last executing test programs: 6m57.314383261s ago: executing program 0 (id=312): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000441}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10000, 0x0, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r3, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r7, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00'], 0x30}}, 0x44) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 6m56.437255811s ago: executing program 0 (id=333): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 6m56.379212462s ago: executing program 0 (id=335): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000600), &(0x7f0000000680)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffff]}, 0x8) 6m56.227714743s ago: executing program 0 (id=337): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0xb8, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x5}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@generic={0x65}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x498, 0x330, 0x330, 0xc0, 0x190, 0x250, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x38}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x10, 0x2, 0x0, 0x0, 0x6]}, {0xffff, [0x2, 0x4, 0x4, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x6}, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {0xff}, {}, 0x99, 0x3, 0xd}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@addrtype={{0x30}, {0x100, 0x80, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x402, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r5}, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd701004e46b00050005000800090002000000180070cd24b841ea070c00a80a000008000b00010000000600010005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) 6m55.814993378s ago: executing program 0 (id=341): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x10, 0x8000, 0x80, 0x2, {{0x16, 0x4, 0x3, 0x1, 0x58, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @remote, {[@noop, @cipso={0x86, 0x3d, 0xfffffffffffffffc, [{0x2, 0x3, "ed"}, {0x6, 0x7, "3f83e43488"}, {0x7, 0x5, "a8ea75"}, {0x7, 0x6, "c154a8ec"}, {0x6, 0xc, "c6599d3b63a4738d3dc0"}, {0x6, 0x4, "dbe4"}, {0x2, 0x12, "6f335ba8ba4a24ceb135a22e5e9d7bbc"}]}, @lsrr={0x83, 0x3, 0xa}]}}}}}) openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x15d480, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getown(r4, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 6m55.430853733s ago: executing program 0 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6m55.370861954s ago: executing program 32 (id=351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 6m12.430476105s ago: executing program 1 (id=838): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x6f, 0x61]}}, 0x0, 0x28}, 0x28) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000001240), 0x4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r2, &(0x7f0000005640)=ANY=[@ANYRES16=r4], 0x69) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xb, 0xc, &(0x7f0000000700)=ANY=[@ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x400c84, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x79a, &(0x7f0000001480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14) syz_io_uring_setup(0x635, &(0x7f0000003080)={0x0, 0x73d2, 0x82, 0x3, 0xc6}, &(0x7f0000003100), &(0x7f0000003140)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') socket(0x2, 0x2, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000040400000900000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xd, 0x3, 0x4, 0x7, 0x1, r8, 0x15b4}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26e}, {&(0x7f0000000680)="b0fef28adda62f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23ad07caa", 0x6e}], 0x2}, 0x8000) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) 6m11.509722226s ago: executing program 1 (id=860): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) set_robust_list(0x0, 0x0) inotify_init() r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 6m11.387665987s ago: executing program 1 (id=861): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) 6m11.324623478s ago: executing program 1 (id=862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='{/}\\') pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d00)={&(0x7f0000000140)='rpcgss_seqno\x00', r2, 0x0, 0x7}, 0x18) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, 0x0, 0x0) close_range(r3, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB=',access=o']) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@data_journal}, {@errors_remount}, {@nombcache}]}, 0x1, 0x433, &(0x7f0000000e00)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0240000005"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x248) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) ioctl$VFAT_IOCTL_READDIR_BOTH(r9, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m10.933418073s ago: executing program 1 (id=867): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) 6m10.25773532s ago: executing program 1 (id=878): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8081) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 6m10.198290001s ago: executing program 33 (id=878): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8081) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 4m53.699037997s ago: executing program 6 (id=2053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r5) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r9 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m52.839523507s ago: executing program 6 (id=2064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9204, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x9, 0x0, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='cdg', 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000d0000000100000040"], 0x50) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x1000}) openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0x20500, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000380)={r2, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x20000}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r4, 0x0, 0xeffd) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10584, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000300)}, 0x88c7, 0x10000, 0x8, 0x0, 0x808, 0xa, 0x400b, 0x0, 0x0, 0x0, 0x20000006}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='svcrdma_wc_read\x00', r6}, 0x18) inotify_rm_watch(0xffffffffffffffff, 0x0) write$UHID_DESTROY(r5, &(0x7f0000000080), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 4m51.949374447s ago: executing program 6 (id=2071): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x8a) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 4m51.093881857s ago: executing program 6 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 4m50.095015628s ago: executing program 6 (id=2087): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='f2fs_fallocate\x00', r0, 0x0, 0x800}, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 4m50.094735508s ago: executing program 6 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 4m42.258844298s ago: executing program 4 (id=2152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000240)='$@\x00F\xb3w\x9f\xab^\xc2\xe2\xd5\x01-<\xfd\xfe\xecd\xdaem,\xeb^\x1f\xedy,>\xce\xb1\x9c\xcc\xb8\xff\xfe\xc5?\xe7nZ\xa6\x88v\xaf\xdd}\x8c\xcd\xdd\'\"\xaf7', 0x40, 0x5c, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 4m41.421460487s ago: executing program 4 (id=2157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 4m41.332499268s ago: executing program 4 (id=2158): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) 4m40.244565661s ago: executing program 4 (id=2166): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000009818000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x40010, r5, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = memfd_secret(0x0) futimesat(r8, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0xfffffffffffffe81, r10, 0x100, 0x70bd2a, 0x25dfdafc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40014}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000426bd7000fddbdf255e000000080000", @ANYRES32=r12, @ANYBLOB="080027000000000008002600501400000800a00000000100"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) 4m39.332482181s ago: executing program 4 (id=2173): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 4m39.039201675s ago: executing program 4 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) 4m39.038839935s ago: executing program 34 (id=2175): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) 4m35.04327465s ago: executing program 35 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2m3.469434576s ago: executing program 7 (id=4267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) setresgid(0xee00, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xfe4f, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd70ae49d6a3250100000008000100fcffffff340004800500030005000000050003000200000005000300080000000500030006000000050003000100000005000300050000000800020002000000"], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x40, 0x8a) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/protocols\x00') preadv(r6, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) pread64(r6, &(0x7f0000004380)=""/246, 0xf6, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 2m2.593701726s ago: executing program 7 (id=4276): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x428a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 2m2.552705306s ago: executing program 7 (id=4279): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4104004, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@minixdf}, {@debug}, {@lazytime}, {@noauto_da_alloc}, {@nombcache}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) personality(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x800, 0xfffffffa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xc, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r5 = semget(0x1, 0x4, 0x3be) semop(r5, 0x0, 0x0) semop(r5, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000f1ffffff210000001400018008000100", @ANYRES32=r9, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m1.294018821s ago: executing program 7 (id=4294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2509000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a523850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000180)={r0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m1.253033551s ago: executing program 7 (id=4295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0), 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, 0x0, 0x0) close_range(r3, r4, 0x0) 1m45.960697257s ago: executing program 36 (id=4295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8811}, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200000, &(0x7f00000000c0), 0x1, 0x50d, &(0x7f0000001bc0)="$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") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r5 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, 0x0, 0x0) close_range(r3, r4, 0x0) 3.943886044s ago: executing program 2 (id=5948): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) 3.009765875s ago: executing program 2 (id=5956): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x808, 0x83bf}, 0x805, 0x10000, 0x1, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 2.896342646s ago: executing program 2 (id=5958): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) 2.849348307s ago: executing program 3 (id=5961): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a85}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) (rerun: 32) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) fdatasync(r1) (async) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) (async) r4 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) (async) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) (async, rerun: 64) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8e}}, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r11}, &(0x7f00000006c0), &(0x7f0000000380)=r10}, 0x20) (async, rerun: 64) recvmsg$unix(r10, 0x0, 0x0) (async, rerun: 64) shutdown(r9, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) (async, rerun: 64) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2.60154737s ago: executing program 3 (id=5962): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 2.478441941s ago: executing program 3 (id=5966): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2}, 0x1c) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, &(0x7f0000000180), 0xfe) 2.134603845s ago: executing program 5 (id=5974): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="950000000000000085000000b900000018170000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000950000000000000085200000030000001812000000000000000000000000000000b6e75c0a88c17c79952fe2aca15cbe07d524f3bbd497196c4aa8cc42eb454961db7796af920456faadf41d44e48e4e6a77f90f53aa9f6407d98dd80c60ed6d916a85fbbfc00f0b9db6cda91d0b60c782611686c40d2d8cc361dc5630db8b4cbf9b74", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007927f0ff01000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 