fe7dda8f15d47d0d49e4e0f8534a26b7fb7061419fa7bb859f2c6784c5b55625ccbb4d1296406a90e8ec2992643e1a72c0c4a52cdb1cf550b4bcc0544edfbe4c91e5029e923ac6d984327a19972658ea48f94e052f988627", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_secret(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149880, 0x149) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000580)={[{@noload}, {@dax_always}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@dioread_lock}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@discard}]}, 0x1, 0x55a, &(0x7f0000000cc0)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") r6 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) socket(0x18, 0x2, 0x80000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0) setgroups(0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0]) socket(0x2, 0x2, 0x1) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, 0x0}, 0x2) 1m25.439966874s ago: executing program 33 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x40020000) socket$inet_smc(0x2b, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x93) fallocate(r6, 0x11, 0x0, 0x8800000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r8}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 1m24.820121117s ago: executing program 34 (id=274): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7040000080000008500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000400"/18, @ANYRES32], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r3]) r4 = creat(&(0x7f0000000380)='./file0\x00', 0x80) write$qrtrtun(r4, &(0x7f0000000780)="fb", 0x1) 1m24.479244258s ago: executing program 35 (id=276): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) close_range(r0, r1, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xf0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r5, 0x400, 0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYRESOCT=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8, 0x0, 0x8000000000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x9, &(0x7f0000000000)) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) sendto$packet(r10, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @remote}, 0x14) 1m21.645297012s ago: executing program 36 (id=284): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='trusted\x00', &(0x7f00000002c0)='-}$+[^-:^:$(\\^\xde\x00') getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f00000008c0)=""/49, 0x31) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x100000, 0x5dd8, 0x5, 0x3, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") 1m16.734153594s ago: executing program 37 (id=325): r0 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000001c0)='./file0\x00', 0xa1ff, 0x88) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00') ustat(0x7, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff71, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_bp={0x0}, 0x42, 0x0, 0x800000, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4e, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500004000000000000690780a010100ac14140000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b00000009078db00001de75e60dbda509d270200bc"], 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x3092}, {0xffffffffffffffff, 0x80}], 0x2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x20527e, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m8.757479392s ago: executing program 38 (id=423): unshare(0x28040680) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 53.281522733s ago: executing program 9 (id=680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x800800000003}, 0x1100, 0x5dd8, 0x3, 0x5, 0x0, 0x8, 0xff7b, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bind$unix(r0, &(0x7f0000000300)=@file={0x1, './bus\x00'}, 0x6e) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setreuid(0x0, 0xee00) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r4, r1}, 0xc) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) 53.178148084s ago: executing program 9 (id=681): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 53.126377884s ago: executing program 9 (id=683): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYBLOB="d512b5ce038d7f45cd3cbb5d0d00ea041a60edf862c7226746a57da9ecbd1e3c4f9cea21912276e9db00bc16d8946c5c67563f7c61df3cf9a86be88172197e2b4377bad7972a4b18bea7e9ae9d9c933877046eb3f6cfb2408e56fdd5637ff77a683b68af8d6f642474ab0c035694e439b3394be844ea6379689cf71889c76e933c53598f2c57f0ead7266258bf4b73079593ed7098b8a5275108197cd3d4bebd3e99", @ANYRESDEC, @ANYRESDEC], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r1, 0x0, 0x48003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x3138}}, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000040)=0x4, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2094}], 0x1, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0)={0x0, 0xbf, "f5b5c82577bf4e201c20cd63a7aef5accfaabdba1bd2e7f4be8ed587391d086ced379aac82a434568eaa4232d2d8364eee03d1b4b3225f855d091d3c6ea57bb36bec3cfe3afd4d91c83c4d11b4499e4f1a07f21257597ebeb21b857a9dcae1d688109d5785a01aec72971cab3b2a36952f0773b2076aa14877ef1ea480acf667231be9ea6b0d81007608a23afd2a8b5b1ecb3a9ce8216304347514aeb12649766caa352a9298b4de99488c9dcbc80587d53a6270cc45d9e54c15b1a6411e02"}, &(0x7f00000001c0)=0xc7) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001dc0)={r9, 0x3, 0x1, 0x1fc, 0x0, 0x6, 0x9, 0x167, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0xe, 0x5, 0x1}}, &(0x7f0000000240)=0xb0) 52.267446468s ago: executing program 9 (id=685): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@orlov}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x1de000000000000}}, {@resgid}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0x10}}, @address_request}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x100000000000000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x7cf0f8af1d9422a4, 0x1000, 0x8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 52.055354649s ago: executing program 9 (id=689): syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0), &(0x7f0000000040)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x268, 0x311, 0x0, 0x268, 0x348, 0x460, 0x460, 0x348, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000], 'nicvf0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3a, 0x8, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$inet6(r2, &(0x7f00000002c0)=""/141, 0x8d, 0x40000120, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0xffff}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setitimer(0x2, 0x0, 0x0) 51.7580027s ago: executing program 9 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r2}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r4, 0xacd, 0x1, 0x400}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 51.67082678s ago: executing program 39 (id=693): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r2}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000080)={r4, 0xacd, 0x1, 0x400}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 51.083831563s ago: executing program 2 (id=707): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x100020, 0x0, 0x0, 0x8, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89801) close(r1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6299}}, './file0\x00'}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xa4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x35}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_virt_wifi\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}, @IPSET_ATTR_COMMENT={0x8, 0x1a, 'SET\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) write$P9_RVERSION(r1, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000180)=0x5, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f00000000c0)=0x96, 0x4) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=""/19, 0x13}, 0x2e}], 0x1, 0x45833af92e4b39ff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 50.988605874s ago: executing program 2 (id=710): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0x800200100008001) prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='sys_enter\x00') pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) sendto$inet(r4, 0x0, 0x0, 0x24000080, 0x0, 0x0) listen(r4, 0x2) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000140)={0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x30000001}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x3) close_range(r8, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x1) 50.174294888s ago: executing program 2 (id=714): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 50.133214848s ago: executing program 2 (id=716): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r2}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x11, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000240)='./bus\x00', 0xc2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@orlov}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x1de000000000000}}, {@resgid}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0x10}}, @address_request}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r9, 0xffffffffffffffff, 0x100000000000000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x7cf0f8af1d9422a4, 0x1000, 0x8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 49.898770419s ago: executing program 2 (id=721): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0c00000081230000020002001000000000000000"], &(0x7f0000000500), 0x600) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='btrfs_space_reservation\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0xe, @any, 0xb, 0x1}, 0x6) r4 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xb681, 0x4, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37a, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x1}]) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000300)={0x0, 0x0, 0x16, 0x3, 0x14e, &(0x7f0000001180)="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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r4, 0x567, 0x1000a387, 0x0, 0x0, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r8], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='dlm_recv\x00', r12, 0x0, 0x100000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 49.62617659s ago: executing program 2 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) 49.62543151s ago: executing program 40 (id=723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x0) 45.757615618s ago: executing program 0 (id=751): r0 = getpid() syz_pidfd_open(r0, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x1, 0x0, 0x5}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0xb, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sysfs$1(0x1, 0x0) ioprio_get$pid(0x1, r0) 45.716474848s ago: executing program 0 (id=752): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f00000002c0)={0x2ffe, 0x1, [{0x1, 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x9, 0xc, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") syz_open_dev$usbfs(&(0x7f0000000000), 0x81, 0x420000) 45.3715664s ago: executing program 0 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r8 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa2608, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xc}, 0x106714, 0x200, 0x3, 0x1, 0x6, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x5) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, 0x0, 0x0) pwritev2(r9, 0x0, 0x0, 0x9, 0x1ff, 0x13) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) 45.174015371s ago: executing program 0 (id=759): unshare(0x28040680) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+|[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 45.154137571s ago: executing program 0 (id=760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r0 = gettid() setpgid(0xffffffffffffffff, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000008980)={0x0, 0x0, &(0x7f0000008940)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) ioctl$FIONREAD(r2, 0x80047437, &(0x7f0000002300)) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffff8000, 0x5, 0x1, 0xa, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x5, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xc, 0x8001, 0x8, 0x4, 0x0, r4, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_AF_SPEC={0xffffffffffffff89}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) 44.962236492s ago: executing program 0 (id=763): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000240), &(0x7f0000000680)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3882ff485587a82c09caeaac199c37b338000000", @ANYRES16=r6, @ANYBLOB="000401000000000000000100000024000300"/50], 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x7b10, 0x3, 0x3) 44.962014272s ago: executing program 41 (id=763): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000240), &(0x7f0000000680)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3882ff485587a82c09caeaac199c37b338000000", @ANYRES16=r6, @ANYBLOB="000401000000000000000100000024000300"/50], 0x38}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x7b10, 0x3, 0x3) 22.282099867s ago: executing program 5 (id=1262): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="fb", 0x1}], 0x1, 0x0, 0x0, 0x4008800}, 0x4084850) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0xd, 0x0, 0x18}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000013c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 22.219697877s ago: executing program 5 (id=1264): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 21.913365939s ago: executing program 5 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x2000000000}, 0x18) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x3f8, 0x8, 0x70bd27, 0x25dfdc02}, 0x10}, 0x1, 0x0, 0x0, 0x8000044}, 0x8000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x0) getpriority(0x1, 0xffffffffffffffff) 21.73560324s ago: executing program 5 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.526673991s ago: executing program 5 (id=1271): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000001c0)={0xc, 0x2, 0x2, 0x5d, 0x0, [@remote]}, 0x18) 20.533874065s ago: executing program 5 (id=1288): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 20.507983435s ago: executing program 42 (id=1288): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) 4.769794138s ago: executing program 1 (id=1615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x40000100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 4.699190799s ago: executing program 1 (id=1621): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="07000000000000000000200000000046f3f9f800c07c5a6192d48cf24e878db9c5df8ba70aca78c6c11ab2664e1f72b5622bc598fec6f71257bfd68f5e517ea5e61e0f39aca91c26cd2bddb710c4fcbd18681f5e15c0531c5c6c29be821d4e79472a3dfd65c613af3654b208df2f754ba1cb22a257af78a7bb63433ae8087a3b0e215bba881b32622f01eeba9f43c563e9d25799fa07d82fc8ec7bb4c43fe1131aa63eb6db4e545c4de388f28fc6384abbc8d5a90114d789b5c65b7f60", @ANYRES32=0x0, @ANYBLOB="0000000000000002000000000000"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() syz_pidfd_open(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 4.673360029s ago: executing program 1 (id=1622): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000120, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setitimer(0x2, 0x0, 0x0) 4.615511889s ago: executing program 1 (id=1624): unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRES32=r1, @ANYRES8=r0, @ANYBLOB="13b228a542cbaa78651b7f60940a12412b892f9fdbaa10268feb31018cf9140af3958a9b57e7d98717376d4c4e6724f160bbb943d232e65e66bc544d0a579ab726ec99fb2b00b62ae2040795576db422b60a"], 0x1, 0x2fb, &(0x7f0000000380)="$eJzs3E1PE1scx/F/HyhtCZTFzb25JoYT3ehmAtW10hhIjE0kSI0PickAU206tmSmwdQY0ZVb44twQViyI1HeABt3unFj4oKNiQtZGMd0OkNpGUCgpQjfT0LmMOf8OmcOA/lPQ2f9zuvHxbyt5fWKhONKQiIiGyKDEhZfyNuG3XZMtnohF/u+fzx76+69G5lsdmxSqfHM1KW0Umpg6N2TZwlv2EqvrA0+WP+W/rL279r/67+mHhVsVbBVqVxRupouf67o06ahZgt2UVNqwjR021CFkm1Y9f5yvT9vlufmqkovzfYn5yzDtpVeqqqiUVWVsqpYVRV5qBdKStM01Z8U7CW3ODmpZw4YnmnzZNAhlpXRIyKS2NaTW+zKhAAAQFe11v9hUe2s/5fOrVb6bi8PePX/Siyo/r/8qf5aTfV/XEQC63//+IH1v76/+n97RXS6HKr+x/EwFNu2K9Ro1jqtjJ70fn9dL+8vDbsN6n8AAAAAAAAAAAAAAAAAAAAAAP4GG46Tchwn5W/9r14RiYuI/31ANCIiV7swZbTRIX7+OAEaH9yLDoiYr+Zz87n61huwKiKmGDIsKfnpXg+eWtv/5JGqGZT35oKXX5jPRdyeTF4Kbn5EUj3Smnec8evZsRFV15zvkeTWfFpS8k9wPh2Yj8mF81vymqTkw4yUxZRZdx6N/PMRpa7dzLbkE+44AAAAAABOAk1tCrx/17Sd+uv5zfvr1vcHIo376+HA+/OonIl299wBAAAAADgt7OrTom6ahrVLIyF7jzl4I9qhV/bP8E9T/v8y7DDmq/c84c4sgn/wpq64t3PPeL+I7GdZQvtYlh0aYTlIaqh2NuqwK+a/bVRbtKAxMjHaoWs1oNG08v+9efujfYe4suxfAe2ffGT3C6DnaP76AAAAADhKjaLf3zPa3QkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKHcVj0rp9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBx8TsAAP//A3v+lA==") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x24, r7, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x4}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}}, 0x20000000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000700)="89376ceb5721fb9f3e68131e946bdecb4813ba6b36a1fc0ee1defae28a066b626e056c6e5878a5ecea190baf4f566e6a076f954d24d8fd9d206e9f2a4f0085c93d1fb52ece7ee98afc2d4d0ea3e24dcf0649d4bc0ac65db3d0d51a34527365eb44fc58cf707a1b4593a54e70a80000", &(0x7f0000000080)=""/88, &(0x7f00000008c0)="953813ee43ef407624c04f14bc793c4238fb3bb1fc66eaa9c2321eea2376bc62f99419441feee15f9e564c8ea429f616c17362baf9c35d6fa0646ab71515e333ed8de9ecc4f38969c91b00b6ef", &(0x7f0000000780)="cc0425ae862e726c7da8227e4954ec1b0db3d0b6501732caed2f257595d0570912d032391673453567b680c33420564e46ee4e3b4c05590f8626b45b44e0b24119cedc88b3695928a96deeed95d73162659b4783c8", 0xa, r8}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) fdatasync(r8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmat(r9, &(0x7f0000ffb000/0x3000)=nil, 0x5000) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) ptrace(0x10, r10) ptrace$ARCH_GET_FS(0x1e, r10, &(0x7f0000000080), 0x1003) shmctl$SHM_LOCK(r9, 0xb) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) socket$packet(0x11, 0x2, 0x300) 4.615394889s ago: executing program 4 (id=1625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000001ec0)=""/4098, 0x1002) 4.602348069s ago: executing program 4 