last executing test programs: 7m4.253705606s ago: executing program 32 (id=20): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x80) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) r6 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) 6m47.874654934s ago: executing program 33 (id=179): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6m37.32310822s ago: executing program 34 (id=291): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="e62c2283af000000000000", @ANYRES16=r0, @ANYBLOB="404c40df5144e1ca7a877949bc14eef400fb777ccdf5e9c5859f7da09febbbbbb1f60f667ed6e909086eddb097bfe0d119c1a27780b19dd41a47fe40"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f00000006c0)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, 0x0, 0x0, 0x2400e044}, 0x1000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_pidfd_open(r2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 6m34.616833483s ago: executing program 35 (id=326): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) setpriority(0x2, 0xff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) (async) io_setup(0x3, &(0x7f0000000340)) 6m32.453689027s ago: executing program 36 (id=340): r0 = socket(0x1e, 0x80004, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240088c0}, 0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r3, r0, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 6m23.851158973s ago: executing program 37 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x238}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0xc814}, 0x4000914) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[], 0x50) r2 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000e00)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, @dev, @multicast2}}}}) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r10, 0x8000, 0x8, 0x5058, 0x2, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r13 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r13, 0x2284, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @broadcast}}}}) 5m54.601660004s ago: executing program 8 (id=724): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xfffff020}, {0x6, 0x0, 0x2}]}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r8, 0x409, 0x8) fallocate(r8, 0x3, 0x9100, 0x3) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)='system_u:object_r:depmod_exec_t:s0\x00', 0x23, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005100)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0x6}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0xfffffff7}, 0x28) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m54.416217027s ago: executing program 8 (id=726): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) (async) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x3) r4 = openat$cgroup_procs(r3, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000380)=0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, 0x0) (async) fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x111) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff31fc, 0x3}, 0x20) (async) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) 5m54.316803308s ago: executing program 8 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m53.836673776s ago: executing program 8 (id=735): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r2, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x0, 0xa29e, 0x9, @mcast2, @private1, 0x7840, 0x80, 0xe, 0x7}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) bind$xdp(r6, &(0x7f0000000740)={0x2c, 0x8, r7, 0x22, r6}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r6, &(0x7f00000003c0)='(', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000800)='fib_table_lookup\x00', r8, 0x0, 0x7}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5m51.898462197s ago: executing program 8 (id=754): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x43, @local, @loopback, 0x10, 0x40, 0x0, 0x62ab}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 5m51.074888929s ago: executing program 8 (id=766): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001d10000000000000100008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000020740)=[{0x7, 0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f00000007c0)=""/151, 0x97}, {&(0x7f0000000880)=""/87, 0x57}], &(0x7f0000000000)=[0x80000000, 0x2, 0x2, 0x6000000, 0x7, 0x10, 0x4, 0xffff]}, {0x5, 0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f000001a240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/114, 0x72}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f000001b240)=""/4096, 0x1000}], &(0x7f0000000b40)=[0xfffffffffffffbff, 0xfffffffffffffe00, 0xfd, 0x0, 0x6, 0x5, 0x7, 0x9]}, {0x7, 0x1, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/226, 0xe2}, {&(0x7f0000000d40)=""/93, 0x5d}, {&(0x7f000001c240)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000000e40)=""/13, 0xd}, {&(0x7f000001d240)=""/4096, 0x1000}], &(0x7f0000000f00)=[0xffffffffffffff33, 0x8001, 0x9]}, {0x5, 0x1, 0x0, &(0x7f000001e240)=[{&(0x7f0000000f40)=""/24, 0x18}, {&(0x7f0000000f80)=""/232, 0xe8}, {&(0x7f0000001080)=""/246, 0xf6}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/19, 0x13}], &(0x7f0000001200)=[0x10001, 0x7, 0x80000000, 0x4]}, {0x8, 0x1, 0x0, &(0x7f0000020680)=[{&(0x7f000001e2c0)=""/58, 0x3a}, {&(0x7f000001e300)=""/170, 0xaa}, {&(0x7f000001e3c0)=""/4096, 0x1000}, {&(0x7f000001f3c0)=""/4096, 0x1000}, {&(0x7f00000203c0)=""/149, 0x95}, {&(0x7f0000020480)=""/49, 0x31}, {&(0x7f00000204c0)=""/246, 0xf6}, {&(0x7f00000205c0)=""/159, 0x9f}], &(0x7f0000020700)=[0x1, 0x5, 0xffff, 0x0, 0x2]}], 0x5) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f000065f000/0x4000)=nil, 0x4000, 0x1000002, 0xae3afb83ad0acfb8, 0xffffffffffffffff, 0x1000) close_range(r2, 0xffffffffffffffff, 0x0) 5m51.05599992s ago: executing program 40 (id=766): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001d10000000000000100008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000181b0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000020740)=[{0x7, 0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000240)=""/226, 0xe2}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/228, 0xe4}, {&(0x7f0000000700)=""/163, 0xa3}, {&(0x7f00000007c0)=""/151, 0x97}, {&(0x7f0000000880)=""/87, 0x57}], &(0x7f0000000000)=[0x80000000, 0x2, 0x2, 0x6000000, 0x7, 0x10, 0x4, 0xffff]}, {0x5, 0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f000001a240)=""/4096, 0x1000}, {&(0x7f0000000980)=""/168, 0xa8}, {&(0x7f0000000a40)=""/114, 0x72}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f000001b240)=""/4096, 0x1000}], &(0x7f0000000b40)=[0xfffffffffffffbff, 0xfffffffffffffe00, 0xfd, 0x0, 0x6, 0x5, 0x7, 0x9]}, {0x7, 0x1, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000b80)=""/170, 0xaa}, {&(0x7f0000000c40)=""/226, 0xe2}, {&(0x7f0000000d40)=""/93, 0x5d}, {&(0x7f000001c240)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000000e40)=""/13, 0xd}, {&(0x7f000001d240)=""/4096, 0x1000}], &(0x7f0000000f00)=[0xffffffffffffff33, 0x8001, 0x9]}, {0x5, 0x1, 0x0, &(0x7f000001e240)=[{&(0x7f0000000f40)=""/24, 0x18}, {&(0x7f0000000f80)=""/232, 0xe8}, {&(0x7f0000001080)=""/246, 0xf6}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/19, 0x13}], &(0x7f0000001200)=[0x10001, 0x7, 0x80000000, 0x4]}, {0x8, 0x1, 0x0, &(0x7f0000020680)=[{&(0x7f000001e2c0)=""/58, 0x3a}, {&(0x7f000001e300)=""/170, 0xaa}, {&(0x7f000001e3c0)=""/4096, 0x1000}, {&(0x7f000001f3c0)=""/4096, 0x1000}, {&(0x7f00000203c0)=""/149, 0x95}, {&(0x7f0000020480)=""/49, 0x31}, {&(0x7f00000204c0)=""/246, 0xf6}, {&(0x7f00000205c0)=""/159, 0x9f}], &(0x7f0000020700)=[0x1, 0x5, 0xffff, 0x0, 0x2]}], 0x5) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mmap(&(0x7f000065f000/0x4000)=nil, 0x4000, 0x1000002, 0xae3afb83ad0acfb8, 0xffffffffffffffff, 0x1000) close_range(r2, 0xffffffffffffffff, 0x0) 4m19.086331851s ago: executing program 3 (id=2569): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000c000802e800d900000000000000191320266ab7ea4aa9205b2d0bf8d35003000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000700)=ANY=[@ANYBLOB=',mmap,cache=fscache,dont_hash,defcontext=']) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) open_by_handle_at(r1, 0x0, 0x533401) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r8 = syz_clone(0xc4200000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0x13, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x80, 0x10, 0x5, 0xc, {{0x5, 0x4, 0x3, 0x23, 0x14, 0x68, 0x0, 0x35, 0x4, 0x0, @broadcast, @local}}}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x1ff) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="18000000190001000000e7587d7d0788184ee7b90000fbdbdf251d01090004001280"], 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) recvmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x10000) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x1, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc4}, 0x1) 4m18.976725923s ago: executing program 3 (id=2571): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x103) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x6}, 0x18) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket(0x2, 0x3, 0xff) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000c06e7ffffff00000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x48844) r10 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d669a1250f967e10dcbad26f9f16fb834a2642c7246646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',msize=0x0000000000001000,k']) 4m18.862047105s ago: executing program 3 (id=2573): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 4m18.856430225s ago: executing program 3 (id=2574): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000004000000040000000200000080000000", @ANYRES32, @ANYBLOB="4000000000000000000000000000000000d30c00", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000100"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000001000000006000000ffff000002800000", @ANYRES32=r2, @ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000040000000a00040000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r5, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r5, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43", 0x75}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) close(r5) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000004c0)={@loopback}, &(0x7f0000000500)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r7}, 0x20) socket$inet6(0xa, 0x2, 0x1000000) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 4m18.811192646s ago: executing program 3 (id=2575): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f0000000800)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x7]}, &(0x7f0000000040)=0x54) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 4m18.461665501s ago: executing program 3 (id=2582): r0 = socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000840)=[{{&(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="7d51212ac3c884f441e8243b041d4275195ab2b2bc7a318ef49fe568da7a9534b1634c70f717c6377de4bba30ddac221e5f8cb3a7704c72264caf24b2b39f413c4f9da3c4d7cc971f5f2754199a0f29e1e9f55f9f496316ec20d6556ae6ef4d2d08d7cd60119ba8e5a9120abc7b10fd8fa55871353397265634f810d71f1edd5fff6604a5b684511839a3a747e48defb70c7c434eb752afb138e2497276733444b564c1dcb0c18ed5f25689d1d94f385892014", 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x400}}], 0x1, 0x20008004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 4m18.450138071s ago: executing program 41 (id=2582): r0 = socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x2, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000840)=[{{&(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="7d51212ac3c884f441e8243b041d4275195ab2b2bc7a318ef49fe568da7a9534b1634c70f717c6377de4bba30ddac221e5f8cb3a7704c72264caf24b2b39f413c4f9da3c4d7cc971f5f2754199a0f29e1e9f55f9f496316ec20d6556ae6ef4d2d08d7cd60119ba8e5a9120abc7b10fd8fa55871353397265634f810d71f1edd5fff6604a5b684511839a3a747e48defb70c7c434eb752afb138e2497276733444b564c1dcb0c18ed5f25689d1d94f385892014", 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20, 0x400}}], 0x1, 0x20008004) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 3m26.351162065s ago: executing program 2 (id=3454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES8=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f00000001c0)=0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x4, 0x6, 0x7ffc1ffc}]}) syslog(0xb, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000020272254000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb722000002000000b703000000008500000004000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fstatfs(0xffffffffffffffff, 0x0) r7 = socket(0x22, 0x8180b, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0xa72, 0x80, 0x9, 0xa}]}, 0x10) 3m26.288807056s ago: executing program 2 (id=3459): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 3m26.06420353s ago: executing program 2 (id=3464): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000004000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800006e0e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x1066, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0) r7 = fsmount(r0, 0x0, 0x0) r8 = syz_io_uring_setup(0x2aee, &(0x7f0000000040)={0x0, 0xc531, 0x400, 0x0, 0x3d7, 0x0, r7}, &(0x7f0000000180), &(0x7f0000000200)) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000280)) 3m26.02083911s ago: executing program 2 (id=3468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) ioctl$EXT4_IOC_SWAP_BOOT(r6, 0x6611) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffe42) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) 3m25.959393811s ago: executing program 2 (id=3471): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}}, 0x4000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m25.718299755s ago: executing program 2 (id=3474): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x1a00, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x20040890}, 0x8040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mq_timedreceive(r3, &(0x7f00000004c0)=""/25, 0x19, 0x3ff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='kfree\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000002800004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='y', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf251000000005000f000a0000000500100006000000060011003500000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0500100009000000"], 0x54}}, 0x4000001) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 3m25.718116215s ago: executing program 42 (id=3474): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x1a00, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x20040890}, 0x8040) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) mq_timedreceive(r3, &(0x7f00000004c0)=""/25, 0x19, 0x3ff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000740)='kfree\x00', r9}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000002800004000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='y', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000700)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf251000000005000f000a0000000500100006000000060011003500000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0500100009000000"], 0x54}}, 0x4000001) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f700", "1ab6c0e5"}, 0x28) 53.953819297s ago: executing program 5 (id=6180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 53.07857691s ago: executing program 5 (id=6194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0}, &(0x7f0000000040), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0xa64648b6f2d3191, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000280)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x1}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c00)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) tgkill(0x0, 0x0, 0x21) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32=r3, @ANYBLOB="a3fd8cf308fcb4541126b70000000000000000b7080000000000007b8af8ff0000eb7db7080000030000007b8af0ff00000000bfa1000000000006000000000000000421f23e000081d7c0e513ce829873f06150994649fa40fe531bd4ba07000000000000001082247967d13ee9acceae2a8feca8eed1bff1405579e83e5c9b587d0cde747400"/147, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000faffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018490000010000000000000000000000180000000600000000000000fdffffffad7a0c0008000000850000005f0000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r5, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESDEC=r4], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c5985000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r7}, &(0x7f0000004000), 0x0}, 0x20) setresuid(0xee00, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 52.914234793s ago: executing program 5 (id=6195): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000280)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$char_usb(r4, &(0x7f0000002440)=""/139, 0x8b) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 52.889235353s ago: executing program 5 (id=6197): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xa, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) umount2(0x0, 0x2) 52.649197817s ago: executing program 5 (id=6199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000906010200000000000000000000fffc0900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e00040"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r8}, 0x18) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x16, 0x7fff, @l2={'eth', 0x3a, 'pimreg1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x20010044) 52.370389232s ago: executing program 5 (id=6207): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000280)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$char_usb(r4, &(0x7f0000002440)=""/139, 0x8b) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 52.368437261s ago: executing program 43 (id=6207): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000280)=0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$char_usb(r4, &(0x7f0000002440)=""/139, 0x8b) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000000400000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 34.452829968s ago: executing program 1 (id=6602): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='signal_deliver\x00', r1}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r0], 0x0, 0x0, 0xfffffffffffffe6c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 34.276100871s ago: executing program 1 (id=6605): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4840) 33.861470377s ago: executing program 1 (id=6616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000ffdbdf250300000008000100030000834441ddb81ba22b2980f7ed5e31d9d7ced25e56d85e43"], 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11, 0x0, 0x3}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000080)=0x7ff, 0x4) sendmsg$nl_route(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) 33.562139102s ago: executing program 1 (id=6628): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x82) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0xffffffffffffff17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='signal_deliver\x00', r1}, 0x18) connect$unix(0xffffffffffffffff, 0x0, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0xff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x11c0006, &(0x7f00000034c0)={[{}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}}, {@barrier}]}, 0x45, 0x792, &(0x7f0000002d00)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000500)={0x53, 0xffffffff00000005, 0x2, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="6ee3", 0x0, 0x300, 0x0, 0x1, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000000000000000000000d5111b78000002", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) kexec_load(0x5b4f, 0x7, &(0x7f0000002240)=[{&(0x7f0000000fc0)="620f2520c8c4139e87", 0x9, 0x7, 0x8001}, {&(0x7f0000000300)="51e0eec085bcad346bf1983dbb19ea6ff5ac8743983f6a1eff2bdebd7daccdaadbba3acc09b83d9f7f7219b04dd2f2d18a8421da4589c4a6f460d2837f910bebef2b6ab43997bca7dc9f749c82a31b3911bc14276f7789cf", 0x58, 0x7, 0xfa99}, {&(0x7f0000000f80)="6a6f1009b17e554377df391bc9e4a769425fba026d2e269686367fb82b23a2685bfc9e", 0x23, 0x8, 0x1}, {&(0x7f0000002140)="a4c5fe4d4cf3d7a65e91974f218a44db72fc0500000000000000dba24b161590db035b5af372773dc18afb4542e90ea65b205fbf408de87022bd3f24b63a0064e5203d8a5b7753b5132aa17daf1f6f5c95965401eed34f00000000000000093a437b8759d1cf425380a894f9e16bc950757239508637f83301b8ab13b81f7ad0b7813aff983a7a9cbf7d229d5582dfeafe7c0ffab1baba418305fad8b361f66b86abd0fa0f0d3614a541c02a86aaf5a127b90a8c2fc3f72128c1", 0xba, 0x0, 0x103}, {&(0x7f0000002040)="431ee3906519018ba926d1e4cf9721f55dbb8b13e04e9c537e55859f02448f60bac06c50e70443d0a032e94adddbb287a9decf7fc0c980efb6abb409642834ecd62ea4cd73902d199d2c3659c79fe2b58da058dc426466e16221785d834fe3cb0d44a805a0d69467d03f35fb9dea1d5146dbad18f716830f8e10fc11a654e540736cccc9e19548c865a5754c76a4012df8b77dd2a18a2eadcd0d1990ca3d9718c89b6314bf8dbcdaf068b9390b675abfbda0ff2e0e60a8984fae9cfb4dc21fa1ecf4fdb1ef0067e9130b8443b7a8d1cbf9bcc657c66cc2c9b8b06cc061046286f37b65d7a22b5bcc38247bec", 0xec, 0x62c00000000000, 0x7}, {&(0x7f0000000680)="24df60474ce2bf50af32b4d1fcce4d6374fb667b79f1dcd6689d54fb942e9de70231259c21e68a3a0ebbeaa3ee8552f10b7f8fd46881ea08b2f5d066b79f7a7c97772c073e99380896a166c4ccdc8a0d8a861e8334b3e4c6fe348e579513b75f07c5da04121d1b207ecc320e256edbec9b18261ba78626fe6d52413290f680ae6bf24e75ae2576bb02172f12d6e027d9cce466bfc38f121af73bed11dcbaec00efbb9c154794da61dd437f3c32039b90819e781b765523e83524f2b9fa89e781cdd7cf26b5d6218cbce747991f57b0c2dcb2d91c1db77ab71d94d46c2590d8e7bb382ee92c773a9202899db210872a221a86ed3c79998ea8", 0xf8, 0xa, 0x4}, {&(0x7f0000000240)="ffe9f805a6e40b458a3a634f20384973", 0x10, 0xfffffffffffffaf9, 0xca4}], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 33.466024473s ago: executing program 1 (id=6634): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 33.135209858s ago: executing program 1 (id=6641): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="8679530da1d4e3b5aaad09faf623c58c37b497f05cea0e2f5301f29abb716a06689fe63be5577f72ab08a9506ad9fd63e18a8bfe481b42bd1d6a4ea991f6987e1af1b03153"]) 33.112745169s ago: executing program 44 (id=6641): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="8679530da1d4e3b5aaad09faf623c58c37b497f05cea0e2f5301f29abb716a06689fe63be5577f72ab08a9506ad9fd63e18a8bfe481b42bd1d6a4ea991f6987e1af1b03153"]) 2.671812788s ago: executing program 6 (id=7242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) lseek(r1, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r3 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = dup(r5) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x3, @none, 0x6, 0x1}, 0x5) syz_open_dev$evdev(&(0x7f0000000280), 0xba4, 0x4001) r7 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000300)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_pgetevents(r9, 0x4, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000500)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) write$selinux_load(r7, &(0x7f0000000000)=ANY=[], 0x606c) 2.59819268s ago: executing program 6 (id=7244): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.53591459s ago: executing program 6 (id=7247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x2, 0x1, 0x8, 0x1020005, 0x2b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast2}, &(0x7f00000001c0)=0x14) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noauto_da_alloc}]}, 0x1, 0x502, &(0x7f0000000a00)="$eJzs3c9vI1cdAPCvnV9OmjZp6QEQokspLGi1TuJto6oHKCeEUCVEjyBtQ+KNothxFDulCXvY/g9IVOIER/4Azj3xJyC4cYEDEj8iULMSSFPNeLzrzdob7yaxs/HnI41m3ryxv+/t7rzn+W7iF8DYuhYR9yJiOiI+iIiF/Hwh3+Ld9pZe99nR3fXjo7vrhUiS9/9VyOrTc9H1mtQL+XuWIuLH34/4WeHxuM2Dw+21Wq261y7OLrXqu0vNg8ObW/W1zepmdadSWV1ZXX771luVc+vra/Xp9sFE2sBv/yJt1nxe192Pc/T/JDP1IE5qMiJ+eAHBRmEi78/0qBvCMylGxCsR8Xp2/y/ERPa3CQBcZUmyEMlCdxkAuOqKWQ6sUCznuYD5KBbL5XYO79WYK9YazdaNO439nY12rmwxpop3tmrV5TxXuBhThbS8kh0/LFdOlG9FxMsR8cuZ2axcXm/UNkb5wQcAxtgLJ+b//860538A4IorjboBAMDQmf8BYPyY/wFg/Jj/AWD8mP8BYPyY/wFg/Jj/AWCs/Oi999ItOc6//3rjw4P97caHNzeqze1yfX+9vN7Y2y1vNhqb2Xf21E97v1qjsbvyZux/tPid3WZrqXlweLve2N9p3c6+1/t2dWoovQIAnuTl1z79cyEi7r0zm23RtZaDuRqutuJZXjx7fu0Ahm9i1A0ARsZqXzC+zvCMLz0AV0SPJXofUXrkcT+/OkmS5GKbBVyg61+S/4dx1ZX/91PAMGbk/2F8DZr/Py0/ADx/kqQw6Jr/MeiFAMDlJscP9Hm+fyXf/y7/z4Gfbpy84pOLbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbp31f8v5WuDzUSyWyxEvRsRiTBXubNWqyxHxUkT8aWZqJi2vjLjNAMBZFf9eyNf/ur7wxvzJ2unC/ZlsHxE///X7v/pordXa+2N6/t8Pzrc+yc9XRtF+AOA0nXk623c9yH92dHe9sw2zPf/4XkSU2vGPj6bj+EH8yZjM9qWYioi5/xTycluhK3dxFvc+jogv9up/IeazHEh75dOT8dPYLw41fvGR+MWsrr1P/yy+8NSRk4VzaD481z5Nx593e91/xbiW7Xvf/6VshDq7fPxL32r9OBsDH8bvjH8Tfca/a4PGePMPP2gfzT5e93HElycjOrGPu8afTvxCn/hvDBj/L1/56uv96pLfRFyP3vG7Yy216rtLzYPDm1v1tc3qZnWnUlldWV1++9ZblaUsR73Ufzb45zs3XupXl/Z/rk/80in9/8aA/f/t/z74ydeeEP9bX+8VvxivPiF+Oid+c8D4a3O/L/WrS+Nv9Ox/R//+3xgw/l//dvjYsuEAwOg0Dw6312q16t4wDzofJIYa1MEVOEj/1VyCZvQ8+O6wYk3HU70qSZ4pVr8R4zyybsBl0L7Xk+peRNwfdWMAAAAAAAAAAAAAAICehvEbS6PuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfX5wEAAP//90HVog==") bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000e2f62d08e1b228002b049081184f600800c7135033d110f91b9f0cdc3d03c5ff7d52555822c90bc186987a9211387f1d11417afd51929c3befb816231f3d14c2e172b6", @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4, 0x0, 0x400000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, &(0x7f0000000140)={0x77359400}) 1.584283135s ago: executing program 6 (id=7263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.477623267s ago: executing program 6 (id=7268): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0xd, 0x0, 0x0) (async, rerun: 64) r5 = fsmount(0xffffffffffffffff, 0x1, 0x70) (rerun: 64) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x4, 0x1, 0x2, {0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x1ff}}}, 0x32) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r3}, 0x38) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110009", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00'}, 0x10) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async) pipe(0x0) 1.419434848s ago: executing program 0 (id=7271): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) lseek(r1, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='workqueue_execute_end\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r3 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @none, 0x6, 0x1}, 0x5) syz_open_dev$evdev(&(0x7f0000000280), 0xba4, 0x4001) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000300)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_pgetevents(r8, 0x4, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000500)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x606c) 1.418493978s ago: executing program 6 (id=7273): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x4000000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) syz_clone(0x800200, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$sg(0x0, 0x0, 0x8002) write$sndseq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x8, 0x0, 0x3, 0x1000}]}) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}], 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000d80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") syz_open_dev$usbmon(&(0x7f00000000c0), 0xcfae, 0x84102) socket$nl_generic(0x10, 0x3, 0x10) 1.29307356s ago: executing program 7 (id=7275): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000004040000040000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000002000100"/28], 0x50) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07b7ae2a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x8001, 0xfc, 0x1, 0x3, 0x6, 0xcb, 0x4}, 0x1c) dup3(r5, r4, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="4aef25c9fbafe81c9c2c76ee6b0d87c6ff03def5b0d3fd2cd7bcc332b4d0ffe08159f085c47ff81c942c8e9f4ace2d8ddc2547f6a21e2fe0da6dc952781301746beaf1f26479c4fcddb2eb9b27814e9f34c6fdbb830a9ae1222ef67d789f01ebebd9e32319d64859f145e7458c8ca99024"], 0x44}, 0x1, 0xba01}, 0x810) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$cont(0x7, r8, 0x1478, 0x350) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x70, 0x30, 0x1, 0xfffffffc, 0x0, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xffffffe0}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x9}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r10, &(0x7f0000000180)=""/46, 0x2e) ioctl$TIOCNXCL(r10, 0x540d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0xfffffffffffffe96, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x413, 0xfffffffc, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x7, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 1.29201861s ago: executing program 9 (id=7276): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x1) connect$tipc(r1, &(0x7f0000000280)=@name={0x1e, 0x2, 0xd8d923d5fd750706, {{0x1, 0x1}, 0x4}}, 0x10) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f00000005c0)=""/122, 0x63}, {&(0x7f0000000280)=""/170, 0xaa}, {&(0x7f0000000480)=""/14, 0xa}, {&(0x7f0000000380)=""/218, 0xdd}], 0x6, 0x2, 0x7ff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000001fc0)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) sched_setscheduler(r2, 0x0, &(0x7f0000000080)=0x800) sendto$inet6(r3, &(0x7f0000000500)="1d8cef25c905bce8651217212dbbe7477930bfa445f9d28c9c4191f5414088babdf5d0cf7f21adf928203d235e6f277468b7d51fb70e80e7d8464333d3a850fd704264737cdf3dbb42a97d1452155355a45c675c1cd4725cdfd1c51e9ba05122e409739270c344cd69c37a1e0600629115fd993f18145edc1ec59b30", 0x7c, 0x20000004, &(0x7f0000000580)={0xa, 0x4e20, 0xdc, @rand_addr=' \x01\x00'}, 0x1c) 1.201394521s ago: executing program 0 (id=7277): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xf0, 0x65, 0x3ff, 0x3, @mcast1, @remote, 0x701, 0x20, 0x7771, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000100672189f75487f37c0096f19ea527010027bd0100fddbdf2500000000a9f0a6b20e1275862c9e0a8ee3cfaf46dd", @ANYRES32=r4, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000003380)=ANY=[@ANYBLOB="b9162ac88f77ef00009be80aa3b8c02aad6b002e3a2179e1e96abf9906d2b16df5bc3908441d15a5ac122b1023e46b314e96cc237a0f1784981718ef1bc7a640da9aaf60d996432f308d2b7cbb6e73f91611cca5724851d1b91c6f6323a01800f3c01f144403cae9f3a0ad4a55d4ff8390504ef5ab525feb28162d5e6332a6063996bb621909453ca2ca995f0ff01bea3a4b4b9f3f211668b9949df16e453ba07829aaa22014863207740f8e2ca26403e587049801fac41bca13c936cab380b7b5d62990a5c662490622f1094214ee10f5cb59546e", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="440001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000014000200767863616e31000000000000000000000800030003000000"], 0x16b8}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4008080) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01030000000000a667001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 1.086489293s ago: executing program 0 (id=7279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x800}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.014763974s ago: executing program 0 (id=7281): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 905.801586ms ago: executing program 7 (id=7283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, &(0x7f0000000140), 0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000bc8d378048629c5f"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x400c4}, 0x4090) r8 = dup3(r4, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r7, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) 905.203826ms ago: executing program 7 (id=7284): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)='}', 0x1}], 0x1}, 0x0) sendmsg(r3, 0x0, 0x8000000) mkdir(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigtimedwait(0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0xe, &(0x7f0000000d80)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@block_validity}, {@jqfmt_vfsv1}], [{@uid_lt}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '*'}}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, 'ext4\x00'}}, {@obj_role={'obj_role', 0x3d, '*)!\'$-'}}, {@fsname={'fsname', 0x3d, '/proc/thread-self/attr/current\x00'}}, {@dont_measure}, {@appraise}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ustat(0x0, &(0x7f0000000000)) 880.424716ms ago: executing program 0 (id=7285): syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000020100)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/193, 0x4}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002080)=@deltfilter={0x700, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x6d0, 0x2, [@TCA_CGROUP_ACT={0x594, 0x1, [@m_ife={0x118, 0x19, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="1a660349bc80"}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x38, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x180000}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x61, 0x6, "2823ef7f8cce7b452367bde8ed7a39355dfdb0343f850b3985a101cfed1e44177ceace0728998ea26b8525133b9512d50d7742d1521091902ad0073d3184de7d46cecb687000c796756a92f84264fcd2589f4d3126c51826400def7f95"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x74, 0x1d, 0x0, 0x0, {{0xd}, {0x4}, {0x42, 0x6, "5e4b82fa6bb5523162200848d8eb7599fc6fc615523d90cd33671d49eee88e4eeadd0ec43e0d3bd231ad8ecd98b84978590cbcda403e40f93ce9acda1c9b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x6c, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0x35, 0x6, "72915eaf5b9e4f0962ea439e8a9b8a30853e2b6f50afcfecc55f594adb4d43e47ab5c9fac09f219774d8d1866d793c60e9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x14c, 0x14, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x30c9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x10000}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_LABELS={0x14, 0x7, "05f69c21bad9a7b931d318e721066da9"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "432f7e7276aa59500466c1379dcb1f14"}, @TCA_CT_MARK={0x8, 0x5, 0x7}]}, {0xd9, 0x6, "4ddd7f74de552c1d2d3d3a17c1c9552fa6a530faf5ae1fa4404c44b99ed66fcbc7553d7b14c2367aa854bc9a208a11417182f365835496b9361d4a6299c11d11c0a42e25ac64c970a687c618b2e07b0bab055c5e7bb6fc23176e832f66fa612ba1dbbd2b5fea4b633add67af10e114a73b559a880dfb41fabf56533fc75a757e99ae017f5afa0e877c90512a596c75ed55549fa4e8bb30b3cce9880b3f93b6f4e9241b528b5a78caccc970d939536d8a2fed92bd225178d2d39f5fb657f73c75a9f54c333a9cc04f20c83079280114524ca358a3b7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0x124, 0xd, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x86dd}, @TCA_MPLS_PROTO={0x6, 0x4, 0x201}, @TCA_MPLS_PROTO={0x6, 0x4, 0x19}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x30bb, 0x9, 0x3, 0x4, 0x7d03}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x559, 0x8, 0x8, 0x989, 0x8001}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0x96, 0x6, "dd0956acd686f23c6df8f6107886d9ded0580bdf82b8aee8648a6e0337ce9ed01c861b17ec643e48aabfc0e6c68fd69e80904253e0effffd42e916b140cc52960c82934667c5809b1f293823da75a144cb439e938e9577b661b74a3a8f9bfc2e91a834b75cf2edf49915c6815165016357266ee37c15cfa04f678b694f9e6625daf9f771890d2102deebb8d02922656c0006"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x128, 0x16, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x2, 0x3, 0x5, 0x7}, 0x1}}]}, {0xbe, 0x6, "ae511d8fc8b3b8fe250c9a951584dc808bbbf50f3156f0cdf7a779fc339c9ea41ce904a215d4e45494cc7b224e06e815e2c6b510dff4fafdbb67e955f454134f2abe67fc3b6017e49ac18a02aa342ec658b767af60424cac911a0910d6b9efda0895178e7879198900fcf76a7d17a1b74a18ab345eabed878809730181cccb2747069ff56fe42323b4cff94283dccc27988bdd355e9bd1a0c29b49183ab9874904f23e057381c51dd839ae9ca9ea98dda85bcb8c9e050b39f3b8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_CGROUP_ACT={0x138, 0x1, [@m_bpf={0x134, 0xd, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x7, 0x3, 0x2, 0xffffff9e}, {0x0, 0x40, 0x8, 0x3}, {0x4, 0x0, 0x0, 0x10001}, {0x6, 0xd, 0x21, 0x40}, {0xbd, 0x4, 0x8, 0x8}, {0x3, 0x9, 0x3, 0x9}, {0x5, 0x0, 0x9, 0xfff}]}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file1\x00'}]}, {0xb5, 0x6, "ddba55a7733d16187a14c6916076cd3d3221a1fa94f3955b289a339de2286f68e9b3bfb62c5c9bff81fa8b75f36f8f4ec6d285555503a11f92083c0e009127190ec91b974f757fb9423c919b032efc665140b5ac5326eccb6d0b70bc712b12527467a23394873384e1969e4a7a145c46d71eb9db39034d8cf3126335a6075fd6e3214fb2fc2fbfbcd3c0747e15d6084e433a364389759b04a65688962bc861baabc582f1b0a80c06ddc31f6f76ced7fa5d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x700}}, 0x50) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000008000000000c0000000c0003800400130004000380180001801400020076657468315f746f5f68737200000000"], 0x38}}, 0x0) timerfd_create(0x8, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) 656.028439ms ago: executing program 4 (id=7287): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 655.352019ms ago: executing program 4 (id=7288): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlockall(0x7) 593.24434ms ago: executing program 7 (id=7289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 592.166091ms ago: executing program 4 (id=7290): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xf0, 0x65, 0x3ff, 0x3, @mcast1, @remote, 0x701, 0x20, 0x7771, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000100672189f75487f37c0096f19ea527010027bd0100fddbdf2500000000a9f0a6b20e1275862c9e0a8ee3cfaf46dd", @ANYRES32=r4, @ANYBLOB="8014000004210000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000003380)=ANY=[@ANYBLOB="b9162ac88f77ef00009be80aa3b8c02aad6b002e3a2179e1e96abf9906d2b16df5bc3908441d15a5ac122b1023e46b314e96cc237a0f1784981718ef1bc7a640da9aaf60d996432f308d2b7cbb6e73f91611cca5724851d1b91c6f6323a01800f3c01f144403cae9f3a0ad4a55d4ff8390504ef5ab525feb28162d5e6332a6063996bb621909453ca2ca995f0ff01bea3a4b4b9f3f211668b9949df16e453ba07829aaa22014863207740f8e2ca26403e587049801fac41bca13c936cab380b7b5d62990a5c662490622f1094214ee10f5cb59546e", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="440001801400020076657468305f746f5f6873720000000008000100", @ANYRES32=r4, @ANYBLOB="080003000300000014000200767863616e31000000000000000000000800030003000000"], 