2.054393006s ago: executing program 5 (id=5975): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") 1.609021941s ago: executing program 2 (id=5977): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x17, &(0x7f0000000b40)=ANY=[@ANYBLOB="950000000000000085000000b900000018170000", @ANYRES32, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000950000000000000085200000030000001812000000000000000000000000000000b6e75c0a88c17c79952fe2aca15cbe07d524f3bbd497196c4aa8cc42eb454961db7796af920456faadf41d44e48e4e6a77f90f53aa9f6407d98dd80c60ed6d916a85fbbfc00f0b9db6cda91d0b60c782611686c40d2d8cc361dc5630db8b4cbf9b74", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007927f0ff01000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1.579606331s ago: executing program 3 (id=5978): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.550215432s ago: executing program 2 (id=5979): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0xe8}]}) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x1) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kmem_cache_free\x00', r2, 0x0, 0x800000000000000}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') readlinkat(r3, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000640)=""/78, 0x4e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x3, 0xc6, 0xf8, 0x80000001}, {0x6, 0x6, 0x8, 0xfa}, {0x0, 0x7, 0x5, 0x8001}, {0x1, 0x40, 0x8, 0x8}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) flock(0xffffffffffffffff, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) dup3(r4, 0xffffffffffffffff, 0x0) 1.539386512s ago: executing program 3 (id=5981): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46"], 0x10b8}, 0x106) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000004c0)={0x0, 0x0, "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", "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"}) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0x3) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb7, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_wait(r4, &(0x7f0000000040)=[{}], 0x1, 0x400) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX=r7, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) readv(r3, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/138, 0x8a}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x9, 0xfe, "0006000000df0066952e0d16c708db720800"}) r10 = syz_open_pts(r3, 0x42) r11 = dup3(r10, r3, 0x0) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xd, {"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", 0x1000}}, 0xffffff5c) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004"], 0x48) 1.488196852s ago: executing program 5 (id=5982): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 1.440784213s ago: executing program 5 (id=5983): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x9d}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1840569dfff7ff"], 0x18, 0x8000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r2, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x6071, 0x0, 0xe7, {[@fastopen={0x22, 0x2}, @timestamp={0x8, 0xa, 0x100, 0x3}, @window={0x3, 0x3, 0x96}]}}}}}}}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x8}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4000}}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@dev}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@empty}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3501, 0x5, 0x0, 0x0, 0x0, 0x9}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = memfd_create(0x0, 0x2) write$binfmt_misc(r7, &(0x7f0000000180)="e502", 0x2) 1.293824205s ago: executing program 5 (id=5985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') sendto$unix(r0, &(0x7f0000000100)="bdec270b15e1cc1b6478258b66070feff18596865fc08260ecfc42cdddbdb8b62ed4f1c966e0d3afc76cc38655fe3a1484443fe93b4874a96de894cf1bbf5361f5ed811f966f1c1ccbe1badc58a303fd6cc4d4dabac88432c8314f4e5845a32350121c321d89abd022ca03d2aadf78c1b230c5a196fd4e5c2e9f34cd42", 0x7d, 0x20040001, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r3, 0x0, 0xfffffffffffffff4}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x205400, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, &(0x7f00000003c0)=""/17, 0x0}, 0x58) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.292613574s ago: executing program 9 (id=5986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 1.270645995s ago: executing program 9 (id=5987): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.190961496s ago: executing program 8 (id=5988): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00"/12], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) set_robust_list(0x0, 0x0) inotify_init() r2 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) chmod(&(0x7f0000000180)='./file0\x00', 0x257) syz_emit_ethernet(0xfc2, &(0x7f0000002900)=ANY=[], 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000780)) recvmmsg(r6, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1014}, {&(0x7f0000000200)=""/6, 0x6}, {0x0}], 0x5}}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000680)=""/216, 0xd8}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000840)=""/89, 0x59}, {&(0x7f00000008c0)=""/136, 0x88}, {&(0x7f0000000980)=""/237, 0xed}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000a80)=""/149, 0x95}], 0x7, &(0x7f0000000580)=""/15, 0xf}, 0x9}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000bc0)=""/35, 0x23}], 0x1, &(0x7f0000003d80)=""/4096, 0x1000}, 0x8}], 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "3df2d116e4d6bd15", "0f2faa4bd33aa8c00f77dacc9716f49f", "42efa598", "4d0b32c1e009b623"}, 0x28) write(r6, 0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 1.112978087s ago: executing program 9 (id=5989): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.091450377s ago: executing program 9 (id=5990): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, 0xfffffffffffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110130000004fb48405000000000000d2e30036118e1b32"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 894.514809ms ago: executing program 8 (id=5991): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r4, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 842.63551ms ago: executing program 8 (id=5992): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0), 0x0, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 807.27505ms ago: executing program 8 (id=5993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x81, r0}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x335041) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x4000010, r1, 0x3ac9c000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresgid(0xee01, 0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 772.325501ms ago: executing program 8 (id=5994): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000240)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='source\x00\xb5a8\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x00\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000a40)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xffb\x0f\x04\xb7\xce\xc1\xfbTX\x91P\x1f\x19\xf9\x12\xa5)', 0xfeffffff00000000) r8 = syz_open_dev$hidraw(&(0x7f0000000b40), 0x9, 0x4b442) ioctl$HIDIOCGRDESC(r8, 0x4030582a, 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f00000004c0)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x16, 0x1f, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000908b0000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000f8ffffff18000000010100000000000038ee000018110000", @ANYRES32, @ANYBLOB="00004000000000e8b602000000000000850000008600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000000085000000860000006f61300014000000852000000400000018640000000000000000000005000000697a000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xffffd6d8, 0x2b, &(0x7f0000000780)=""/43, 0x40f00, 0x1f91ca532eeafe6b, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x0, 0x49e5, 0x271b}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000f80)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000fc0)=[{0x1, 0x3, 0xb, 0x3}, {0x3, 0x3, 0xf, 0xa}, {0x5, 0x4, 0x8}, {0x3, 0x3, 0x5, 0x7}], 0x10, 0x6}, 0x94) 583.143943ms ago: executing program 2 (id=5995): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 572.182583ms ago: executing program 3 (id=5996): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000000000804dbc1258afbf026fc7c49c3fddc60a7465a67dcf3b0d158c4602b5928b09286995e01b9ab06be66c6597952636c350f008e34de3d4db65ec6e9ef071811c76b9fbbadc27cf42aa71cb4d3fe7096929cfc1013df84ef3fc65fb3303d145b82658ef8de5d12bb578f66ca8f860a8a7a0925d7aadd4a49da976d81b8fcfb46488768f038c9f54ec4d5b7666a0c6111646b71bd5b7cd7e327f6ad338e28f8276dca9639bfd8a85f949e9ec3dd455cfdc06f7b442b45e00bbbde4b765f3ebf9e2"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ustat(0x3, 0x0) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, 0xfffffffffffffffe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110130000004fb48405000000000000d2e30036118e1b32"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 565.086063ms ago: executing program 8 (id=5997): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r5 = semget(0x1, 0x4, 0x3be) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r5, &(0x7f00000001c0)=[{0x3, 0x3, 0x800}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000f1ffffff21", @ANYRES32=r9, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 486.775794ms ago: executing program 9 (id=5998): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[], 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x4, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000380), 0xc}, 0x114042, 0x0, 0xfdfffffc, 0x0, 0x3, 0x2, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 60.481609ms ago: executing program 9 (id=5999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 0s ago: executing program 5 (id=6000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) kernel console output (not intermixed with test programs): [T20893] Call Trace: [ 446.010280][T20893] [ 446.010289][T20893] __dump_stack+0x1d/0x30 [ 446.010349][T20893] dump_stack_lvl+0xe8/0x140 [ 446.010428][T20893] dump_stack+0x15/0x1b [ 446.010447][T20893] should_fail_ex+0x265/0x280 [ 446.010469][T20893] should_failslab+0x8c/0xb0 [ 446.010553][T20893] __kmalloc_noprof+0xa5/0x570 [ 446.010660][T20893] ? cond_policydb_dup+0xa3/0x4e0 [ 446.010685][T20893] cond_policydb_dup+0xa3/0x4e0 [ 446.010712][T20893] security_set_bools+0xa0/0x340 [ 446.010800][T20893] sel_commit_bools_write+0x1ea/0x270 [ 446.010826][T20893] vfs_writev+0x406/0x8b0 [ 446.010860][T20893] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 446.010963][T20893] ? mutex_lock+0xd/0x30 [ 446.010996][T20893] do_writev+0xe7/0x210 [ 446.011108][T20893] __x64_sys_writev+0x45/0x50 [ 446.011139][T20893] x64_sys_call+0x1e9a/0x3000 [ 446.011164][T20893] do_syscall_64+0xd2/0x200 [ 446.011188][T20893] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 446.011254][T20893] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.011364][T20893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.011387][T20893] RIP: 0033:0x7fa207eef6c9 [ 446.011434][T20893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.011455][T20893] RSP: 002b:00007fa206957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 446.011475][T20893] RAX: ffffffffffffffda RBX: 00007fa208145fa0 RCX: 00007fa207eef6c9 [ 446.011489][T20893] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000005 [ 446.011572][T20893] RBP: 00007fa206957090 R08: 0000000000000000 R09: 0000000000000000 [ 446.011596][T20893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.011610][T20893] R13: 00007fa208146038 R14: 00007fa208145fa0 R15: 00007ffe614ec688 [ 446.011630][T20893] [ 446.012220][T20888] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 446.234773][T20888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.256200][T20903] loop9: detected capacity change from 0 to 128 [ 446.277734][T20903] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 446.289971][T14018] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /434/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 446.291134][T20903] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 446.351205][T14018] EXT4-fs (loop5): Remounting filesystem read-only [ 446.363001][T14018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.432291][T10330] EXT4-fs error (device loop8): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /575/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 446.484026][T20914] loop5: detected capacity change from 0 to 512 [ 446.502378][T10330] EXT4-fs (loop8): Remounting filesystem read-only [ 446.536819][T10330] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.563229][T20914] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.5453: bad orphan inode 11862016 [ 446.580821][T20914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 