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bcffffff0000000000f87f009500e256b42d0000c214ceac1136c0a1f8acaee6db4022cfe6e5a68326da27435cd381d272392ada1d5df1053dbe15547d01b3ca031cb9d686e542525489e2678c0ba18f5c4315d19aec836bf2f042c77ea5acdd0a9a7b4354d1fb47709bec0eb993bbcbfca23cb8deed0e6f9ec05b08ca35d59264d87345206591aea93e3b791e0b204fb8650cd8bee28e6dc432bc850b926e47e474c92aa135dd92f8b53d3f21b29b59931b8741cf185da3014c6af5c93ee7d810a212f5ab7463cb05a22f8d67"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x68800) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d500987f70e06d038e7ff7fc6e5539b3247298b089b070d356e090890e0879b0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="6ffc18181be868da1910110500b6100a930d6db700000080000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x7, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r14, r15, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) sendmsg$inet(r12, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000000100000000000000006f94f24def87c9e200000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r11, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESDEC=r15, @ANYRESDEC], 0x50) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r17}, &(0x7f0000000580), &(0x7f00000005c0)=r18}, 0x20) 3.750076373s ago: executing program 1 (id=1628): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r0, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], 0x0, 0x1200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x238}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 3.579902764s ago: executing program 4 (id=1629): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000640), &(0x7f0000000680)={[0x7]}, 0x8) 3.564571504s ago: executing program 4 (id=1630): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000240), &(0x7f0000000680)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3882ff485587a82c09caeaac199c37b338000000", @ANYRES16=r5, @ANYBLOB="000401000000000000000100000024000300"/50], 0x38}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=0xee00, @ANYRES16=0x0], 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x7b10, 0x3, 0x3) 3.454007674s ago: executing program 1 (id=1631): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x101, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 3.453784854s ago: executing program 43 (id=1631): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x101, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") 1.306618464s ago: executing program 6 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.287109514s ago: executing program 6 (id=1651): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x80000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff0200"/53], 0xfdef) 1.262791624s ago: executing program 6 (id=1652): socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 1.227392994s ago: executing program 6 (id=1653): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 1.166219655s ago: executing program 6 (id=1654): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0x9, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCL_BLANKSCREEN(r3, 0x560f, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x400000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.166000765s ago: executing program 6 (id=1655): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000cc0)=""/161, 0xa1}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xcb, &(0x7f0000000240), &(0x7f0000000680)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="3882ff485587a82c09caeaac199c37b338000000", @ANYRES16=r5, @ANYBLOB="000401000000000000000100000024000300"/50], 0x38}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES32=0xee00, @ANYRES16=0x0], 0x68}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x7b10, 0x3, 0x3) 1.091489815s ago: executing program 8 (id=1659): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="09e150de8ffad97995d9f6c71ca704495284962cf420799f2b663576454ec935342b2942783922c50cb16db96881be1355fbe7f31bc0e1bcebfc708fa6d16ef76c115262"], 0x44}}, 0x0) r3 = fsopen(&(0x7f00000000c0)='pstore\x00', 0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x5) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r8 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) 962.078636ms ago: executing program 3 (id=1664): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) setitimer(0x2, 0x0, 0x0) 961.760426ms ago: executing program 3 (id=1665): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="b9", 0x1}], 0x1}, 0x20048811) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x24}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 926.067476ms ago: executing program 8 (id=1666): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) pipe(&(0x7f0000000100)) (fail_nth: 8) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) creat(0x0, 0x0) 906.483186ms ago: executing program 3 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bcffffff0000000000f87f009500e256b42d0000c214ceac1136c0a1f8acaee6db4022cfe6e5a68326da27435cd381d272392ada1d5df1053dbe15547d01b3ca031cb9d686e542525489e2678c0ba18f5c4315d19aec836bf2f042c77ea5acdd0a9a7b4354d1fb47709bec0eb993bbcbfca23cb8deed0e6f9ec05b08ca35d59264d87345206591aea93e3b791e0b204fb8650cd8bee28e6dc432bc850b926e47e474c92aa135dd92f8b53d3f21b29b59931b8741cf185da3014c6af5c93ee7d810a212f5ab7463cb05a22f8d67"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x68800) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000240)) sendmsg$key(r3, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000002080)={0xc, {"a2e3ad21ed0d52f91b5d500987f70e06d038e7ff7fc6e5539b3247298b089b070d356e090890e0879b0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="6ffc18181be868da1910110500b6100a930d6db700000080000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x7, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r14, r15, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r14}, &(0x7f00000006c0), &(0x7f0000000700)=r13}, 0x20) sendmsg$inet(r12, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r16, @ANYBLOB="000000000100000000000000006f94f24def87c9e200000000000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r11, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRESDEC=r15, @ANYRESDEC], 0x50) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x48) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r17}, &(0x7f0000000580), &(0x7f00000005c0)=r18}, 0x20) 822.307396ms ago: executing program 8 (id=1668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000001c0)={0xc, 0x2, 0x2, 0x5d, 0x0, [@remote]}, 0x18) 822.023066ms ago: executing program 8 (id=1669): openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet6(0xa, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c00"], 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/13], 0x48) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 542.452478ms ago: executing program 4 (id=1670): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x85, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff7487b4b43ce086388e5de7714fa228ee1f6848", 0x22, 0x0, 0x0, 0x0) r1 = socket(0x1a, 0x1, 0x6) recvfrom$inet6(r0, 0x0, 0x0, 0x2003, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x200400d0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x28, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='ext4_update_sb\x00', r2, 0x0, 0x3}, 0x18) socket(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000940)='net/psched\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00'}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f00000001c0)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 528.528078ms ago: executing program 8 (id=1671): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 482.145658ms ago: executing program 4 (id=1672): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYBLOB="d512b5ce038d7f45cd3cbb5d0d00ea041a60edf862c7226746a57da9ecbd1e3c4f9cea21912276e9db00bc16d8946c5c67563f7c61df3cf9a86be88172197e2b4377bad7972a4b18bea7e9ae9d9c933877046eb3f6cfb2408e56fdd5637ff77a683b68af8d6f642474ab0c035694e439b3394be844ea6379689cf71889c76e933c53598f2c57f0ead7266258bf4b73079593ed7098b8a5275108197cd3d4bebd3e99", @ANYRESDEC, @ANYRESDEC], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000006c0)="7400b4c7e8ab3ca276", 0x9) sendfile(r2, r1, 0x0, 0x48003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x3138}}, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000040)=0x4, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2094}], 0x1, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0)={0x0, 0xbf, "f5b5c82577bf4e201c20cd63a7aef5accfaabdba1bd2e7f4be8ed587391d086ced379aac82a434568eaa4232d2d8364eee03d1b4b3225f855d091d3c6ea57bb36bec3cfe3afd4d91c83c4d11b4499e4f1a07f21257597ebeb21b857a9dcae1d688109d5785a01aec72971cab3b2a36952f0773b2076aa14877ef1ea480acf667231be9ea6b0d81007608a23afd2a8b5b1ecb3a9ce8216304347514aeb12649766caa352a9298b4de99488c9dcbc80587d53a6270cc45d9e54c15b1a6411e02"}, &(0x7f00000001c0)=0xc7) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001dc0)={r9, 0x3, 0x1, 0x1fc, 0x0, 0x6, 0x9, 0x167, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0xe, 0x5, 0x1}}, &(0x7f0000000240)=0xb0) 481.892508ms ago: executing program 8 (id=1673): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x8}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x9ffc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1, 0x0, 0x24}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "7daf66027870322987e83a35512e90c41b8b585a2cf070990a626c3d4fae6928240f1765c25d2f387c308a6dc8b8615961b8239ef167316d05f4b447933f7580", 0x39}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r5, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 81.98016ms ago: executing program 7 (id=1677): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000001000000000000000000000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 78.6219ms ago: executing program 7 (id=1678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3ceaffffff00000000000000000000000100ff02000000000000000000000000000133"], 0x0) 73.17725ms ago: executing program 7 (id=1679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000001c0)={0xc, 0x2, 0x2, 0x5d, 0x0, [@remote]}, 0x18) 58.72254ms ago: executing program 7 (id=1680): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="00000000000000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x1, 0x40, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000f80)={0x994, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x5d}}}}, [@NL80211_ATTR_TID_CONFIG={0x3b0, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xae}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfa}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x37}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x18}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x5}, {0x0, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x4}, {0x6, 0x7}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x3}, {0x1, 0x1}, {0x5, 0x7}, {0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x3}, {0x3, 0x2}, {0x1}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x3, 0x7}, {0x7, 0xa}, {0x4, 0x1f}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0x5}, {0x7, 0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x101, 0x9, 0x8, 0x1, 0x6, 0x7f, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x29e, 0x974, 0xe1e4, 0x7, 0x3161, 0xe, 0x4]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x0, 0x6, 0x9, 0x16, 0x30, 0x5, 0x9, 0xb, 0x4, 0xc, 0x36, 0x6c, 0x6c, 0x16, 0x36]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x5}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x1, 0x8}, {0x7, 0x4}, {0x4, 0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x6}, {0x5}, {0x0, 0x3}, {0x2, 0x4}, {0x5, 0xa}, {0x3, 0x5}, {0x2, 0x9}, {0x7, 0x9}, {0x6, 0x4}, {0x2, 0x3}, {0x2, 0x6}, {0x4, 0x6}, {0x7, 0x9}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x4}, {0x6, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x6, 0x6}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0xa}, {}, {0x3, 0x7}, {0x0, 0x2}, {0x6, 0x3}, {0x7}, {0x6, 0x5}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x2}, {0x7}, {0x1, 0x5}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0x13, 0x0, 0x400, 0x6, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x9, 0x4, 0x1, 0xae41, 0x9, 0x40]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0xd5d5, 0x6, 0x40, 0x7, 0x0, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x46a5, 0x101, 0xe, 0x3, 0x3, 0x7f, 0x3]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x6}, {0x1, 0x9}, {0x2, 0xa}, {0x6, 0x3}, {0x2, 0x2}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x7}, {0x6}, {0x1, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x1, 0x7}, {0x7, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x0, 0xa8, 0x1, 0x4, 0xb, 0xff81]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0xc, 0x6c, 0x30, 0x36, 0x3, 0x6c, 0x70, 0x0, 0x36, 0x12, 0x30, 0x6, 0x1b, 0x36, 0x16, 0x24, 0x36, 0x5, 0x4, 0x1, 0x30, 0x12, 0x3, 0x2, 0x36, 0xc, 0x1b, 0x2, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x68, 0x6c, 0x3d, 0x18, 0x6c, 0x24, 0x1b, 0x16, 0x5, 0x48, 0x36, 0x30, 0x5, 0x77, 0x16, 0x1b, 0x3, 0x30, 0x60, 0x4, 0x48, 0x24, 0xc, 0x6c, 0x12, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x9, 0xfffd, 0x2, 0x800, 0x0, 0xfdfd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x1, 0x800, 0x9, 0x0, 0x400, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x5, 0x60, 0xc, 0x48, 0x12, 0x30, 0x12, 0xc, 0x36, 0x30, 0x2, 0x9, 0x3, 0x2, 0x9, 0x2, 0x48, 0xb, 0x36, 0x36, 0x24, 0x6, 0x6, 0xc, 0x3, 0x2, 0x9, 0x30, 0x36, 0x30, 0x2]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x48, 0x3, 0x16, 0x1, 0x9, 0x30, 0x5, 0x36, 0x6c, 0x2, 0x4, 0x24, 0x30, 0x30, 0xb, 0x30, 0x48, 0x24, 0x6c, 0x12, 0x2]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2a61}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2d}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x15}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x82}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x318, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe7}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2ec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x5, 0x36, 0x3, 0xc, 0x12, 0x30, 0x24, 0x4, 0x2, 0x3, 0x12, 0x18, 0xc, 0xb, 0x16, 0x2, 0xb, 0x18, 0x1b, 0xb, 0xc, 0x48, 0x18, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x7a, 0x36, 0x18, 0x1b, 0x3, 0x9a, 0x3, 0xc, 0x9, 0x6c, 0x9, 0x12, 0x16, 0x24, 0x2, 0x2, 0x36, 0x6c, 0x4, 0x6e, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x6, 0x60, 0x38, 0x1, 0x1b, 0xb, 0x6, 0x4d, 0x0, 0x1, 0x4, 0x36, 0xc, 0x2]}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0x5, 0x0, 0x800, 0x40, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x16, 0x4, 0x30, 0x0, 0x18, 0x36, 0x24, 0xc, 0x9, 0x24, 0xc, 0x1, 0x3, 0x30, 0x12, 0x6, 0xc, 0x48, 0x12, 0x6c, 0x48, 0x4, 0xb, 0x6, 0x3, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xc3, 0x3, 0x5, 0xb1, 0xb, 0x5fe, 0x7aa6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xfffd, 0x9b, 0x1, 0x7ff, 0x7, 0x101, 0xa6b6]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8f, 0x2, 0x401, 0x7, 0xe6, 0x9, 0x7, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0xb, 0x0, 0x1b, 0x6, 0x32, 0x9, 0x3c, 0x6, 0x48, 0x48, 0x5, 0x1b, 0x30, 0x6, 0x12, 0x18, 0x1e, 0x30, 0xb, 0x2, 0x16, 0x30, 0x1b, 0x30, 0x12, 0x48, 0x36, 0x14, 0x60, 0x5]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x0, 0x4, 0x6c, 0x4, 0x69, 0x3, 0x4, 0x5, 0x6c, 0x12, 0x3, 0x3, 0x1, 0x43, 0x16, 0xc, 0x1b, 0x5a]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0xa}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x3, 0x2}, {0x6, 0x8}, {0x5, 0x6}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xffff, 0x3, 0x1, 0x4, 0xf6fb, 0x0, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x10, 0x8, 0x3, 0xfff, 0x1, 0x81, 0x42b6]}}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xa, 0x50, 0x7, 0xfdb, 0x3, 0x7092, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3b1c, 0x1, 0x0, 0x6, 0x81, 0x5, 0x3, 0x7b]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x5d, 0x4, 0x10, 0x133, 0xa163, 0xd4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x4fa1, 0xffff, 0xfff9, 0x8, 0x81, 0x1c0]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0x800, 0x3, 0x4b, 0xfc00, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xe, 0x81, 0x2, 0x7, 0x100, 0x7, 0xfff]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x2, 0x5}, {0x6, 0x6}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x4}, {0x4, 0x5}, {0x2, 0xa}, {0x4, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0xa}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x2}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x5, 0x9}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0xa}, {0x6, 0x5}, {}, {0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x1, 0x9}, {0x1}, {0x7, 0x1}, {0x7, 0x6}, {0x6, 0x6}, {0x0, 0x2}, {0x5}, {0x7, 0x6}, {0x1, 0x5}, {}, {0x2, 0x5}, {0x4, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x9}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x2}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x24, 0x5, 0xc, 0xb, 0x16, 0x16, 0x3, 0x30, 0x18, 0x4, 0x1b, 0x34d9cce509c08918, 0x1, 0x12, 0x9, 0xc, 0x30, 0x1, 0x1, 0x1, 0x4, 0x9, 0xb, 0x5, 0x9, 0x2, 0x1, 0xb, 0x2, 0x48]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x3, 0xb, 0x60, 0xb, 0x18, 0x16, 0x1, 0x36, 0x6, 0x3, 0x5, 0x5, 0x30, 0x12, 0x6, 0x6, 0x2, 0x3, 0x1b, 0x4, 0x30]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0xa6, 0x2, 0x0, 0x3, 0x1, 0xccd9]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x1d8, 0x11d, 0x0, 0x1, [{0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x16c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0xa}, {0x6, 0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x7}, {0x2, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x8}, {0x5}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0x1}, {0x7, 0x1}, {0x7, 0x9}, {0x7, 0x4}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x5}, {0x4, 0x6}, {0x5}, {0x7, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x10, 0x7f, 0x1, 0x9, 0xc8, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7bbb, 0x63fd, 0x8, 0x9, 0x4, 0xa7b, 0x7]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0xf6, 0x1, 0x7, 0x4, 0x48, 0xd, 0xe97]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0xc, 0x3, 0x6c, 0x30, 