0x16b8}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4008080) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10001}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xa2980, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01030000000000a667001c00000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x20040005}, 0x40040) 570.639961ms ago: executing program 7 (id=7291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 551.325381ms ago: executing program 7 (id=7292): ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x8, 0x9, 0x4000, 0xf, 0xf, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 410.363603ms ago: executing program 9 (id=7293): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) setreuid(0x0, 0xee01) unshare(0x60480) 409.516873ms ago: executing program 4 (id=7294): bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d000000180100002069852500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb502000008000000b703000000000000850000007000000095e5bf379a7fdbca6f91d28d7b865eb3e2791e60bd7943e9047bdf7dfa22b4c6ae20f2929f2aeb928bfcfaa52e9cad88ed467831a309a9d5b00ef543bffa6c6fca9aa34420e9f5953c18073cdf45f7f469f2781e51da402fc246c6a70e5890bc21b04c2367c2c5f3038551d05615f4d45d777356"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000014000100fffffffbffdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="1400010000000000000000000000000000000001"], 0x2c}}, 0x24005040) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 406.795974ms ago: executing program 9 (id=7295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) lseek(r1, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='workqueue_execute_end\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r3 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @none, 0x6, 0x1}, 0x5) syz_open_dev$evdev(&(0x7f0000000280), 0xba4, 0x4001) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000300)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_pgetevents(r8, 0x4, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000500)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x606c) 257.999606ms ago: executing program 4 (id=7296): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 214.668047ms ago: executing program 4 (id=7297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) lseek(r1, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000540)='workqueue_execute_end\x00', r2}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r3 = open(&(0x7f00009e1000)='./file1\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000180)='./file1\x00') syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x4d, 0x0, @wg=@response={0x2, 0x0, 0x0, "eaf12af8010d489432cc01f9f39c6526ece5d2603725b9cabfc2c9f4513d3dfb", "201f3a70a41ff6c2fca06a9bd768d5f1", {"77c14a5cd359c721417b883ecdcaba15", "9514b06796dbf2ea9e520f1475c8f65b"}}}}}}}}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @none, 0x6, 0x1}, 0x5) syz_open_dev$evdev(&(0x7f0000000280), 0xba4, 0x4001) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x8, &(0x7f0000000300)=0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_pgetevents(r8, 0x4, 0x4, &(0x7f00000006c0)=[{}, {}, {}, {}], &(0x7f0000000500)={0x0, 0x989680}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x606c) 197.625727ms ago: executing program 9 (id=7298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) 85.513069ms ago: executing program 9 (id=7299): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000000c0)=ANY=[], 0x361, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x34, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000800)={0x2}, 0x4) close(r1) 34.716969ms ago: executing program 9 (id=7300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x627}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbea}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x8917, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) 0s ago: executing program 0 (id=7301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x18) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlockall(0x7) kernel console output (not intermixed with test programs): W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 426.515830][T24281] Tainted: [W]=WARN [ 426.515838][T24281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.515851][T24281] Call Trace: [ 426.515858][T24281] [ 426.515866][T24281] __dump_stack+0x1d/0x30 [ 426.515888][T24281] dump_stack_lvl+0xe8/0x140 [ 426.515977][T24281] dump_stack+0x15/0x1b [ 426.516054][T24281] should_fail_ex+0x265/0x280 [ 426.516087][T24281] should_failslab+0x8c/0xb0 [ 426.516110][T24281] kmem_cache_alloc_noprof+0x50/0x310 [ 426.516131][T24281] ? __anon_vma_prepare+0xcd/0x2f0 [ 426.516181][T24281] __anon_vma_prepare+0xcd/0x2f0 [ 426.516209][T24281] do_wp_page+0x1838/0x2400 [ 426.516232][T24281] ? __rcu_read_lock+0x37/0x50 [ 426.516266][T24281] handle_mm_fault+0x77d/0x2be0 [ 426.516290][T24281] ? mas_walk+0xf2/0x120 [ 426.516341][T24281] do_user_addr_fault+0x636/0x1090 [ 426.516445][T24281] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 426.516480][T24281] exc_page_fault+0x62/0xa0 [ 426.516580][T24281] asm_exc_page_fault+0x26/0x30 [ 426.516597][T24281] RIP: 0033:0x7f87fd620ca3 [ 426.516609][T24281] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 426.516708][T24281] RSP: 002b:00007f87fbdc64a0 EFLAGS: 00010202 [ 426.516745][T24281] RAX: 0000000000000400 RBX: 00007f87fbdc6540 RCX: 00007f87f39a7000 [ 426.516756][T24281] RDX: 00007f87fbdc66e0 RSI: 0000000000000009 RDI: 00007f87fbdc65e0 [ 426.516766][T24281] RBP: 00000000000000f9 R08: 0000000000000009 R09: 00000000000001aa [ 426.516776][T24281] R10: 00000000000001c0 R11: 00007f87fbdc6540 R12: 0000000000000001 [ 426.516786][T24281] R13: 00007f87fd7fc3a0 R14: 0000000000000020 R15: 00007f87fbdc65e0 [ 426.516804][T24281] [ 426.516815][T24281] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 426.712479][T24281] loop7: detected capacity change from 0 to 512 [ 426.719430][T24281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.740663][T24281] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.753197][T24281] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.765428][T24281] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.873978][T24290] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6682'. [ 426.882942][T24290] netlink: 'syz.7.6682': attribute type 18 has an invalid length. [ 426.890849][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6682'. [ 426.907176][T24290] loop7: detected capacity change from 0 to 512 [ 426.932128][T24175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.941447][T24175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.949516][T24290] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 426.957567][T24290] EXT4-fs (loop7): orphan cleanup on readonly fs [ 426.965383][T24175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.975398][T24175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.982364][T24290] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 427.002296][T24290] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 427.017151][T24290] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6682: bg 0: block 40: padding at end of block bitmap is not set [ 427.074286][T24175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.081704][T24290] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 427.094464][T24290] EXT4-fs (loop7): 1 truncate cleaned up [ 427.101701][T24300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6683'. [ 427.118518][T24175] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.131363][T24290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.145948][T24300] vlan2: entered promiscuous mode [ 427.151042][T24300] bridge0: entered promiscuous mode [ 427.169443][T12760] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.176567][T12760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.185906][T12760] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.192979][T12760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.228412][T24175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.238961][T24175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.254910][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.266678][T24302]  speed is unknown, defaulting to 1000 [ 427.274179][T24302] lo speed is unknown, defaulting to 1000 [ 427.310519][T24307] FAULT_INJECTION: forcing a failure. [ 427.310519][T24307] name failslab, interval 1, probability 0, space 0, times 0 [ 427.323280][T24307] CPU: 1 UID: 0 PID: 24307 Comm: syz.7.6685 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 427.323316][T24307] Tainted: [W]=WARN [ 427.323396][T24307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.323427][T24307] Call Trace: [ 427.323434][T24307] [ 427.323442][T24307] __dump_stack+0x1d/0x30 [ 427.323463][T24307] dump_stack_lvl+0xe8/0x140 [ 427.323480][T24307] dump_stack+0x15/0x1b [ 427.323494][T24307] should_fail_ex+0x265/0x280 [ 427.323546][T24307] should_failslab+0x8c/0xb0 [ 427.323572][T24307] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 427.323615][T24307] ? sidtab_sid2str_get+0xa0/0x130 [ 427.323657][T24307] kmemdup_noprof+0x2b/0x70 [ 427.323675][T24307] sidtab_sid2str_get+0xa0/0x130 [ 427.323693][T24307] security_sid_to_context_core+0x1eb/0x2e0 [ 427.323713][T24307] security_sid_to_context+0x27/0x40 [ 427.323769][T24307] avc_audit_post_callback+0x10f/0x520 [ 427.323799][T24307] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 427.323824][T24307] common_lsm_audit+0x1b8/0x230 [ 427.323905][T24307] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 427.323932][T24307] slow_avc_audit+0x104/0x140 [ 427.323955][T24307] avc_has_perm+0x128/0x150 [ 427.324041][T24307] selinux_socket_sendmsg+0x175/0x1b0 [ 427.324113][T24307] security_socket_sendmsg+0x48/0x80 [ 427.324170][T24307] __sock_sendmsg+0x30/0x180 [ 427.324189][T24307] ____sys_sendmsg+0x31e/0x4e0 [ 427.324276][T24307] ___sys_sendmsg+0x17b/0x1d0 [ 427.324381][T24307] __x64_sys_sendmsg+0xd4/0x160 [ 427.324410][T24307] x64_sys_call+0x2999/0x2fb0 [ 427.324479][T24307] do_syscall_64+0xd2/0x200 [ 427.324505][T24307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.324532][T24307] ? clear_bhb_loop+0x40/0x90 [ 427.324555][T24307] ? clear_bhb_loop+0x40/0x90 [ 427.324621][T24307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.324638][T24307] RIP: 0033:0x7f87fd75e929 [ 427.324654][T24307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.324673][T24307] RSP: 002b:00007f87fbdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.324772][T24307] RAX: ffffffffffffffda RBX: 00007f87fd985fa0 RCX: 00007f87fd75e929 [ 427.324785][T24307] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 427.324799][T24307] RBP: 00007f87fbdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 427.324886][T24307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.324896][T24307] R13: 0000000000000000 R14: 00007f87fd985fa0 R15: 00007ffe9daf6de8 [ 427.324911][T24307] [ 427.623398][T24175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.638990][T24320] loop7: detected capacity change from 0 to 128 [ 427.755918][T24331] loop4: detected capacity change from 0 to 2048 [ 427.776735][T24320] bio_check_eod: 141646 callbacks suppressed [ 427.776764][T24320] syz.7.6689: attempt to access beyond end of device [ 427.776764][T24320] loop7: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 427.800802][T24320] syz.7.6689: attempt to access beyond end of device [ 427.800802][T24320] loop7: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 427.826735][T24331] sel_write_load: 2 callbacks suppressed [ 427.826757][T24331] SELinux: failed to load policy [ 427.831576][T24320] syz.7.6689: attempt to access beyond end of device [ 427.831576][T24320] loop7: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 427.854638][T24320] buffer_io_error: 141274 callbacks suppressed [ 427.854673][T24320] Buffer I/O error on dev loop7, logical block 142, lost async page write [ 427.870337][T24175] veth0_vlan: entered promiscuous mode [ 427.873922][T24175] veth1_vlan: entered promiscuous mode [ 427.883254][T24320] syz.7.6689: attempt to access beyond end of device [ 427.883254][T24320] loop7: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 427.899860][T24320] Buffer I/O error on dev loop7, logical block 143, lost async page write [ 427.909602][T24320] syz.7.6689: attempt to access beyond end of device [ 427.909602][T24320] loop7: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 427.923503][T24320] Buffer I/O error on dev loop7, logical block 144, lost async page write [ 427.950281][T24343] loop4: detected capacity change from 0 to 2048 [ 427.950423][T24175] veth0_macvtap: entered promiscuous mode [ 427.965865][T24320] syz.7.6689: attempt to access beyond end of device [ 427.965865][T24320] loop7: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 427.980084][T24320] Buffer I/O error on dev loop7, logical block 145, lost async page write [ 428.008910][T24175] veth1_macvtap: entered promiscuous mode [ 428.014929][T24320] syz.7.6689: attempt to access beyond end of device [ 428.014929][T24320] loop7: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 428.025797][T24175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.038712][T24320] Buffer I/O error on dev loop7, logical block 146, lost async page write [ 428.056328][T24320] syz.7.6689: attempt to access beyond end of device [ 428.056328][T24320] loop7: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 428.075838][T24320] Buffer I/O error on dev loop7, logical block 147, lost async page write [ 428.085001][T24320] syz.7.6689: attempt to access beyond end of device [ 428.085001][T24320] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 428.086503][T24175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.105853][T24320] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 428.120224][T24320] syz.7.6689: attempt to access beyond end of device [ 428.120224][T24320] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 428.134492][T24320] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 428.155575][T24175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.164411][T24175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.173277][T24175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.182065][T24175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.193878][T24352] loop4: detected capacity change from 0 to 2048 [ 428.210170][T24352] loop4: detected capacity change from 0 to 1024 [ 428.217201][T24352] EXT4-fs: Ignoring removed nobh option [ 428.223078][T24320] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 428.227861][T24352] EXT4-fs: Ignoring removed bh option [ 428.233651][T24320] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 428.315236][T24357] FAULT_INJECTION: forcing a failure. [ 428.315236][T24357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.328449][T24357] CPU: 0 UID: 0 PID: 24357 Comm: syz.7.6698 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 428.328491][T24357] Tainted: [W]=WARN [ 428.328500][T24357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.328516][T24357] Call Trace: [ 428.328524][T24357] [ 428.328530][T24357] __dump_stack+0x1d/0x30 [ 428.328625][T24357] dump_stack_lvl+0xe8/0x140 [ 428.328651][T24357] dump_stack+0x15/0x1b [ 428.328673][T24357] should_fail_ex+0x265/0x280 [ 428.328772][T24357] should_fail+0xb/0x20 [ 428.328802][T24357] should_fail_usercopy+0x1a/0x20 [ 428.328843][T24357] _copy_from_user+0x1c/0xb0 [ 428.328869][T24357] memdup_user+0x5e/0xd0 [ 428.328931][T24357] security_setselfattr+0x8d/0x260 [ 428.328971][T24357] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 428.329062][T24357] x64_sys_call+0x2b0f/0x2fb0 [ 428.329090][T24357] do_syscall_64+0xd2/0x200 [ 428.329208][T24357] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 428.329240][T24357] ? clear_bhb_loop+0x40/0x90 [ 428.329282][T24357] ? clear_bhb_loop+0x40/0x90 [ 428.329303][T24357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.329358][T24357] RIP: 0033:0x7f87fd75e929 [ 428.329443][T24357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.329458][T24357] RSP: 002b:00007f87fbdc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 428.329473][T24357] RAX: ffffffffffffffda RBX: 00007f87fd985fa0 RCX: 00007f87fd75e929 [ 428.329487][T24357] RDX: 0000000000000023 RSI: 0000200000000280 RDI: 0000000000000064 [ 428.329500][T24357] RBP: 00007f87fbdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 428.329514][T24357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.329525][T24357] R13: 0000000000000000 R14: 00007f87fd985fa0 R15: 00007ffe9daf6de8 [ 428.329591][T24357] [ 428.566797][T24362] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6699'. [ 428.575959][T24362] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 428.621510][T24360] loop6: detected capacity change from 0 to 8192 [ 428.675643][T24370] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 428.679432][T24375] FAULT_INJECTION: forcing a failure. [ 428.679432][T24375] name failslab, interval 1, probability 0, space 0, times 0 [ 428.682171][T24370] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 428.682331][T24370] vhci_hcd vhci_hcd.0: Device attached [ 428.694875][T24375] CPU: 1 UID: 0 PID: 24375 Comm: syz.6.6703 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 428.694963][T24375] Tainted: [W]=WARN [ 428.694971][T24375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.695050][T24375] Call Trace: [ 428.695058][T24375] [ 428.695064][T24375] __dump_stack+0x1d/0x30 [ 428.695083][T24375] dump_stack_lvl+0xe8/0x140 [ 428.695164][T24375] dump_stack+0x15/0x1b [ 428.695184][T24375] should_fail_ex+0x265/0x280 [ 428.695219][T24375] ? cma_alloc_port+0x3d/0x2f0 [ 428.695241][T24375] should_failslab+0x8c/0xb0 [ 428.695268][T24375] __kmalloc_cache_noprof+0x4c/0x320 [ 428.695377][T24375] cma_alloc_port+0x3d/0x2f0 [ 428.695412][T24375] rdma_bind_addr_dst+0xa7f/0x1cf0 [ 428.695457][T24375] rdma_resolve_addr+0x424/0x1340 [ 428.695494][T24375] ? __kmalloc_cache_noprof+0x189/0x320 [ 428.695563][T24375] ? __pfx_p9_cm_event_handler+0x10/0x10 [ 428.695638][T24375] rdma_create_trans+0x666/0x9e0 [ 428.695665][T24375] ? move_to_new_folio+0x278/0x390 [ 428.695705][T24375] p9_client_create+0x608/0xbc0 [ 428.695744][T24375] v9fs_session_init+0xf7/0xde0 [ 428.695844][T24375] ? obj_cgroup_charge_account+0x122/0x1a0 [ 428.695878][T24375] ? __rcu_read_unlock+0x4f/0x70 [ 428.695903][T24375] ? should_fail_ex+0xdb/0x280 [ 428.695937][T24375] ? v9fs_mount+0x51/0x590 [ 428.696001][T24375] ? should_failslab+0x8c/0xb0 [ 428.696027][T24375] ? __kmalloc_cache_noprof+0x189/0x320 [ 428.696140][T24375] v9fs_mount+0x67/0x590 [ 428.696172][T24375] ? __pfx_v9fs_mount+0x10/0x10 [ 428.696236][T24375] legacy_get_tree+0x78/0xd0 [ 428.696273][T24375] vfs_get_tree+0x57/0x1d0 [ 428.696354][T24375] do_new_mount+0x207/0x680 [ 428.696394][T24375] path_mount+0x4a4/0xb20 [ 428.696431][T24375] ? user_path_at+0x109/0x130 [ 428.696462][T24375] __se_sys_mount+0x28f/0x2e0 [ 428.696573][T24375] ? fput+0x8f/0xc0 [ 428.696602][T24375] __x64_sys_mount+0x67/0x80 [ 