446.594132][T20914] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.852279][T14018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 446.906320][T20933] loop3: detected capacity change from 0 to 512 [ 446.921643][T20933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.935914][T20929] loop8: detected capacity change from 0 to 32768 [ 446.969706][T20944] SELinux: ebitmap: empty map [ 446.975704][T20944] SELinux: failed to load policy [ 446.981064][T20929] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 446.986514][T20929] loop8: p1 start 460800 is beyond EOD, truncated [ 446.993049][T20929] loop8: p2 size 83886080 extends beyond EOD, truncated [ 447.005246][T20929] loop8: p5 start 460800 is beyond EOD, truncated [ 447.011779][T20929] loop8: p6 size 83886080 extends beyond EOD, truncated [ 447.098899][T17683] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 447.111745][T20955] __nla_validate_parse: 1 callbacks suppressed [ 447.111765][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5467'. [ 447.388084][T20977] SELinux: ebitmap: empty map [ 447.394116][T20977] SELinux: failed to load policy [ 447.404100][T20978] 9p: Unknown access argument : -22 [ 447.455627][T20983] netlink: 56 bytes leftover after parsing attributes in process `syz.9.5473'. [ 447.464938][T20983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5473'. [ 447.548797][T20988] loop8: detected capacity change from 0 to 128 [ 447.557356][T20988] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 447.570474][T20988] ext4 filesystem being mounted at /577/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 447.614844][T20991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5478'. [ 447.634240][T13117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.700099][T21001] loop3: detected capacity change from 0 to 512 [ 447.742342][T21001] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5483: bad orphan inode 11862016 [ 447.755568][T21012] 8021q: VLANs not supported on caif0 [ 447.775546][T21001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 447.799580][T21001] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.832870][T21017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5484'. [ 447.858797][T21017] hsr_slave_0: left promiscuous mode [ 447.866232][T21017] hsr_slave_1: left promiscuous mode [ 447.969447][T21023] loop5: detected capacity change from 0 to 164 [ 447.977335][T21023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 447.987022][T21023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 447.995493][T21023] Symlink component flag not implemented [ 447.995817][T21025] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5487'. [ 448.001170][T21023] Symlink component flag not implemented [ 448.016242][T21023] Symlink component flag not implemented (7) [ 448.022265][T21023] Symlink component flag not implemented (116) [ 448.035161][T21023] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 448.041559][T21027] loop3: detected capacity change from 0 to 128 [ 448.049386][T21023] rock: directory entry would overflow storage [ 448.051917][T21027] ext4 filesystem being mounted at /514/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 448.055955][T21023] rock: sig=0x4f50, size=4, remaining=3 [ 448.055976][T21023] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 448.402510][T21038] loop9: detected capacity change from 0 to 512 [ 448.924111][T21055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5493'. [ 449.000102][T21066] loop3: detected capacity change from 0 to 512 [ 449.017851][T21066] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5498: bad orphan inode 11862016 [ 449.029417][T21066] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.058695][T21071] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 449.192710][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5506'. [ 449.447406][T21105] loop5: detected capacity change from 0 to 512 [ 449.500174][T21103] loop3: detected capacity change from 0 to 32768 [ 449.511254][T21110] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5514'. [ 449.520432][T21110] IPv6: NLM_F_REPLACE set, but no existing node found! [ 449.535168][T21103] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 449.540497][T21103] loop3: p1 start 460800 is beyond EOD, truncated [ 449.547049][T21103] loop3: p2 size 83886080 extends beyond EOD, truncated [ 449.558458][T21103] loop3: p5 start 460800 is beyond EOD, truncated [ 449.565027][T21103] loop3: p6 size 83886080 extends beyond EOD, truncated [ 449.570737][T21116] loop8: detected capacity change from 0 to 512 [ 449.586327][T21116] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.5515: bad orphan inode 11862016 [ 449.597773][T21116] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.760333][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5519'. [ 449.868435][T21139] netlink: 'syz.2.5524': attribute type 16 has an invalid length. [ 449.876479][T21139] netlink: 'syz.2.5524': attribute type 17 has an invalid length. [ 450.113037][T21166] loop9: detected capacity change from 0 to 128 [ 450.129147][T21166] FAT-fs (loop9): Directory bread(block 32) failed [ 450.135811][T21166] FAT-fs (loop9): Directory bread(block 33) failed [ 450.142355][T21166] FAT-fs (loop9): Directory bread(block 34) failed [ 450.149080][T21166] FAT-fs (loop9): Directory bread(block 35) failed [ 450.155628][T21166] FAT-fs (loop9): Directory bread(block 36) failed [ 450.162220][T21166] FAT-fs (loop9): Directory bread(block 37) failed [ 450.169150][T21166] FAT-fs (loop9): Directory bread(block 38) failed [ 450.175737][T21166] FAT-fs (loop9): Directory bread(block 39) failed [ 450.183159][T21166] FAT-fs (loop9): Directory bread(block 40) failed [ 450.191582][T21166] FAT-fs (loop9): Directory bread(block 41) failed [ 450.212813][T21169] loop3: detected capacity change from 0 to 1024 [ 450.278720][T21166] netlink: 'syz.9.5535': attribute type 3 has an invalid length. [ 450.427842][T21187] FAULT_INJECTION: forcing a failure. [ 450.427842][T21187] name failslab, interval 1, probability 0, space 0, times 0 [ 450.440881][T21187] CPU: 0 UID: 0 PID: 21187 Comm: syz.9.5542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 450.440916][T21187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.440932][T21187] Call Trace: [ 450.440992][T21187] [ 450.441001][T21187] __dump_stack+0x1d/0x30 [ 450.441027][T21187] dump_stack_lvl+0xe8/0x140 [ 450.441170][T21187] dump_stack+0x15/0x1b [ 450.441256][T21187] should_fail_ex+0x265/0x280 [ 450.441277][T21187] ? __se_sys_mount+0xef/0x2e0 [ 450.441311][T21187] should_failslab+0x8c/0xb0 [ 450.441351][T21187] __kmalloc_cache_noprof+0x4c/0x4a0 [ 450.441464][T21187] ? memdup_user+0x99/0xd0 [ 450.441497][T21187] __se_sys_mount+0xef/0x2e0 [ 450.441586][T21187] ? fput+0x8f/0xc0 [ 450.441606][T21187] ? ksys_write+0x192/0x1a0 [ 450.441642][T21187] __x64_sys_mount+0x67/0x80 [ 450.441741][T21187] x64_sys_call+0x2b51/0x3000 [ 450.441825][T21187] do_syscall_64+0xd2/0x200 [ 450.441853][T21187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 450.441909][T21187] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 450.441943][T21187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.442033][T21187] RIP: 0033:0x7fd63109f6c9 [ 450.442049][T21187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.442068][T21187] RSP: 002b:00007fd62faff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 450.442109][T21187] RAX: ffffffffffffffda RBX: 00007fd6312f5fa0 RCX: 00007fd63109f6c9 [ 450.442127][T21187] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 450.442144][T21187] RBP: 00007fd62faff090 R08: 0000200000000140 R09: 0000000000000000 [ 450.442161][T21187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.442176][T21187] R13: 00007fd6312f6038 R14: 00007fd6312f5fa0 R15: 00007ffd29d02868 [ 450.442202][T21187] [ 450.676641][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 450.676661][ T29] audit: type=1400 audit(1762574167.715:39749): avc: denied { setopt } for pid=21194 comm="syz.8.5547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 450.686349][T21193] loop9: detected capacity change from 0 to 1024 [ 450.710194][T21193] EXT4-fs: Ignoring removed bh option [ 450.716376][T21193] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 450.748107][ T29] audit: type=1326 audit(1762574167.795:39750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.771924][ T29] audit: type=1326 audit(1762574167.795:39751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.795453][ T29] audit: type=1326 audit(1762574167.795:39752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.819181][ T29] audit: type=1326 audit(1762574167.795:39753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.842824][ T29] audit: type=1326 audit(1762574167.795:39754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.866476][ T29] audit: type=1326 audit(1762574167.795:39755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.890127][ T29] audit: type=1326 audit(1762574167.795:39756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.913983][ T29] audit: type=1326 audit(1762574167.795:39757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.937664][ T29] audit: type=1326 audit(1762574167.795:39758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21191 comm="syz.9.5546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 450.988773][T21202] loop8: detected capacity change from 0 to 128 [ 450.998190][T21202] ext4 filesystem being mounted at /591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 451.044997][T21198] loop3: detected capacity change from 0 to 32768 [ 451.067656][T21198] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 451.072975][T21198] loop3: p1 start 460800 is beyond EOD, truncated [ 451.079460][T21198] loop3: p2 size 83886080 extends beyond EOD, truncated [ 451.087936][T21198] loop3: p5 start 460800 is beyond EOD, truncated [ 451.094472][T21198] loop3: p6 size 83886080 extends beyond EOD, truncated [ 451.111843][T17683] EXT4-fs error (device loop9): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /204/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 451.144330][T17683] EXT4-fs (loop9): Remounting filesystem read-only [ 451.234420][T21222] loop9: detected capacity change from 0 to 1024 [ 451.311953][T21233] No such timeout policy "syz1" [ 451.327179][T21236] loop5: detected capacity change from 0 to 128 [ 451.346126][T21238] loop9: detected capacity change from 0 to 164 [ 451.353542][T21238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 451.362545][T21238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 451.372370][T21238] Symlink component flag not implemented [ 451.378108][T21238] Symlink component flag not implemented [ 451.383894][T21238] Symlink component flag not implemented (7) [ 451.390625][T21238] Symlink component flag not implemented (116) [ 451.399592][T21238] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 451.408868][T21238] rock: directory entry would overflow storage [ 451.415045][T21238] rock: sig=0x4f50, size=4, remaining=3 [ 451.420693][T21238] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 451.497577][T21243] loop9: detected capacity change from 0 to 128 [ 451.506097][T21243] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 451.645423][T21252] loop3: detected capacity change from 0 to 128 [ 451.736201][T21258] loop3: detected capacity change from 0 to 1024 [ 451.858968][T21266] loop8: detected capacity change from 0 to 1024 [ 451.926911][T21273] SELinux: ebitmap: empty map [ 451.933281][T21273] SELinux: failed to load policy [ 451.963142][T21278] loop8: detected capacity change from 0 to 1024 [ 451.983772][T21278] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 451.998892][T21278] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 452.011188][T21278] EXT4-fs (loop8): This should not happen!! Data will be lost [ 452.011188][T21278] [ 452.021072][T21278] EXT4-fs (loop8): Total free blocks count 0 [ 452.027055][T21278] EXT4-fs (loop8): Free/Dirty block details [ 452.033020][T21278] EXT4-fs (loop8): free_blocks=68451041280 [ 452.038884][T21278] EXT4-fs (loop8): dirty_blocks=80 [ 452.044036][T21278] EXT4-fs (loop8): Block reservation details [ 452.050060][T21278] EXT4-fs (loop8): i_reserved_data_blocks=5 [ 452.067100][ T52] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 452.079982][ T52] EXT4-fs (loop8): This should not happen!! Data will be lost [ 452.079982][ T52] [ 452.240713][T21293] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 452.247321][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 452.254869][T21293] vhci_hcd vhci_hcd.0: Device attached [ 452.266300][T21293] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 452.273650][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 452.281262][T21293] vhci_hcd vhci_hcd.0: Device attached [ 452.288443][T21293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 452.297032][T21293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 452.306451][T21293] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 452.340884][T21300] loop8: detected capacity change from 0 to 512 [ 452.355262][T21293] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 452.361916][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 452.369559][T21293] vhci_hcd vhci_hcd.0: Device attached [ 452.376029][T21306] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(21) [ 452.382656][T21306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 452.390360][T21306] vhci_hcd vhci_hcd.0: Device attached [ 452.417570][T21307] vhci_hcd: connection closed [ 452.417792][ T57] vhci_hcd: stop threads [ 452.426808][ T57] vhci_hcd: release socket [ 452.431241][ T57] vhci_hcd: disconnect device [ 452.451521][T21303] vhci_hcd: connection closed [ 452.451678][T21294] vhci_hcd: connection closed [ 452.456597][ T57] vhci_hcd: stop threads [ 452.465588][ T57] vhci_hcd: release socket [ 452.470037][ T57] vhci_hcd: disconnect device [ 452.474806][T21298] vhci_hcd: connection closed [ 452.475220][ T57] vhci_hcd: stop threads [ 452.484383][ T57] vhci_hcd: release socket [ 452.488853][ T57] vhci_hcd: disconnect device [ 452.494187][ T57] vhci_hcd: stop threads [ 452.498517][ T57] vhci_hcd: release socket [ 452.502961][ T57] vhci_hcd: disconnect device [ 452.642945][T21311] loop9: detected capacity change from 0 to 128 [ 452.677050][T21316] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 452.710370][T21320] loop9: detected capacity change from 0 to 1024 [ 452.723916][T21320] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 452.739622][T21320] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 452.751956][T21320] EXT4-fs (loop9): This should not happen!! Data will be lost [ 452.751956][T21320] [ 452.761792][T21320] EXT4-fs (loop9): Total free blocks count 0 [ 452.767798][T21320] EXT4-fs (loop9): Free/Dirty block details [ 452.773741][T21320] EXT4-fs (loop9): free_blocks=68451041280 [ 452.779561][T21320] EXT4-fs (loop9): dirty_blocks=80 [ 452.784808][T21320] EXT4-fs (loop9): Block reservation details [ 452.790925][T21320] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 452.810373][ T37] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 452.822762][ T37] EXT4-fs (loop9): This should not happen!! Data will be lost [ 452.822762][ T37] [ 452.881525][T21337] loop9: detected capacity change from 0 to 128 [ 452.892697][T21337] FAT-fs (loop9): Directory bread(block 32) failed [ 452.899362][T21337] FAT-fs (loop9): Directory bread(block 33) failed [ 452.906046][T21337] FAT-fs (loop9): Directory bread(block 34) failed [ 452.912738][T21337] FAT-fs (loop9): Directory bread(block 35) failed [ 452.919318][T21337] FAT-fs (loop9): Directory bread(block 36) failed [ 452.925856][T21337] FAT-fs (loop9): Directory bread(block 37) failed [ 452.932440][T21337] FAT-fs (loop9): Directory bread(block 38) failed [ 452.938975][T21337] FAT-fs (loop9): Directory bread(block 39) failed [ 452.945619][T21337] FAT-fs (loop9): Directory bread(block 40) failed [ 452.952203][T21337] FAT-fs (loop9): Directory bread(block 41) failed [ 453.031649][T21345] loop8: detected capacity change from 0 to 512 [ 453.044556][T21345] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.5591: bad orphan inode 11862016 [ 453.048588][T21346] 9pnet_fd: Insufficient options for proto=fd [ 453.063669][T21345] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.076620][T21337] netlink: 'syz.9.5588': attribute type 3 has an invalid length. [ 453.105529][T21351] SELinux: failed to load policy [ 453.150310][T21354] loop9: detected capacity change from 0 to 2048 [ 453.161701][T21355] __nla_validate_parse: 5 callbacks suppressed [ 453.161717][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5594'. [ 453.398631][T21366] wg1 speed is unknown, defaulting to 1000 [ 453.415088][T21366] lo speed is unknown, defaulting to 1000 [ 453.430151][T21369] loop8: detected capacity change from 0 to 512 [ 453.433362][T21366] lo speed is unknown, defaulting to 1000 [ 453.460175][T21369] EXT4-fs error (device loop8): ext4_init_orphan_info:581: comm syz.8.5596: inode #0: comm syz.8.5596: iget: illegal inode # [ 453.510079][T21369] EXT4-fs (loop8): get orphan inode failed [ 453.522110][T21369] EXT4-fs (loop8): mount failed [ 453.531149][T21374] loop9: detected capacity change from 0 to 1024 [ 453.560589][T21374] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 453.575821][T21374] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 453.588062][T21374] EXT4-fs (loop9): This should not happen!! Data will be lost [ 453.588062][T21374] [ 453.592453][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5596'. [ 453.597785][T21374] EXT4-fs (loop9): Total free blocks count 0 [ 453.612651][T21374] EXT4-fs (loop9): Free/Dirty block details [ 453.618557][T21374] EXT4-fs (loop9): free_blocks=68451041280 [ 453.624421][T21374] EXT4-fs (loop9): dirty_blocks=80 [ 453.629612][T21374] EXT4-fs (loop9): Block reservation details [ 453.635812][T21374] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 453.669427][ T52] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 453.681832][ T52] EXT4-fs (loop9): This should not happen!! Data will be lost [ 453.681832][ T52] [ 453.948084][T21383] loop3: detected capacity change from 0 to 512 [ 454.782447][T21395] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 454.789212][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 454.796794][T21395] vhci_hcd vhci_hcd.0: Device attached [ 454.802810][T21389] netlink: 'syz.2.5603': attribute type 3 has an invalid length. [ 454.820958][T21391] SELinux: failed to load policy [ 454.831295][T21395] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8) [ 454.837848][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 454.845545][T21395] vhci_hcd vhci_hcd.0: Device attached [ 454.858641][T21395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.867227][T21395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.876437][T21395] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 454.896945][T21395] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(18) [ 454.903598][T21395] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 454.911407][T21395] vhci_hcd vhci_hcd.0: Device attached [ 454.952815][T21409] vhci_hcd vhci_hcd.0: pdev(9) rhport(6) sockfd(21) [ 454.959474][T21409] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.967203][T21409] vhci_hcd vhci_hcd.0: Device attached [ 454.980222][T21410] vhci_hcd: connection closed [ 454.980383][T21401] vhci_hcd: connection closed [ 454.980518][T21398] vhci_hcd: connection closed [ 454.985681][ T57] vhci_hcd: stop threads [ 454.990103][T21396] vhci_hcd: connection closed [ 454.994794][ T57] vhci_hcd: release socket [ 454.994810][ T57] vhci_hcd: disconnect device [ 455.013178][ T57] vhci_hcd: stop threads [ 455.013322][ T4883] vhci_hcd: vhci_device speed not set [ 455.017457][ T57] vhci_hcd: release socket [ 455.027374][ T57] vhci_hcd: disconnect device [ 455.034083][T21416] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 455.052867][ T57] vhci_hcd: stop threads [ 455.057184][ T57] vhci_hcd: release socket [ 455.061745][ T57] vhci_hcd: disconnect device [ 455.068972][ T57] vhci_hcd: stop threads [ 455.073322][ T57] vhci_hcd: release socket [ 455.075207][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 455.077755][ T57] vhci_hcd: disconnect device [ 455.091492][T21423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 455.094427][ T4883] usb 19-1: new full-speed USB device number 4 using vhci_hcd [ 455.112993][ T4883] usb 19-1: enqueue for inactive port 0 [ 455.118623][ T4883] usb 19-1: enqueue for inactive port 0 [ 455.124366][ T4883] usb 19-1: enqueue for inactive port 0 [ 455.171570][T21417] wg1 speed is unknown, defaulting to 1000 [ 455.180003][T21417] lo speed is unknown, defaulting to 1000 [ 455.185834][T21436] loop5: detected capacity change from 0 to 1024 [ 455.186771][T21417] lo speed is unknown, defaulting to 1000 [ 455.199711][ T4883] vhci_hcd: vhci_device speed not set [ 455.229303][T21442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5615'. [ 455.283629][T21417] chnl_net:caif_netlink_parms(): no params data found [ 455.317667][T21449] SELinux: failed to load policy [ 455.347310][T21417] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.354611][T21417] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.362054][T21417] bridge_slave_0: entered allmulticast mode [ 455.368698][T21417] bridge_slave_0: entered promiscuous mode [ 455.375938][T21417] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.383071][T21417] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.390479][T21417] bridge_slave_1: entered allmulticast mode [ 455.397822][T21417] bridge_slave_1: entered promiscuous mode [ 455.410108][T21458] loop3: detected capacity change from 0 to 164 [ 455.418147][T21458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 455.434674][T21458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 455.444525][T21417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.454254][T21458] Symlink component flag not implemented [ 455.459971][T21458] Symlink component flag not implemented [ 455.467121][T21417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.476481][T21458] Symlink component flag not implemented (7) [ 455.482489][T21458] Symlink component flag not implemented (116) [ 455.493552][T21463] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 455.502501][T21463] rock: directory entry would overflow storage [ 455.508719][T21463] rock: sig=0x4f50, size=4, remaining=3 [ 455.514340][T21463] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 455.539688][T21417] team0: Port device team_slave_0 added [ 455.552794][T21417] team0: Port device team_slave_1 added [ 455.601432][T21467] loop9: detected capacity change from 0 to 1024 [ 455.617241][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5626'. [ 455.636643][T21475] loop3: detected capacity change from 0 to 512 [ 455.655339][T21475] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.5627: bad orphan inode 11862016 [ 455.667671][T21475] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.767157][ T2681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.807770][ T2681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.846908][ T2681] bond0 (unregistering): Released all slaves [ 455.866395][ T2681] bond1 (unregistering): Released all slaves [ 455.884981][T21491] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 455.891606][T21491] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 455.899151][T21491] vhci_hcd vhci_hcd.0: Device attached [ 455.913254][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 455.913269][ T29] audit: type=1326 audit(1762574172.948:39993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 455.954331][T21497] loop3: detected capacity change from 0 to 164 [ 455.961535][T21498] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 455.968076][T21498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 455.975788][T21498] vhci_hcd vhci_hcd.0: Device attached [ 455.979671][ T2681] tipc: Disabling bearer [ 455.985259][T21491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 455.986537][ T2681] tipc: Left network mode [ 455.999446][T21417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.999660][T21491] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.006496][T21417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.006572][T21417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.016096][T21417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.058262][T21417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.084222][T21417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.095900][T21497] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.098166][ T29] audit: type=1326 audit(1762574172.988:39994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.108395][T21497] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.127830][ T29] audit: type=1326 audit(1762574172.988:39995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.136272][T21497] Symlink component flag not implemented [ 456.159726][ T29] audit: type=1326 audit(1762574172.988:39996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.159764][ T29] audit: type=1326 audit(1762574172.988:39997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.165408][T21497] Symlink component flag not implemented [ 456.166801][T21498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 456.189006][ T29] audit: type=1326 audit(1762574172.988:39998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.213176][T21497] Symlink component flag not implemented (7) [ 456.218277][ T29] audit: type=1326 audit(1762574172.988:39999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.226367][T21497] Symlink component flag not implemented (116) [ 456.227435][T21501] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(20) [ 456.250083][ T29] audit: type=1326 audit(1762574172.988:40000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.256010][T21501] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 456.279641][ T29] audit: type=1326 audit(1762574172.988:40001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.285892][T21501] vhci_hcd