0x18]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x0, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x3}, {0x6, 0x5}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x12, 0x2, 0x60, 0x5, 0xc, 0x18, 0x1, 0x0, 0x24, 0x48, 0x18, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0xfff, 0x4, 0x400, 0x9, 0x9, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x2, 0xc, 0x24, 0xb, 0xc, 0x24, 0xb, 0x60, 0x6c, 0x36, 0x18, 0x4e, 0x30, 0x4, 0x7b, 0xc, 0x30, 0x4]}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x3}, {0x4, 0x6}, {0x4, 0x5}, {0x4, 0x9}, {0x6, 0x9}, {0x4}, {0x7, 0x5}, {}, {0x6, 0x3}, {0x7, 0x5}, {0x7}, {0x3, 0x9}, {0x7, 0x2}, {0x3, 0x4}, {0x7, 0x7}, {0x6, 0x3}, {0x5, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x7, 0x5}, {0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0x9}, {0x3}, {0x7}, {0x4, 0x6}, {0x6}, {0x1, 0x8}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x7, 0x1}, {0x3, 0x7}, {0x7, 0x3}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0xa}, {0x3, 0xb}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x6}, {0x2}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x44, 0x6, 0x1b, 0x12, 0x60, 0x16, 0x24, 0x3, 0xb, 0x6c, 0x24, 0xb, 0x0, 0x9, 0x91eb14a465961777]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x3, 0x0, 0x5d70, 0x6, 0x4, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x45}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x84a0}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xd4, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x81}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffffffffffff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x4}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2a}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa8}]}]}]}, 0x994}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) memfd_secret(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) 40.92627ms ago: executing program 3 (id=1681): write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r0, &(0x7f0000004740)='\x00', &(0x7f0000004780)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x238}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 29.8544ms ago: executing program 7 (id=1682): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x308c}, {0xffffffffffffffff, 0x8002}, {0xffffffffffffffff, 0x1080}, {0xffffffffffffffff, 0x2022}, {0xffffffffffffffff, 0x510}, {r0, 0x8080}], 0x6, &(0x7f0000000640), &(0x7f0000000680)={[0x7]}, 0x8) 1.66141ms ago: executing program 3 (id=1683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0x1e, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 201.58µs ago: executing program 7 (id=1684): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000200)='./bus\x00', 0x800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES8, @ANYBLOB="d512b5ce038d7f45cd3cbb5d0d00ea041a60edf862c7226746a57da9ecbd1e3c4f9cea21912276e9db00bc16d8946c5c67563f7c61df3cf9a86be88172197e2b4377bad7972a4b18bea7e9ae9d9c933877046eb3f6cfb2408e56fdd5637ff77a683b68af8d6f642474ab0c035694e439b3394be844ea6379689cf71889c76e933c53598f2c57f0ead7266258bf4b73079593ed7098b8a5275108197cd3d4bebd3e99", @ANYRESDEC, @ANYRESDEC], 0x1, 0x36e, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000006c0)="7400b4c7e8ab3ca276a038", 0xb) sendfile(r2, r1, 0x0, 0x48003) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x3138}}, 0x0) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f0000000040)=0x4, 0x0, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2094}], 0x1, 0x0, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001cc0)={0x0, 0xbf, "f5b5c82577bf4e201c20cd63a7aef5accfaabdba1bd2e7f4be8ed587391d086ced379aac82a434568eaa4232d2d8364eee03d1b4b3225f855d091d3c6ea57bb36bec3cfe3afd4d91c83c4d11b4499e4f1a07f21257597ebeb21b857a9dcae1d688109d5785a01aec72971cab3b2a36952f0773b2076aa14877ef1ea480acf667231be9ea6b0d81007608a23afd2a8b5b1ecb3a9ce8216304347514aeb12649766caa352a9298b4de99488c9dcbc80587d53a6270cc45d9e54c15b1a6411e02"}, &(0x7f00000001c0)=0xc7) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001dc0)={r9, 0x3, 0x1, 0x1fc, 0x0, 0x6, 0x9, 0x167, {0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x3, 0xe, 0x5, 0x1}}, &(0x7f0000000240)=0xb0) 0s ago: executing program 3 (id=1685): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x80000000c8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff0200"/53], 0xfdef) kernel console output (not intermixed with test programs): device bond0 [ 89.086420][ T7517] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.097786][ T4086] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.104905][ T4086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.135004][ T7721] loop5: detected capacity change from 0 to 512 [ 89.144250][ T7721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.150787][ T7517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.163145][ T7517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.179008][ T4086] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.186141][ T4086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.226805][ T7721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.226884][ T7721] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.311007][ T7517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.440266][ T7517] veth0_vlan: entered promiscuous mode [ 89.448057][ T7517] veth1_vlan: entered promiscuous mode [ 89.455461][ T7242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.461613][ T7517] veth0_macvtap: entered promiscuous mode [ 89.475780][ T7517] veth1_macvtap: entered promiscuous mode [ 89.493715][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.504240][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.514320][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.525212][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.535204][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.545904][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.555792][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.566306][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.577094][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.587025][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.597635][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.607745][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.618298][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.623747][ T7758] loop6: detected capacity change from 0 to 128 [ 89.628124][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.644842][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.651937][ T7758] EXT4-fs: Ignoring removed nobh option [ 89.654781][ T7517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.654794][ T7517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.655929][ T7517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.686003][ T7758] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 89.699630][ T7517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.708668][ T7517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.717433][ T7517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726198][ T7517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.775214][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 89.799110][ T7766] SELinux: ebitmap: truncated map [ 89.804706][ T7766] SELinux: failed to load policy [ 89.946353][ T7777] loop6: detected capacity change from 0 to 512 [ 89.953249][ T7777] EXT4-fs: Ignoring removed orlov option [ 89.959143][ T7777] ext4: Bad value for 'barrier' [ 90.300763][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 90.310725][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.366271][ T7796] SELinux: ebitmap: truncated map [ 90.372228][ T7796] SELinux: failed to load policy [ 90.373963][ T7799] loop6: detected capacity change from 0 to 512 [ 90.390009][ T7799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.403704][ T7801] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 90.413342][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 90.413356][ T29] audit: type=1326 audit(1741251230.184:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.454171][ T7799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.466860][ T29] audit: type=1326 audit(1741251230.184:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.490236][ T29] audit: type=1326 audit(1741251230.184:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.491481][ T7799] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.513561][ T29] audit: type=1326 audit(1741251230.184:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.513597][ T29] audit: type=1326 audit(1741251230.184:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.571170][ T29] audit: type=1326 audit(1741251230.184:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.594616][ T29] audit: type=1326 audit(1741251230.184:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.617866][ T29] audit: type=1326 audit(1741251230.184:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.641582][ T29] audit: type=1326 audit(1741251230.184:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.665369][ T29] audit: type=1326 audit(1741251230.184:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7800 comm="syz.5.816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 90.697315][ T4459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.698376][ T7810] loop3: detected capacity change from 0 to 128 [ 90.716029][ T7810] netlink: 12320 bytes leftover after parsing attributes in process `syz.3.821'. [ 90.746148][ T7813] loop6: detected capacity change from 0 to 512 [ 90.752595][ T7813] EXT4-fs: Ignoring removed orlov option [ 90.759266][ T7813] ext4: Bad value for 'barrier' [ 90.886253][ T7821] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 90.932981][ T7824] 9pnet: p9_errstr2errno: server reported unknown error @íÎhQI¸¥Šte}uÕÿè [ 90.966651][ T7827] SELinux: ebitmap: truncated map [ 90.972075][ T7827] SELinux: failed to load policy [ 90.993881][ T7828] loop6: detected capacity change from 0 to 2048 [ 91.007219][ T7832] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 91.106495][ T7840] loop5: detected capacity change from 0 to 512 [ 91.116757][ T7840] EXT4-fs: Ignoring removed orlov option [ 91.124631][ T7840] ext4: Bad value for 'barrier' [ 91.291310][ T7843] usb usb6: usbfs: process 7843 (syz.5.833) did not claim interface 0 before use [ 91.701280][ T7929] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 91.701280][ T7929] program syz.4.836 not setting count and/or reply_len properly [ 91.773027][ T7944] SELinux: ebitmap: truncated map [ 91.778693][ T7944] SELinux: failed to load policy [ 91.850753][ T7959] loop6: detected capacity change from 0 to 128 [ 91.859191][ T7959] EXT4-fs: Ignoring removed nobh option [ 91.867045][ T7959] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 91.920171][ T7967] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 91.958156][ T7970] loop6: detected capacity change from 0 to 512 [ 91.992442][ T7970] EXT4-fs: Ignoring removed orlov option [ 92.002693][ T7970] ext4: Bad value for 'barrier' [ 92.026067][ T7981] xt_CT: No such helper "pptp" [ 92.041889][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 92.873999][ T8021] loop5: detected capacity change from 0 to 512 [ 92.881274][ T8021] EXT4-fs: Ignoring removed orlov option [ 92.887040][ T8021] ext4: Bad value for 'barrier' [ 92.915777][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.858'. [ 93.065089][ T8029] FAULT_INJECTION: forcing a failure. [ 93.065089][ T8029] name failslab, interval 1, probability 0, space 0, times 0 [ 93.077889][ T8029] CPU: 0 UID: 0 PID: 8029 Comm: syz.4.860 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 93.077915][ T8029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.077928][ T8029] Call Trace: [ 93.077933][ T8029] [ 93.077939][ T8029] dump_stack_lvl+0xf2/0x150 [ 93.077963][ T8029] dump_stack+0x15/0x1a [ 93.077999][ T8029] should_fail_ex+0x24a/0x260 [ 93.078049][ T8029] should_failslab+0x8f/0xb0 [ 93.078082][ T8029] __kmalloc_noprof+0xab/0x3f0 [ 93.078105][ T8029] ? ethnl_default_doit+0xcf/0x7f0 [ 93.078281][ T8029] ethnl_default_doit+0xcf/0x7f0 [ 93.078317][ T8029] ? genl_family_rcv_msg_attrs_parse+0x148/0x1a0 [ 93.078340][ T8029] ? genl_family_rcv_msg_attrs_parse+0x182/0x1a0 [ 93.078364][ T8029] genl_rcv_msg+0x620/0x6d0 [ 93.078415][ T8029] ? __pfx_ethnl_default_doit+0x10/0x10 [ 93.078458][ T8029] ? __dev_queue_xmit+0xb6e/0x2090 [ 93.078485][ T8029] netlink_rcv_skb+0x12c/0x230 [ 93.078539][ T8029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.078570][ T8029] genl_rcv+0x28/0x40 [ 93.078591][ T8029] netlink_unicast+0x599/0x670 [ 93.078621][ T8029] netlink_sendmsg+0x5cc/0x6e0 [ 93.078672][ T8029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.078703][ T8029] __sock_sendmsg+0x140/0x180 [ 93.078732][ T8029] ____sys_sendmsg+0x326/0x4b0 [ 93.078826][ T8029] __sys_sendmsg+0x19d/0x230 [ 93.078882][ T8029] __x64_sys_sendmsg+0x46/0x50 [ 93.078907][ T8029] x64_sys_call+0x2734/0x2dc0 [ 93.079040][ T8029] do_syscall_64+0xc9/0x1c0 [ 93.079125][ T8029] ? clear_bhb_loop+0x55/0xb0 [ 93.079218][ T8029] ? clear_bhb_loop+0x55/0xb0 [ 93.079287][ T8029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.079329][ T8029] RIP: 0033:0x7ff471a1d169 [ 93.079347][ T8029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.079371][ T8029] RSP: 002b:00007ff470081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.079464][ T8029] RAX: ffffffffffffffda RBX: 00007ff471c35fa0 RCX: 00007ff471a1d169 [ 93.079479][ T8029] RDX: 000000002000c050 RSI: 0000400000000000 RDI: 0000000000000006 [ 93.079495][ T8029] RBP: 00007ff470081090 R08: 0000000000000000 R09: 0000000000000000 [ 93.079509][ T8029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.079523][ T8029] R13: 0000000000000000 R14: 00007ff471c35fa0 R15: 00007ffc54ab2448 [ 93.079546][ T8029] [ 93.335528][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.5.861'. [ 93.514109][ T8050] ALSA: seq fatal error: cannot create timer (-22) [ 93.701895][ T8052] usb usb6: usbfs: process 8052 (syz.6.871) did not claim interface 0 before use [ 94.011632][ T8083] ALSA: seq fatal error: cannot create timer (-22) [ 94.040517][ T8085] loop5: detected capacity change from 0 to 512 [ 94.049940][ T8085] EXT4-fs: Ignoring removed orlov option [ 94.060465][ T8085] ext4: Bad value for 'barrier' [ 94.199350][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.894'. [ 94.226588][ T8106] ALSA: seq fatal error: cannot create timer (-22) [ 94.253084][ T8109] loop5: detected capacity change from 0 to 128 [ 94.338840][ T8114] loop3: detected capacity change from 0 to 512 [ 94.354870][ T8114] EXT4-fs: Ignoring removed orlov option [ 94.360916][ T8114] ext4: Bad value for 'barrier' [ 94.395462][ T8116] loop6: detected capacity change from 0 to 128 [ 94.404945][ T8116] EXT4-fs: Ignoring removed nobh option [ 94.415738][ T8116] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 94.651620][ T8132] ALSA: seq fatal error: cannot create timer (-22) [ 94.708179][ T8140] loop6: detected capacity change from 0 to 512 [ 94.714843][ T8140] EXT4-fs: Ignoring removed orlov option [ 94.720766][ T8140] ext4: Bad value for 'barrier' [ 94.793377][ T8143] tipc: Enabling of bearer rejected, failed to enable media [ 94.890637][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.914'. [ 94.902747][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 94.917924][ T8149] hsr_slave_0 (unregistering): left promiscuous mode [ 95.057678][ T8169] ALSA: seq fatal error: cannot create timer (-22) [ 95.107096][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 95.144645][ T8181] ALSA: seq fatal error: cannot create timer (-22) [ 95.254979][ T8199] ALSA: seq fatal error: cannot create timer (-22) [ 95.296545][ T8203] loop1: detected capacity change from 0 to 512 [ 95.311087][ T8209] netlink: 24 bytes leftover after parsing attributes in process `syz.5.928'. [ 95.335912][ T8209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.928'. [ 95.382103][ T8220] ALSA: seq fatal error: cannot create timer (-22) [ 95.406026][ T8225] tmpfs: Bad value for 'nr_blocks' [ 95.411479][ T8227] Cannot find set identified by id 0 to match [ 95.442649][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 95.458499][ T8234] ALSA: seq fatal error: cannot create timer (-22) [ 95.576626][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 95.576761][ T29] audit: type=1400 audit(1741251235.334:3242): avc: denied { ioctl } for pid=8259 comm="syz.5.938" path="socket:[18268]" dev="sockfs" ino=18268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.718549][ T8279] ALSA: seq fatal error: cannot create timer (-22) [ 95.752850][ T8284] loop3: detected capacity change from 0 to 128 [ 95.772943][ T8284] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.791028][ T8284] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.851375][ T8266] usb usb6: usbfs: process 8266 (syz.5.939) did not claim interface 0 before use [ 95.975750][ T8312] ALSA: seq fatal error: cannot create timer (-22) [ 96.019334][ T29] audit: type=1326 audit(1741251235.774:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 96.019375][ T29] audit: type=1326 audit(1741251235.774:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.5.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 96.186797][ T8338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 96.323702][ T29] audit: type=1326 audit(1741251236.084:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.323743][ T29] audit: type=1326 audit(1741251236.084:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.323873][ T29] audit: type=1326 audit(1741251236.084:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.323919][ T29] audit: type=1326 audit(1741251236.084:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.324006][ T29] audit: type=1326 audit(1741251236.084:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.324280][ T29] audit: type=1326 audit(1741251236.084:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.324439][ T29] audit: type=1326 audit(1741251236.084:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8356 comm="syz.4.