428.696712][T24375] x64_sys_call+0xd36/0x2fb0 [ 428.696736][T24375] do_syscall_64+0xd2/0x200 [ 428.696802][T24375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 428.696833][T24375] ? clear_bhb_loop+0x40/0x90 [ 428.696894][T24375] ? clear_bhb_loop+0x40/0x90 [ 428.696920][T24375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.696945][T24375] RIP: 0033:0x7f10ba12e929 [ 428.696962][T24375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.697033][T24375] RSP: 002b:00007f10b8797038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.697054][T24375] RAX: ffffffffffffffda RBX: 00007f10ba355fa0 RCX: 00007f10ba12e929 [ 428.697069][T24375] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 428.697084][T24375] RBP: 00007f10b8797090 R08: 0000200000000300 R09: 0000000000000000 [ 428.697098][T24375] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 428.697113][T24375] R13: 0000000000000000 R14: 00007f10ba355fa0 R15: 00007ffd0b437658 [ 428.697134][T24375] [ 429.018746][T24370] loop4: detected capacity change from 0 to 512 [ 429.025400][T24370] EXT4-fs: Ignoring removed oldalloc option [ 429.132565][T24385] loop7: detected capacity change from 0 to 512 [ 429.139167][T24385] EXT4-fs: Ignoring removed bh option [ 429.148542][T24385] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 429.157627][T24385] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 429.167749][T24385] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 429.177197][T24385] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 429.185380][ T3407] vhci_hcd: vhci_device speed not set [ 429.198427][T24385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.243386][T24372] vhci_hcd: connection closed [ 429.245203][T24388] loop6: detected capacity change from 0 to 2048 [ 429.247840][ T3407] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 429.267842][T12756] vhci_hcd: stop threads [ 429.272114][T12756] vhci_hcd: release socket [ 429.276549][T12756] vhci_hcd: disconnect device [ 429.292050][ T3407] usb 9-1: enqueue for inactive port 0 [ 429.292639][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.297535][ T3407] usb 9-1: enqueue for inactive port 0 [ 429.297571][ T3407] usb 9-1: enqueue for inactive port 0 [ 429.367753][T24393] FAULT_INJECTION: forcing a failure. [ 429.367753][T24393] name failslab, interval 1, probability 0, space 0, times 0 [ 429.380506][T24393] CPU: 0 UID: 0 PID: 24393 Comm: syz.7.6712 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 429.380548][T24393] Tainted: [W]=WARN [ 429.380555][T24393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.380570][T24393] Call Trace: [ 429.380576][T24393] [ 429.380584][T24393] __dump_stack+0x1d/0x30 [ 429.380626][T24393] dump_stack_lvl+0xe8/0x140 [ 429.380647][T24393] dump_stack+0x15/0x1b [ 429.380665][T24393] should_fail_ex+0x265/0x280 [ 429.380698][T24393] should_failslab+0x8c/0xb0 [ 429.380724][T24393] kmem_cache_alloc_noprof+0x50/0x310 [ 429.380817][T24393] ? security_file_alloc+0x32/0x100 [ 429.380905][T24393] security_file_alloc+0x32/0x100 [ 429.380973][T24393] init_file+0x5c/0x1d0 [ 429.380999][T24393] alloc_empty_file+0x8b/0x200 [ 429.381025][T24393] path_openat+0x68/0x2170 [ 429.381052][T24393] ? __rcu_read_unlock+0x34/0x70 [ 429.381135][T24393] ? filemap_map_pages+0x9be/0xab0 [ 429.381174][T24393] ? css_rstat_updated+0xcd/0x5b0 [ 429.381239][T24393] do_filp_open+0x109/0x230 [ 429.381320][T24393] do_sys_openat2+0xa6/0x110 [ 429.381351][T24393] __x64_sys_openat+0xf2/0x120 [ 429.381381][T24393] x64_sys_call+0x1af/0x2fb0 [ 429.381404][T24393] do_syscall_64+0xd2/0x200 [ 429.381476][T24393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 429.381558][T24393] ? clear_bhb_loop+0x40/0x90 [ 429.381577][T24393] ? clear_bhb_loop+0x40/0x90 [ 429.381600][T24393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.381750][T24393] RIP: 0033:0x7f87fd75d290 [ 429.381767][T24393] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 429.381787][T24393] RSP: 002b:00007f87fbdc6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 429.381886][T24393] RAX: ffffffffffffffda RBX: 0000000000024000 RCX: 00007f87fd75d290 [ 429.381901][T24393] RDX: 0000000000024000 RSI: 00007f87fbdc6c10 RDI: 00000000ffffff9c [ 429.381915][T24393] RBP: 00007f87fbdc6c10 R08: 0000000000000000 R09: 00236e6f6d627375 [ 429.382006][T24393] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 429.382020][T24393] R13: 0000000000000000 R14: 00007f87fd985fa0 R15: 00007ffe9daf6de8 [ 429.382067][T24393] [ 429.382110][ T3407] vhci_hcd: vhci_device speed not set [ 429.691985][T24403] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6717'. [ 429.736332][T24417] loop9: detected capacity change from 0 to 128 [ 429.799649][T24430] loop7: detected capacity change from 0 to 2048 [ 429.866623][T24432] SELinux: failed to load policy [ 429.877430][T24430] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 429.887486][T24430] SELinux: failed to load policy [ 429.930762][T24439] netlink: 52 bytes leftover after parsing attributes in process `syz.9.6725'. [ 429.958766][T24441] loop4: detected capacity change from 0 to 128 [ 430.010575][T24447] loop7: detected capacity change from 0 to 164 [ 430.035755][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 430.035769][ T29] audit: type=1400 audit(2000000335.323:25945): avc: denied { cpu } for pid=24446 comm="syz.7.6730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 430.085287][T24455] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6733'. [ 430.109141][ T29] audit: type=1326 audit(2000000335.403:25946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.133363][ T29] audit: type=1326 audit(2000000335.403:25947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.156995][ T29] audit: type=1326 audit(2000000335.403:25948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.180790][ T29] audit: type=1326 audit(2000000335.403:25949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.204378][ T29] audit: type=1326 audit(2000000335.403:25950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.228271][ T29] audit: type=1326 audit(2000000335.403:25951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.251853][ T29] audit: type=1326 audit(2000000335.403:25952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.275735][ T29] audit: type=1326 audit(2000000335.403:25953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.299439][ T29] audit: type=1326 audit(2000000335.403:25954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24452 comm="syz.4.6732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 430.386661][T24474] loop9: detected capacity change from 0 to 2048 [ 430.394601][T24468] SELinux: failed to load policy [ 430.405873][T24474] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 430.418742][T24474] SELinux: failed to load policy [ 430.638681][T24495] Cannot find add_set index 0 as target [ 431.266309][T24505] loop7: detected capacity change from 0 to 512 [ 431.284138][T24505] ext4: Unknown parameter 'subj_user' [ 431.313360][T24507] loop4: detected capacity change from 0 to 2048 [ 431.388399][T24507] SELinux: failed to load policy [ 431.430013][T24510] loop4: detected capacity change from 0 to 2048 [ 431.524624][T24510] SELinux: failed to load policy [ 431.588322][T24514] loop7: detected capacity change from 0 to 128 [ 431.601983][T24515] loop4: detected capacity change from 0 to 512 [ 431.609639][T24515] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.643897][T24514] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 431.651799][T24514] FAT-fs (loop7): Filesystem has been set read-only [ 431.670046][T24514] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 431.678063][T24514] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 431.772170][T24522] loop9: detected capacity change from 0 to 128 [ 431.780147][T24522] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 431.788158][T24522] FAT-fs (loop9): Filesystem has been set read-only [ 431.795733][T24522] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 431.803608][T24522] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 432.421041][T24532] SELinux: failed to load policy [ 432.454200][T24534] loop6: detected capacity change from 0 to 8192 [ 432.489270][T24534] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 432.675415][T24547] loop9: detected capacity change from 0 to 2048 [ 432.709305][T24553] Cannot find add_set index 0 as target [ 432.716957][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x4 [ 432.724710][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x2 [ 432.744044][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.751747][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.759434][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.767191][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.774910][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.782671][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.790376][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.798078][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.805743][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.813420][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.821100][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.828845][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.836537][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.844290][ T3545] hid-generic 0000:3000000:0000.0032: unknown main item tag 0x0 [ 432.844828][T24557] 9pnet_fd: Insufficient options for proto=fd [ 432.859199][ T3545] hid-generic 0000:3000000:0000.0032: hidraw0: HID v0.00 Device [sy] on syz0 [ 432.875726][T24547] SELinux: failed to load policy [ 432.943264][T24550]  speed is unknown, defaulting to 1000 [ 432.960611][T24550] lo speed is unknown, defaulting to 1000 [ 432.980575][T24563] loop9: detected capacity change from 0 to 7 [ 433.138657][T24567] netlink: 'syz.7.6775': attribute type 27 has an invalid length. [ 433.618261][T24572] loop9: detected capacity change from 0 to 2048 [ 433.619690][T24567] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.631980][T24567] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.709528][T24572] SELinux: failed to load policy [ 433.836227][T24576] loop9: detected capacity change from 0 to 128 [ 433.875162][T24576] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 433.883070][T24576] FAT-fs (loop9): Filesystem has been set read-only [ 433.889776][T24576] bio_check_eod: 90666 callbacks suppressed [ 433.889795][T24576] gtp: attempt to access beyond end of device [ 433.889795][T24576] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 433.909719][T24576] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 433.917563][T24576] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 433.927869][T24576] gtp: attempt to access beyond end of device [ 433.927869][T24576] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 433.942179][T24576] gtp: attempt to access beyond end of device [ 433.942179][T24576] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 433.955742][T24577] syz.9.6778: attempt to access beyond end of device [ 433.955742][T24577] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 433.969134][T24577] buffer_io_error: 68134 callbacks suppressed [ 433.969151][T24577] Buffer I/O error on dev loop9, logical block 2065, async page read [ 433.985253][T24577] syz.9.6778: attempt to access beyond end of device [ 433.985253][T24577] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 433.998577][T24577] Buffer I/O error on dev loop9, logical block 2066, async page read [ 434.008351][T24577] syz.9.6778: attempt to access beyond end of device [ 434.008351][T24577] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 434.021732][T24577] Buffer I/O error on dev loop9, logical block 2067, async page read [ 434.032675][T24577] syz.9.6778: attempt to access beyond end of device [ 434.032675][T24577] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 434.045974][T24577] Buffer I/O error on dev loop9, logical block 2068, async page read [ 434.055750][T24577] syz.9.6778: attempt to access beyond end of device [ 434.055750][T24577] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 434.069098][T24577] Buffer I/O error on dev loop9, logical block 2069, async page read [ 434.077463][T24577] syz.9.6778: attempt to access beyond end of device [ 434.077463][T24577] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 434.090832][T24577] Buffer I/O error on dev loop9, logical block 2070, async page read [ 434.099104][T24577] syz.9.6778: attempt to access beyond end of device [ 434.099104][T24577] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 434.112394][T24577] Buffer I/O error on dev loop9, logical block 2071, async page read [ 434.120838][T24577] Buffer I/O error on dev loop9, logical block 2072, async page read [ 434.130116][T24576] Buffer I/O error on dev loop9, logical block 2065, async page read [ 434.139820][T24576] Buffer I/O error on dev loop9, logical block 2066, async page read [ 434.177899][T24579] loop4: detected capacity change from 0 to 128 [ 434.203090][T24581] loop4: detected capacity change from 0 to 128 [ 434.233615][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x4 [ 434.241378][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x2 [ 434.251020][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.258870][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.266591][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.274308][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.282033][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.289755][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.297424][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.305141][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.312977][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.320669][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.328361][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.336024][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.343783][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.344913][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.351511][ T6426] hid-generic 0000:3000000:0000.0033: unknown main item tag 0x0 [ 434.367333][ T6426] hid-generic 0000:3000000:0000.0033: hidraw0: HID v0.00 Device [sy] on syz0 [ 434.395100][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.438005][T24586] loop4: detected capacity change from 0 to 2048 [ 434.535833][T24588] loop4: detected capacity change from 0 to 2048 [ 434.805995][T24597] loop9: detected capacity change from 0 to 128 [ 434.829882][T24599] loop4: detected capacity change from 0 to 128 [ 434.897252][T24597] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 434.905288][T24597] FAT-fs (loop9): Filesystem has been set read-only [ 434.917822][T24597] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 434.919455][T24567] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.925664][T24597] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 434.942970][T24567] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.951915][T24567] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.960878][T24567] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.065358][ T3545] lo speed is unknown, defaulting to 1000 [ 435.071184][ T3545] syz0: Port: 1 Link DOWN [ 435.100094][T24568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.114424][T24568] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.129234][T24568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.145348][T24608] loop4: detected capacity change from 0 to 2048 [ 435.207454][T24610] loop7: detected capacity change from 0 to 512 [ 435.218984][T24610] /dev/loop7: Can't open blockdev [ 435.226866][T24584] lo speed is unknown, defaulting to 1000 [ 435.232694][T24584] syz0: Port: 1 Link ACTIVE [ 435.250595][T24608] SELinux: failed to load policy [ 435.288580][T24613] FAULT_INJECTION: forcing a failure. [ 435.288580][T24613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.301661][T24613] CPU: 0 UID: 0 PID: 24613 Comm: syz.7.6795 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 435.301689][T24613] Tainted: [W]=WARN [ 435.301741][T24613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.301754][T24613] Call Trace: [ 435.301761][T24613] [ 435.301769][T24613] __dump_stack+0x1d/0x30 [ 435.301792][T24613] dump_stack_lvl+0xe8/0x140 [ 435.301814][T24613] dump_stack+0x15/0x1b [ 435.301832][T24613] should_fail_ex+0x265/0x280 [ 435.301880][T24613] should_fail+0xb/0x20 [ 435.301962][T24613] should_fail_usercopy+0x1a/0x20 [ 435.302055][T24613] _copy_to_user+0x20/0xa0 [ 435.302077][T24613] simple_read_from_buffer+0xb5/0x130 [ 435.302111][T24613] proc_fail_nth_read+0x100/0x140 [ 435.302186][T24613] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.302219][T24613] vfs_read+0x1a0/0x6f0 [ 435.302289][T24613] ? __rcu_read_unlock+0x4f/0x70 [ 435.302350][T24613] ? __fget_files+0x184/0x1c0 [ 435.302373][T24613] ksys_read+0xda/0x1a0 [ 435.302413][T24613] __x64_sys_read+0x40/0x50 [ 435.302442][T24613] x64_sys_call+0x2d77/0x2fb0 [ 435.302466][T24613] do_syscall_64+0xd2/0x200 [ 435.302493][T24613] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.302518][T24613] ? clear_bhb_loop+0x40/0x90 [ 435.302537][T24613] ? clear_bhb_loop+0x40/0x90 [ 435.302561][T24613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.302626][T24613] RIP: 0033:0x7f87fd75d33c [ 435.302642][T24613] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.302660][T24613] RSP: 002b:00007f87fbdc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.302677][T24613] RAX: ffffffffffffffda RBX: 00007f87fd985fa0 RCX: 00007f87fd75d33c [ 435.302692][T24613] RDX: 000000000000000f RSI: 00007f87fbdc70a0 RDI: 0000000000000004 [ 435.302706][T24613] RBP: 00007f87fbdc7090 R08: 0000000000000000 R09: 0000000000000000 [ 435.302764][T24613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.302773][T24613] R13: 0000000000000000 R14: 00007f87fd985fa0 R15: 00007ffe9daf6de8 [ 435.302789][T24613] [ 435.314052][T24615] loop4: detected capacity change from 0 to 2048 [ 435.590345][T24623] loop7: detected capacity change from 0 to 2048 [ 435.607801][T24623] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 435.647029][T24623] SELinux: failed to load policy [ 435.875125][T24640] loop7: detected capacity change from 0 to 2048 [ 435.883606][T24636] loop6: detected capacity change from 0 to 2048 [ 435.920567][T24644] loop4: detected capacity change from 0 to 128 [ 435.927417][T24640] EXT4-fs: Ignoring removed mblk_io_submit option [ 435.942050][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 435.942065][ T29] audit: type=1326 audit(2000000341.233:26086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa8c458e7 code=0x7ffc0000 [ 435.971884][ T29] audit: type=1326 audit(2000000341.233:26087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa8beab19 code=0x7ffc0000 [ 435.995380][ T29] audit: type=1326 audit(2000000341.233:26088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa8c4e929 code=0x7ffc0000 [ 436.019229][ T29] audit: type=1326 audit(2000000341.233:26089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa8c458e7 code=0x7ffc0000 [ 436.042937][ T29] audit: type=1326 audit(2000000341.233:26090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa8beab19 code=0x7ffc0000 [ 436.066503][ T29] audit: type=1326 audit(2000000341.233:26091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aa8c4e929 code=0x7ffc0000 [ 436.090169][ T29] audit: type=1326 audit(2000000341.233:26092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa8c458e7 code=0x7ffc0000 [ 436.113648][ T29] audit: type=1326 audit(2000000341.233:26093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa8beab19 code=0x7ffc0000 [ 436.137140][ T29] audit: type=1326 audit(2000000341.233:26094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8aa8c458e7 code=0x7ffc0000 [ 436.160695][ T29] audit: type=1326 audit(2000000341.233:26095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24645 comm="syz.9.