vhci_hcd.0: Device attached [ 456.292519][ T29] audit: type=1326 audit(1762574172.988:40002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21496 comm="syz.3.5635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 456.376789][ T9] vhci_hcd: vhci_device speed not set [ 456.387175][T21497] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.390069][T21504] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 456.402369][T21504] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 456.410097][T21504] vhci_hcd vhci_hcd.0: Device attached [ 456.421062][T21497] rock: directory entry would overflow storage [ 456.427318][T21497] rock: sig=0x4f50, size=4, remaining=3 [ 456.432955][T21497] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 456.440669][ T9] usb 5-1: new full-speed USB device number 5 using vhci_hcd [ 456.440793][ T2681] hsr_slave_0: left promiscuous mode [ 456.453707][T21502] vhci_hcd: connection closed [ 456.453981][ T57] vhci_hcd: stop threads [ 456.462928][ T57] vhci_hcd: release socket [ 456.467389][ T57] vhci_hcd: disconnect device [ 456.472739][T21506] vhci_hcd: connection closed [ 456.472839][T21499] vhci_hcd: connection closed [ 456.477772][T21492] vhci_hcd: connection reset by peer [ 456.489926][ T2681] hsr_slave_1: left promiscuous mode [ 456.495554][ T57] vhci_hcd: stop threads [ 456.499822][ T57] vhci_hcd: release socket [ 456.504249][ T57] vhci_hcd: disconnect device [ 456.509495][ T2681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.518996][ T57] vhci_hcd: stop threads [ 456.523282][ T57] vhci_hcd: release socket [ 456.527737][ T57] vhci_hcd: disconnect device [ 456.533103][ T2681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.555724][ T57] vhci_hcd: stop threads [ 456.560061][ T57] vhci_hcd: release socket [ 456.564537][ T57] vhci_hcd: disconnect device [ 456.615550][ T2681] team0 (unregistering): Port device team_slave_1 removed [ 456.626032][ T2681] team0 (unregistering): Port device team_slave_0 removed [ 456.689397][T21417] hsr_slave_0: entered promiscuous mode [ 456.695834][T21417] hsr_slave_1: entered promiscuous mode [ 456.749663][T21529] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 456.759478][T21529] hub 8-0:1.0: USB hub found [ 456.764180][T21529] hub 8-0:1.0: 8 ports detected [ 456.803601][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5645'. [ 456.833548][T21543] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 456.916832][T21549] 9p: Unknown access argument : -22 [ 456.968458][T21551] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5647'. [ 456.977803][T21551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5647'. [ 457.112079][T21556] 9pnet_fd: Insufficient options for proto=fd [ 457.127409][T21417] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 457.136374][T21417] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 457.145749][T21417] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 457.154514][T21417] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 457.190022][T21417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.202106][T21417] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.211692][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.218788][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.230225][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.237305][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.301427][T21417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.413221][T21417] veth0_vlan: entered promiscuous mode [ 457.421713][T21417] veth1_vlan: entered promiscuous mode [ 457.439577][T21417] veth0_macvtap: entered promiscuous mode [ 457.447634][T21417] veth1_macvtap: entered promiscuous mode [ 457.458666][T21417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.470470][T21417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.486986][ T2681] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.516074][ T2681] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.529681][ T2681] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.542490][ T4898] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.579118][T21594] loop8: detected capacity change from 0 to 128 [ 457.582860][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5656'. [ 457.587791][T21594] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 457.822024][T21629] No such timeout policy "syz1" [ 458.199465][T21657] FAULT_INJECTION: forcing a failure. [ 458.199465][T21657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.212739][T21657] CPU: 0 UID: 0 PID: 21657 Comm: syz.9.5677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 458.212772][T21657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.212789][T21657] Call Trace: [ 458.212798][T21657] [ 458.212865][T21657] __dump_stack+0x1d/0x30 [ 458.212889][T21657] dump_stack_lvl+0xe8/0x140 [ 458.212910][T21657] dump_stack+0x15/0x1b [ 458.212928][T21657] should_fail_ex+0x265/0x280 [ 458.212951][T21657] should_fail+0xb/0x20 [ 458.213020][T21657] should_fail_usercopy+0x1a/0x20 [ 458.213049][T21657] _copy_from_user+0x1c/0xb0 [ 458.213081][T21657] dev_ethtool+0x52/0x1670 [ 458.213153][T21657] ? full_name_hash+0x92/0xe0 [ 458.213199][T21657] ? strcmp+0x22/0x50 [ 458.213256][T21657] dev_ioctl+0x2e0/0x960 [ 458.213349][T21657] sock_do_ioctl+0x197/0x220 [ 458.213385][T21657] sock_ioctl+0x41b/0x610 [ 458.213417][T21657] ? __pfx_sock_ioctl+0x10/0x10 [ 458.213439][T21657] __se_sys_ioctl+0xce/0x140 [ 458.213461][T21657] __x64_sys_ioctl+0x43/0x50 [ 458.213522][T21657] x64_sys_call+0x1816/0x3000 [ 458.213546][T21657] do_syscall_64+0xd2/0x200 [ 458.213567][T21657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 458.213669][T21657] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 458.213785][T21657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.213809][T21657] RIP: 0033:0x7fd63109f6c9 [ 458.213829][T21657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.213853][T21657] RSP: 002b:00007fd62faff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.213872][T21657] RAX: ffffffffffffffda RBX: 00007fd6312f5fa0 RCX: 00007fd63109f6c9 [ 458.213885][T21657] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000003 [ 458.213981][T21657] RBP: 00007fd62faff090 R08: 0000000000000000 R09: 0000000000000000 [ 458.213997][T21657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.214009][T21657] R13: 00007fd6312f6038 R14: 00007fd6312f5fa0 R15: 00007ffd29d02868 [ 458.214030][T21657] [ 458.485575][T21640] wg1 speed is unknown, defaulting to 1000 [ 458.492516][T21640] lo speed is unknown, defaulting to 1000 [ 458.530777][T21667] loop8: detected capacity change from 0 to 1024 [ 458.546906][T21667] EXT4-fs: Ignoring removed bh option [ 458.552825][T21667] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 458.591323][T21640] chnl_net:caif_netlink_parms(): no params data found [ 458.635446][T21679] __nla_validate_parse: 3 callbacks suppressed [ 458.635538][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5684'. [ 458.655477][T21677] loop3: detected capacity change from 0 to 164 [ 458.663009][T21677] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.672409][T21677] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.681081][T21677] Symlink component flag not implemented [ 458.686816][T21677] Symlink component flag not implemented [ 458.695237][T21677] Symlink component flag not implemented (7) [ 458.701317][T21677] Symlink component flag not implemented (116) [ 458.713975][T21677] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.722976][T21677] rock: directory entry would overflow storage [ 458.729184][T21677] rock: sig=0x4f50, size=4, remaining=3 [ 458.734804][T21677] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 458.797611][T21687] loop3: detected capacity change from 0 to 128 [ 458.805746][T21687] ext4 filesystem being mounted at /573/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 458.889197][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.899145][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.914974][ T52] bond0 (unregistering): Released all slaves [ 458.923943][ T52] bond1 (unregistering): Released all slaves [ 458.970239][ T52] tipc: Left network mode [ 459.012703][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.027062][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.034923][T21417] EXT4-fs error (device loop8): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /1/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 459.077053][T21417] EXT4-fs (loop8): Remounting filesystem read-only [ 459.107190][ T52] team0 (unregistering): Port device team_slave_1 removed [ 459.119167][T21703] loop8: detected capacity change from 0 to 512 [ 459.126811][ T52] team0 (unregistering): Port device team_slave_0 removed [ 459.195931][T21640] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.203101][T21640] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.214016][T21640] bridge_slave_0: entered allmulticast mode [ 459.228096][T21640] bridge_slave_0: entered promiscuous mode [ 459.256264][T21640] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.263442][T21640] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.272376][T21640] bridge_slave_1: entered allmulticast mode [ 459.287988][T21640] bridge_slave_1: entered promiscuous mode [ 459.319320][T21640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.330514][T21640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.355117][T21640] team0: Port device team_slave_0 added [ 459.362565][T21640] team0: Port device team_slave_1 added [ 459.383640][T21640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.390670][T21640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.416737][T21640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.437867][T21640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.444871][T21640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.470954][T21640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.546830][T21727] loop9: detected capacity change from 0 to 512 [ 459.563080][T21726] loop8: detected capacity change from 0 to 164 [ 459.573234][T21726] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 459.584291][T21726] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 459.594718][T21726] Symlink component flag not implemented [ 459.600402][T21726] Symlink component flag not implemented [ 459.606610][T21726] Symlink component flag not implemented (7) [ 459.612699][T21726] Symlink component flag not implemented (116) [ 459.682953][T21726] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 459.691947][T21726] rock: directory entry would overflow storage [ 459.698240][T21726] rock: sig=0x4f50, size=4, remaining=3 [ 459.703805][T21726] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 459.744381][T21640] hsr_slave_0: entered promiscuous mode [ 459.750800][T21640] hsr_slave_1: entered promiscuous mode [ 459.758104][T21640] debugfs: 'hsr0' already exists in 'hsr' [ 459.763864][T21640] Cannot create hsr debugfs directory [ 459.917272][T21741] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 459.958307][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5702'. [ 459.970241][T21745] veth1_macvtap: left promiscuous mode [ 460.181639][T21751] loop5: detected capacity change from 0 to 32768 [ 460.208562][T21751] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 460.213880][T21751] loop5: p1 start 460800 is beyond EOD, truncated [ 460.220423][T21751] loop5: p2 size 83886080 extends beyond EOD, truncated [ 460.230134][T21751] loop5: p5 start 460800 is beyond EOD, truncated [ 460.236583][T21751] loop5: p6 size 83886080 extends beyond EOD, truncated [ 460.261019][T21640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.270983][T21640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.280053][T21640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.281029][T21755] loop9: detected capacity change from 0 to 1024 [ 460.295460][T21640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.304427][T21755] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 460.319916][T21755] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 460.332182][T21755] EXT4-fs (loop9): This should not happen!! Data will be lost [ 460.332182][T21755] [ 460.339449][T21640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.341875][T21755] EXT4-fs (loop9): Total free blocks count 0 [ 460.354436][T21755] EXT4-fs (loop9): Free/Dirty block details [ 460.360465][T21755] EXT4-fs (loop9): free_blocks=68451041280 [ 460.366414][T21755] EXT4-fs (loop9): dirty_blocks=80 [ 460.371567][T21755] EXT4-fs (loop9): Block reservation details [ 460.377614][T21755] EXT4-fs (loop9): i_reserved_data_blocks=5 [ 460.388511][T21640] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.396618][ T37] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 460.409071][ T37] EXT4-fs (loop9): This should not happen!! Data will be lost [ 460.409071][ T37] [ 