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 96.497005][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.497075][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.506314][ T8359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.520428][ T8359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.602468][ T7163] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.631365][ T8366] ALSA: seq fatal error: cannot create timer (-22) [ 96.732982][ T8381] netlink: '+}[@': attribute type 4 has an invalid length. [ 96.741129][ T8381] tipc: Enabling of bearer rejected, failed to enable media [ 96.952684][ T8391] loop3: detected capacity change from 0 to 512 [ 96.959317][ T8391] EXT4-fs: Ignoring removed orlov option [ 96.965410][ T8391] ext4: Bad value for 'barrier' [ 97.019461][ T8395] loop3: detected capacity change from 0 to 512 [ 97.026350][ T8395] EXT4-fs: dax option not supported [ 97.243877][ T8397] loop3: detected capacity change from 0 to 128 [ 97.421517][ T8402] ALSA: seq fatal error: cannot create timer (-22) [ 97.579171][ T8414] loop1: detected capacity change from 0 to 128 [ 97.586013][ T8414] EXT4-fs: Ignoring removed nobh option [ 97.601444][ T8414] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 97.648611][ T8417] SELinux: ebitmap: truncated map [ 97.654165][ T8417] SELinux: failed to load policy [ 97.681104][ T8419] loop4: detected capacity change from 0 to 512 [ 97.688693][ T8419] EXT4-fs: Ignoring removed orlov option [ 97.702442][ T8419] ext4: Bad value for 'barrier' [ 97.762520][ T8426] ALSA: seq fatal error: cannot create timer (-22) [ 97.915372][ T8395] syz.3.966 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 97.929484][ T8395] CPU: 0 UID: 0 PID: 8395 Comm: syz.3.966 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 97.929521][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.929599][ T8395] Call Trace: [ 97.929607][ T8395] [ 97.929616][ T8395] dump_stack_lvl+0xf2/0x150 [ 97.929649][ T8395] dump_stack+0x15/0x1a [ 97.929716][ T8395] dump_header+0x83/0x2d0 [ 97.929738][ T8395] oom_kill_process+0x341/0x4c0 [ 97.929778][ T8395] out_of_memory+0x9af/0xbe0 [ 97.929826][ T8395] ? css_next_descendant_pre+0x11c/0x140 [ 97.929919][ T8395] mem_cgroup_out_of_memory+0x13e/0x190 [ 97.929955][ T8395] try_charge_memcg+0x508/0x7f0 [ 97.929985][ T8395] obj_cgroup_charge_pages+0xbd/0x1a0 [ 97.930011][ T8395] __memcg_kmem_charge_page+0x9d/0x170 [ 97.930162][ T8395] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 97.930267][ T8395] alloc_pages_mpol+0xb4/0x260 [ 97.930294][ T8395] alloc_pages_noprof+0xe8/0x130 [ 97.930321][ T8395] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 97.930390][ T8395] __kvmalloc_node_noprof+0x121/0x170 [ 97.930432][ T8395] ? ip_set_alloc+0x1f/0x30 [ 97.930458][ T8395] ip_set_alloc+0x1f/0x30 [ 97.930482][ T8395] hash_netiface_create+0x273/0x730 [ 97.930576][ T8395] ? __nla_parse+0x40/0x60 [ 97.930615][ T8395] ? __pfx_hash_netiface_create+0x10/0x10 [ 97.930735][ T8395] ip_set_create+0x3b1/0x970 [ 97.930820][ T8395] ? __nla_parse+0x40/0x60 [ 97.930945][ T8395] nfnetlink_rcv_msg+0x4a9/0x570 [ 97.930996][ T8395] netlink_rcv_skb+0x12c/0x230 [ 97.931027][ T8395] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 97.931104][ T8395] nfnetlink_rcv+0x16c/0x15d0 [ 97.931188][ T8395] ? kmem_cache_free+0xdc/0x2d0 [ 97.931217][ T8395] ? nlmon_xmit+0x51/0x60 [ 97.931250][ T8395] ? __kfree_skb+0x102/0x150 [ 97.931309][ T8395] ? consume_skb+0x49/0x160 [ 97.931335][ T8395] ? nlmon_xmit+0x51/0x60 [ 97.931373][ T8395] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 97.931524][ T8395] ? __dev_queue_xmit+0xb6e/0x2090 [ 97.931558][ T8395] ? mutex_lock_killable+0xd/0x40 [ 97.931637][ T8395] ? ref_tracker_free+0x3a5/0x410 [ 97.931673][ T8395] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 97.931741][ T8395] netlink_unicast+0x599/0x670 [ 97.931776][ T8395] netlink_sendmsg+0x5cc/0x6e0 [ 97.931818][ T8395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.931854][ T8395] __sock_sendmsg+0x140/0x180 [ 97.931934][ T8395] ____sys_sendmsg+0x326/0x4b0 [ 97.931965][ T8395] __sys_sendmsg+0x19d/0x230 [ 97.932003][ T8395] __x64_sys_sendmsg+0x46/0x50 [ 97.932033][ T8395] x64_sys_call+0x2734/0x2dc0 [ 97.932130][ T8395] do_syscall_64+0xc9/0x1c0 [ 97.932191][ T8395] ? clear_bhb_loop+0x55/0xb0 [ 97.932223][ T8395] ? clear_bhb_loop+0x55/0xb0 [ 97.932253][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.932300][ T8395] RIP: 0033:0x7f76de13d169 [ 97.932372][ T8395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.932394][ T8395] RSP: 002b:00007f76dc7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.932416][ T8395] RAX: ffffffffffffffda RBX: 00007f76de355fa0 RCX: 00007f76de13d169 [ 97.932430][ T8395] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000005 [ 97.932444][ T8395] RBP: 00007f76de1be2a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.932458][ T8395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.932473][ T8395] R13: 0000000000000000 R14: 00007f76de355fa0 R15: 00007ffce7d08e18 [ 97.932502][ T8395] [ 98.269733][ T8395] memory: usage 307200kB, limit 307200kB, failcnt 179 [ 98.276544][ T8395] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 98.284478][ T8395] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 98.291791][ T8395] Memory cgroup stats for /syz3: [ 98.292205][ T8395] cache 0 [ 98.301184][ T8395] rss 0 [ 98.303985][ T8395] shmem 0 [ 98.306923][ T8395] mapped_file 0 [ 98.310442][ T8395] dirty 0 [ 98.313380][ T8395] writeback 0 [ 98.316701][ T8395] workingset_refault_anon 75 [ 98.321345][ T8395] workingset_refault_file 0 [ 98.325924][ T8395] swap 266240 [ 98.329202][ T8395] swapcached 0 [ 98.332659][ T8395] pgpgin 23067 [ 98.336051][ T8395] pgpgout 23067 [ 98.339500][ T8395] pgfault 29057 [ 98.342987][ T8395] pgmajfault 55 [ 98.346478][ T8395] inactive_anon 0 [ 98.350124][ T8395] active_anon 0 [ 98.353583][ T8395] inactive_file 0 [ 98.357202][ T8395] active_file 0 [ 98.360719][ T8395] unevictable 0 [ 98.364174][ T8395] hierarchical_memory_limit 314572800 [ 98.369568][ T8395] hierarchical_memsw_limit 9223372036854771712 [ 98.375800][ T8395] total_cache 0 [ 98.379263][ T8395] total_rss 0 [ 98.382590][ T8395] total_shmem 0 [ 98.386049][ T8395] total_mapped_file 0 [ 98.390081][ T8395] total_dirty 0 [ 98.393545][ T8395] total_writeback 0 [ 98.397341][ T8395] total_workingset_refault_anon 75 [ 98.402602][ T8395] total_workingset_refault_file 0 [ 98.407661][ T8395] total_swap 266240 [ 98.411514][ T8395] total_swapcached 0 [ 98.415441][ T8395] total_pgpgin 23067 [ 98.419332][ T8395] total_pgpgout 23067 [ 98.423365][ T8395] total_pgfault 29057 [ 98.427365][ T8395] total_pgmajfault 55 [ 98.431386][ T8395] total_inactive_anon 0 [ 98.435562][ T8395] total_active_anon 0 [ 98.439554][ T8395] total_inactive_file 0 [ 98.443787][ T8395] total_active_file 0 [ 98.447829][ T8395] total_unevictable 0 [ 98.451838][ T8395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.966,pid=8394,uid=0 [ 98.466456][ T8395] Memory cgroup out of memory: Killed process 8394 (syz.3.966) total-vm:93844kB, anon-rss:1044kB, file-rss:22316kB, shmem-rss:64kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 98.488536][ T8400] syz.3.966 (8400) used greatest stack depth: 10040 bytes left [ 98.502489][ T8394] syz.3.966 (8394) used greatest stack depth: 8904 bytes left [ 98.563346][ T8437] __nla_validate_parse: 10 callbacks suppressed [ 98.563361][ T8437] netlink: 12320 bytes leftover after parsing attributes in process `syz.6.982'. [ 98.704446][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 98.791623][ T8446] SELinux: ebitmap: truncated map [ 98.797174][ T8446] SELinux: failed to load policy [ 98.853842][ T8452] loop4: detected capacity change from 0 to 512 [ 98.860644][ T8452] EXT4-fs: Ignoring removed orlov option [ 98.865327][ T8395] syz.3.966 (8395) used greatest stack depth: 7184 bytes left [ 98.866521][ T8452] ext4: Bad value for 'barrier' [ 98.941661][ T8456] ALSA: seq fatal error: cannot create timer (-22) [ 98.959963][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.989'. [ 99.014399][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.022047][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.022206][ T8460] xt_CT: No such helper "pptp" [ 99.039261][ T8462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.046749][ T8462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.089705][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 99.124543][ T8471] x_tables: duplicate underflow at hook 4 [ 99.135545][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 99.139786][ T8472] x_tables: duplicate underflow at hook 4 [ 99.268631][ T8478] netlink: 12320 bytes leftover after parsing attributes in process `syz.3.995'. [ 99.488978][ T8489] SELinux: ebitmap: truncated map [ 99.494572][ T8489] SELinux: failed to load policy [ 99.538503][ T8492] ALSA: seq fatal error: cannot create timer (-22) [ 99.559547][ T8494] loop4: detected capacity change from 0 to 512 [ 99.573937][ T8494] EXT4-fs: Ignoring removed orlov option [ 99.588950][ T8494] ext4: Bad value for 'barrier' [ 99.639585][ T8496] FAULT_INJECTION: forcing a failure. [ 99.639585][ T8496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.652877][ T8496] CPU: 0 UID: 0 PID: 8496 Comm: syz.1.1003 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 99.652924][ T8496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.652938][ T8496] Call Trace: [ 99.652946][ T8496] [ 99.652952][ T8496] dump_stack_lvl+0xf2/0x150 [ 99.652977][ T8496] dump_stack+0x15/0x1a [ 99.652996][ T8496] should_fail_ex+0x24a/0x260 [ 99.653038][ T8496] should_fail+0xb/0x10 [ 99.653061][ T8496] should_fail_usercopy+0x1a/0x20 [ 99.653123][ T8496] _copy_from_iter+0xd5/0xd00 [ 99.653178][ T8496] ? kmalloc_reserve+0x16e/0x190 [ 99.653220][ T8496] ? __build_skb_around+0x196/0x1f0 [ 99.653240][ T8496] ? __alloc_skb+0x21f/0x310 [ 99.653259][ T8496] ? __virt_addr_valid+0x1ed/0x250 [ 99.653299][ T8496] ? __check_object_size+0x364/0x520 [ 99.653386][ T8496] netlink_sendmsg+0x460/0x6e0 [ 99.653426][ T8496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.653458][ T8496] __sock_sendmsg+0x140/0x180 [ 99.653512][ T8496] ____sys_sendmsg+0x326/0x4b0 [ 99.653545][ T8496] __sys_sendmsg+0x19d/0x230 [ 99.653588][ T8496] __x64_sys_sendmsg+0x46/0x50 [ 99.653666][ T8496] x64_sys_call+0x2734/0x2dc0 [ 99.653692][ T8496] do_syscall_64+0xc9/0x1c0 [ 99.653753][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 99.653787][ T8496] ? clear_bhb_loop+0x55/0xb0 [ 99.653817][ T8496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.653844][ T8496] RIP: 0033:0x7fd91264d169 [ 99.653870][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.653969][ T8496] RSP: 002b:00007fd910cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.653989][ T8496] RAX: ffffffffffffffda RBX: 00007fd912865fa0 RCX: 00007fd91264d169 [ 99.654002][ T8496] RDX: 0000000000000000 RSI: 0000400000000940 RDI: 0000000000000003 [ 99.654015][ T8496] RBP: 00007fd910cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 99.654028][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.654110][ T8496] R13: 0000000000000000 R14: 00007fd912865fa0 R15: 00007ffccb189fd8 [ 99.654130][ T8496] [ 100.006395][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1004'. [ 100.030533][ T8501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1004'. [ 100.049856][ T8503] xt_CT: No such helper "pptp" [ 100.175662][ T8518] ALSA: seq fatal error: cannot create timer (-22) [ 100.213039][ T8516] SELinux: ebitmap: truncated map [ 100.218307][ T8516] SELinux: failed to load policy [ 100.245660][ T8521] loop3: detected capacity change from 0 to 256 [ 100.286150][ T8521] FAT-fs (loop3): Directory bread(block 64) failed [ 100.297516][ T8521] FAT-fs (loop3): Directory bread(block 65) failed [ 100.311638][ T8521] FAT-fs (loop3): Directory bread(block 66) failed [ 100.328404][ T8521] FAT-fs (loop3): Directory bread(block 67) failed [ 100.342983][ T8521] FAT-fs (loop3): Directory bread(block 68) failed [ 100.350913][ T8521] FAT-fs (loop3): Directory bread(block 69) failed [ 100.369757][ T8521] FAT-fs (loop3): Directory bread(block 70) failed [ 100.376327][ T8521] FAT-fs (loop3): Directory bread(block 71) failed [ 100.383293][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1018'. [ 100.413041][ T8521] FAT-fs (loop3): Directory bread(block 72) failed [ 100.419613][ T8521] FAT-fs (loop3): Directory bread(block 73) failed [ 100.429723][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1018'. [ 100.468307][ T8521] syz.3.1008: attempt to access beyond end of device [ 100.468307][ T8521] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 100.499478][ T8521] syz.3.1008: attempt to access beyond end of device [ 100.499478][ T8521] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 100.614043][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 100.614057][ T29] audit: type=1326 audit(1741251240.374:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.660961][ T8550] ALSA: seq fatal error: cannot create timer (-22) [ 100.702672][ T29] audit: type=1326 audit(1741251240.374:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.726212][ T29] audit: type=1326 audit(1741251240.374:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.749613][ T29] audit: type=1326 audit(1741251240.374:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.772987][ T29] audit: type=1326 audit(1741251240.374:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.796467][ T29] audit: type=1326 audit(1741251240.374:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.819783][ T29] audit: type=1326 audit(1741251240.374:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.843324][ T29] audit: type=1326 audit(1741251240.374:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 100.972772][ T8560] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.995974][ T29] audit: type=1400 audit(1741251240.734:3361): avc: denied { write } for pid=8556 comm="syz.1.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 101.024284][ T8560] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 101.381338][ T8583] ALSA: seq fatal error: cannot create timer (-22) [ 101.715111][ T29] audit: type=1326 audit(1741251241.474:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.5.1043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadd762d169 code=0x7ffc0000 [ 101.981956][ T8612] loop5: detected capacity change from 0 to 512 [ 101.988639][ T8612] EXT4-fs: dax option not supported [ 102.380946][ T8626] SELinux: ebitmap: truncated map [ 102.386191][ T8626] SELinux: failed to load policy [ 102.412806][ T8629] loop1: detected capacity change from 0 to 512 [ 102.419297][ T8629] EXT4-fs: Ignoring removed orlov option [ 102.429618][ T8629] ext4: Bad value for 'barrier' [ 102.480804][ T8631] loop3: detected capacity change from 0 to 256 [ 102.666777][ T8649] block device autoloading is deprecated and will be removed. [ 102.680432][ T8649] syz.3.1063: attempt to access beyond end of device [ 102.680432][ T8649] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.714533][ T8652] SELinux: ebitmap: truncated map [ 102.720320][ T8652] SELinux: failed to load policy [ 102.767573][ T8657] loop4: detected capacity change from 0 to 512 [ 102.777509][ T8657] EXT4-fs: Ignoring removed orlov option [ 102.786137][ T8657] ext4: Bad value for 'barrier' [ 102.883467][ T8664] loop4: detected capacity change from 0 to 128 [ 102.897980][ T8664] EXT4-fs: Ignoring removed nobh option [ 102.911006][ T8664] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 103.136993][ T8686] Cannot find del_set index 0 as target [ 103.149566][ T8687] xt_TCPMSS: Only works on TCP SYN packets [ 103.172190][ T8687] loop4: detected capacity change from 0 to 512 [ 103.185815][ T8684] loop6: detected capacity change from 0 to 512 [ 103.192418][ T8684] EXT4-fs: Ignoring removed orlov option [ 103.198198][ T8684] ext4: Bad value for 'barrier' [ 103.201241][ T8687] EXT4-fs: inline encryption not supported [ 103.288405][ T8687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.302161][ T8687] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.324173][ T8699] loop3: detected capacity change from 0 to 512 [ 103.329157][ T8687] FAULT_INJECTION: forcing a failure. [ 103.329157][ T8687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.343588][ T8687] CPU: 0 UID: 0 PID: 8687 Comm: syz.4.1076 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 103.343668][ T8687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.343683][ T8687] Call Trace: [ 103.343695][ T8687] [ 103.343703][ T8687] dump_stack_lvl+0xf2/0x150 [ 103.343735][ T8687] dump_stack+0x15/0x1a [ 103.343758][ T8687] should_fail_ex+0x24a/0x260 [ 103.343792][ T8687] should_fail+0xb/0x10 [ 103.343826][ T8687] should_fail_usercopy+0x1a/0x20 [ 103.343856][ T8687] _copy_to_iter+0x248/0xd00 [ 103.343938][ T8687] ? traverse+0x397/0x3c0 [ 103.343962][ T8687] ? __virt_addr_valid+0x1ed/0x250 [ 103.343991][ T8687] ? __check_object_size+0x364/0x520 [ 103.344015][ T8687] seq_read_iter+0x1db/0x930 [ 103.344118][ T8687] seq_read+0x1ed/0x230 [ 103.344142][ T8687] ? __pfx_seq_read+0x10/0x10 [ 103.344163][ T8687] proc_reg_read+0x13f/0x1d0 [ 103.344186][ T8687] vfs_readv+0x3e2/0x660 [ 103.344207][ T8687] ? __pfx_proc_reg_read+0x10/0x10 [ 103.344235][ T8687] __x64_sys_preadv+0xf4/0x1c0 [ 103.344341][ T8687] x64_sys_call+0x2680/0x2dc0 [ 103.344373][ T8687] do_syscall_64+0xc9/0x1c0 [ 103.344402][ T8687] ? clear_bhb_loop+0x55/0xb0 [ 103.344430][ T8687] ? clear_bhb_loop+0x55/0xb0 [ 103.344457][ T8687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.344483][ T8687] RIP: 0033:0x7ff471a1d169 [ 103.344499][ T8687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.344571][ T8687] RSP: 002b:00007ff470081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 103.344587][ T8687] RAX: ffffffffffffffda RBX: 00007ff471c35fa0 RCX: 00007ff471a1d169 [ 103.344598][ T8687] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000005 [ 103.344640][ T8687] RBP: 00007ff470081090 R08: 0000000000008d3a R09: 0000000000000000 [ 103.344653][ T8687] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 103.344666][ T8687] R13: 0000000000000000 R14: 00007ff471c35fa0 R15: 00007ffc54ab2448 [ 103.344686][ T8687] [ 103.552570][ T8699] EXT4-fs: dax option not supported [ 103.604536][ T7517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.639491][ T8705] loop1: detected capacity change from 0 to 512 [ 103.648788][ T8705] EXT4-fs: dax option not supported [ 103.656915][ T8707] loop4: detected capacity change from 0 to 512 [ 103.679576][ T8707] EXT4-fs: Ignoring removed bh option [ 103.686535][ T8707] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 103.735489][ T8707] EXT4-fs (loop4): 1 truncate cleaned up [ 103.741646][ T8707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.793236][ T7517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.815905][ T8718] ALSA: seq fatal error: cannot create timer (-22) [ 103.912288][ T8724] __nla_validate_parse: 9 callbacks suppressed [ 103.912304][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 104.010548][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1094'. [ 104.160877][ T8715] loop1: detected capacity change from 0 to 128 [ 104.265228][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1098'. [ 104.280838][ T8738] FAULT_INJECTION: forcing a failure. [ 104.280838][ T8738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.293909][ T8738] CPU: 0 UID: 0 PID: 8738 Comm: syz.3.1098 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 104.293932][ T8738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.293942][ T8738] Call Trace: [ 104.294028][ T8738] [ 104.294079][ T8738] dump_stack_lvl+0xf2/0x150 [ 104.294151][ T8738] dump_stack+0x15/0x1a [ 104.294169][ T8738] should_fail_ex+0x24a/0x260 [ 104.294226][ T8738] should_fail+0xb/0x10 [ 104.294250][ T8738] should_fail_usercopy+0x1a/0x20 [ 104.294301][ T8738] _copy_to_user+0x20/0xa0 [ 104.294317][ T8738] simple_read_from_buffer+0xa0/0x110 [ 104.294348][ T8738] proc_fail_nth_read+0xf9/0x140 [ 104.294373][ T8738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.294399][ T8738] vfs_read+0x19b/0x6f0 [ 104.294420][ T8738] ? __rcu_read_unlock+0x4e/0x70 [ 104.294491][ T8738] ? __fget_files+0x17c/0x1c0 [ 104.294524][ T8738] ksys_read+0xe8/0x1b0 [ 104.294549][ T8738] __x64_sys_read+0x42/0x50 [ 104.294703][ T8738] x64_sys_call+0x2874/0x2dc0 [ 104.294725][ T8738] do_syscall_64+0xc9/0x1c0 [ 104.294754][ T8738] ? clear_bhb_loop+0x55/0xb0 [ 104.294781][ T8738] ? clear_bhb_loop+0x55/0xb0 [ 104.294819][ T8738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.294841][ T8738] RIP: 0033:0x7f76de13bb7c [ 104.294853][ T8738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.294961][ T8738] RSP: 002b:00007f76dc7a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.294982][ T8738] RAX: ffffffffffffffda RBX: 00007f76de355fa0 RCX: 00007f76de13bb7c [ 104.294995][ T8738] RDX: 000000000000000f RSI: 00007f76dc7a70a0 RDI: 000000000000000a [ 104.295008][ T8738] RBP: 00007f76dc7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 104.295019][ T8738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.295030][ T8738] R13: 0000000000000000 R14: 00007f76de355fa0 R15: 00007ffce7d08e18 [ 104.295091][ T8738] [ 104.529747][ T8740] SELinux: ebitmap: truncated map [ 104.535303][ T8740] SELinux: failed to load policy [ 104.822080][ T8728] Cannot find add_set index 0 as target [ 104.892527][ T8767] loop3: detected capacity change from 0 to 512 [ 104.901318][ T8767] EXT4-fs: Ignoring removed orlov option [ 104.914299][ T8770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 104.914957][ T8767] ext4: Bad value for 'barrier' [ 104.939082][ T8763] SELinux: ebitmap: truncated map [ 104.950707][ T8773] ALSA: seq fatal error: cannot create timer (-22) [ 104.963858][ T8763] SELinux: failed to load policy [ 104.982806][ T8775] ALSA: seq fatal error: cannot create timer (-22) [ 105.015846][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 105.040909][ T8782] xt_TCPMSS: Only works on TCP SYN packets [ 105.052128][ T8782] loop4: detected capacity change from 0 to 512 [ 105.058892][ T8782] EXT4-fs: inline encryption not supported [ 105.084822][ T8782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.097559][ T8782] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.146361][ T7517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.150864][ T8790] loop3: detected capacity change from 0 to 128 [ 105.169927][ T8792] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1132'. [ 105.182281][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 105.191579][ T8790] netlink: 12320 bytes leftover after parsing attributes in process `syz.3.1123'. [ 105.225054][ T8794] loop4: detected capacity change from 0 to 512 [ 105.233480][ T8794] EXT4-fs: dax option not supported [ 105.293648][ T8804] ALSA: seq fatal error: cannot create timer (-22) [ 105.372710][ T8812] SELinux: ebitmap: truncated map [ 105.378393][ T8812] SELinux: failed to load policy [ 105.401683][ T8814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 105.442146][ T8816] loop1: detected capacity change from 0 to 512 [ 105.449642][ T8816] EXT4-fs: Ignoring removed orlov option [ 105.460330][ T8816] ext4: Bad value for 'barrier' [ 105.757018][ T8824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1135'. [ 105.852097][ T8830] ALSA: seq fatal error: cannot create timer (-22) [ 105.906982][ T8805] loop4: detected capacity change from 0 to 128 [ 105.972616][ T8836] SELinux: ebitmap: truncated map [ 105.978673][ T8836] SELinux: failed to load policy [ 106.172674][ T8852] ALSA: seq fatal error: cannot create timer (-22) [ 106.249842][ T8857] SELinux: ebitmap: truncated map [ 106.255177][ T8857] SELinux: failed to load policy [ 106.277143][ T8862] loop1: detected capacity change from 0 to 128 [ 106.423229][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 106.423245][ T29] audit: type=1400 audit(1741251246.184:3637): avc: denied { mount } for pid=8877 comm="syz.3.1160" name="/" dev="ramfs" ino=20191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 106.468831][ T8882] ALSA: seq fatal error: cannot create timer (-22) [ 106.560544][ T8890] SELinux: ebitmap: truncated map [ 106.566040][ T8890] SELinux: failed to load policy [ 106.665283][ T29] audit: type=1400 audit(1741251246.424:3638): avc: denied { connect } for pid=8901 comm="syz.5.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.726736][ T8908] ALSA: seq fatal error: cannot create timer (-22) [ 106.748046][ T8909] FAULT_INJECTION: forcing a failure. [ 106.748046][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 106.760732][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.4.1174 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 106.760831][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.760845][ T8909] Call Trace: [ 106.760853][ T8909] [ 106.760861][ T8909] dump_stack_lvl+0xf2/0x150 [ 106.760893][ T8909] dump_stack+0x15/0x1a [ 106.760922][ T8909] should_fail_ex+0x24a/0x260 [ 106.760957][ T8909] should_failslab+0x8f/0xb0 [ 106.761103][ T8909] kmem_cache_alloc_noprof+0x52/0x320 [ 106.761127][ T8909] ? security_file_alloc+0x32/0x100 [ 106.761232][ T8909] security_file_alloc+0x32/0x100 [ 106.761271][ T8909] init_file+0x5d/0x1b0 [ 106.761293][ T8909] alloc_empty_file+0xea/0x200 [ 106.761327][ T8909] alloc_file_pseudo+0xc9/0x160 [ 106.761351][ T8909] hugetlb_file_setup+0x290/0x3c0 [ 106.761376][ T8909] ksys_mmap_pgoff+0x172/0x330 [ 106.761457][ T8909] x64_sys_call+0x1940/0x2dc0 [ 106.761483][ T8909] do_syscall_64+0xc9/0x1c0 [ 106.761515][ T8909] ? clear_bhb_loop+0x55/0xb0 [ 106.761614][ T8909] ? clear_bhb_loop+0x55/0xb0 [ 106.761642][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.761670][ T8909] RIP: 0033:0x7ff471a1d169 [ 106.761685][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.761703][ T8909] RSP: 002b:00007ff470081038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 106.761718][ T8909] RAX: ffffffffffffffda RBX: 00007ff471c35fa0 RCX: 00007ff471a1d169 [ 106.761728][ T8909] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000400000400000 [ 106.761795][ T8909] RBP: 00007ff470081090 R08: ffffffffffffffff R09: 0000000000000000 [ 106.761807][ T8909] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 106.761819][ T8909] R13: 0000000000000000 R14: 00007ff471c35fa0 R15: 00007ffc54ab2448 [ 106.761838][ T8909] [ 107.023138][ T29] audit: type=1326 audit(1741251246.784:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.046717][ T29] audit: type=1326 audit(1741251246.784:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.071655][ T29] audit: type=1326 audit(1741251246.834:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.095149][ T29] audit: type=1326 audit(1741251246.834:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.118575][ T29] audit: type=1326 audit(1741251246.834:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.142162][ T29] audit: type=1326 audit(1741251246.834:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.165666][ T29] audit: type=1326 audit(1741251246.834:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.191134][ T8913] SELinux: ebitmap: truncated map [ 107.203230][ T29] audit: type=1326 audit(1741251246.834:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 107.209784][ T8913] SELinux: failed to load policy [ 107.283291][ T8933] loop1: detected capacity change from 0 to 1024 [ 107.309279][ T8933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.367547][ T8942] ALSA: seq fatal error: cannot create timer (-22) [ 107.404420][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.446925][ T8948] loop6: detected capacity change from 0 to 128 [ 107.486102][ T8953] ALSA: seq fatal error: cannot create timer (-22) [ 107.643962][ T8965] ALSA: seq fatal error: cannot create timer (-22) [ 107.692759][ T8969] SELinux: ebitmap: truncated map [ 107.698217][ T8969] SELinux: failed to load policy [ 107.718526][ T8971] ALSA: seq fatal error: cannot create timer (-22) [ 107.961844][ T8998] ALSA: seq fatal error: cannot create timer (-22) [ 107.993554][ T9000] x_tables: unsorted underflow at hook 2 [ 108.078758][ T9006] netlink: 'syz.5.1217': attribute type 4 has an invalid length. [ 108.165054][ T9014] xt_hashlimit: size too large, truncated to 1048576 [ 108.187335][ T9010] gretap0: entered promiscuous mode [ 108.192804][ T9010] macvtap0: entered promiscuous mode [ 108.198359][ T9010] macvtap0: entered allmulticast mode [ 108.203873][ T9010] gretap0: entered allmulticast mode [ 108.231110][ T9020] netlink: 'syz.5.1222': attribute type 4 has an invalid length. [ 108.238911][ T9020] FAULT_INJECTION: forcing a failure. [ 108.238911][ T9020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.252011][ T9020] CPU: 1 UID: 0 PID: 9020 Comm: syz.5.1222 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 108.252035][ T9020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.252050][ T9020] Call Trace: [ 108.252057][ T9020] [ 108.252064][ T9020] dump_stack_lvl+0xf2/0x150 [ 108.252140][ T9020] dump_stack+0x15/0x1a [ 108.252160][ T9020] should_fail_ex+0x24a/0x260 [ 108.252190][ T9020] should_fail+0xb/0x10 [ 108.252266][ T9020] should_fail_usercopy+0x1a/0x20 [ 108.252297][ T9020] _copy_to_user+0x20/0xa0 [ 108.252316][ T9020] simple_read_from_buffer+0xa0/0x110 [ 108.252349][ T9020] proc_fail_nth_read+0xf9/0x140 [ 108.252423][ T9020] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.252522][ T9020] vfs_read+0x19b/0x6f0 [ 108.252623][ T9020] ? __rcu_read_unlock+0x4e/0x70 [ 108.252646][ T9020] ? __fget_files+0x17c/0x1c0 [ 108.252686][ T9020] ksys_read+0xe8/0x1b0 [ 108.252729][ T9020] __x64_sys_read+0x42/0x50 [ 108.252793][ T9020] x64_sys_call+0x2874/0x2dc0 [ 108.252822][ T9020] do_syscall_64+0xc9/0x1c0 [ 108.252855][ T9020] ? clear_bhb_loop+0x55/0xb0 [ 108.252883][ T9020] ? clear_bhb_loop+0x55/0xb0 [ 108.252918][ T9020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.252945][ T9020] RIP: 0033:0x7fadd762bb7c [ 108.252978][ T9020] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 108.253060][ T9020] RSP: 002b:00007fadd5c97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.253077][ T9020] RAX: ffffffffffffffda RBX: 00007fadd7845fa0 RCX: 00007fadd762bb7c [ 108.253119][ T9020] RDX: 000000000000000f RSI: 00007fadd5c970a0 RDI: 000000000000000b [ 108.253131][ T9020] RBP: 00007fadd5c97090 R08: 0000000000000000 R09: 0000000000000000 [ 108.253142][ T9020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.253153][ T9020] R13: 0000000000000000 R14: 00007fadd7845fa0 R15: 00007ffe3f3e8ea8 [ 108.253171][ T9020] [ 108.463482][ T9024] ALSA: seq fatal error: cannot create timer (-22) [ 108.582185][ T9036] loop5: detected capacity change from 0 to 512 [ 108.582366][ T9036] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.599995][ T9033] SELinux: ebitmap: truncated map [ 108.600189][ T9033] SELinux: failed to load policy [ 108.648537][ T9040] Invalid logical block size (3584) [ 108.732040][ T9048] loop4: detected capacity change from 0 to 128 [ 108.752926][ T9050] ALSA: seq fatal error: cannot create timer (-22) [ 108.854593][ T9061] SELinux: ebitmap: truncated map [ 108.860637][ T9061] SELinux: failed to load policy [ 109.093571][ T9074] loop9: detected capacity change from 0 to 7 [ 109.100370][ T9074] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.112832][ T9076] ALSA: seq fatal error: cannot create timer (-22) [ 109.115619][ T9074] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.127458][ T9074] loop9: unable to read partition table [ 109.133758][ T9074] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 109.133758][ T9074] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 109.303083][ T9089] SELinux: ebitmap: truncated map [ 109.309462][ T9089] SELinux: failed to load policy [ 109.387606][ T9091] team0 (unregistering): Port device team_slave_0 removed [ 109.404357][ T9091] team0 (unregistering): Port device team_slave_1 removed [ 109.490716][ T9103] ALSA: seq fatal error: cannot create timer (-22) [ 109.584350][ T9112] loop3: detected capacity change from 0 to 512 [ 109.616596][ T9112] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.633542][ T9114] SELinux: ebitmap: truncated map [ 109.639321][ T9114] SELinux: failed to load policy [ 109.648934][ T9112] EXT4-fs (loop3): 1 truncate cleaned up [ 109.655915][ T9112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.668705][ T9117] FAULT_INJECTION: forcing a failure. [ 109.668705][ T9117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.681861][ T9117] CPU: 1 UID: 0 PID: 9117 Comm: syz.4.1265 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 109.681958][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.681969][ T9117] Call Trace: [ 109.681974][ T9117] [ 109.681980][ T9117] dump_stack_lvl+0xf2/0x150 [ 109.682008][ T9117] dump_stack+0x15/0x1a [ 109.682027][ T9117] should_fail_ex+0x24a/0x260 [ 109.682057][ T9117] should_fail+0xb/0x10 [ 109.682084][ T9117] should_fail_usercopy+0x1a/0x20 [ 109.682132][ T9117] _copy_from_iter+0xd5/0xd00 [ 109.682158][ T9117] ? kmalloc_reserve+0x16e/0x190 [ 109.682176][ T9117] ? __build_skb_around+0x196/0x1f0 [ 109.682258][ T9117] ? __alloc_skb+0x21f/0x310 [ 109.682277][ T9117] ? __virt_addr_valid+0x1ed/0x250 [ 109.682303][ T9117] ? __check_object_size+0x364/0x520 [ 109.682373][ T9117] netlink_sendmsg+0x460/0x6e0 [ 109.682514][ T9117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.682552][ T9117] __sock_sendmsg+0x140/0x180 [ 109.682587][ T9117] ____sys_sendmsg+0x326/0x4b0 [ 109.682614][ T9117] __sys_sendmsg+0x19d/0x230 [ 109.682701][ T9117] __x64_sys_sendmsg+0x46/0x50 [ 109.682731][ T9117] x64_sys_call+0x2734/0x2dc0 [ 109.682761][ T9117] do_syscall_64+0xc9/0x1c0 [ 109.682791][ T9117] ? clear_bhb_loop+0x55/0xb0 [ 109.682826][ T9117] ? clear_bhb_loop+0x55/0xb0 [ 109.682852][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.682947][ T9117] RIP: 0033:0x7ff471a1d169 [ 109.682961][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.682979][ T9117] RSP: 002b:00007ff470081038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.682997][ T9117] RAX: ffffffffffffffda RBX: 00007ff471c35fa0 RCX: 00007ff471a1d169 [ 109.683012][ T9117] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000005 [ 109.683024][ T9117] RBP: 00007ff470081090 R08: 0000000000000000 R09: 0000000000000000 [ 109.683035][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.683046][ T9117] R13: 0000000000000000 R14: 00007ff471c35fa0 R15: 00007ffc54ab2448 [ 109.683063][ T9117] [ 109.928109][ T7163] ------------[ cut here ]------------ [ 109.933713][ T7163] bad length passed for symlink [/tmp/syz-imagegen2884317625/] (got 39, expected 29) [ 109.933991][ T7163] WARNING: CPU: 0 PID: 7163 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 109.953569][ T7163] Modules linked in: [ 109.957475][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 109.968384][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.978592][ T7163] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 109.984659][ T7163] Code: ff 48 c7 c7 9f f5 b2 86 e8 79 61 c4 ff c6 05 21 62 0b 05 01 90 48 c7 c7 37 3e 1b 86 4c 89 f6 89 ea 44 89 f9 e8 fd b5 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 110.004397][ T7163] RSP: 0018:ffffc9000a277ac8 EFLAGS: 00010246 [ 110.010536][ T7163] RAX: be8e947262697e00 RBX: ffff8881067120a8 RCX: ffff8881187ea100 [ 110.018538][ T7163] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 110.026535][ T7163] RBP: 0000000000000027 R08: ffffffff81344af7 R09: 0000000000000000 [ 110.034601][ T7163] R10: 0001ffffffffffff R11: ffff8881187ea100 R12: ffff8881067120a8 [ 110.042629][ T7163] R13: ffff8881067120d0 R14: ffff888106711f80 R15: 000000000000001d [ 110.050629][ T7163] FS: 000055556eeeb500(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 110.059587][ T7163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.066227][ T7163] CR2: 000055556ef16528 CR3: 0000000116446000 CR4: 00000000003506f0 [ 110.074241][ T7163] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 110.082240][ T7163] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 110.090247][ T7163] Call Trace: [ 110.093536][ T7163] [ 110.095236][ T9123] loop5: detected capacity change from 0 to 512 [ 110.096460][ T7163] ? __warn+0x141/0x350 [ 110.106948][ T7163] ? report_bug+0x315/0x420 [ 110.111539][ T7163] ? inode_set_cached_link+0xc4/0xd0 [ 110.116914][ T7163] ? handle_bug+0x60/0x90 [ 110.117375][ T9123] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 110.121358][ T7163] ? exc_invalid_op+0x1a/0x50 [ 110.121391][ T7163] ? asm_exc_invalid_op+0x1a/0x20 [ 110.133286][ T9123] EXT4-fs (loop5): 1 truncate cleaned up [ 