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8aa8beab19 code=0x7ffc0000 [ 436.218291][T24640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.344848][T24662] loop9: detected capacity change from 0 to 2048 [ 436.354114][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6806'. [ 436.476042][T24640] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 436.522502][T24675] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6818'. [ 436.534795][T24672] random: crng reseeded on system resumption [ 436.541657][T24672] FAULT_INJECTION: forcing a failure. [ 436.541657][T24672] name failslab, interval 1, probability 0, space 0, times 0 [ 436.554280][T24672] CPU: 1 UID: 0 PID: 24672 Comm: syz.0.6817 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 436.554380][T24672] Tainted: [W]=WARN [ 436.554386][T24672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.554406][T24672] Call Trace: [ 436.554412][T24672] [ 436.554419][T24672] __dump_stack+0x1d/0x30 [ 436.554440][T24672] dump_stack_lvl+0xe8/0x140 [ 436.554517][T24672] dump_stack+0x15/0x1b [ 436.554533][T24672] should_fail_ex+0x265/0x280 [ 436.554626][T24672] ? dev_create_fw_entry+0x43/0xf0 [ 436.554656][T24672] should_failslab+0x8c/0xb0 [ 436.554677][T24672] __kmalloc_cache_noprof+0x4c/0x320 [ 436.554915][T24672] ? __pfx_fw_name_devm_release+0x10/0x10 [ 436.554944][T24672] dev_create_fw_entry+0x43/0xf0 [ 436.555089][T24672] ? __pfx_devm_name_match+0x10/0x10 [ 436.555119][T24672] devres_for_each_res+0xfc/0x160 [ 436.555144][T24672] ? __pfx_devm_name_match+0x10/0x10 [ 436.555226][T24672] ? __pfx_dev_create_fw_entry+0x10/0x10 [ 436.555331][T24672] dev_cache_fw_image+0x62/0x270 [ 436.555360][T24672] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 436.555391][T24672] dpm_for_each_dev+0x5d/0xa0 [ 436.555506][T24672] ? __pfx_fw_pm_notify+0x10/0x10 [ 436.555535][T24672] fw_pm_notify+0x164/0x1a0 [ 436.555563][T24672] ? __pfx_autoremove_wake_function+0x10/0x10 [ 436.555635][T24672] notifier_call_chain_robust+0x77/0x350 [ 436.555731][T24672] blocking_notifier_call_chain_robust+0x50/0x80 [ 436.555767][T24672] pm_notifier_call_chain_robust+0x2c/0x60 [ 436.555815][T24672] snapshot_open+0x120/0x270 [ 436.555844][T24672] ? __pfx_snapshot_open+0x10/0x10 [ 436.555896][T24672] misc_open+0x1d3/0x200 [ 436.555918][T24672] chrdev_open+0x2e8/0x3a0 [ 436.556016][T24672] do_dentry_open+0x646/0xa20 [ 436.556040][T24672] ? __pfx_chrdev_open+0x10/0x10 [ 436.556081][T24672] vfs_open+0x37/0x1e0 [ 436.556104][T24672] path_openat+0x1c5e/0x2170 [ 436.556143][T24672] do_filp_open+0x109/0x230 [ 436.556190][T24672] do_sys_openat2+0xa6/0x110 [ 436.556280][T24672] __x64_sys_openat+0xf2/0x120 [ 436.556361][T24672] x64_sys_call+0x1af/0x2fb0 [ 436.556415][T24672] do_syscall_64+0xd2/0x200 [ 436.556481][T24672] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 436.556508][T24672] ? clear_bhb_loop+0x40/0x90 [ 436.556569][T24672] ? clear_bhb_loop+0x40/0x90 [ 436.556592][T24672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.556658][T24672] RIP: 0033:0x7f561d80e929 [ 436.556673][T24672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.556692][T24672] RSP: 002b:00007f561be77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.556711][T24672] RAX: ffffffffffffffda RBX: 00007f561da35fa0 RCX: 00007f561d80e929 [ 436.556724][T24672] RDX: 0000000000167483 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 436.556756][T24672] RBP: 00007f561be77090 R08: 0000000000000000 R09: 0000000000000000 [ 436.556768][T24672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.556780][T24672] R13: 0000000000000000 R14: 00007f561da35fa0 R15: 00007ffc5b17a248 [ 436.556799][T24672] [ 436.890831][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.922680][T24681] loop9: detected capacity change from 0 to 512 [ 436.957532][T24681] ext2: Unknown parameter 'subj_user' [ 436.971514][T24686] loop4: detected capacity change from 0 to 2048 [ 437.066292][T24686] SELinux: failed to load policy [ 437.192355][T24707] loop9: detected capacity change from 0 to 2048 [ 437.231807][T24695] loop7: detected capacity change from 0 to 8192 [ 437.254321][T24707] SELinux: failed to load policy [ 437.260485][T24695] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 437.387691][T24718] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6833'. [ 437.396617][T24719] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0 [ 437.427024][T24715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=24715 comm=syz.0.6832 [ 437.817644][T24745] loop6: detected capacity change from 0 to 2048 [ 437.862120][T24745] SELinux: failed to load policy [ 437.961131][T24755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6844'. [ 438.016693][T24757] loop4: detected capacity change from 0 to 128 [ 438.045797][T24759] loop6: detected capacity change from 0 to 2048 [ 438.159350][T24775] syzkaller0: entered promiscuous mode [ 438.164875][T24775] syzkaller0: entered allmulticast mode [ 438.281921][T24797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=24797 comm=syz.0.6860 [ 438.325876][T24793] loop4: detected capacity change from 0 to 8192 [ 438.440548][T24816] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6862'. [ 438.520569][T24832] FAULT_INJECTION: forcing a failure. [ 438.520569][T24832] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.533895][T24832] CPU: 1 UID: 0 PID: 24832 Comm: syz.4.6868 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 438.533929][T24832] Tainted: [W]=WARN [ 438.534001][T24832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.534015][T24832] Call Trace: [ 438.534021][T24832] [ 438.534052][T24832] __dump_stack+0x1d/0x30 [ 438.534074][T24832] dump_stack_lvl+0xe8/0x140 [ 438.534096][T24832] dump_stack+0x15/0x1b [ 438.534113][T24832] should_fail_ex+0x265/0x280 [ 438.534179][T24832] should_fail_alloc_page+0xf2/0x100 [ 438.534203][T24832] __alloc_frozen_pages_noprof+0xff/0x360 [ 438.534273][T24832] alloc_pages_mpol+0xb3/0x250 [ 438.534304][T24832] alloc_pages_noprof+0x90/0x130 [ 438.534328][T24832] alloc_skb_with_frags+0x193/0x470 [ 438.534420][T24832] sock_alloc_send_pskb+0x43a/0x4f0 [ 438.534439][T24832] ? terminate_walk+0x27f/0x2a0 [ 438.534458][T24832] tun_get_user+0x8d3/0x2500 [ 438.534562][T24832] ? avc_has_perm+0xd3/0x150 [ 438.534647][T24832] ? ref_tracker_alloc+0x1f2/0x2f0 [ 438.534683][T24832] ? selinux_file_permission+0x2f0/0x320 [ 438.534748][T24832] tun_chr_write_iter+0x15e/0x210 [ 438.534771][T24832] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 438.534793][T24832] vfs_write+0x4a0/0x8e0 [ 438.534896][T24832] ksys_write+0xda/0x1a0 [ 438.534924][T24832] __x64_sys_write+0x40/0x50 [ 438.534966][T24832] x64_sys_call+0x2cdd/0x2fb0 [ 438.534984][T24832] do_syscall_64+0xd2/0x200 [ 438.535012][T24832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 438.535054][T24832] ? clear_bhb_loop+0x40/0x90 [ 438.535072][T24832] ? clear_bhb_loop+0x40/0x90 [ 438.535092][T24832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.535136][T24832] RIP: 0033:0x7fb56a7be929 [ 438.535228][T24832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.535244][T24832] RSP: 002b:00007fb568e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.535261][T24832] RAX: ffffffffffffffda RBX: 00007fb56a9e5fa0 RCX: 00007fb56a7be929 [ 438.535271][T24832] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 438.535319][T24832] RBP: 00007fb568e27090 R08: 0000000000000000 R09: 0000000000000000 [ 438.535330][T24832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.535340][T24832] R13: 0000000000000000 R14: 00007fb56a9e5fa0 R15: 00007fffa8d40648 [ 438.535357][T24832] [ 438.853505][T24852] loop6: detected capacity change from 0 to 2048 [ 438.859969][T24853] loop9: detected capacity change from 0 to 1024 [ 438.900439][T24846] loop4: detected capacity change from 0 to 8192 [ 438.969690][T24870] loop7: detected capacity change from 0 to 512 [ 438.976271][T24870] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.983309][T24870] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.996685][T24870] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 439.026292][T24875] FAULT_INJECTION: forcing a failure. [ 439.026292][T24875] name failslab, interval 1, probability 0, space 0, times 0 [ 439.039005][T24875] CPU: 0 UID: 0 PID: 24875 Comm: syz.6.6881 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 439.039075][T24875] Tainted: [W]=WARN [ 439.039084][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.039100][T24875] Call Trace: [ 439.039108][T24875] [ 439.039117][T24875] __dump_stack+0x1d/0x30 [ 439.039153][T24875] dump_stack_lvl+0xe8/0x140 [ 439.039186][T24875] dump_stack+0x15/0x1b [ 439.039271][T24875] should_fail_ex+0x265/0x280 [ 439.039303][T24875] should_failslab+0x8c/0xb0 [ 439.039384][T24875] __kmalloc_noprof+0xa5/0x3e0 [ 439.039409][T24875] ? fib6_info_alloc+0x2e/0x90 [ 439.039444][T24875] fib6_info_alloc+0x2e/0x90 [ 439.039507][T24875] ip6_route_info_create+0xe7/0x390 [ 439.039530][T24875] inet6_rtm_newroute+0x35e/0x1020 [ 439.039562][T24875] ? __memcg_slab_free_hook+0x135/0x230 [ 439.039648][T24875] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 439.039756][T24875] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 439.039783][T24875] netlink_rcv_skb+0x120/0x220 [ 439.039886][T24875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 439.039911][T24875] rtnetlink_rcv+0x1c/0x30 [ 439.039927][T24875] netlink_unicast+0x59e/0x670 [ 439.040010][T24875] netlink_sendmsg+0x58b/0x6b0 [ 439.040041][T24875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.040070][T24875] __sock_sendmsg+0x142/0x180 [ 439.040138][T24875] ____sys_sendmsg+0x31e/0x4e0 [ 439.040175][T24875] ___sys_sendmsg+0x17b/0x1d0 [ 439.040258][T24875] __x64_sys_sendmsg+0xd4/0x160 [ 439.040297][T24875] x64_sys_call+0x2999/0x2fb0 [ 439.040320][T24875] do_syscall_64+0xd2/0x200 [ 439.040353][T24875] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 439.040437][T24875] ? clear_bhb_loop+0x40/0x90 [ 439.040459][T24875] ? clear_bhb_loop+0x40/0x90 [ 439.040482][T24875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.040504][T24875] RIP: 0033:0x7f10ba12e929 [ 439.040519][T24875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.040601][T24875] RSP: 002b:00007f10b8797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.040620][T24875] RAX: ffffffffffffffda RBX: 00007f10ba355fa0 RCX: 00007f10ba12e929 [ 439.040633][T24875] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 439.040646][T24875] RBP: 00007f10b8797090 R08: 0000000000000000 R09: 0000000000000000 [ 439.040659][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.040692][T24875] R13: 0000000000000000 R14: 00007f10ba355fa0 R15: 00007ffd0b437658 [ 439.040712][T24875] [ 439.315512][T24878] loop9: detected capacity change from 0 to 128 [ 439.342606][T24870] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 439.350774][T24879] loop4: detected capacity change from 0 to 2048 [ 439.381650][T24878] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 439.389554][T24878] FAT-fs (loop9): Filesystem has been set read-only [ 439.391274][T24870] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.6879: corrupted in-inode xattr: e_value size too large [ 439.396307][T24878] bio_check_eod: 62349 callbacks suppressed [ 439.396322][T24878] gtp: attempt to access beyond end of device [ 439.396322][T24878] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 439.430603][T24878] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 439.436415][T24870] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.6879: couldn't read orphan inode 15 (err -117) [ 439.438601][T24878] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 439.458984][T24878] gtp: attempt to access beyond end of device [ 439.458984][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.472200][T24878] gtp: attempt to access beyond end of device [ 439.472200][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.472486][T24870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.486155][T24878] gtp: attempt to access beyond end of device [ 439.486155][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.525062][T24878] gtp: attempt to access beyond end of device [ 439.525062][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.537895][T24878] gtp: attempt to access beyond end of device [ 439.537895][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.541373][T24879] SELinux: failed to load policy [ 439.550642][T24878] gtp: attempt to access beyond end of device [ 439.550642][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.568262][T24878] gtp: attempt to access beyond end of device [ 439.568262][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.581107][T24878] gtp: attempt to access beyond end of device [ 439.581107][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.593957][T24878] gtp: attempt to access beyond end of device [ 439.593957][T24878] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 439.606805][T24894] buffer_io_error: 62006 callbacks suppressed [ 439.606818][T24894] Buffer I/O error on dev loop9, logical block 2065, async page read [ 439.624932][T24892] loop6: detected capacity change from 0 to 8192 [ 439.627898][T24894] Buffer I/O error on dev loop9, logical block 2066, async page read [ 439.647915][T24894] Buffer I/O error on dev loop9, logical block 2067, async page read [ 439.656253][T24894] Buffer I/O error on dev loop9, logical block 2068, async page read [ 439.666529][T24894] Buffer I/O error on dev loop9, logical block 2069, async page read [ 439.678526][T24894] Buffer I/O error on dev loop9, logical block 2070, async page read [ 439.689778][T24894] Buffer I/O error on dev loop9, logical block 2071, async page read [ 439.698591][T24894] Buffer I/O error on dev loop9, logical block 2072, async page read [ 439.706756][T24894] Buffer I/O error on dev loop9, logical block 2065, async page read [ 439.720369][T24894] Buffer I/O error on dev loop9, logical block 2066, async page read [ 439.965191][T24901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6885'. [ 440.002503][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.063310][T24923] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6899'. [ 440.103238][T24923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6899'. [ 440.112164][T24923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6899'. [ 440.128150][T24927] netlink: 'syz.0.6900': attribute type 4 has an invalid length. [ 440.148000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.171109][T24927] netlink: 'syz.0.6900': attribute type 4 has an invalid length. [ 440.178985][T24175] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 440.186835][T24175] FAT-fs (loop6): Filesystem has been set read-only [ 440.202205][T24923] loop4: detected capacity change from 0 to 1024 [ 440.211996][T24923] EXT4-fs: Ignoring removed orlov option [ 440.269901][T24943] loop9: detected capacity change from 0 to 2048 [ 440.291011][T24945] loop4: detected capacity change from 0 to 2048 [ 440.325076][T24945] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 440.336073][T24945] SELinux: failed to load policy [ 440.341403][T24943] SELinux: failed to load policy [ 440.341424][T24956] IPv6: Can't replace route, no match found [ 440.376566][T24959] loop6: detected capacity change from 0 to 512 [ 440.383254][T24959] ext2: Unknown parameter 'subj_user' [ 440.498571][T24986] FAULT_INJECTION: forcing a failure. [ 440.498571][T24986] name failslab, interval 1, probability 0, space 0, times 0 [ 440.511333][T24986] CPU: 0 UID: 0 PID: 24986 Comm: syz.0.6919 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 440.511414][T24986] Tainted: [W]=WARN [ 440.511422][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.511434][T24986] Call Trace: [ 440.511439][T24986] [ 440.511445][T24986] __dump_stack+0x1d/0x30 [ 440.511464][T24986] dump_stack_lvl+0xe8/0x140 [ 440.511508][T24986] dump_stack+0x15/0x1b [ 440.511526][T24986] should_fail_ex+0x265/0x280 [ 440.511558][T24986] should_failslab+0x8c/0xb0 [ 440.511581][T24986] kmem_cache_alloc_noprof+0x50/0x310 [ 440.511678][T24986] ? alloc_empty_file+0x76/0x200 [ 440.511699][T24986] alloc_empty_file+0x76/0x200 [ 440.511720][T24986] alloc_file_pseudo+0xc6/0x160 [ 440.511771][T24986] __shmem_file_setup+0x1de/0x210 [ 440.511834][T24986] shmem_file_setup+0x3b/0x50 [ 440.511930][T24986] __se_sys_memfd_create+0x2c3/0x590 [ 440.511961][T24986] __x64_sys_memfd_create+0x31/0x40 [ 440.511986][T24986] x64_sys_call+0x122f/0x2fb0 [ 440.512084][T24986] do_syscall_64+0xd2/0x200 [ 440.512130][T24986] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 440.512158][T24986] ? clear_bhb_loop+0x40/0x90 [ 440.512181][T24986] ? clear_bhb_loop+0x40/0x90 [ 440.512250][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.512273][T24986] RIP: 0033:0x7f561d80e929 [ 440.512289][T24986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.512308][T24986] RSP: 002b:00007f561be76e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 440.512328][T24986] RAX: ffffffffffffffda RBX: 0000000000000a2f RCX: 00007f561d80e929 [ 440.512414][T24986] RDX: 00007f561be76ef0 RSI: 0000000000000000 RDI: 00007f561d8914cc [ 440.512425][T24986] RBP: 0000200000001580 R08: 00007f561be76bb7 R09: 00007f561be76e40 [ 440.512435][T24986] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 440.512444][T24986] R13: 00007f561be76ef0 R14: 00007f561be76eb0 R15: 0000200000000140 [ 440.512545][T24986] [ 440.523118][T24984] loop4: detected capacity change from 0 to 2048 [ 440.702052][T24996] loop6: detected capacity change from 0 to 2048 [ 440.759416][T24995] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 440.769942][T24995] SELinux: failed to load policy [ 440.919864][T25016] loop6: detected capacity change from 0 to 512 [ 440.935615][T25016] ext2: Unknown parameter 'subj_user' [ 440.948959][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 440.948972][ T29] audit: type=1326 audit(2000000346.233:26562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 440.955371][T25019] loop4: detected capacity change from 0 to 2048 [ 440.996939][ T29] audit: type=1326 audit(2000000346.243:26563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.020660][ T29] audit: type=1326 audit(2000000346.243:26564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.044264][ T29] audit: type=1326 audit(2000000346.273:26565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.067901][ T29] audit: type=1326 audit(2000000346.273:26566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.091594][ T29] audit: type=1326 audit(2000000346.273:26567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.115387][ T29] audit: type=1326 audit(2000000346.273:26568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.138928][ T29] audit: type=1326 audit(2000000346.273:26569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.162839][ T29] audit: type=1326 audit(2000000346.273:26570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.186559][ T29] audit: type=1326 audit(2000000346.273:26571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25015 comm="syz.6.6929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 441.316841][T25042] loop6: detected capacity change from 0 to 2048 [ 441.322641][T25044] SELinux: Context system_u:object_r:shell_exec_t:s0 is not valid (left unmapped). [ 441.408308][T25053] loop4: detected capacity change from 0 to 1764 [ 441.476960][T25065] loop7: detected capacity change from 0 to 2048 [ 441.519412][T25065] SELinux: failed to load policy [ 441.553428][T25078] loop7: detected capacity change from 0 to 512 [ 441.560232][T25078] ext2: Unknown parameter 'subj_user' [ 441.639268][T25085] loop7: detected capacity change from 0 to 8192 [ 441.659192][T25085] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.671941][T25094] loop9: detected capacity change from 0 to 2048 [ 441.725396][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 441.734411][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 441.754700][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 441.763795][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 441.805784][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 441.814810][T25095] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6948'. [ 442.092176][T25128] loop7: detected capacity change from 0 to 512 [ 442.116820][T25128] ext2: Unknown parameter 'subj_user' [ 442.853918][T25142] loop7: detected capacity change from 0 to 128 [ 442.888546][T25142] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6959'. [ 442.897541][T25142] netem: unknown loss type 0 [ 442.902200][T25142] netem: change failed [ 442.916424][T25149] loop9: detected capacity change from 0 to 8192 [ 442.927796][T25149] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.951079][T25154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6963'. [ 443.003098][T25170] SELinux: policydb version 0 does not match my version range 15-34 [ 443.013735][T25170] SELinux: failed to load policy [ 443.022065][T25172] loop7: detected capacity change from 0 to 512 [ 443.034389][T25174] FAULT_INJECTION: forcing a failure. [ 443.034389][T25174] name failslab, interval 1, probability 0, space 0, times 0 [ 443.038569][T25172] ext2: Unknown parameter 'subj_user' [ 443.047050][T25174] CPU: 0 UID: 0 PID: 25174 Comm: syz.6.6968 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 443.047097][T25174] Tainted: [W]=WARN [ 443.047107][T25174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.047126][T25174] Call Trace: [ 443.047135][T25174] [ 443.047158][T25174] __dump_stack+0x1d/0x30 [ 443.047184][T25174] dump_stack_lvl+0xe8/0x140 [ 443.047209][T25174] dump_stack+0x15/0x1b [ 443.047230][T25174] should_fail_ex+0x265/0x280 [ 443.047336][T25174] should_failslab+0x8c/0xb0 [ 443.047426][T25174] kmem_cache_alloc_noprof+0x50/0x310 [ 443.047494][T25174] ? alloc_empty_file+0x76/0x200 [ 443.047524][T25174] alloc_empty_file+0x76/0x200 [ 443.047551][T25174] alloc_file_pseudo+0xc6/0x160 [ 443.047583][T25174] __shmem_file_setup+0x1de/0x210 [ 443.047679][T25174] shmem_file_setup+0x3b/0x50 [ 443.047715][T25174] __se_sys_memfd_create+0x2c3/0x590 [ 443.047806][T25174] __x64_sys_memfd_create+0x31/0x40 [ 443.047856][T25174] x64_sys_call+0x122f/0x2fb0 [ 443.047881][T25174] do_syscall_64+0xd2/0x200 [ 443.047964][T25174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 443.048068][T25174] ? clear_bhb_loop+0x40/0x90 [ 443.048098][T25174] ? clear_bhb_loop+0x40/0x90 [ 443.048185][T25174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.048214][T25174] RIP: 0033:0x7f10ba12e929 [ 443.048236][T25174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.048259][T25174] RSP: 002b:00007f10b8796d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 443.048340][T25174] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007f10ba12e929 [ 443.048358][T25174] RDX: 00007f10b8796dec RSI: 0000000000000000 RDI: 00007f10ba1b14cc [ 443.048376][T25174] RBP: 00002000000005c0 R08: 00007f10b8796b07 R09: 0000000000000000 [ 443.048393][T25174] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000002 [ 443.048420][T25174] R13: 00007f10b8796dec R14: 00007f10b8796df0 R15: 00007ffd0b437658 [ 443.048500][T25174] [ 443.149181][T25181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25181 comm=syz.6.6971 [ 443.320648][T25195] loop6: detected capacity change from 0 to 512 [ 443.328974][T25195] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 443.353092][T25195] EXT4-fs (loop6): 1 truncate cleaned up [ 443.360269][T25195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.395178][T25192] FAULT_INJECTION: forcing a failure. [ 443.395178][T25192] name failslab, interval 1, probability 0, space 0, times 0 [ 443.407818][T25192] CPU: 0 UID: 0 PID: 25192 Comm: syz.4.6974 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 443.407849][T25192] Tainted: [W]=WARN [ 443.407855][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 443.407865][T25192] Call Trace: [ 443.407872][T25192] [ 443.407880][T25192] __dump_stack+0x1d/0x30 [ 443.407903][T25192] dump_stack_lvl+0xe8/0x140 [ 443.407924][T25192] dump_stack+0x15/0x1b [ 443.407938][T25192] should_fail_ex+0x265/0x280 [ 443.407969][T25192] should_failslab+0x8c/0xb0 [ 443.407987][T25192] __kvmalloc_node_noprof+0x123/0x4e0 [ 443.408015][T25192] ? bpf_test_run_xdp_live+0x114/0xfe0 [ 443.408120][T25192] bpf_test_run_xdp_live+0x114/0xfe0 [ 443.408231][T25192] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 443.408261][T25192] ? __pfx_autoremove_wake_function+0x10/0x10 [ 443.408361][T25192] ? 0xffffffffa0205540 [ 443.408381][T25192] ? synchronize_rcu+0x45/0x320 [ 443.408411][T25192] ? 0xffffffffa0205540 [ 443.408423][T25192] ? 0xffffffffa0205540 [ 443.408436][T25192] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 443.408502][T25192] ? 0xffffffffa0201a0c [ 443.408525][T25192] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 443.408573][T25192] bpf_prog_test_run_xdp+0x4f5/0x910 [ 443.408605][T25192] ? __rcu_read_unlock+0x4f/0x70 [ 443.408630][T25192] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 443.408661][T25192] bpf_prog_test_run+0x22a/0x390 [ 443.408772][T25192] __sys_bpf+0x3dc/0x790 [ 443.408873][T25192] __x64_sys_bpf+0x41/0x50 [ 443.408898][T25192] x64_sys_call+0x2478/0x2fb0 [ 443.408922][T25192] do_syscall_64+0xd2/0x200 [ 443.408963][T25192] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 443.409008][T25192] ? clear_bhb_loop+0x40/0x90 [ 443.409029][T25192] ? clear_bhb_loop+0x40/0x90 [ 443.409132][T25192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.409153][T25192] RIP: 0033:0x7fb56a7be929 [ 443.409233][T25192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.409268][T25192] RSP: 002b:00007fb568e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.409287][T25192] RAX: ffffffffffffffda RBX: 00007fb56a9e5fa0 RCX: 00007fb56a7be929 [ 443.409301][T25192] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 443.409312][T25192] RBP: 00007fb568e27090 R08: 0000000000000000 R09: 0000000000000000 [ 443.409322][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.409332][T25192] R13: 0000000000000000 R14: 00007fb56a9e5fa0 R15: 00007fffa8d40648 [ 443.409463][T25192] [ 443.679131][T24175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.733569][T25221] loop4: detected capacity change from 0 to 2048 [ 443.779391][T25223] SELinux: failed to load policy [ 443.811094][T25221] Alternate GPT is invalid, using primary GPT. [ 443.817470][T25221] loop4: p2 p3 p7 [ 443.831629][T25233] netlink: 'syz.0.6985': attribute type 39 has an invalid length. [ 443.840105][T25233] veth1_macvtap: left promiscuous mode [ 443.856483][T25242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25242 comm=syz.4.6986 [ 443.897311][T25247] Cannot find add_set index 0 as target [ 443.904586][T25246] loop4: detected capacity change from 0 to 512 [ 443.924062][T25246] ext2: Unknown parameter 'subj_user' [ 443.993362][T25254] SELinux: failed to load policy [ 444.180711][T25265] loop4: detected capacity change from 0 to 512 [ 444.190536][T25265] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 444.223502][T25272] loop4: detected capacity change from 0 to 2048 [ 444.271899][T25272] SELinux: failed to load policy [ 444.294335][T25278] loop4: detected capacity change from 0 to 128 [ 444.435767][T25292] loop4: detected capacity change from 0 to 512 [ 444.443203][T25292] ext2: Unknown parameter 'subj_user' [ 444.608478][T25305] loop4: detected capacity change from 0 to 4096 [ 444.655051][T25305] loop4: detected capacity change from 0 to 8192 [ 444.686406][T25311] loop6: detected capacity change from 0 to 8192 [ 444.693980][T25311] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 444.739691][T25323] loop6: detected capacity change from 0 to 128 [ 444.850863][T25345] loop4: detected capacity change from 0 to 512 [ 444.882680][T25352] SELinux: Context system_u:object_r:var_log_t:s0 is not valid (left unmapped). [ 444.971437][T25356] loop4: detected capacity change from 0 to 512 [ 445.030894][T25362] Cannot find add_set index 0 as target [ 445.093474][T25366] loop9: detected capacity change from 0 to 1024 [ 445.110601][T25366] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.125191][T25366] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 445.135628][T25366] EXT4-fs error (device loop9): ext4_lookup:1787: comm syz.9.7022: inode #12: comm syz.9.7022: iget: illegal inode # [ 445.149777][T25366] EXT4-fs (loop9): Remounting filesystem read-only [ 445.174253][T23759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.296006][T25381] loop9: detected capacity change from 0 to 128 [ 445.429669][T25390] loop9: detected capacity change from 0 to 8192 [ 445.438150][T25390] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 445.531079][T25403] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 445.552721][T25403] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7043'. [ 445.609984][T25406] netlink: 'syz.7.7034': attribute type 4 has an invalid length. [ 445.630405][ T3414] lo speed is unknown, defaulting to 1000 [ 445.636288][ T3414] syz0: Port: 1 Link DOWN [ 445.727271][T25410] loop7: detected capacity change from 0 to 512 [ 445.747509][T25410] ext2: Unknown parameter 'subj_user' [ 445.799298][T25419] netlink: 'syz.9.7038': attribute type 4 has an invalid length. [ 445.810959][T25419] netlink: 'syz.9.7038': attribute type 4 has an invalid length. [ 445.934564][T25436] loop6: detected capacity change from 0 to 128 [ 445.946845][T25436] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 445.954840][T25436] FAT-fs (loop6): Filesystem has been set read-only [ 445.963074][T25436] bio_check_eod: 42312 callbacks suppressed [ 445.963084][T25436] gtp: attempt to access beyond end of device [ 445.963084][T25436] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 445.987147][T25436] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 445.995048][T25436] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 446.003336][T25436] gtp: attempt to access beyond end of device [ 446.003336][T25436] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 446.016540][T25436] gtp: attempt to access beyond end of device [ 446.016540][T25436] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 446.029439][T25436] gtp: attempt to access beyond end of device [ 446.029439][T25436] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 446.042824][T25440] syz.6.7046: attempt to access beyond end of device [ 446.042824][T25440] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 446.056147][T25440] buffer_io_error: 42302 callbacks suppressed [ 446.056161][T25440] Buffer I/O error on dev loop6, logical block 2065, async page read [ 446.075373][T25440] syz.6.7046: attempt to access beyond end of device [ 446.075373][T25440] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 446.082277][ T29] kauditd_printk_skb: 2616 callbacks suppressed [ 446.082292][ T29] audit: type=1400 audit(2000001119.369:29188): avc: denied { name_bind } for pid=25441 comm="syz.7.7048" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 446.088752][T25440] Buffer I/O error on dev loop6, logical block 2066, async page read [ 446.125420][T25440] syz.6.7046: attempt to access beyond end of device [ 446.125420][T25440] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 446.138685][T25440] Buffer I/O error on dev loop6, logical block 2067, async page read [ 446.148201][T25440] syz.6.7046: attempt to access beyond end of device [ 446.148201][T25440] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 446.161627][T25440] Buffer I/O error on dev loop6, logical block 2068, async page read [ 446.170321][T25440] syz.6.7046: attempt to access beyond end of device [ 446.170321][T25440] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 446.174075][T25445] loop9: detected capacity change from 0 to 1764 [ 446.183598][T25440] Buffer I/O error on dev loop6, logical block 2069, async page read [ 446.183714][T25440] syz.6.7046: attempt to access beyond end of device [ 446.183714][T25440] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 446.211371][T25440] Buffer I/O error on dev loop6, logical block 2070, async page read [ 446.219614][T25440] Buffer I/O error on dev loop6, logical block 2071, async page read [ 446.230795][T25440] Buffer I/O error on dev loop6, logical block 2072, async page read [ 446.238946][T25436] Buffer I/O error on dev loop6, logical block 2065, async page read [ 446.247208][T25436] Buffer I/O error on dev loop6, logical block 2066, async page read [ 446.251872][ T29] audit: type=1400 audit(2000001119.529:29189): avc: denied { shutdown } for pid=25444 comm="syz.9.7049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 446.281947][T25448] loop7: detected capacity change from 0 to 512 [ 446.288533][T25448] ext2: Unknown parameter 'subj_user' [ 446.300685][ T29] audit: type=1326 audit(2000001119.589:29190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.324391][ T29] audit: type=1326 audit(2000001119.589:29191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.348144][ T29] audit: type=1326 audit(2000001119.589:29192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.371900][ T29] audit: type=1326 audit(2000001119.589:29193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.395696][ T29] audit: type=1326 audit(2000001119.589:29194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.419330][ T29] audit: type=1326 audit(2000001119.589:29195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.442938][ T29] audit: type=1326 audit(2000001119.589:29196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.466533][ T29] audit: type=1326 audit(2000001119.589:29197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25446 comm="syz.7.7050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fd75e929 code=0x7ffc0000 [ 446.491317][T25455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25455 comm=syz.9.7051 [ 446.632233][T25463] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7052'. [ 446.870194][T25472] loop9: detected capacity change from 0 to 8192 [ 446.878849][T25478] Cannot find add_set index 0 as target [ 446.903002][T25472] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.982792][T25490] loop6: detected capacity change from 0 to 2048 [ 447.041959][T25495] loop9: detected capacity change from 0 to 2048 [ 447.133711][T25490] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 447.150577][T25490] SELinux: failed to load policy [ 447.214002][T25503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25503 comm=syz.9.7063 [ 447.256024][T25507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7064'. [ 447.284013][T25509] loop9: detected capacity change from 0 to 128 [ 447.295020][T25509] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.315830][T25509] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 447.421662][T25516] loop6: detected capacity change from 0 to 512 [ 447.441138][T23759] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.461683][T25516] ext2: Unknown parameter 'subj_user' [ 447.468002][T25523] loop9: detected capacity change from 0 to 128 [ 447.502853][T25523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 447.510892][T25523] FAT-fs (loop9): Filesystem has been set read-only [ 447.517871][T25523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 447.525731][T25523] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 447.620605][T25530]  speed is unknown, defaulting to 1000 [ 447.629986][T25530] lo speed is unknown, defaulting to 1000 [ 447.819199][T25557] loop7: detected capacity change from 0 to 2048 [ 447.943978][T25575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25575 comm=syz.6.7076 [ 448.081861][T25579]  speed is unknown, defaulting to 1000 [ 448.094674][T25586] program syz.6.7079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.120853][T25579] lo speed is unknown, defaulting to 1000 [ 448.143891][T25586] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 448.153344][T25592] netlink: 'syz.7.7081': attribute type 4 has an invalid length. [ 448.174684][T25592] netlink: 'syz.7.7081': attribute type 4 has an invalid length. [ 448.198071][ T6426] lo speed is unknown, defaulting to 1000 [ 448.203924][ T6426] syz0: Port: 1 Link ACTIVE [ 448.392054][T25623] loop7: detected capacity change from 0 to 2048 [ 448.484885][T25637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25637 comm=syz.9.7090 [ 448.504238][T25639] loop7: detected capacity change from 0 to 128 [ 448.514214][T25639] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.526768][T25639] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 448.581300][T22378] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.620772][T25651] loop9: detected capacity change from 0 to 128 [ 448.656434][T25649] loop7: detected capacity change from 0 to 8192 [ 448.671354][T25649] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 448.747447][T25666] loop7: detected capacity change from 0 to 2048 [ 448.792350][T25673] loop9: detected capacity change from 0 to 2048 [ 448.809778][T25677] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7101'. [ 448.821536][T25673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.838556][T25673] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.859628][T25688] netlink: 'syz.7.7104': attribute