460.411306][T21640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.429123][T21640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.442493][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.449631][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.458728][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.465825][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.469200][T21765] loop9: detected capacity change from 0 to 164 [ 460.482567][T21765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 460.493183][T21765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 460.501758][T21765] Symlink component flag not implemented [ 460.507428][T21765] Symlink component flag not implemented [ 460.513363][T21765] Symlink component flag not implemented (7) [ 460.519459][T21765] Symlink component flag not implemented (116) [ 460.534417][T21640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.535413][T21765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 460.550292][T21765] rock: directory entry would overflow storage [ 460.556473][T21765] rock: sig=0x4f50, size=4, remaining=3 [ 460.562088][T21765] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 460.614886][T21640] veth0_vlan: entered promiscuous mode [ 460.623254][T21640] veth1_vlan: entered promiscuous mode [ 460.641022][T21640] veth0_macvtap: entered promiscuous mode [ 460.649936][T21640] veth1_macvtap: entered promiscuous mode [ 460.661744][T21640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.675047][T21640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.686887][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.696341][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.717377][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.717431][T21777] loop9: detected capacity change from 0 to 512 [ 460.717467][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.911907][T21792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5712'. [ 460.972123][T21799] loop9: detected capacity change from 0 to 1024 [ 461.156920][T21813] loop5: detected capacity change from 0 to 1024 [ 461.181347][T21813] EXT4-fs: Ignoring removed bh option [ 461.206202][T21811] SELinux: failed to load policy [ 461.214080][T21813] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 461.265368][ T29] kauditd_printk_skb: 669 callbacks suppressed [ 461.265386][ T29] audit: type=1326 audit(1762574178.293:40672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.351556][ T29] audit: type=1326 audit(1762574178.333:40673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.375173][ T29] audit: type=1326 audit(1762574178.333:40674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.398758][ T29] audit: type=1326 audit(1762574178.333:40675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.422366][ T29] audit: type=1326 audit(1762574178.333:40676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.445988][ T29] audit: type=1326 audit(1762574178.333:40677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.469632][ T29] audit: type=1326 audit(1762574178.333:40678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.491028][ T9] usb 5-1: enqueue for inactive port 0 [ 461.493357][ T29] audit: type=1326 audit(1762574178.333:40679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.516620][ T9] usb 5-1: enqueue for inactive port 0 [ 461.522221][ T29] audit: type=1326 audit(1762574178.333:40680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.551264][ T29] audit: type=1326 audit(1762574178.333:40681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.5.5721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3c8a3f6c9 code=0x7ffc0000 [ 461.597521][T14018] EXT4-fs error (device loop5): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /498/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 461.687796][T14018] EXT4-fs (loop5): Remounting filesystem read-only [ 461.694434][ T9] vhci_hcd: vhci_device speed not set [ 461.716915][T21819] loop9: detected capacity change from 0 to 32768 [ 461.770724][T21819] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 461.775999][T21819] loop9: p1 start 460800 is beyond EOD, truncated [ 461.782479][T21819] loop9: p2 size 83886080 extends beyond EOD, truncated [ 461.791479][T21819] loop9: p5 start 460800 is beyond EOD, truncated [ 461.798039][T21819] loop9: p6 size 83886080 extends beyond EOD, truncated [ 461.926856][T21822] loop5: detected capacity change from 0 to 512 [ 461.974710][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5727'. [ 462.008747][T21834] loop3: detected capacity change from 0 to 1024 [ 462.063438][T21842] No such timeout policy "syz1" [ 462.103009][T21848] loop3: detected capacity change from 0 to 512 [ 462.116756][T21848] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 462.140515][T21848] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 462.161474][T21848] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.5731: corrupted inode contents [ 462.173925][T21848] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #11: comm syz.3.5731: mark_inode_dirty error [ 462.185542][T21848] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.5731: invalid indirect mapped block 1 (level 1) [ 462.199232][T21848] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.5731: corrupted inode contents [ 462.219418][T21848] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 462.229674][T21848] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #11: comm syz.3.5731: corrupted inode contents [ 462.269726][T21848] EXT4-fs error (device loop3): ext4_truncate:4637: inode #11: comm syz.3.5731: mark_inode_dirty error [ 462.295857][T21848] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 462.316097][T21848] EXT4-fs (loop3): 1 truncate cleaned up [ 462.322954][T21866] loop9: detected capacity change from 0 to 128 [ 462.424780][T21876] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.5731: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 462.463462][T21875] loop8: detected capacity change from 0 to 1024 [ 462.488621][T21876] atomic_op ffff888127866928 conn xmit_atomic 0000000000000000 [ 462.791230][T21891] loop8: detected capacity change from 0 to 32768 [ 462.831399][T21891] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 462.836798][T21891] loop8: p1 start 460800 is beyond EOD, truncated [ 462.843372][T21891] loop8: p2 size 83886080 extends beyond EOD, truncated [ 462.856517][T21891] loop8: p5 start 460800 is beyond EOD, truncated [ 462.863001][T21891] loop8: p6 size 83886080 extends beyond EOD, truncated [ 462.981808][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 462.990871][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 462.999919][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 463.017642][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 463.026764][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 463.038077][T21916] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5753'. [ 463.079684][T21922] FAULT_INJECTION: forcing a failure. [ 463.079684][T21922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.092804][T21922] CPU: 1 UID: 0 PID: 21922 Comm: syz.8.5754 Not tainted syzkaller #0 PREEMPT(voluntary) [ 463.092845][T21922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.092860][T21922] Call Trace: [ 463.092868][T21922] [ 463.092878][T21922] __dump_stack+0x1d/0x30 [ 463.092906][T21922] dump_stack_lvl+0xe8/0x140 [ 463.092989][T21922] dump_stack+0x15/0x1b [ 463.093091][T21922] should_fail_ex+0x265/0x280 [ 463.093116][T21922] should_fail+0xb/0x20 [ 463.093136][T21922] should_fail_usercopy+0x1a/0x20 [ 463.093175][T21922] _copy_from_user+0x1c/0xb0 [ 463.093208][T21922] __copy_msghdr+0x244/0x300 [ 463.093250][T21922] ___sys_sendmsg+0x109/0x1d0 [ 463.093338][T21922] __x64_sys_sendmsg+0xd4/0x160 [ 463.093369][T21922] x64_sys_call+0x191e/0x3000 [ 463.093398][T21922] do_syscall_64+0xd2/0x200 [ 463.093424][T21922] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 463.093503][T21922] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 463.093600][T21922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.093624][T21922] RIP: 0033:0x7f76d9eff6c9 [ 463.093642][T21922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.093669][T21922] RSP: 002b:00007f76d895f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.093692][T21922] RAX: ffffffffffffffda RBX: 00007f76da155fa0 RCX: 00007f76d9eff6c9 [ 463.093706][T21922] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 463.093720][T21922] RBP: 00007f76d895f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.093754][T21922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.093768][T21922] R13: 00007f76da156038 R14: 00007f76da155fa0 R15: 00007ffd3e292018 [ 463.093790][T21922] [ 463.362685][T21941] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 463.455803][T21958] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 463.462373][T21958] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 463.469889][T21958] vhci_hcd vhci_hcd.0: Device attached [ 463.477223][T21958] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(8) [ 463.483773][T21958] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 463.491534][T21958] vhci_hcd vhci_hcd.0: Device attached [ 463.518186][T21958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.529606][T21958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.539327][T21958] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 463.548485][T21958] vhci_hcd vhci_hcd.0: pdev(9) rhport(5) sockfd(18) [ 463.555117][T21958] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 463.562811][T21958] vhci_hcd vhci_hcd.0: Device attached [ 463.573418][T21972] vhci_hcd: connection closed [ 463.573551][ T4898] vhci_hcd: stop threads [ 463.582567][ T4898] vhci_hcd: release socket [ 463.587028][ T4898] vhci_hcd: disconnect device [ 463.591844][T21960] vhci_hcd: connection closed [ 463.592072][T21965] vhci_hcd: connection closed [ 463.626714][ T4898] vhci_hcd: stop threads [ 463.635841][ T4898] vhci_hcd: release socket [ 463.640275][ T4898] vhci_hcd: disconnect device [ 463.725063][ T9] vhci_hcd: vhci_device speed not set [ 463.739452][T21968] loop5: detected capacity change from 0 to 32768 [ 463.746144][ T4898] vhci_hcd: stop threads [ 463.750417][ T4898] vhci_hcd: release socket [ 463.754899][ T4898] vhci_hcd: disconnect device [ 463.811227][T21968] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 463.816680][T21968] loop5: p1 start 460800 is beyond EOD, truncated [ 463.823279][T21968] loop5: p2 size 83886080 extends beyond EOD, truncated [ 463.875118][T21988] loop8: detected capacity change from 0 to 512 [ 463.884836][T21968] loop5: p5 start 460800 is beyond EOD, truncated [ 463.891355][T21968] loop5: p6 size 83886080 extends beyond EOD, truncated [ 463.916415][T21990] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 464.158264][T22004] loop9: detected capacity change from 0 to 128 [ 464.216649][T22007] FAULT_INJECTION: forcing a failure. [ 464.216649][T22007] name failslab, interval 1, probability 0, space 0, times 0 [ 464.229663][T22007] CPU: 0 UID: 0 PID: 22007 Comm: syz.9.5779 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.229698][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.229713][T22007] Call Trace: [ 464.229721][T22007] [ 464.229798][T22007] __dump_stack+0x1d/0x30 [ 464.229821][T22007] dump_stack_lvl+0xe8/0x140 [ 464.229845][T22007] dump_stack+0x15/0x1b [ 464.229872][T22007] should_fail_ex+0x265/0x280 [ 464.229893][T22007] should_failslab+0x8c/0xb0 [ 464.229928][T22007] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 464.230071][T22007] ? __alloc_skb+0x101/0x320 [ 464.230112][T22007] __alloc_skb+0x101/0x320 [ 464.230159][T22007] ? audit_log_start+0x342/0x720 [ 464.230254][T22007] audit_log_start+0x3a0/0x720 [ 464.230277][T22007] audit_seccomp+0x48/0x100 [ 464.230315][T22007] ? __seccomp_filter+0x82d/0x1250 [ 464.230341][T22007] __seccomp_filter+0x83e/0x1250 [ 464.230433][T22007] ? _raw_spin_unlock+0x26/0x50 [ 464.230462][T22007] __secure_computing+0x82/0x150 [ 464.230490][T22007] syscall_trace_enter+0xcf/0x1e0 [ 464.230518][T22007] do_syscall_64+0xac/0x200 [ 464.230630][T22007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 464.230656][T22007] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 464.230687][T22007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.230707][T22007] RIP: 0033:0x7fd63109f6c9 [ 464.230721][T22007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.230817][T22007] RSP: 002b:00007fd62faff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 464.230834][T22007] RAX: ffffffffffffffda RBX: 00007fd6312f5fa0 RCX: 00007fd63109f6c9 [ 464.230846][T22007] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 464.230858][T22007] RBP: 00007fd62faff090 R08: 0000000000000000 R09: 0000000000000000 [ 464.230869][T22007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.230880][T22007] R13: 00007fd6312f6038 R14: 00007fd6312f5fa0 R15: 00007ffd29d02868 [ 464.230903][T22007] [ 464.559313][T22013] loop5: detected capacity change from 0 to 1024 [ 464.665604][T22013] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 464.720157][T22013] loop5: detected capacity change from 0 to 8192 [ 464.792264][T22018] wg1 speed is unknown, defaulting to 1000 [ 464.867442][T22018] wg1 