110.135875][ T7163] ? __warn_printk+0x167/0x1b0 [ 110.141486][ T9123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.146538][ T7163] ? inode_set_cached_link+0xc4/0xd0 [ 110.169265][ T7163] ? inode_set_cached_link+0xc3/0xd0 [ 110.169324][ T7163] __ext4_iget+0x1bb5/0x1e20 [ 110.169380][ T7163] ext4_lookup+0x15b/0x390 [ 110.169410][ T7163] __lookup_slow+0x18a/0x250 [ 110.169440][ T7163] lookup_slow+0x3c/0x60 [ 110.169502][ T7163] walk_component+0x1f5/0x230 [ 110.169526][ T7163] ? path_lookupat+0xfd/0x2b0 [ 110.169552][ T7163] path_lookupat+0x10a/0x2b0 [ 110.169578][ T7163] filename_lookup+0x150/0x340 [ 110.169614][ T7163] user_path_at+0x3c/0x120 [ 110.169642][ T7163] __x64_sys_umount+0x85/0xe0 [ 110.169748][ T7163] x64_sys_call+0x20cd/0x2dc0 [ 110.169784][ T7163] do_syscall_64+0xc9/0x1c0 [ 110.169822][ T7163] ? clear_bhb_loop+0x55/0xb0 [ 110.169882][ T7163] ? clear_bhb_loop+0x55/0xb0 [ 110.169909][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.169977][ T7163] RIP: 0033:0x7f76de13e497 [ 110.169996][ T7163] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 110.170015][ T7163] RSP: 002b:00007ffce7d05ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 110.170037][ T7163] RAX: ffffffffffffffda RBX: 00007f76de1be08c RCX: 00007f76de13e497 [ 110.170049][ T7163] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce7d05f80 [ 110.170064][ T7163] RBP: 00007ffce7d05f80 R08: 0000000000000000 R09: 0000000000000000 [ 110.170078][ T7163] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce7d07070 [ 110.170092][ T7163] R13: 00007f76de1be08c R14: 000000000001ad3f R15: 00007ffce7d09230 [ 110.170141][ T7163] [ 110.170149][ T7163] ---[ end trace 0000000000000000 ]--- [ 110.174139][ T7163] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, [ 110.236450][ T7242] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.239198][ T7163] inode 13: block 128:freeing already freed block (bit 127); block bitmap corrupt. [ 110.309501][ T7242] EXT4-fs error (device loop5): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 110.440777][ T7163] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.451918][ T7242] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.490276][ T7242] EXT4-fs error (device loop5): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 110.527476][ T7242] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.550979][ T7242] EXT4-fs error (device loop5): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 110.571777][ T7242] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.584664][ T9141] SELinux: ebitmap: truncated map [ 110.595013][ T7242] EXT4-fs error (device loop5): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 110.600853][ T9141] SELinux: failed to load policy [ 110.621814][ T7242] EXT4-fs error (device loop5): ext4_readdir:261: inode #11: block 54: comm syz-executor: path /149/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 110.646062][ T7242] EXT4-fs error (device loop5): ext4_empty_dir:3135: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 110.752036][ T9147] FAULT_INJECTION: forcing a failure. [ 110.752036][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 110.764702][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.6.1280 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 110.764728][ T9147] Tainted: [W]=WARN [ 110.764734][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.764744][ T9147] Call Trace: [ 110.764750][ T9147] [ 110.764757][ T9147] dump_stack_lvl+0xf2/0x150 [ 110.764840][ T9147] dump_stack+0x15/0x1a [ 110.764859][ T9147] should_fail_ex+0x24a/0x260 [ 110.764949][ T9147] should_failslab+0x8f/0xb0 [ 110.764977][ T9147] __kmalloc_node_noprof+0xad/0x410 [ 110.764998][ T9147] ? __kvmalloc_node_noprof+0x72/0x170 [ 110.765026][ T9147] __kvmalloc_node_noprof+0x72/0x170 [ 110.765120][ T9147] xt_alloc_entry_offsets+0x47/0x50 [ 110.765146][ T9147] translate_table+0xc3/0x10c0 [ 110.765173][ T9147] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 110.765199][ T9147] ? should_fail_ex+0xd7/0x260 [ 110.765267][ T9147] ? _copy_from_user+0x89/0xa0 [ 110.765286][ T9147] do_arpt_set_ctl+0x876/0xa20 [ 110.765313][ T9147] ? tcp_release_cb+0xfe/0x380 [ 110.765387][ T9147] ? _raw_spin_unlock_bh+0x36/0x40 [ 110.765415][ T9147] nf_setsockopt+0x195/0x1b0 [ 110.765447][ T9147] ip_setsockopt+0xea/0x100 [ 110.765471][ T9147] tcp_setsockopt+0x93/0xb0 [ 110.765499][ T9147] sock_common_setsockopt+0x64/0x80 [ 110.765558][ T9147] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.765589][ T9147] __sys_setsockopt+0x187/0x200 [ 110.765614][ T9147] __x64_sys_setsockopt+0x66/0x80 [ 110.765636][ T9147] x64_sys_call+0x282e/0x2dc0 [ 110.765683][ T9147] do_syscall_64+0xc9/0x1c0 [ 110.765758][ T9147] ? clear_bhb_loop+0x55/0xb0 [ 110.765783][ T9147] ? clear_bhb_loop+0x55/0xb0 [ 110.765807][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.765831][ T9147] RIP: 0033:0x7f1b33bfd169 [ 110.765864][ T9147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.765879][ T9147] RSP: 002b:00007f1b32267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.765896][ T9147] RAX: ffffffffffffffda RBX: 00007f1b33e15fa0 RCX: 00007f1b33bfd169 [ 110.765906][ T9147] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 110.765917][ T9147] RBP: 00007f1b32267090 R08: 0000000000000418 R09: 0000000000000000 [ 110.765927][ T9147] R10: 0000400000000980 R11: 0000000000000246 R12: 0000000000000001 [ 110.765937][ T9147] R13: 0000000000000000 R14: 00007f1b33e15fa0 R15: 00007ffdfc52c488 [ 110.765954][ T9147] [ 110.787803][ T9139] xt_hashlimit: size too large, truncated to 1048576 [ 111.156549][ T9161] __nla_validate_parse: 27 callbacks suppressed [ 111.156564][ T9161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1285'. [ 111.196559][ T4086] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.211089][ T7242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.272727][ T4086] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.330358][ T9170] FAULT_INJECTION: forcing a failure. [ 111.330358][ T9170] name failslab, interval 1, probability 0, space 0, times 0 [ 111.343084][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.1.1290 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 111.343130][ T9170] Tainted: [W]=WARN [ 111.343138][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.343153][ T9170] Call Trace: [ 111.343161][ T9170] [ 111.343169][ T9170] dump_stack_lvl+0xf2/0x150 [ 111.343203][ T9170] dump_stack+0x15/0x1a [ 111.343230][ T9170] should_fail_ex+0x24a/0x260 [ 111.343307][ T9170] ? audit_log_d_path+0x8e/0x150 [ 111.343349][ T9170] should_failslab+0x8f/0xb0 [ 111.343385][ T9170] __kmalloc_cache_noprof+0x4e/0x320 [ 111.343497][ T9170] audit_log_d_path+0x8e/0x150 [ 111.343535][ T9170] audit_log_d_path_exe+0x42/0x70 [ 111.343625][ T9170] audit_log_task+0x1ec/0x250 [ 111.343661][ T9170] audit_seccomp+0x68/0x130 [ 111.343694][ T9170] __seccomp_filter+0x6fa/0x1180 [ 111.343835][ T9170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.343948][ T9170] ? vfs_write+0x644/0x920 [ 111.343981][ T9170] __secure_computing+0x9f/0x1c0 [ 111.344007][ T9170] syscall_trace_enter+0xd1/0x1f0 [ 111.344064][ T9170] do_syscall_64+0xaa/0x1c0 [ 111.344099][ T9170] ? clear_bhb_loop+0x55/0xb0 [ 111.344204][ T9170] ? clear_bhb_loop+0x55/0xb0 [ 111.344228][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.344256][ T9170] RIP: 0033:0x7fd91264d169 [ 111.344268][ T9170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.344283][ T9170] RSP: 002b:00007fd910cb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 111.344306][ T9170] RAX: ffffffffffffffda RBX: 00007fd912865fa0 RCX: 00007fd91264d169 [ 111.344386][ T9170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 111.344396][ T9170] RBP: 00007fd910cb1090 R08: 0000400000000140 R09: 0000000000000000 [ 111.344405][ T9170] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 111.344415][ T9170] R13: 0000000000000000 R14: 00007fd912865fa0 R15: 00007ffccb189fd8 [ 111.344430][ T9170] [ 111.547796][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 111.547811][ T29] audit: type=1326 audit(1741251251.304:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd91264bb7c code=0x7ffc0000 [ 111.578982][ T4086] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.591984][ T29] audit: type=1326 audit(1741251251.354:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd91264bc1f code=0x7ffc0000 [ 111.615506][ T29] audit: type=1326 audit(1741251251.354:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd91264bdca code=0x7ffc0000 [ 111.639013][ T29] audit: type=1326 audit(1741251251.354:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 111.662504][ T29] audit: type=1326 audit(1741251251.354:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9168 comm="syz.1.1290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd91264d169 code=0x7ffc0000 [ 111.705454][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'. [ 111.706332][ T29] audit: type=1400 audit(1741251251.464:3942): avc: denied { create } for pid=9169 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.735009][ T29] audit: type=1400 audit(1741251251.464:3943): avc: denied { bind } for pid=9169 comm="syz.3.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 111.782867][ T9183] FAULT_INJECTION: forcing a failure. [ 111.782867][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.786989][ T4086] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.795997][ T9183] CPU: 0 UID: 0 PID: 9183 Comm: syz.6.1293 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 111.796030][ T9183] Tainted: [W]=WARN [ 111.796036][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.796047][ T9183] Call Trace: [ 111.796053][ T9183] [ 111.796059][ T9183] dump_stack_lvl+0xf2/0x150 [ 111.796093][ T9183] dump_stack+0x15/0x1a [ 111.796132][ T9183] should_fail_ex+0x24a/0x260 [ 111.796205][ T9183] should_fail+0xb/0x10 [ 111.796238][ T9183] should_fail_usercopy+0x1a/0x20 [ 111.796277][ T9183] _copy_from_user+0x1c/0xa0 [ 111.796301][ T9183] do_ipv6_setsockopt+0x1ef/0x2250 [ 111.796370][ T9183] ? __rcu_read_unlock+0x4e/0x70 [ 111.796398][ T9183] ? avc_has_perm_noaudit+0x1cc/0x210 [ 111.796430][ T9183] ? selinux_netlbl_socket_setsockopt+0xe5/0x2d0 [ 111.796471][ T9183] ipv6_setsockopt+0x57/0x130 [ 111.796580][ T9183] rawv6_setsockopt+0x21e/0x410 [ 111.796622][ T9183] sock_common_setsockopt+0x64/0x80 [ 111.796730][ T9183] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 111.796790][ T9183] __sys_setsockopt+0x187/0x200 [ 111.796821][ T9183] __x64_sys_setsockopt+0x66/0x80 [ 111.796852][ T9183] x64_sys_call+0x282e/0x2dc0 [ 111.796899][ T9183] do_syscall_64+0xc9/0x1c0 [ 111.796940][ T9183] ? clear_bhb_loop+0x55/0xb0 [ 111.797018][ T9183] ? clear_bhb_loop+0x55/0xb0 [ 111.797053][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.797162][ T9183] RIP: 0033:0x7f1b33bfd169 [ 111.797190][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.797224][ T9183] RSP: 002b:00007f1b32267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.797256][ T9183] RAX: ffffffffffffffda RBX: 00007f1b33e15fa0 RCX: 00007f1b33bfd169 [ 111.797271][ T9183] RDX: 0000000000000016 RSI: 0000000000000029 RDI: 0000000000000004 [ 111.797286][ T9183] RBP: 00007f1b32267090 R08: 0000000000000004 R09: 0000000000000000 [ 111.797306][ T9183] R10: 0000400000000140 R11: 0000000000000246 R12: 0000000000000001 [ 111.797327][ T9183] R13: 0000000000000000 R14: 00007f1b33e15fa0 R15: 00007ffdfc52c488 [ 111.797349][ T9183] [ 111.836534][ T9185] ALSA: seq fatal error: cannot create timer (-22) [ 112.028500][ T29] audit: type=1400 audit(1741251251.784:3944): avc: denied { module_request } for pid=9173 comm="syz-executor" kmod="netdev-rose7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 112.060319][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1296'. [ 112.143039][ T29] audit: type=1326 audit(1741251251.894:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.6.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 112.166655][ T29] audit: type=1326 audit(1741251251.894:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9197 comm="syz.6.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 112.218028][ T9204] loop6: detected capacity change from 0 to 128 [ 112.231218][ T9204] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.282600][ T9204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.291171][ T4086] bridge_slave_1: left allmulticast mode [ 112.296904][ T4086] bridge_slave_1: left promiscuous mode [ 112.302634][ T4086] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.314506][ T9204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.323120][ T4086] bridge_slave_0: left allmulticast mode [ 112.328779][ T4086] bridge_slave_0: left promiscuous mode [ 112.334587][ T4086] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.418259][ T9217] ALSA: seq fatal error: cannot create timer (-22) [ 112.452398][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 112.463397][ T4086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.466100][ T9219] loop3: detected capacity change from 0 to 512 [ 112.481536][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 112.497113][ T4086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.511176][ T9221] FAULT_INJECTION: forcing a failure. [ 112.511176][ T9221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.524505][ T9221] CPU: 0 UID: 0 PID: 9221 Comm: syz.3.1309 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 112.524534][ T9221] Tainted: [W]=WARN [ 112.524541][ T9221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.524565][ T9221] Call Trace: [ 112.524571][ T9221] [ 112.524578][ T9221] dump_stack_lvl+0xf2/0x150 [ 112.524673][ T9221] dump_stack+0x15/0x1a [ 112.524696][ T9221] should_fail_ex+0x24a/0x260 [ 112.524726][ T9221] should_fail+0xb/0x10 [ 112.524750][ T9221] should_fail_usercopy+0x1a/0x20 [ 112.524852][ T9221] _copy_to_user+0x20/0xa0 [ 112.524934][ T9221] pagemap_read+0x3af/0x610 [ 112.524960][ T9221] ? __pfx_pagemap_read+0x10/0x10 [ 112.524983][ T9221] vfs_read+0x19b/0x6f0 [ 112.525002][ T9221] ? __fget_files+0x17c/0x1c0 [ 112.525051][ T9221] ? __rcu_read_unlock+0x4e/0x70 [ 112.525122][ T9221] ? __fget_files+0x17c/0x1c0 [ 112.525154][ T9221] __x64_sys_pread64+0xf6/0x150 [ 112.525183][ T9221] x64_sys_call+0x26ee/0x2dc0 [ 112.525312][ T9221] do_syscall_64+0xc9/0x1c0 [ 112.525343][ T9221] ? clear_bhb_loop+0x55/0xb0 [ 112.525417][ T9221] ? clear_bhb_loop+0x55/0xb0 [ 112.525444][ T9221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.525472][ T9221] RIP: 0033:0x7f76de13d169 [ 112.525488][ T9221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.525506][ T9221] RSP: 002b:00007f76dc7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 112.525575][ T9221] RAX: ffffffffffffffda RBX: 00007f76de355fa0 RCX: 00007f76de13d169 [ 112.525589][ T9221] RDX: 0000000000200000 RSI: 0000400000001240 RDI: 0000000000000006 [ 112.525602][ T9221] RBP: 00007f76dc7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.525614][ T9221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.525627][ T9221] R13: 0000000000000000 R14: 00007f76de355fa0 R15: 00007ffce7d08e18 [ 112.525647][ T9221] [ 112.526993][ T4086] bond0 (unregistering): Released all slaves [ 112.739460][ T9204] lo speed is unknown, defaulting to 1000 [ 112.745297][ T9227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1308'. [ 112.762617][ T9235] loop3: detected capacity change from 0 to 128 [ 112.770040][ T9235] EXT4-fs: Ignoring removed nobh option [ 112.776768][ T9204] lo speed is unknown, defaulting to 1000 [ 112.783883][ T9204] lo speed is unknown, defaulting to 1000 [ 112.821057][ T9204] infiniband syz2: set active [ 112.825783][ T9204] infiniband syz2: added lo [ 112.830324][ T3508] lo speed is unknown, defaulting to 1000 [ 112.841945][ T9235] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 112.853664][ T9173] chnl_net:caif_netlink_parms(): no params data found [ 112.872198][ T9204] RDS/IB: syz2: added [ 112.883824][ T9204] smc: adding ib device syz2 with port count 1 [ 112.898273][ T9204] smc: ib device syz2 port 1 has pnetid [ 112.920618][ T9242] ALSA: seq fatal error: cannot create timer (-22) [ 112.924059][ T3503] lo speed is unknown, defaulting to 1000 [ 112.943269][ T9204] lo speed is unknown, defaulting to 1000 [ 112.960126][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.967270][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.975494][ T9173] bridge_slave_0: entered allmulticast mode [ 112.982166][ T9173] bridge_slave_0: entered promiscuous mode [ 112.989436][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.996584][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.005010][ T9173] bridge_slave_1: entered allmulticast mode [ 113.012532][ T9173] bridge_slave_1: entered promiscuous mode [ 113.018829][ T9204] lo speed is unknown, defaulting to 1000 [ 113.040732][ T9173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.077731][ T9173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.111352][ T9173] team0: Port device team_slave_0 added [ 113.118596][ T9173] team0: Port device team_slave_1 added [ 113.151839][ T9204] lo speed is unknown, defaulting to 1000 [ 113.152211][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.164630][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.190599][ T9173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.204112][ T9252] x_tables: unsorted underflow at hook 2 [ 113.214853][ T9204] lo speed is unknown, defaulting to 1000 [ 113.230056][ T9173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.237008][ T9173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.255102][ T9255] loop3: detected capacity change from 0 to 128 [ 113.263013][ T9173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.265924][ T9256] loop1: detected capacity change from 0 to 128 [ 113.299842][ T9256] netlink: 12320 bytes leftover after parsing attributes in process `syz.1.1320'. [ 113.303873][ T9255] netlink: 12320 bytes leftover after parsing attributes in process `syz.3.1321'. [ 113.335452][ T9204] lo speed is unknown, defaulting to 1000 [ 113.337588][ T9173] hsr_slave_0: entered promiscuous mode [ 113.356467][ T9173] hsr_slave_1: entered promiscuous mode [ 113.364385][ T9173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.373380][ T9173] Cannot