type 27 has an invalid length. [ 448.884154][T23442] lo speed is unknown, defaulting to 1000 [ 448.884798][T25673] netlink: 'syz.9.7100': attribute type 4 has an invalid length. [ 448.889927][T23442] syz0: Port: 1 Link DOWN [ 448.907934][T25688] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7104'. [ 448.968634][T25699] loop6: detected capacity change from 0 to 512 [ 448.989136][T25699] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7110: bg 0: block 248: padding at end of block bitmap is not set [ 449.006231][T25704] loop9: detected capacity change from 0 to 2048 [ 449.025900][T25710] loop7: detected capacity change from 0 to 256 [ 449.034025][T25699] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7110: Failed to acquire dquot type 1 [ 449.069496][T25710] FAT-fs (loop7): bogus logical sector size 0 [ 449.075580][T25710] FAT-fs (loop7): Can't find a valid FAT filesystem [ 449.095716][T25707] FAULT_INJECTION: forcing a failure. [ 449.095716][T25707] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 449.109209][T25707] CPU: 0 UID: 0 PID: 25707 Comm: syz.0.7112 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 449.109259][T25707] Tainted: [W]=WARN [ 449.109265][T25707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.109314][T25707] Call Trace: [ 449.109320][T25707] [ 449.109328][T25707] __dump_stack+0x1d/0x30 [ 449.109358][T25707] dump_stack_lvl+0xe8/0x140 [ 449.109375][T25707] dump_stack+0x15/0x1b [ 449.109388][T25707] should_fail_ex+0x265/0x280 [ 449.109415][T25707] should_fail_alloc_page+0xf2/0x100 [ 449.109475][T25707] __alloc_frozen_pages_noprof+0xff/0x360 [ 449.109512][T25707] alloc_pages_mpol+0xb3/0x250 [ 449.109541][T25707] alloc_migration_target_by_mpol+0x11b/0x280 [ 449.109626][T25707] migrate_pages_batch+0x2e7/0x17d0 [ 449.109656][T25707] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 449.109751][T25707] ? __walk_page_range+0x324/0x340 [ 449.109779][T25707] migrate_pages+0xf5f/0x1770 [ 449.109846][T25707] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 449.109881][T25707] __se_sys_mbind+0x975/0xac0 [ 449.109915][T25707] __x64_sys_mbind+0x78/0x90 [ 449.109943][T25707] x64_sys_call+0x14af/0x2fb0 [ 449.110075][T25707] do_syscall_64+0xd2/0x200 [ 449.110106][T25707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 449.110128][T25707] ? clear_bhb_loop+0x40/0x90 [ 449.110213][T25707] ? clear_bhb_loop+0x40/0x90 [ 449.110330][T25707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.110400][T25707] RIP: 0033:0x7f561d80e929 [ 449.110442][T25707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.110457][T25707] RSP: 002b:00007f561be77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 449.110532][T25707] RAX: ffffffffffffffda RBX: 00007f561da35fa0 RCX: 00007f561d80e929 [ 449.110546][T25707] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 449.110557][T25707] RBP: 00007f561be77090 R08: 0000000000000000 R09: 0000000000000002 [ 449.110568][T25707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.110578][T25707] R13: 0000000000000000 R14: 00007f561da35fa0 R15: 00007ffc5b17a248 [ 449.110594][T25707] [ 449.118616][T25699] EXT4-fs (loop6): 1 truncate cleaned up [ 449.429370][T25699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.445089][T25699] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.522445][T24175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.654092][T25752] SELinux: failed to load policy [ 449.663050][T25750] loop4: detected capacity change from 0 to 2048 [ 449.690610][T25754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25754 comm=syz.6.7128 [ 449.727002][T25750] SELinux: failed to load policy [ 449.755984][T25761] IPv6: Can't replace route, no match found [ 449.894105][T25773] loop4: detected capacity change from 0 to 8192 [ 449.984146][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7135'. [ 449.993045][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7135'. [ 450.007095][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7135'. [ 450.037589][T25789] loop4: detected capacity change from 0 to 2048 [ 450.053882][T25795] netlink: 'syz.9.7140': attribute type 4 has an invalid length. [ 450.065401][T25795] netlink: 'syz.9.7140': attribute type 4 has an invalid length. [ 450.095200][T25797] loop6: detected capacity change from 0 to 2048 [ 450.124571][T25799] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=25799 comm=syz.0.7142 [ 450.183374][T25797] SELinux: failed to load policy [ 450.236059][T25820] loop6: detected capacity change from 0 to 2048 [ 450.250535][T25820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.269768][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7153'. [ 450.317528][T25833] loop4: detected capacity change from 0 to 8192 [ 450.353633][T25839] netlink: 'syz.4.7155': attribute type 4 has an invalid length. [ 450.368150][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7149'. [ 450.385461][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7149'. [ 450.405085][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7149'. [ 450.476917][T25852] loop7: detected capacity change from 0 to 512 [ 450.485876][T25852] EXT4-fs (loop7): orphan cleanup on readonly fs [ 450.493627][T25852] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7158: bg 0: block 248: padding at end of block bitmap is not set [ 450.509420][T25852] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7158: Failed to acquire dquot type 1 [ 450.524812][T25852] EXT4-fs (loop7): 1 truncate cleaned up [ 450.541186][T25852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 450.556146][T25856] FAULT_INJECTION: forcing a failure. [ 450.556146][T25856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.569334][T25856] CPU: 0 UID: 0 PID: 25856 Comm: syz.4.7159 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 450.569363][T25856] Tainted: [W]=WARN [ 450.569382][T25856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.569393][T25856] Call Trace: [ 450.569400][T25856] [ 450.569409][T25856] __dump_stack+0x1d/0x30 [ 450.569433][T25856] dump_stack_lvl+0xe8/0x140 [ 450.569456][T25856] dump_stack+0x15/0x1b [ 450.569475][T25856] should_fail_ex+0x265/0x280 [ 450.569566][T25856] should_fail+0xb/0x20 [ 450.569591][T25856] should_fail_usercopy+0x1a/0x20 [ 450.569619][T25856] _copy_from_user+0x1c/0xb0 [ 450.569693][T25856] ipv6_flowlabel_opt+0xa3/0x1230 [ 450.569728][T25856] ? selinux_file_open+0x2df/0x330 [ 450.569758][T25856] ? __rcu_read_unlock+0x4f/0x70 [ 450.569782][T25856] ? mntput_no_expire+0x6f/0x3c0 [ 450.569805][T25856] ? mntput+0x4b/0x80 [ 450.569826][T25856] ? _raw_spin_unlock_bh+0x36/0x40 [ 450.569856][T25856] ? lock_sock_nested+0x112/0x140 [ 450.569882][T25856] ? should_fail_ex+0xdb/0x280 [ 450.569933][T25856] do_ipv6_setsockopt+0xc92/0x22e0 [ 450.569955][T25856] ? kstrtoull+0x111/0x140 [ 450.570001][T25856] ? __rcu_read_unlock+0x4f/0x70 [ 450.570020][T25856] ? avc_has_perm_noaudit+0x1b1/0x200 [ 450.570045][T25856] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 450.570190][T25856] ipv6_setsockopt+0x59/0x130 [ 450.570210][T25856] tcp_setsockopt+0x98/0xb0 [ 450.570239][T25856] sock_common_setsockopt+0x69/0x80 [ 450.570265][T25856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 450.570318][T25856] __sys_setsockopt+0x184/0x200 [ 450.570348][T25856] __x64_sys_setsockopt+0x64/0x80 [ 450.570386][T25856] x64_sys_call+0x2bd5/0x2fb0 [ 450.570410][T25856] do_syscall_64+0xd2/0x200 [ 450.570517][T25856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 450.570567][T25856] ? clear_bhb_loop+0x40/0x90 [ 450.570590][T25856] ? clear_bhb_loop+0x40/0x90 [ 450.570611][T25856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.570634][T25856] RIP: 0033:0x7fb56a7be929 [ 450.570649][T25856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.570718][T25856] RSP: 002b:00007fb568e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.570736][T25856] RAX: ffffffffffffffda RBX: 00007fb56a9e5fa0 RCX: 00007fb56a7be929 [ 450.570751][T25856] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 450.570764][T25856] RBP: 00007fb568e27090 R08: 000000000000fe60 R09: 0000000000000000 [ 450.570777][T25856] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 450.570822][T25856] R13: 0000000000000000 R14: 00007fb56a9e5fa0 R15: 00007fffa8d40648 [ 450.570904][T25856] [ 450.572883][T25852] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.7158: deleted inode referenced: 12 [ 450.649790][T25858] loop4: detected capacity change from 0 to 2048 [ 450.860385][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.887720][T25858] SELinux: failed to load policy [ 450.933376][T25873] loop7: detected capacity change from 0 to 512 [ 450.941595][T25873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 450.946117][T25876] loop4: detected capacity change from 0 to 128 [ 450.961954][T25873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.974674][T25873] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.047516][T25887] loop4: detected capacity change from 0 to 8192 [ 451.049579][T25895] loop9: detected capacity change from 0 to 1024 [ 451.073732][T25895] ext4: Unknown parameter 'uid<00000000000000000000' [ 451.090861][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 451.090932][ T29] audit: type=1400 audit(2000001124.378:29461): avc: denied { getopt } for pid=25894 comm="syz.9.7170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 451.117027][ T29] audit: type=1400 audit(2000001124.378:29462): avc: denied { getopt } for pid=25894 comm="syz.9.7170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 451.156596][ T31] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 451.172545][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 451.185041][ T31] EXT4-fs (loop6): This should not happen!! Data will be lost [ 451.185041][ T31] [ 451.194884][ T31] EXT4-fs (loop6): Total free blocks count 0 [ 451.200949][ T31] EXT4-fs (loop6): Free/Dirty block details [ 451.206846][ T31] EXT4-fs (loop6): free_blocks=2415919104 [ 451.212661][ T31] EXT4-fs (loop6): dirty_blocks=8208 [ 451.217961][ T31] EXT4-fs (loop6): Block reservation details [ 451.224107][ T31] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 451.244700][ T31] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 451.274045][T25909] SELinux: failed to load policy [ 451.276584][T25914] loop4: detected capacity change from 0 to 128 [ 451.340555][T25926] validate_nla: 1 callbacks suppressed [ 451.340628][T25926] netlink: 'syz.4.7181': attribute type 4 has an invalid length. [ 451.357393][T25926] netlink: 'syz.4.7181': attribute type 4 has an invalid length. [ 451.415821][T25932] loop4: detected capacity change from 0 to 2048 [ 451.421919][ T29] audit: type=1326 audit(2000001124.698:29463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.445921][ T29] audit: type=1326 audit(2000001124.698:29464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.476355][ T29] audit: type=1326 audit(2000001124.728:29465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.500091][T25932] SELinux: failed to load policy [ 451.505213][ T29] audit: type=1326 audit(2000001124.728:29466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.528856][ T29] audit: type=1326 audit(2000001124.728:29467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.552593][ T29] audit: type=1326 audit(2000001124.728:29468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.576177][ T29] audit: type=1326 audit(2000001124.758:29469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.599802][ T29] audit: type=1326 audit(2000001124.758:29470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25937 comm="syz.6.7171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10ba12e929 code=0x7ffc0000 [ 451.626131][T25947] loop4: detected capacity change from 0 to 128 [ 451.682236][T25960] netlink: 'syz.4.7188': attribute type 3 has an invalid length. [ 451.779797][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.802744][T25969] loop7: detected capacity change from 0 to 512 [ 451.816400][T25972] netlink: 'syz.0.7192': attribute type 4 has an invalid length. [ 451.821472][T25969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.830168][T25972] netlink: 'syz.0.7192': attribute type 4 has an invalid length. [ 451.836728][T25969] ext4 filesystem being mounted at /241/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 451.860951][T25969] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.7190: corrupted inode contents [ 451.874421][T25969] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #2: comm syz.7.7190: mark_inode_dirty error [ 451.887377][T25969] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #2: comm syz.7.7190: corrupted inode contents [ 451.900823][T25969] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.7190: mark_inode_dirty error [ 451.922702][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.978582][T25984] loop7: detected capacity change from 0 to 8192 [ 451.986520][T25984] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 452.077577][T25992] loop7: detected capacity change from 0 to 512 [ 452.084315][T25992] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.091055][T25992] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.097736][T25992] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 452.106799][T25992] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 452.114761][T25992] System zones: 1-12 [ 452.119220][T25992] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.7197: corrupted in-inode xattr: e_value size too large [ 452.133459][T25992] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7197: couldn't read orphan inode 15 (err -117) [ 452.145895][T25992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 452.181402][T25999] loop9: detected capacity change from 0 to 128 [ 452.266811][T25999] bio_check_eod: 105056 callbacks suppressed [ 452.266840][T25999] syz.9.7198: attempt to access beyond end of device [ 452.266840][T25999] loop9: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 452.287006][T25999] syz.9.7198: attempt to access beyond end of device [ 452.287006][T25999] loop9: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 452.302508][T25999] syz.9.7198: attempt to access beyond end of device [ 452.302508][T25999] loop9: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 452.318340][T25999] buffer_io_error: 104474 callbacks suppressed [ 452.318367][T25999] Buffer I/O error on dev loop9, logical block 142, lost async page write [ 452.333635][T25999] syz.9.7198: attempt to access beyond end of device [ 452.333635][T25999] loop9: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 452.347439][T25999] Buffer I/O error on dev loop9, logical block 143, lost async page write [ 452.356431][T25999] syz.9.7198: attempt to access beyond end of device [ 452.356431][T25999] loop9: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 452.370295][T25999] Buffer I/O error on dev loop9, logical block 144, lost async page write [ 452.379347][T25999] syz.9.7198: attempt to access beyond end of device [ 452.379347][T25999] loop9: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 452.393186][T25999] Buffer I/O error on dev loop9, logical block 145, lost async page write [ 452.401939][T25999] syz.9.7198: attempt to access beyond end of device [ 452.401939][T25999] loop9: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 452.415499][T25999] Buffer I/O error on dev loop9, logical block 146, lost async page write [ 452.424567][T25999] syz.9.7198: attempt to access beyond end of device [ 452.424567][T25999] loop9: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 452.438670][T25999] Buffer I/O error on dev loop9, logical block 147, lost async page write [ 452.447578][T25999] syz.9.7198: attempt to access beyond end of device [ 452.447578][T25999] loop9: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 452.461567][T25999] Buffer I/O error on dev loop9, logical block 156, lost async page write [ 452.470782][T25999] syz.9.7198: attempt to access beyond end of device [ 452.470782][T25999] loop9: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 452.484590][T25999] Buffer I/O error on dev loop9, logical block 157, lost async page write [ 452.493958][T25999] Buffer I/O error on dev loop9, logical block 160, lost async page write [ 452.502844][T25999] Buffer I/O error on dev loop9, logical block 161, lost async page write [ 452.639358][T26007] netlink: 'syz.4.7200': attribute type 4 has an invalid length. [ 452.651291][T26007] netlink: 'syz.4.7200': attribute type 4 has an invalid length. [ 452.677184][T26011] __nla_validate_parse: 6 callbacks suppressed [ 452.677196][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7202'. [ 452.692289][T26011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7202'. [ 452.715940][T26018] netlink: 'syz.4.7203': attribute type 4 has an invalid length. [ 452.726609][T26018] netlink: 'syz.4.7203': attribute type 4 has an invalid length. [ 452.882823][T26032] SELinux: failed to load policy [ 452.910503][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.961340][T26045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26045 comm=syz.7.7213 [ 452.983694][T26037] 9pnet: Could not find request transport: 0xffffffffffffffff [ 452.999693][T26049] mmap: syz.7.7214 (26049): VmData 29335552 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 453.061931][T26062] loop7: detected capacity change from 0 to 2048 [ 453.078535][T26060] SELinux: failed to load policy [ 453.083723][T26062] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 453.095320][T26062] SELinux: failed to load policy [ 453.135193][T26067] loop9: detected capacity change from 0 to 1024 [ 453.151069][T26067] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.163217][T26067] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.175124][T26067] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #15: comm syz.9.7220: lblock 0 mapped to illegal pblock 0 (length 5) [ 453.188555][T26067] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 453.191042][T26071] FAULT_INJECTION: forcing a failure. [ 453.191042][T26071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.200846][T26067] EXT4-fs (loop9): This should not happen!! Data will be lost [ 453.200846][T26067] [ 453.213913][T26071] CPU: 1 UID: 0 PID: 26071 Comm: syz.0.7221 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 453.214025][T26071] Tainted: [W]=WARN [ 453.214033][T26071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.214048][T26071] Call Trace: [ 453.214056][T26071] [ 453.214064][T26071] __dump_stack+0x1d/0x30 [ 453.214102][T26071] dump_stack_lvl+0xe8/0x140 [ 453.214125][T26071] dump_stack+0x15/0x1b [ 453.214144][T26071] should_fail_ex+0x265/0x280 [ 453.214180][T26071] should_fail+0xb/0x20 [ 453.214211][T26071] should_fail_usercopy+0x1a/0x20 [ 453.214326][T26071] _copy_to_user+0x20/0xa0 [ 453.214351][T26071] simple_read_from_buffer+0xb5/0x130 [ 453.214391][T26071] proc_fail_nth_read+0x100/0x140 [ 453.214432][T26071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.214518][T26071] vfs_read+0x1a0/0x6f0 [ 453.214562][T26071] ? __rcu_read_unlock+0x4f/0x70 [ 453.214589][T26071] ? __fget_files+0x184/0x1c0 [ 453.214615][T26071] ksys_read+0xda/0x1a0 [ 453.214655][T26071] __x64_sys_read+0x40/0x50 [ 453.214720][T26071] x64_sys_call+0x2d77/0x2fb0 [ 453.214764][T26071] do_syscall_64+0xd2/0x200 [ 453.214811][T26071] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 453.214938][T26071] ? clear_bhb_loop+0x40/0x90 [ 453.214963][T26071] ? clear_bhb_loop+0x40/0x90 [ 453.214989][T26071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.215048][T26071] RIP: 0033:0x7f561d80d33c [ 453.215066][T26071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.215088][T26071] RSP: 002b:00007f561be77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.215110][T26071] RAX: ffffffffffffffda RBX: 00007f561da35fa0 RCX: 00007f561d80d33c [ 453.215125][T26071] RDX: 000000000000000f RSI: 00007f561be770a0 RDI: 0000000000000004 [ 453.215140][T26071] RBP: 00007f561be77090 R08: 0000000000000000 R09: 0000000000000000 [ 453.215154][T26071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.215242][T26071] R13: 0000000000000000 R14: 00007f561da35fa0 R15: 00007ffc5b17a248 [ 453.215264][T26071] [ 453.495169][T26082] loop7: detected capacity change from 0 to 4096 [ 453.502718][T26082] EXT4-fs (loop7): cluster size (1024) smaller than block size (4096) [ 453.513565][T23759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 453.538601][T26091] program syz.9.7225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.560827][T26093] FAULT_INJECTION: forcing a failure. [ 453.560827][T26093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.573991][T26093] CPU: 1 UID: 0 PID: 26093 Comm: syz.0.7226 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 453.574039][T26093] Tainted: [W]=WARN [ 453.574046][T26093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.574060][T26093] Call Trace: [ 453.574066][T26093] [ 453.574073][T26093] __dump_stack+0x1d/0x30 [ 453.574094][T26093] dump_stack_lvl+0xe8/0x140 [ 453.574172][T26082] loop7: detected capacity change from 0 to 8192 [ 453.574190][T26093] dump_stack+0x15/0x1b [ 453.574208][T26093] should_fail_ex+0x265/0x280 [ 453.574252][T26093] should_fail+0xb/0x20 [ 453.574285][T26093] should_fail_usercopy+0x1a/0x20 [ 453.574378][T26093] _copy_from_user+0x1c/0xb0 [ 453.574402][T26093] ____sys_sendmsg+0x1c5/0x4e0 [ 453.574444][T26093] ___sys_sendmsg+0x17b/0x1d0 [ 453.574500][T26093] __sys_sendmmsg+0x178/0x300 [ 453.574588][T26093] __x64_sys_sendmmsg+0x57/0x70 [ 453.574626][T26093] x64_sys_call+0x2f2f/0x2fb0 [ 453.574651][T26093] do_syscall_64+0xd2/0x200 [ 453.574691][T26093] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 453.574722][T26093] ? clear_bhb_loop+0x40/0x90 [ 453.574755][T26093] ? clear_bhb_loop+0x40/0x90 [ 453.574814][T26093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.574885][T26093] RIP: 0033:0x7f561d80e929 [ 453.574903][T26093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.574924][T26093] RSP: 002b:00007f561be77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 453.574946][T26093] RAX: ffffffffffffffda RBX: 00007f561da35fa0 RCX: 00007f561d80e929 [ 453.574961][T26093] RDX: 0000000000000002 RSI: 0000200000005980 RDI: 0000000000000007 [ 453.574989][T26093] RBP: 00007f561be77090 R08: 0000000000000000 R09: 0000000000000000 [ 453.575002][T26093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.575017][T26093] R13: 0000000000000000 R14: 00007f561da35fa0 R15: 00007ffc5b17a248 [ 453.575040][T26093] [ 453.614941][T26097] loop9: detected capacity change from 0 to 2048 [ 453.693169][T26104] FAULT_INJECTION: forcing a failure. [ 453.693169][T26104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.751121][T26107] loop7: detected capacity change from 0 to 2048 [ 453.754630][T26104] CPU: 0 UID: 0 PID: 26104 Comm: syz.0.7230 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 453.754724][T26104] Tainted: [W]=WARN [ 453.754732][T26104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.754748][T26104] Call Trace: [ 453.754756][T26104] [ 453.754809][T26104] __dump_stack+0x1d/0x30 [ 453.754835][T26104] dump_stack_lvl+0xe8/0x140 [ 453.754859][T26104] dump_stack+0x15/0x1b [ 453.754878][T26104] should_fail_ex+0x265/0x280 [ 453.754996][T26104] should_fail+0xb/0x20 [ 453.755069][T26104] should_fail_usercopy+0x1a/0x20 [ 453.755106][T26104] _copy_to_user+0x20/0xa0 [ 453.755155][T26104] __x64_sys_getitimer+0xeb/0x130 [ 453.755192][T26104] x64_sys_call+0x2df0/0x2fb0 [ 453.755217][T26104] do_syscall_64+0xd2/0x200 [ 453.755325][T26104] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 453.755391][T26104] ? clear_bhb_loop+0x40/0x90 [ 453.755416][T26104] ? clear_bhb_loop+0x40/0x90 [ 453.755509][T26104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.755582][T26104] RIP: 0033:0x7f561d80e929 [ 453.755619][T26104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.755641][T26104] RSP: 002b:00007f561be77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000024 [ 453.755694][T26104] RAX: ffffffffffffffda RBX: 00007f561da35fa0 RCX: 00007f561d80e929 [ 453.755743][T26104] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000001 [ 453.755836][T26104] RBP: 00007f561be77090 R08: 0000000000000000 R09: 0000000000000000 [ 453.755853][T26104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.755871][T26104] R13: 0000000000000001 R14: 00007f561da35fa0 R15: 00007ffc5b17a248 [ 453.755898][T26104] [ 453.793680][T26108] SELinux: failed to load policy [ 453.965612][T26107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.007556][T26117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26117 comm=syz.9.7233 [ 454.177848][T26124] loop9: detected capacity change from 0 to 2048 [ 454.249408][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.274225][T26132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26132 comm=syz.9.7236 [ 454.426198][T26138] loop7: detected capacity change from 0 to 4096 [ 454.437370][T26138] EXT4-fs (loop7): cluster size (1024) smaller than block size (4096) [ 454.485207][T26138] loop7: detected capacity change from 0 to 8192 [ 454.983302][T26153] loop6: detected capacity change from 0 to 2048 [ 454.991563][T26152] loop7: detected capacity change from 0 to 2048 [ 455.018497][T26153] SELinux: failed to load policy [ 455.034177][T26152] SELinux: policydb magic number 0x3001f does not match expected magic number 0xf97cff8c [ 455.044362][T26152] SELinux: failed to load policy [ 455.088815][T26166] FAULT_INJECTION: forcing a failure. [ 455.088815][T26166] name failslab, interval 1, probability 0, space 0, times 0 [ 455.101515][T26166] CPU: 0 UID: 0 PID: 26166 Comm: syz.7.7246 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 455.101562][T26166] Tainted: [W]=WARN [ 455.101570][T26166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.101583][T26166] Call Trace: [ 455.101590][T26166] [ 455.101597][T26166] __dump_stack+0x1d/0x30 [ 455.101615][T26166] dump_stack_lvl+0xe8/0x140 [ 455.101632][T26166] dump_stack+0x15/0x1b [ 455.101650][T26166] should_fail_ex+0x265/0x280 [ 455.101719][T26166] ? tcp_sendmsg_fastopen+0x172/0x520 [ 455.101866][T26166] should_failslab+0x8c/0xb0 [ 455.101963][T26166] __kmalloc_cache_noprof+0x4c/0x320 [ 455.102067][T26166] ? strncpy_from_user+0x17d/0x230 [ 455.102094][T26166] tcp_sendmsg_fastopen+0x172/0x520 [ 455.102117][T26166] tcp_sendmsg_locked+0x27be/0x2cc0 [ 455.102179][T26166] ? __rcu_read_unlock+0x4f/0x70 [ 455.102197][T26166] ? avc_has_perm_noaudit+0x1b1/0x200 [ 455.102251][T26166] ? avc_has_perm+0xd3/0x150 [ 455.102280][T26166] ? _raw_spin_unlock_bh+0x36/0x40 [ 455.102304][T26166] ? __pfx_tcp_sendmsg+0x10/0x10 [ 455.102461][T26166] tcp_sendmsg+0x2f/0x50 [ 455.102481][T26166] inet6_sendmsg+0x76/0xd0 [ 455.102508][T26166] __sock_sendmsg+0x8b/0x180 [ 455.102530][T26166] __sys_sendto+0x268/0x330 [ 455.102652][T26166] __x64_sys_sendto+0x76/0x90 [ 455.102677][T26166] x64_sys_call+0x2eb6/0x2fb0 [ 455.102694][T26166] do_syscall_64+0xd2/0x200 [ 455.102804][T26166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 455.102832][T26166] ? clear_bhb_loop+0x40/0x90 [ 455.102855][T26166] ? clear_bhb_loop+0x40/0x90 [ 455.102873][T26166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.102903][T26166] RIP: 0033:0x7f87fd75e929 [ 455.102916][T26166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.102933][T26166] RSP: 002b:00007f87fbdc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 455.102954][T26166] RAX: ffffffffffffffda RBX: 00007f87fd985fa0 RCX: 00007f87fd75e929 [ 455.102968][T26166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 455.102997][T26166] RBP: 00007f87fbdc7090 R08: 000020000072e000 R09: 000000000000001c [ 455.103081][T26166] R10: 00000000200008d4 R11: 0000000000000246 R12: 0000000000000001 [ 455.103095][T26166] R13: 0000000000000000 R14: 00007f87fd985fa0 R15: 00007ffe9daf6de8 [ 455.103117][T26166] [ 455.445778][T26173] loop7: detected capacity change from 0 to 2048 [ 455.478132][T26176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26176 comm=syz.0.7250 [ 455.553314][T26182] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 455.561172][T26182] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 455.659891][T26190] loop6: detected capacity change from 0 to 512 [ 455.729201][T26190] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 455.741889][T26190] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.855782][T26201] netlink: 'syz.9.7255': attribute type 4 has an invalid length. [ 455.955815][T26204] loop7: detected capacity change from 0 to 2048 [ 455.993717][T26204] SELinux: failed to load policy [ 456.041055][T26225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26225 comm=syz.9.7262 [ 456.071305][T24175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.083570][T26227] loop4: detected capacity change from 0 to 2048 [ 456.091705][T26229] C: renamed from lo (while UP) [ 456.098428][T26229] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 456.185675][ T3414] lo speed is unknown, defaulting to 1000 [ 456.191547][ T3414] syz0: Port: 1 Link ACTIVE [ 456.214305][T26242] loop9: detected capacity change from 0 to 2048 [ 456.241265][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 456.241278][ T29] audit: type=1326 audit(2000001129.528:29681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.244595][T26242] SELinux: failed to load policy [ 456.247608][ T29] audit: type=1326 audit(2000001129.528:29682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.299741][ T29] audit: type=1326 audit(2000001129.588:29683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.323347][ T29] audit: type=1326 audit(2000001129.588:29684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.348413][ T29] audit: type=1326 audit(2000001129.628:29685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb56a7bd290 code=0x7ffc0000 [ 456.372120][ T29] audit: type=1326 audit(2000001129.628:29686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.396207][ T29] audit: type=1326 audit(2000001129.628:29687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.396780][T26250] SELinux: failed to load policy [ 456.439051][ T29] audit: type=1326 audit(2000001129.718:29688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.462620][ T29] audit: type=1326 audit(2000001129.718:29689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26257 comm="syz.4.7274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56a7be929 code=0x7ffc0000 [ 456.470104][T26262] ipvlan2: entered promiscuous mode [ 456.491486][T26262] ipvlan2: entered allmulticast mode [ 456.496846][T26262] macvlan0: entered allmulticast mode [ 456.528713][T26266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26266 comm=syz.0.7277 [ 456.566368][ T29] audit: type=1400 audit(2000001129.848:29690): avc: denied { read write } for pid=26259 comm="syz.6.7273" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 456.603579][T26287] loop4: detected capacity change from 0 to 2048 [ 456.639238][T26267] infiniband syz1: set active [ 456.644018][T26267] infiniband syz1: added veth0_to_bridge [ 456.657287][T26282] loop6: detected capacity change from 0 to 512 [ 456.679160][T26282] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 456.712565][T26303] FAULT_INJECTION: forcing a failure. [ 456.712565][T26303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.725717][T26303] CPU: 0 UID: 0 PID: 26303 Comm: syz.4.7282 Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 456.725744][T26303] Tainted: [W]=WARN [ 456.725750][T26303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.725775][T26303] Call Trace: [ 456.725782][T26303] [ 456.725789][T26303] __dump_stack+0x1d/0x30 [ 456.725812][T26303] dump_stack_lvl+0xe8/0x140 [ 456.725834][T26303] dump_stack+0x15/0x1b [ 456.725852][T26303] should_fail_ex+0x265/0x280 [ 456.725880][T26303] should_fail+0xb/0x20 [ 456.725912][T26303] should_fail_usercopy+0x1a/0x20 [ 456.725951][T26303] _copy_to_user+0x20/0xa0 [ 456.725973][T26303] __x64_sys_ustat+0xd3/0x120 [ 456.726002][T26303] x64_sys_call+0x28bd/0x2fb0 [ 456.726019][T26303] do_syscall_64+0xd2/0x200 [ 456.726058][T26303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 456.726086][T26303] ? clear_bhb_loop+0x40/0x90 [ 456.726109][T26303] ? clear_bhb_loop+0x40/0x90 [ 456.726130][T26303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.726204][T26303] RIP: 0033:0x7fb56a7be929 [ 456.726220][T26303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.726239][T26303] RSP: 002b:00007fb568e27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 456.726317][T26303] RAX: ffffffffffffffda RBX: 00007fb56a9e5fa0 RCX: 00007fb56a7be929 [ 456.726330][T26303] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 456.726342][T26303] RBP: 00007fb568e27090 R08: 0000000000000000 R09: 0000000000000000 [ 456.726352][T26303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.726362][T26303] R13: 0000000000000001 R14: 00007fb56a9e5fa0 R15: 00007fffa8d40648 [ 456.726378][T26303] [ 456.769254][T26307] openvswitch: netlink: Message has 6 unknown bytes. [ 456.843186][T26282] EXT4-fs (loop6): 1 truncate cleaned up [ 456.935218][T26307] loop7: detected capacity change from 0 to 512 [ 456.951190][T26307] ext4: Unknown parameter 'uid<00000000000000000000' [ 456.958521][T26267] RDS/IB: syz1: added [ 456.964639][T26267] smc: adding ib device syz1 with port count 1 [ 456.989452][T26267] smc: ib device syz1 port 1 has pnetid [ 457.060457][T26282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.094183][T26328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=26328 comm=syz.4.7290 [ 457.108278][T26330] loop7: detected capacity change from 0 to 1024 [ 457.152309][T26282] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.180121][T26330] EXT4-fs: Ignoring removed bh option [ 457.193485][T26330] EXT4-fs: inline encryption not supported [ 457.209644][T26330] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 457.252658][T26330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 457.322872][T26337] loop9: detected capacity change from 0 to 2048 [ 457.337731][T26339] validate_nla: 3 callbacks suppressed [ 457.337748][T26339] netlink: 'syz.4.7294': attribute type 4 has an invalid length. [ 457.357747][T26339] netlink: 'syz.4.7294': attribute type 4 has an invalid length. [ 457.418767][T26337] SELinux: failed to load policy [ 457.434664][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.459239][T26330] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 2: comm syz.7.7292: lblock 2 mapped to illegal pblock 2 (length 1) [ 457.477006][T26330] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.7292: lblock 0 mapped to illegal pblock 48 (length 1) [ 457.514359][T26352] loop9: detected capacity change from 0 to 1024 [ 457.529194][T26330] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7292: Failed to acquire dquot type 0 [ 457.543825][T26352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.566787][T26352] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 457.576297][T26348] loop4: detected capacity change from 0 to 2048 [ 457.590716][T26330] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 457.619850][T23759] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.640963][T26330] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.7292: mark_inode_dirty error [ 457.685516][T23759] ================================================================== [ 457.693727][T23759] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lrus_cpu [ 457.701583][T23759] [ 457.703915][T23759] write to 0xffff888237c26f10 of 8 bytes by task 24584 on cpu 0: [ 457.711648][T23759] invalidate_bh_lrus_cpu+0x89/0xc0 [ 457.716868][T23759] lru_add_drain_per_cpu+0x55/0x70 [ 457.722020][T23759] process_scheduled_works+0x4cb/0x9d0 [ 457.727530][T23759] worker_thread+0x582/0x770 [ 457.732159][T23759] kthread+0x489/0x510 [ 457.736256][T23759] ret_from_fork+0xda/0x150 [ 457.740778][T23759] ret_from_fork_asm+0x1a/0x30 [ 457.745570][T23759] [ 457.747903][T23759] read to 0xffff888237c26f10 of 8 bytes by task 23759 on cpu 1: [ 457.755538][T23759] has_bh_in_lru+0x35/0x1f0 [ 457.760064][T23759] smp_call_function_many_cond+0x38c/0xbf0 [ 457.765878][T23759] on_each_cpu_cond_mask+0x3c/0x80 [ 457.770994][T23759] invalidate_bh_lrus+0x2a/0x30 [ 457.775860][T23759] invalidate_bdev+0x42/0x70 [ 457.780465][T23759] ext4_put_super+0x624/0x7d0 [ 457.785168][T23759] generic_shutdown_super+0xe6/0x210 [ 457.790465][T23759] kill_block_super+0x2a/0x70 [ 457.795248][T23759] ext4_kill_sb+0x42/0x80 [ 457.799601][T23759] deactivate_locked_super+0x72/0x1c0 [ 457.804980][T23759] deactivate_super+0x97/0xa0 [ 457.809672][T23759] cleanup_mnt+0x269/0x2e0 [ 457.814091][T23759] __cleanup_mnt+0x19/0x20 [ 457.818520][T23759] task_work_run+0x131/0x1a0 [ 457.823124][T23759] exit_to_user_mode_loop+0xe4/0x100 [ 457.828420][T23759] do_syscall_64+0x1d6/0x200 [ 457.833036][T23759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.838941][T23759] [ 457.841274][T23759] value changed: 0xffff888100462bc8 -> 0x0000000000000000 [ 457.848384][T23759] [ 457.850713][T23759] Reported by Kernel Concurrency Sanitizer on: [ 457.856865][T23759] CPU: 1 UID: 0 PID: 23759 Comm: syz-executor Tainted: G W 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(voluntary) [ 457.871108][T23759] Tainted: [W]=WARN [ 457.874914][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.884974][T23759] ================================================================== [ 457.896589][T26330] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 457.912512][T26348] SELinux: failed to load policy [ 457.933308][T26330] EXT4-fs (loop7): 1 orphan inode deleted [ 457.940841][T26330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.953418][T12756] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 457.968297][T26366] ref_ctr_offset mismatch. inode: 0x2c0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x10000000 [ 457.983224][T12756] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 457.995082][T26330] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 48: comm syz.7.7292: lblock 0 mapped to illegal pblock 48 (length 1) [ 458.019448][T22378] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.