speed is unknown, defaulting to 1000 [ 465.138870][ T4089] Bluetooth: hci0: command 0x1003 tx timeout [ 465.148208][T11029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 465.187600][T22022] loop3: detected capacity change from 0 to 128 [ 465.213230][T22022] EXT4-fs mount: 74 callbacks suppressed [ 465.213247][T22022] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.252071][T22022] ext4 filesystem being mounted at /589/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 465.480569][T22030] loop8: detected capacity change from 0 to 1024 [ 465.513670][T22030] EXT4-fs: Ignoring removed bh option [ 465.543291][T22030] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 465.600054][T22030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.958473][T21417] EXT4-fs error (device loop8): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /26/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 466.019020][T21417] EXT4-fs (loop8): Remounting filesystem read-only [ 466.027545][T22042] __nla_validate_parse: 4 callbacks suppressed [ 466.027602][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5790'. [ 466.043541][T22040] FAULT_INJECTION: forcing a failure. [ 466.043541][T22040] name failslab, interval 1, probability 0, space 0, times 0 [ 466.056685][T22040] CPU: 0 UID: 0 PID: 22040 Comm: syz.5.5788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 466.056737][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 466.056752][T22040] Call Trace: [ 466.056769][T22040] [ 466.056777][T22040] __dump_stack+0x1d/0x30 [ 466.056799][T22040] dump_stack_lvl+0xe8/0x140 [ 466.056824][T22040] dump_stack+0x15/0x1b [ 466.056849][T22040] should_fail_ex+0x265/0x280 [ 466.056876][T22040] should_failslab+0x8c/0xb0 [ 466.056961][T22040] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 466.057001][T22040] ? __alloc_skb+0x101/0x320 [ 466.057081][T22040] __alloc_skb+0x101/0x320 [ 466.057122][T22040] netlink_alloc_large_skb+0xbf/0xf0 [ 466.057160][T22040] netlink_sendmsg+0x3cf/0x6b0 [ 466.057253][T22040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.057280][T22040] __sock_sendmsg+0x145/0x180 [ 466.057315][T22040] ____sys_sendmsg+0x31e/0x4e0 [ 466.057374][T22040] ___sys_sendmsg+0x17b/0x1d0 [ 466.057457][T22040] __x64_sys_sendmsg+0xd4/0x160 [ 466.057486][T22040] x64_sys_call+0x191e/0x3000 [ 466.057528][T22040] do_syscall_64+0xd2/0x200 [ 466.057554][T22040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 466.057651][T22040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 466.057720][T22040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.057743][T22040] RIP: 0033:0x7fc3c8a3f6c9 [ 466.057837][T22040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.057860][T22040] RSP: 002b:00007fc3c74a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.057881][T22040] RAX: ffffffffffffffda RBX: 00007fc3c8c95fa0 RCX: 00007fc3c8a3f6c9 [ 466.057900][T22040] RDX: 0000000000000800 RSI: 00002000000004c0 RDI: 0000000000000003 [ 466.057918][T22040] RBP: 00007fc3c74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 466.057933][T22040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.057946][T22040] R13: 00007fc3c8c96038 R14: 00007fc3c8c95fa0 R15: 00007ffc1c936058 [ 466.057967][T22040] [ 466.059064][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.177823][T22050] loop5: detected capacity change from 0 to 2048 [ 466.186058][T13117] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.290686][T22050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.330362][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 466.330381][ T29] audit: type=1326 audit(1762574183.349:41161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.360336][ T29] audit: type=1326 audit(1762574183.349:41162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.424482][T22057] loop3: detected capacity change from 0 to 164 [ 466.444016][T22057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 466.458166][T22062] loop9: detected capacity change from 0 to 2048 [ 466.465644][ T29] audit: type=1326 audit(1762574183.429:41163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.489381][ T29] audit: type=1326 audit(1762574183.429:41164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.512993][ T29] audit: type=1326 audit(1762574183.429:41165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.536768][ T29] audit: type=1326 audit(1762574183.429:41166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.560488][ T29] audit: type=1326 audit(1762574183.429:41167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.584082][ T29] audit: type=1326 audit(1762574183.429:41168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.607694][ T29] audit: type=1326 audit(1762574183.429:41169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.631379][ T29] audit: type=1326 audit(1762574183.429:41170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22056 comm="syz.3.5793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1c32df6c9 code=0x7ffc0000 [ 466.660263][T22062] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.672669][T22057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 466.686629][T22057] Symlink component flag not implemented [ 466.692324][T22057] Symlink component flag not implemented [ 466.707753][T14018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.709139][T22070] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5799'. [ 466.727335][T22071] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 466.737784][T22057] Symlink component flag not implemented (7) [ 466.743914][T22057] Symlink component flag not implemented (116) [ 466.756655][T22071] rock: directory entry would overflow storage [ 466.762889][T22071] rock: sig=0x4f50, size=4, remaining=3 [ 466.768470][T22071] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 466.805970][T22069] wg1 speed is unknown, defaulting to 1000 [ 466.826181][T22074] wg1 speed is unknown, defaulting to 1000 [ 466.896329][T22082] loop3: detected capacity change from 0 to 128 [ 466.943484][T22082] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.972905][T22082] ext4 filesystem being mounted at /591/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 467.042728][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.145638][T22101] No such timeout policy "syz1" [ 467.165401][T22104] netlink: 'syz.8.5810': attribute type 10 has an invalid length. [ 467.173384][T22104] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5810'. [ 467.183976][T22104] batman_adv: batadv0: Adding interface: veth1_vlan [ 467.190618][T22104] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.219866][T22104] batman_adv: batadv0: Interface activated: veth1_vlan [ 467.267629][T22105] bridge_slave_0: left allmulticast mode [ 467.273365][T22105] bridge_slave_0: left promiscuous mode [ 467.279147][T22105] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.290043][T22104] netlink: 'syz.8.5810': attribute type 10 has an invalid length. [ 467.297938][T22104] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5810'. [ 467.336165][T22105] bridge_slave_1: left allmulticast mode [ 467.341855][T22105] bridge_slave_1: left promiscuous mode [ 467.347647][T22105] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.360351][T22105] bond0: (slave bond_slave_0): Releasing backup interface [ 467.374894][T22105] bond0: (slave bond_slave_1): Releasing backup interface [ 467.395613][T22105] team0: Port device team_slave_0 removed [ 467.422608][T22105] team0: Port device team_slave_1 removed [ 467.439468][T22105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.447022][T22105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.471789][T22105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.479249][T22105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.484327][T22117] loop9: detected capacity change from 0 to 512 [ 467.498634][T22105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 467.529413][T22117] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 467.554457][T22117] EXT4-fs (loop9): orphan cleanup on readonly fs [ 467.574253][T22117] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #16: comm syz.9.5811: corrupted inode contents [ 467.588260][T22117] EXT4-fs (loop9): Remounting filesystem read-only [ 467.595249][T22117] EXT4-fs (loop9): 1 truncate cleaned up [ 467.601142][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 467.611709][ T52] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 467.622295][ T52] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 467.635111][T22117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.695808][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5812'. [ 467.706571][T22128] FAULT_INJECTION: forcing a failure. [ 467.706571][T22128] name failslab, interval 1, probability 0, space 0, times 0 [ 467.719447][T22128] CPU: 1 UID: 0 PID: 22128 Comm: syz.2.5814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 467.719481][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.719498][T22128] Call Trace: [ 467.719507][T22128] [ 467.719523][T22128] __dump_stack+0x1d/0x30 [ 467.719584][T22128] dump_stack_lvl+0xe8/0x140 [ 467.719607][T22128] dump_stack+0x15/0x1b [ 467.719629][T22128] should_fail_ex+0x265/0x280 [ 467.719653][T22128] should_failslab+0x8c/0xb0 [ 467.719692][T22128] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 467.719748][T22128] ? __get_vm_area_node+0x106/0x1d0 [ 467.719820][T22128] __get_vm_area_node+0x106/0x1d0 [ 467.719936][T22128] __vmalloc_node_range_noprof+0x28c/0xed0 [ 467.720025][T22128] ? copy_process+0x399/0x2000 [ 467.720115][T22128] ? obj_cgroup_charge_account+0xba/0x1a0 [ 467.720156][T22128] __vmalloc_node_noprof+0x89/0xc0 [ 467.720272][T22128] ? copy_process+0x399/0x2000 [ 467.720300][T22128] ? copy_process+0x399/0x2000 [ 467.720424][T22128] dup_task_struct+0x433/0x6b0 [ 467.720461][T22128] ? _parse_integer+0x27/0x40 [ 467.720508][T22128] copy_process+0x399/0x2000 [ 467.720642][T22128] ? kstrtouint+0x76/0xc0 [ 467.720677][T22128] ? kstrtouint_from_user+0x9f/0xf0 [ 467.720697][T22128] ? __rcu_read_unlock+0x4f/0x70 [ 467.720730][T22128] kernel_clone+0x16c/0x5c0 [ 467.720833][T22128] ? vfs_write+0x7e8/0x960 [ 467.720863][T22128] __x64_sys_clone+0xe6/0x120 [ 467.720968][T22128] x64_sys_call+0x119c/0x3000 [ 467.720997][T22128] do_syscall_64+0xd2/0x200 [ 467.721042][T22128] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 467.721081][T22128] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 467.721142][T22128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.721171][T22128] RIP: 0033:0x7fdc74eff6c9 [ 467.721261][T22128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.721287][T22128] RSP: 002b:00007fdc7395efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 467.721314][T22128] RAX: ffffffffffffffda RBX: 00007fdc75155fa0 RCX: 00007fdc74eff6c9 [ 467.721331][T22128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 467.721349][T22128] RBP: 00007fdc7395f090 R08: 0000000000000000 R09: 0000000000000000 [ 467.721364][T22128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 467.721380][T22128] R13: 00007fdc75156038 R14: 00007fdc75155fa0 R15: 00007ffd35197548 [ 467.721406][T22128] [ 467.721445][T22128] syz.2.5814: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 467.976877][T22128] CPU: 1 UID: 0 PID: 22128 Comm: syz.2.5814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 467.976912][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.976958][T22128] Call Trace: [ 467.976967][T22128] [ 467.976978][T22128] __dump_stack+0x1d/0x30 [ 467.977008][T22128] dump_stack_lvl+0xe8/0x140 [ 467.977036][T22128] dump_stack+0x15/0x1b [ 467.977057][T22128] warn_alloc+0x12b/0x1a0 [ 467.977096][T22128] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 467.977298][T22128] ? obj_cgroup_charge_account+0xba/0x1a0 [ 467.977337][T22128] __vmalloc_node_noprof+0x89/0xc0 [ 467.977379][T22128] ? copy_process+0x399/0x2000 [ 467.977449][T22128] ? copy_process+0x399/0x2000 [ 467.977478][T22128] dup_task_struct+0x433/0x6b0 [ 467.977509][T22128] ? _parse_integer+0x27/0x40 [ 467.977612][T22128] copy_process+0x399/0x2000 [ 467.977639][T22128] ? kstrtouint+0x76/0xc0 [ 467.977673][T22128] ? kstrtouint_from_user+0x9f/0xf0 [ 467.977770][T22128] ? __rcu_read_unlock+0x4f/0x70 [ 467.977841][T22128] kernel_clone+0x16c/0x5c0 [ 467.977911][T22128] ? vfs_write+0x7e8/0x960 [ 467.977945][T22128] __x64_sys_clone+0xe6/0x120 [ 467.977988][T22128] x64_sys_call+0x119c/0x3000 [ 467.978077][T22128] do_syscall_64+0xd2/0x200 [ 467.978106][T22128] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 467.978184][T22128] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 467.978217][T22128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.978241][T22128] RIP: 0033:0x7fdc74eff6c9 [ 467.978261][T22128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.978339][T22128] RSP: 002b:00007fdc7395efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 467.978364][T22128] RAX: ffffffffffffffda RBX: 00007fdc75155fa0 RCX: 00007fdc74eff6c9 [ 467.978379][T22128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 