create hsr debugfs directory [ 113.378889][ T9204] lo speed is unknown, defaulting to 1000 [ 113.443436][ T4086] hsr_slave_0: left promiscuous mode [ 113.448996][ T4086] hsr_slave_1: left promiscuous mode [ 113.455538][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.463210][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.471364][ T4086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.478970][ T4086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.489284][ T4086] veth1_vlan: left promiscuous mode [ 113.494860][ T4086] veth0_vlan: left promiscuous mode [ 113.707779][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 113.752710][ T9269] loop4: detected capacity change from 0 to 128 [ 113.759363][ T9269] EXT4-fs: Ignoring removed nobh option [ 113.767129][ T9269] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 113.897916][ T9173] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.907025][ T9173] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.915433][ T9173] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.924517][ T9173] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.977165][ T9173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.998386][ T9173] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.010333][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.017409][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.064081][ T9275] Cannot find add_set index 0 as target [ 114.079056][ T9173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.089510][ T9173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.204999][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.212172][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.380032][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1330'. [ 114.428103][ T9173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.467619][ T9296] ALSA: seq fatal error: cannot create timer (-22) [ 114.492495][ T9300] loop6: detected capacity change from 0 to 128 [ 114.502796][ T9300] EXT4-fs: Ignoring removed nobh option [ 114.508926][ T9300] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 114.593416][ T9173] veth0_vlan: entered promiscuous mode [ 114.623816][ T9173] veth1_vlan: entered promiscuous mode [ 114.641835][ T9173] veth0_macvtap: entered promiscuous mode [ 114.652544][ T9173] veth1_macvtap: entered promiscuous mode [ 114.662958][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.673466][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.683318][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.693784][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.713653][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.722250][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.732736][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.742651][ T9173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.753222][ T9173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.766351][ T9173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.775272][ T9173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.784031][ T9173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.792818][ T9173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.801594][ T9173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.837859][ T9317] loop4: detected capacity change from 0 to 128 [ 115.184430][ T9327] SELinux: ebitmap: truncated map [ 115.190017][ T9327] SELinux: failed to load policy [ 115.259477][ T9335] xt_hashlimit: size too large, truncated to 1048576 [ 115.421709][ T9340] ALSA: seq fatal error: cannot create timer (-22) [ 115.494779][ T9342] loop1: detected capacity change from 0 to 128 [ 115.506791][ T9342] EXT4-fs: Ignoring removed nobh option [ 115.520016][ T9342] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 115.756612][ T9355] SELinux: ebitmap: truncated map [ 115.762461][ T9355] SELinux: failed to load policy [ 115.813237][ T9363] ALSA: seq fatal error: cannot create timer (-22) [ 115.879285][ T9368] xt_hashlimit: size too large, truncated to 1048576 [ 116.252649][ T9386] SELinux: ebitmap: truncated map [ 116.262466][ T9386] SELinux: failed to load policy [ 116.283037][ T9392] ALSA: seq fatal error: cannot create timer (-22) [ 116.320104][ T9394] loop7: detected capacity change from 0 to 128 [ 116.343417][ T9394] __nla_validate_parse: 4 callbacks suppressed [ 116.343477][ T9394] netlink: 12320 bytes leftover after parsing attributes in process `syz.7.1369'. [ 116.377805][ T4104] kworker/u8:25: attempt to access beyond end of device [ 116.377805][ T4104] loop7: rw=1, sector=201, nr_sectors = 296 limit=128 [ 116.411087][ T4104] kworker/u8:25: attempt to access beyond end of device [ 116.411087][ T4104] loop7: rw=1, sector=497, nr_sectors = 544 limit=128 [ 116.605067][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 116.622892][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1375'. [ 116.890756][ T9422] ALSA: seq fatal error: cannot create timer (-22) [ 116.920410][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1382'. [ 116.933471][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 116.960687][ T9323] syz.6.1341 (9323) used greatest stack depth: 6368 bytes left [ 117.010883][ T9432] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1386'. [ 117.032270][ T9434] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1387'. [ 117.074890][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 117.074905][ T29] audit: type=1326 audit(1741251256.834:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.110217][ T29] audit: type=1326 audit(1741251256.844:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.133811][ T29] audit: type=1326 audit(1741251256.844:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.157338][ T29] audit: type=1326 audit(1741251256.844:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.181041][ T29] audit: type=1326 audit(1741251256.844:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.204728][ T29] audit: type=1326 audit(1741251256.844:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.228357][ T29] audit: type=1326 audit(1741251256.844:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.252014][ T29] audit: type=1326 audit(1741251256.844:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.275651][ T29] audit: type=1326 audit(1741251256.864:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.323271][ T9445] ALSA: seq fatal error: cannot create timer (-22) [ 117.337561][ T29] audit: type=1326 audit(1741251256.924:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 117.385451][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 117.491512][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1400'. [ 117.685304][ T9481] loop7: detected capacity change from 0 to 128 [ 117.701393][ T9481] netlink: 12320 bytes leftover after parsing attributes in process `syz.7.1408'. [ 118.432795][ T9515] xt_hashlimit: size too large, truncated to 1048576 [ 118.511910][ T9519] x_tables: unsorted underflow at hook 2 [ 119.139109][ T9548] loop3: detected capacity change from 0 to 128 [ 119.513389][ T9563] netlink: 'syz.6.1439': attribute type 3 has an invalid length. [ 119.521225][ T1049] IPVS: starting estimator thread 0... [ 119.526827][ T9556] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 119.619807][ T9565] IPVS: using max 1968 ests per chain, 98400 per kthread [ 119.662815][ T9577] loop7: detected capacity change from 0 to 512 [ 119.726617][ T9577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 119.741836][ T9577] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.762204][ T9585] loop4: detected capacity change from 0 to 512 [ 119.768969][ T9585] ext4: Unknown parameter 'fsmagic' [ 119.871276][ T9173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 119.974602][ T9596] loop4: detected capacity change from 0 to 128 [ 119.988694][ T9596] EXT4-fs: Ignoring removed nobh option [ 120.001445][ T9596] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 120.073909][ T9600] vlan2: entered allmulticast mode [ 120.082690][ T9600] bond0: entered allmulticast mode [ 120.087936][ T9600] bond_slave_0: entered allmulticast mode [ 120.093855][ T9600] bond_slave_1: entered allmulticast mode [ 120.104173][ T9600] bond0: left allmulticast mode [ 120.109051][ T9600] bond_slave_0: left allmulticast mode [ 120.114697][ T9600] bond_slave_1: left allmulticast mode [ 120.590782][ T9620] loop6: detected capacity change from 0 to 512 [ 120.640438][ T9620] journal_path: Lookup failure for './file0/../file0' [ 120.647285][ T9620] EXT4-fs: error: could not find journal device path [ 120.729670][ T9625] loop7: detected capacity change from 0 to 128 [ 120.787351][ T9625] EXT4-fs: Ignoring removed nobh option [ 120.848000][ T9625] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 120.920064][ T9634] loop6: detected capacity change from 0 to 128 [ 120.941134][ T9638] loop1: detected capacity change from 0 to 512 [ 120.953921][ T9636] loop4: detected capacity change from 0 to 512 [ 120.965073][ T9638] journal_path: Lookup failure for './file0/../file0' [ 120.971918][ T9638] EXT4-fs: error: could not find journal device path [ 121.008351][ T9636] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1469: casefold flag without casefold feature [ 121.031537][ T9636] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1469: couldn't read orphan inode 15 (err -117) [ 121.043941][ T9636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.056954][ T9636] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.196548][ T9666] netlink: 'syz.4.1480': attribute type 13 has an invalid length. [ 121.249732][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.257028][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.319034][ T9666] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.328342][ T9666] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.337673][ T9666] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.347017][ T9666] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.366346][ T9672] vlan2: entered allmulticast mode [ 121.390728][ T9666] netlink: 'syz.4.1480': attribute type 3 has an invalid length. [ 121.422923][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.430212][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.496540][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.507558][ T9678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.562400][ T9678] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.571708][ T9678] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.580768][ T9678] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.590128][ T9678] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.606392][ T9675] FAULT_INJECTION: forcing a failure. [ 121.606392][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.619696][ T9675] CPU: 1 UID: 0 PID: 9675 Comm: syz.7.1483 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 121.619732][ T9675] Tainted: [W]=WARN [ 121.619741][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.619753][ T9675] Call Trace: [ 121.619759][ T9675] [ 121.619766][ T9675] dump_stack_lvl+0xf2/0x150 [ 121.619797][ T9675] dump_stack+0x15/0x1a [ 121.619864][ T9675] should_fail_ex+0x24a/0x260 [ 121.619897][ T9675] should_fail+0xb/0x10 [ 121.619928][ T9675] should_fail_usercopy+0x1a/0x20 [ 121.619998][ T9675] _copy_from_user+0x1c/0xa0 [ 121.620019][ T9675] br_ioctl_stub+0x38b/0x5d0 [ 121.620118][ T9675] ? __pfx_br_ioctl_stub+0x10/0x10 [ 121.620153][ T9675] sock_ioctl+0x3dd/0x600 [ 121.620193][ T9675] ? __pfx_sock_ioctl+0x10/0x10 [ 121.620229][ T9675] __se_sys_ioctl+0xc9/0x140 [ 121.620260][ T9675] __x64_sys_ioctl+0x43/0x50 [ 121.620286][ T9675] x64_sys_call+0x1690/0x2dc0 [ 121.620468][ T9675] do_syscall_64+0xc9/0x1c0 [ 121.620507][ T9675] ? clear_bhb_loop+0x55/0xb0 [ 121.620538][ T9675] ? clear_bhb_loop+0x55/0xb0 [ 121.620632][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.620655][ T9675] RIP: 0033:0x7fe48e65d169 [ 121.620667][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.620685][ T9675] RSP: 002b:00007fe48ccc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 121.620703][ T9675] RAX: ffffffffffffffda RBX: 00007fe48e875fa0 RCX: 00007fe48e65d169 [ 121.620713][ T9675] RDX: 00004000000001c0 RSI: 0000000000008940 RDI: 0000000000000007 [ 121.620724][ T9675] RBP: 00007fe48ccc7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.620734][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.620823][ T9675] R13: 0000000000000000 R14: 00007fe48e875fa0 R15: 00007fff0cc793b8 [ 121.620840][ T9675] [ 121.622020][ T9689] __nla_validate_parse: 11 callbacks suppressed [ 121.622036][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1488'. [ 121.851133][ T9694] loop6: detected capacity change from 0 to 512 [ 121.883996][ T9694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 121.901606][ T9694] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.007703][ T9715] EXT4-fs (loop6): shut down requested (0) [ 122.120425][ T9722] ALSA: seq fatal error: cannot create timer (-22) [ 122.374449][ T9747] ALSA: seq fatal error: cannot create timer (-22) [ 122.457198][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 122.457215][ T29] audit: type=1326 audit(1741251262.214:4469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.488025][ T29] audit: type=1326 audit(1741251262.234:4470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.512555][ T29] audit: type=1326 audit(1741251262.254:4471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.536183][ T29] audit: type=1326 audit(1741251262.254:4472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.559874][ T29] audit: type=1326 audit(1741251262.254:4473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.583359][ T29] audit: type=1326 audit(1741251262.254:4474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.606898][ T29] audit: type=1326 audit(1741251262.254:4475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.630502][ T29] audit: type=1326 audit(1741251262.254:4476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.653919][ T29] audit: type=1326 audit(1741251262.254:4477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.677357][ T29] audit: type=1326 audit(1741251262.254:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9748 comm="syz.3.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76de13d169 code=0x7ffc0000 [ 122.703229][ T4459] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 122.742147][ T9782] ALSA: seq fatal error: cannot create timer (-22) [ 122.854967][ T9808] ALSA: seq fatal error: cannot create timer (-22) [ 123.060598][ T9847] xt_hashlimit: size too large, truncated to 1048576 [ 123.402618][ T9911] ALSA: seq fatal error: cannot create timer (-22) [ 123.454446][ T9917] ALSA: seq fatal error: cannot create timer (-22) [ 123.470462][ T9921] loop4: detected capacity change from 0 to 128 [ 123.540568][ T9928] netlink: 12320 bytes leftover after parsing attributes in process `syz.4.1535'. [ 123.633146][ T9938] xt_hashlimit: size too large, truncated to 1048576 [ 124.361247][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1547'. [ 124.475032][ T9962] loop6: detected capacity change from 0 to 128 [ 124.487909][ T9962] EXT4-fs: Ignoring removed nobh option [ 124.494257][ T9962] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 124.564150][ T9968] ALSA: seq fatal error: cannot create timer (-22) [ 124.583255][ T9970] ALSA: seq fatal error: cannot create timer (-22) [ 124.599165][ T9972] xt_hashlimit: size too large, truncated to 1048576 [ 124.641549][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1558'. [ 124.705980][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1560'. [ 124.717117][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1560'. [ 124.767269][ T9987] loop4: detected capacity change from 0 to 128 [ 124.773836][ T9987] EXT4-fs: Ignoring removed nobh option [ 124.780792][ T9987] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 124.842741][ T9994] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1565'. [ 124.866068][ T9996] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.874760][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1566'. [ 124.884219][ T9996] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1566'. [ 124.950957][ T9996] lo speed is unknown, defaulting to 1000 [ 124.956951][ T9998] ALSA: seq fatal error: cannot create timer (-22) [ 124.997910][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1569'. [ 125.008054][T10003] loop4: detected capacity change from 0 to 512 [ 125.016323][T10003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.036679][T10003] EXT4-fs (loop4): orphan cleanup on readonly fs [ 125.043499][T10003] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1566: Failed to acquire dquot type 1 [ 125.055424][T10003] EXT4-fs (loop4): 1 truncate cleaned up [ 125.061561][T10003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.096090][ T7517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.126378][T10011] xt_hashlimit: size too large, truncated to 1048576 [ 125.418514][T10022] loop3: detected capacity change from 0 to 128 [ 125.425107][T10022] EXT4-fs: Ignoring removed nobh option [ 125.431919][T10022] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 125.463721][T10026] ALSA: seq fatal error: cannot create timer (-22) [ 125.526869][T10039] ALSA: seq fatal error: cannot create timer (-22) [ 125.580092][T10049] loop3: detected capacity change from 0 to 256 [ 125.638508][T10051] loop3: detected capacity change from 0 to 128 [ 125.646720][T10051] EXT4-fs: Ignoring removed nobh option [ 125.675140][T10051] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 125.718261][T10058] loop6: detected capacity change from 0 to 1024 [ 125.830996][T10080] loop4: detected capacity change from 0 to 256 [ 126.311171][T10119] loop4: detected capacity change from 0 to 256 [ 126.345282][T10119] vfat: Bad value for 'shortname' [ 126.377280][T10119] loop4: detected capacity change from 0 to 1024 [ 126.384432][T10119] EXT4-fs: Ignoring removed bh option [ 126.390346][T10119] EXT4-fs: inline encryption not supported [ 126.396731][T10119] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.407837][T10119] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 126.417331][T10119] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.1606: lblock 2 mapped to illegal pblock 2 (length 1) [ 126.431570][T10119] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 48: comm syz.4.1606: lblock 0 mapped to illegal pblock 48 (length 1) [ 126.446415][T10119] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1606: Failed to acquire dquot type 0 [ 126.458739][T10119] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 126.468385][T10119] EXT4-fs error (device loop4): ext4_evict_inode:256: inode #11: comm syz.4.1606: mark_inode_dirty error [ 126.479923][T10119] EXT4-fs warning (device loop4): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 126.490231][T10119] EXT4-fs (loop4): 1 orphan inode deleted [ 126.496420][T10119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.520066][ T4091] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 126.534860][ T4091] EXT4-fs error (device loop4): ext4_release_dquot:6950: comm kworker/u8:15: Failed to release dquot type 0 [ 126.548698][ T7517] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.558290][ T7517] EXT4-fs error (device loop4): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 126.572163][ T7517] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 126.581974][ T7517] EXT4-fs error (device loop4): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 126.635419][T10159] __nla_validate_parse: 2 callbacks suppressed [ 126.635436][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'. [ 126.703412][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 127.123906][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1621'. [ 127.135032][T10248] Cannot find set identified by id 0 to match [ 127.161990][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 127.170984][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 127.182152][T10256] loop1: detected capacity change from 0 to 128 [ 127.207868][T10256] syz.1.1624: attempt to access beyond end of device [ 127.207868][T10256] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 127.234663][T10255] syz.1.1624: attempt to access beyond end of device [ 127.234663][T10255] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 127.235447][T10256] syz.1.1624: attempt to access beyond end of device [ 127.235447][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.235508][T10256] syz.1.1624: attempt to access beyond end of device [ 127.235508][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.235540][T10256] syz.1.1624: attempt to access beyond end of device [ 127.235540][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.235577][T10256] syz.1.1624: attempt to access beyond end of device [ 127.235577][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.235676][T10256] syz.1.1624: attempt to access beyond end of device [ 127.235676][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.315375][T10256] syz.1.1624: attempt to access beyond end of device [ 127.315375][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.329394][T10256] syz.1.1624: attempt to access beyond end of device [ 127.329394][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.329491][T10256] syz.1.1624: attempt to access beyond end of device [ 127.329491][T10256] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 127.649380][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 127.649399][ T29] audit: type=1326 audit(1741251267.404:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.6.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 127.679277][ T29] audit: type=1326 audit(1741251267.404:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.6.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 127.702926][ T29] audit: type=1326 audit(1741251267.404:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.6.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 127.726423][ T29] audit: type=1326 audit(1741251267.404:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.6.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 127.750031][ T29] audit: type=1326 audit(1741251267.404:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10265 comm="syz.6.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b33bfd169 code=0x7ffc0000 [ 128.303281][ T4091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.362666][ T4091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.413459][ T4091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.454861][ T4091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.482194][ T29] audit: type=1326 audit(1741251268.244:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 128.505968][ T29] audit: type=1326 audit(1741251268.244:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 128.526350][T10394] lo speed is unknown, defaulting to 1000 [ 128.529616][ T29] audit: type=1326 audit(1741251268.244:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 128.558818][ T29] audit: type=1326 audit(1741251268.244:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10386 comm="syz.4.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff471a1d169 code=0x7ffc0000 [ 128.604719][ T4091] bridge_slave_1: left allmulticast mode [ 128.610493][ T4091] bridge_slave_1: left promiscuous mode [ 128.616134][ T4091] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.624127][ T4091] bridge_slave_0: left allmulticast mode [ 128.629845][ T4091] bridge_slave_0: left promiscuous mode [ 128.635648][ T4091] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.684293][ T4091] gretap0 (unregistering): left allmulticast mode [ 128.874638][ T4091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.886940][ T4091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.897579][ T4091] bond0 (unregistering): Released all slaves [ 128.953547][T10394] chnl_net:caif_netlink_parms(): no params data found [ 128.994017][ T4091] hsr_slave_0: left promiscuous mode [ 129.001429][ T4091] hsr_slave_1: left promiscuous mode [ 129.008601][ T4091] veth1_vlan: left promiscuous mode [ 129.014510][ T4091] veth0_vlan: left promiscuous mode [ 129.085530][ T4091] team0 (unregistering): Port device team_slave_1 removed [ 129.095495][ T4091] team0 (unregistering): Port device team_slave_0 removed [ 129.166135][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.173304][T10394] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.182440][T10394] bridge_slave_0: entered allmulticast mode [ 129.189045][T10394] bridge_slave_0: entered promiscuous mode [ 129.195877][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.203272][T10394] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.211205][T10394] bridge_slave_1: entered allmulticast mode [ 129.218042][T10394] bridge_slave_1: entered promiscuous mode [ 129.237143][ T29] audit: type=1400 audit(1741251268.994:4837): avc: denied { setopt } for pid=10522 comm="syz.3.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.260311][T10394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.272368][T10394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.303628][T10394] team0: Port device team_slave_0 added [ 129.310257][T10394] team0: Port device team_slave_1 added [ 129.327357][T10394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.334378][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.360316][T10394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.361047][T10530] vhci_hcd: invalid port number 236 [ 129.371680][T10394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.376047][T10530] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 129.391520][T10394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.417602][T10394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.464834][T10538] loop7: detected capacity change from 0 to 256 [ 129.471651][T10538] vfat: Bad value for 'shortname' [ 129.474616][T10394] hsr_slave_0: entered promiscuous mode [ 129.484079][T10394] hsr_slave_1: entered promiscuous mode [ 129.487886][T10538] loop7: detected capacity change from 0 to 1024 [ 129.490869][T10394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.497021][T10538] EXT4-fs: Ignoring removed bh option [ 129.503809][T10394] Cannot create hsr debugfs directory [ 129.512016][T10538] EXT4-fs: inline encryption not supported [ 129.521421][T10538] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.532657][T10538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 129.542760][T10538] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.1639: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.556961][T10538] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 48: comm syz.7.1639: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.572226][T10538] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.1639: Failed to acquire dquot type 0 [ 129.584215][T10538] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 129.593990][T10538] EXT4-fs error (device loop7): ext4_evict_inode:256: inode #11: comm syz.7.1639: mark_inode_dirty error [ 129.605493][T10538] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 129.615799][T10538] EXT4-fs (loop7): 1 orphan inode deleted [ 129.621966][T10538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.634502][ T4089] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.649402][ T4089] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:13: Failed to release dquot type 0 [ 129.672071][ T9173] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.681408][ T9173] EXT4-fs error (device loop7): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 129.694550][ T9173] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 129.704081][ T9173] EXT4-fs error (device loop7): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 129.814140][T10394] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 129.822740][T10394] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 129.831571][T10394] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 129.841234][T10394] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 129.850528][T10548] loop3: detected capacity change from 0 to 128 [ 129.856673][T10394] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.863933][T10394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.871273][T10394] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.878386][T10394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.909637][T10394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.916921][T10549] netlink: 12320 bytes leftover after parsing attributes in process `syz.3.1642'. [ 129.944693][ T4089] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.953590][ T4089] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.967086][T10394] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.977053][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.984226][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.995377][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.002475][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.073194][T10394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.174824][T10394] veth0_vlan: entered promiscuous mode [ 130.182841][T10394] veth1_vlan: entered promiscuous mode [ 130.198205][T10394] veth0_macvtap: entered promiscuous mode [ 130.205376][T10394] veth1_macvtap: entered promiscuous mode [ 130.215247][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.225867][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.235733][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.246237][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.257328][T10394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.268579][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.279185][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.289073][T10394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.299722][T10394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.310497][T10394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.320489][T10394] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.329229][T10394] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.338023][T10394] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.346724][T10394] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.536026][T10586] xt_hashlimit: size too large, truncated to 1048576 [ 130.717738][T10607] bridge0: entered promiscuous mode [ 130.725462][T10607] bridge0: port 3(macsec1) entered blocking state [ 130.732007][T10607] bridge0: port 3(macsec1) entered disabled state [ 130.738977][T10607] macsec1: entered allmulticast mode [ 130.744329][T10607] bridge0: entered allmulticast mode [ 130.755808][T10607] macsec1: left allmulticast mode [ 130.760914][T10607] bridge0: left allmulticast mode [ 130.766562][T10607] bridge0: left promiscuous mode [ 130.775003][T10612] loop7: detected capacity change from 0 to 256 [ 130.782478][T10610] SELinux: security policydb version 18 (MLS) not backwards compatible [ 130.793170][T10610] SELinux: failed to load policy [ 130.901147][T10625] loop8: detected capacity change from 0 to 1024 [ 130.911786][T10625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.923934][T10625] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.935922][T10625] FAULT_INJECTION: forcing a failure. [ 130.935922][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 130.935954][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.8.1666 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 130.935987][T10625] Tainted: [W]=WARN [ 130.935995][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.936010][T10625] Call Trace: [ 130.936018][T10625] [ 130.936027][T10625] dump_stack_lvl+0xf2/0x150 [ 130.936090][T10625] dump_stack+0x15/0x1a [ 130.936115][T10625] should_fail_ex+0x24a/0x260 [ 130.936227][T10625] should_failslab+0x8f/0xb0 [ 130.936305][T10625] kmem_cache_alloc_noprof+0x52/0x320 [ 130.936330][T10625] ? alloc_empty_file+0xd0/0x200 [ 130.936409][T10625] ? _raw_spin_unlock+0x26/0x50 [ 130.936441][T10625] alloc_empty_file+0xd0/0x200 [ 130.936464][T10625] alloc_file_pseudo+0xc9/0x160 [ 130.936509][T10625] create_pipe_files+0x1bd/0x400 [ 130.936549][T10625] __do_pipe_flags+0x46/0x190 [ 130.936638][T10625] do_pipe2+0x64/0x130 [ 130.936686][T10625] __x64_sys_pipe+0x21/0x30 [ 130.936741][T10625] x64_sys_call+0x24a/0x2dc0 [ 130.936879][T10625] do_syscall_64+0xc9/0x1c0 [ 130.936916][T10625] ? clear_bhb_loop+0x55/0xb0 [ 130.936951][T10625] ? clear_bhb_loop+0x55/0xb0 [ 130.936985][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.937017][T10625] RIP: 0033:0x7f19bf36d169 [ 130.937045][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.937123][T10625] RSP: 002b:00007f19bd9d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 130.937145][T10625] RAX: ffffffffffffffda RBX: 00007f19bf585fa0 RCX: 00007f19bf36d169 [ 130.937160][T10625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000100 [ 130.937181][T10625] RBP: 00007f19bd9d7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.937195][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.937210][T10625] R13: 0000000000000000 R14: 00007f19bf585fa0 R15: 00007ffc3557d2e8 [ 130.937232][T10625] [ 130.950195][T10394] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.003121][T10634] xt_hashlimit: size too large, truncated to 1048576 [ 131.297942][T10643] loop4: detected capacity change from 0 to 128 [ 131.360548][T10646] netlink: 12320 bytes leftover after parsing attributes in process `syz.4.1672'. [ 131.446434][T10648] lo speed is unknown, defaulting to 1000 [ 131.763364][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1680'. [ 131.812785][T10673] loop7: detected capacity change from 0 to 128 [ 131.876540][T10677] netlink: 12320 bytes leftover after parsing attributes in process `syz.7.1684'. [ 131.892851][T10677] ================================================================== [ 131.900974][T10677] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 131.909514][T10677] [ 131.911849][T10677] write to 0xffff888127bcaa80 of 8 bytes by task 10673 on cpu 0: [ 131.919575][T10677] sync_mapping_buffers+0x159/0x7c0 [ 131.924806][T10677] fat_file_fsync+0xa7/0x100 [ 131.929436][T10677] vfs_fsync_range+0x116/0x130 [ 131.934225][T10677] generic_file_write_iter+0x1c3/0x310 [ 131.939699][T10677] iter_file_splice_write+0x5f1/0x980 [ 131.945091][T10677] direct_splice_actor+0x160/0x2c0 [ 131.950225][T10677] splice_direct_to_actor+0x302/0x670 [ 131.955637][T10677] do_splice_direct+0xd7/0x150 [ 131.960434][T10677] do_sendfile+0x398/0x660 [ 131.964873][T10677] __x64_sys_sendfile64+0x110/0x150 [ 131.970106][T10677] x64_sys_call+0xfbd/0x2dc0 [ 131.974724][T10677] do_syscall_64+0xc9/0x1c0 [ 131.979302][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.985244][T10677] [ 131.987585][T10677] read to 0xffff888127bcaa80 of 8 bytes by task 10677 on cpu 1: [ 131.995242][T10677] mark_buffer_dirty_inode+0x96/0x1c0 [ 132.000646][T10677] fat32_ent_put+0x75/0x90 [ 132.005105][T10677] fat_ent_write+0x66/0xe0 [ 132.009561][T10677] fat_chain_add+0x15f/0x400 [ 132.014179][T10677] fat_get_block+0x46b/0x5e0 [ 132.018803][T10677] __block_write_begin_int+0x417/0xfa0 [ 132.024277][T10677] cont_write_begin+0x546/0x860 [ 132.029135][T10677] fat_write_begin+0x51/0xe0 [ 132.033738][T10677] generic_perform_write+0x1a8/0x4a0 [ 132.039031][T10677] __generic_file_write_iter+0xa1/0x120 [ 132.044600][T10677] generic_file_write_iter+0x8f/0x310 [ 132.050001][T10677] vfs_write+0x77b/0x920 [ 132.054252][T10677] ksys_write+0xe8/0x1b0 [ 132.058507][T10677] __x64_sys_write+0x42/0x50 [ 132.063123][T10677] x64_sys_call+0x287e/0x2dc0 [ 132.067800][T10677] do_syscall_64+0xc9/0x1c0 [ 132.072322][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.078246][T10677] [ 132.080564][T10677] value changed: 0xffff8881067f5108 -> 0x0000000000000000 [ 132.087672][T10677] [ 132.090006][T10677] Reported by Kernel Concurrency Sanitizer on: [ 132.096160][T10677] CPU: 1 UID: 0 PID: 10677 Comm: syz.7.1684 Tainted: G W 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 132.108406][T10677] Tainted: [W]=WARN [ 132.112206][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.122256][T10677] ================================================================== [ 132.801739][ T4095] bio_check_eod: 20048 callbacks suppressed [ 132.801753][ T4095] kworker/u8:19: attempt to access beyond end of device [ 132.801753][ T4095] loop7: rw=1, sector=449, nr_sectors = 592 limit=128