467.978392][T22128] RBP: 00007fdc7395f090 R08: 0000000000000000 R09: 0000000000000000 [ 467.978404][T22128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 467.978416][T22128] R13: 00007fdc75156038 R14: 00007fdc75155fa0 R15: 00007ffd35197548 [ 467.978468][T22128] [ 467.978488][T22128] Mem-Info: [ 468.196006][T22128] active_anon:5936 inactive_anon:2 isolated_anon:0 [ 468.196006][T22128] active_file:15184 inactive_file:12761 isolated_file:0 [ 468.196006][T22128] unevictable:0 dirty:585 writeback:0 [ 468.196006][T22128] slab_reclaimable:3878 slab_unreclaimable:26924 [ 468.196006][T22128] mapped:30689 shmem:549 pagetables:1723 [ 468.196006][T22128] sec_pagetables:0 bounce:0 [ 468.196006][T22128] kernel_misc_reclaimable:0 [ 468.196006][T22128] free:1821735 free_pcp:48325 free_cma:0 [ 468.241062][T22128] Node 0 active_anon:23744kB inactive_anon:8kB active_file:60736kB inactive_file:51044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122756kB dirty:2340kB writeback:0kB shmem:2196kB kernel_stack:5216kB pagetables:6892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.268424][T22128] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.298093][T22128] lowmem_reserve[]: 0 2881 7859 7859 [ 468.303429][T22128] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 468.334478][T22128] lowmem_reserve[]: 0 0 4978 4978 [ 468.339598][T22128] Node 0 Normal free:4324852kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23744kB inactive_anon:8kB active_file:60736kB inactive_file:51044kB unevictable:0kB writepending:2340kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:189772kB local_pcp:96828kB free_cma:0kB [ 468.372842][T22128] lowmem_reserve[]: 0 0 0 0 [ 468.377478][T22128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 468.390549][T22128] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 468.406632][T22128] Node 0 Normal: 669*4kB (UM) 800*8kB (UME) 472*16kB (UME) 317*32kB (UM) 708*64kB (UM) 759*128kB (UME) 349*256kB (UME) 378*512kB (UME) 370*1024kB (UM) 148*2048kB (UME) 779*4096kB (UM) = 4324884kB [ 468.426119][T22128] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 468.435442][T22128] 28499 total pagecache pages [ 468.440151][T22128] 2 pages in swap cache [ 468.444308][T22128] Free swap = 124988kB [ 468.448490][T22128] Total swap = 124996kB [ 468.452633][T22128] 2097051 pages RAM [ 468.456587][T22128] 0 pages HighMem/MovableOnly [ 468.461267][T22128] 81087 pages reserved [ 468.469909][T13117] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.474342][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.536658][T22141] No such timeout policy "syz1" [ 468.630696][T22151] loop8: detected capacity change from 0 to 1024 [ 468.647823][T22151] EXT4-fs: Ignoring removed nobh option [ 468.653488][T22151] EXT4-fs: Ignoring removed bh option [ 468.666468][T22151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.688370][T22151] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 468.699527][T22150] delete_channel: no stack [ 468.704195][T22137] loop3: detected capacity change from 0 to 512 [ 468.715878][T22137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.766381][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.776520][T13117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.799841][T22172] FAULT_INJECTION: forcing a failure. [ 468.799841][T22172] name failslab, interval 1, probability 0, space 0, times 0 [ 468.806775][T22170] loop3: detected capacity change from 0 to 1024 [ 468.812616][T22172] CPU: 1 UID: 0 PID: 22172 Comm: syz.8.5828 Not tainted syzkaller #0 PREEMPT(voluntary) [ 468.812657][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.812677][T22172] Call Trace: [ 468.812687][T22172] [ 468.812700][T22172] __dump_stack+0x1d/0x30 [ 468.812731][T22172] dump_stack_lvl+0xe8/0x140 [ 468.812763][T22172] dump_stack+0x15/0x1b [ 468.812917][T22172] should_fail_ex+0x265/0x280 [ 468.812946][T22172] should_failslab+0x8c/0xb0 [ 468.812989][T22172] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 468.813083][T22172] ? __alloc_skb+0x101/0x320 [ 468.813125][T22172] __alloc_skb+0x101/0x320 [ 468.813168][T22172] netlink_alloc_large_skb+0xbf/0xf0 [ 468.813299][T22172] netlink_sendmsg+0x3cf/0x6b0 [ 468.813329][T22172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.813358][T22172] __sock_sendmsg+0x145/0x180 [ 468.813395][T22172] ____sys_sendmsg+0x31e/0x4e0 [ 468.813451][T22172] ___sys_sendmsg+0x17b/0x1d0 [ 468.813500][T22172] __x64_sys_sendmsg+0xd4/0x160 [ 468.813541][T22172] x64_sys_call+0x191e/0x3000 [ 468.813574][T22172] do_syscall_64+0xd2/0x200 [ 468.813677][T22172] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 468.813719][T22172] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 468.813768][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.813879][T22172] RIP: 0033:0x7f76d9eff6c9 [ 468.813900][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.813927][T22172] RSP: 002b:00007f76d895f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.813954][T22172] RAX: ffffffffffffffda RBX: 00007f76da155fa0 RCX: 00007f76d9eff6c9 [ 468.814101][T22172] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 468.814119][T22172] RBP: 00007f76d895f090 R08: 0000000000000000 R09: 0000000000000000 [ 468.814138][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.814156][T22172] R13: 00007f76da156038 R14: 00007f76da155fa0 R15: 00007ffd3e292018 [ 468.814184][T22172] [ 468.956345][T22178] 9pnet_fd: Insufficient options for proto=fd [ 468.972767][T22170] EXT4-fs: Ignoring removed orlov option [ 469.034021][T22170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.256516][T13117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.377996][T22192] loop3: detected capacity change from 0 to 2048 [ 469.395783][T22192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.534538][T22207] loop9: detected capacity change from 0 to 128 [ 469.557081][T22207] FAT-fs (loop9): Directory bread(block 32) failed [ 469.564488][T22207] FAT-fs (loop9): Directory bread(block 33) failed [ 469.571088][T22207] FAT-fs (loop9): Directory bread(block 34) failed [ 469.577673][T22207] FAT-fs (loop9): Directory bread(block 35) failed [ 469.584318][T22207] FAT-fs (loop9): Directory bread(block 36) failed [ 469.591960][T22207] FAT-fs (loop9): Directory bread(block 37) failed [ 469.598767][T22207] FAT-fs (loop9): Directory bread(block 38) failed [ 469.599774][T13117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.605688][T22207] FAT-fs (loop9): Directory bread(block 39) failed [ 469.621504][T22207] FAT-fs (loop9): Directory bread(block 40) failed [ 469.628364][T22207] FAT-fs (loop9): Directory bread(block 41) failed [ 469.679490][T22207] netlink: 'syz.9.5840': attribute type 3 has an invalid length. [ 469.754163][T22213] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5842'. [ 469.791040][T22220] loop9: detected capacity change from 0 to 1024 [ 469.798197][T22220] EXT4-fs: Ignoring removed orlov option [ 469.818767][T22220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.830789][T22227] loop8: detected capacity change from 0 to 1024 [ 469.857282][T22230] loop3: detected capacity change from 0 to 2048 [ 469.865446][T22227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.891245][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.892068][T22230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.944642][T13117] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.028354][T22243] netlink: 'syz.8.5851': attribute type 3 has an invalid length. [ 470.153106][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.202455][T22245] wg1 speed is unknown, defaulting to 1000 [ 470.279073][T22258] 9pnet_fd: Insufficient options for proto=fd [ 470.288409][T22255] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 470.303232][T22260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5854'. [ 470.339688][ T4898] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.348995][ T4898] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.368834][ T4898] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.404566][ T4898] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.506979][T22264] loop5: detected capacity change from 0 to 512 [ 470.536613][T22264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.597891][T14018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.638567][T22269] loop8: detected capacity change from 0 to 32768 [ 470.675093][T22269] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 470.680468][T22269] loop8: p1 start 460800 is beyond EOD, truncated [ 470.686992][T22269] loop8: p2 size 83886080 extends beyond EOD, truncated [ 470.695986][T22269] loop8: p5 start 460800 is beyond EOD, truncated [ 470.702440][T22269] loop8: p6 size 83886080 extends beyond EOD, truncated [ 470.850397][ T2681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.865187][ T2681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.878885][ T2681] bond0 (unregistering): Released all slaves [ 470.889406][T22245] chnl_net:caif_netlink_parms(): no params data found [ 470.938240][ T2681] tipc: Disabling bearer [ 470.943532][ T2681] tipc: Left network mode [ 470.971314][T22245] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.978554][T22245] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.016157][T22245] bridge_slave_0: entered allmulticast mode [ 471.031749][T22245] bridge_slave_0: entered promiscuous mode [ 471.048611][ T2681] hsr_slave_0: left promiscuous mode [ 471.061053][ T2681] hsr_slave_1: left promiscuous mode [ 471.072538][ T2681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.091218][ T2681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.128349][ T2681] team0 (unregistering): Port device team_slave_1 removed [ 471.138839][ T2681] team0 (unregistering): Port device team_slave_0 removed [ 471.176404][T22245] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.183602][T22245] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.197035][T22245] bridge_slave_1: entered allmulticast mode [ 471.209081][T22245] bridge_slave_1: entered promiscuous mode [ 471.261966][T22245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.284601][T22245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.325179][T22245] team0: Port device team_slave_0 added [ 471.331618][T22245] team0: Port device team_slave_1 added [ 471.362129][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 471.362218][ T29] audit: type=1326 audit(1762574188.387:41631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.392139][ T29] audit: type=1326 audit(1762574188.387:41632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.415836][ T29] audit: type=1326 audit(1762574188.387:41633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.420888][T22306] loop8: detected capacity change from 0 to 164 [ 471.439421][ T29] audit: type=1326 audit(1762574188.387:41634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.469316][ T29] audit: type=1326 audit(1762574188.387:41635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.469623][T22306] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.492944][ T29] audit: type=1326 audit(1762574188.387:41636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.492982][ T29] audit: type=1326 audit(1762574188.387:41637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.548346][ T29] audit: type=1326 audit(1762574188.387:41638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.571946][ T29] audit: type=1326 audit(1762574188.387:41639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.578629][T22305] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.595569][ T29] audit: type=1326 audit(1762574188.387:41640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22304 comm="syz.8.5865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76d9eff6c9 code=0x7ffc0000 [ 471.636126][T22305] Symlink component flag not implemented [ 471.641883][T22305] Symlink component flag not implemented [ 471.647660][T22305] Symlink component flag not implemented (7) [ 471.649136][T22245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.653646][T22305] Symlink component flag not implemented (116) [ 471.666925][T22245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.692889][T22245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.711843][T22305] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 471.715125][T22311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5866'. [ 471.724463][T22245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.736017][T22245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.745282][T22305] rock: directory entry would overflow storage [ 471.762060][T22245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.778846][T22305] rock: sig=0x4f50, size=4, remaining=3 [ 471.784387][T22305] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 471.805868][T22245] hsr_slave_0: entered promiscuous mode [ 471.811927][T22245] hsr_slave_1: entered promiscuous mode [ 471.817877][T22245] debugfs: 'hsr0' already exists in 'hsr' [ 471.823604][T22245] Cannot create hsr debugfs directory [ 471.888726][ T2681] IPVS: stop unused estimator thread 0... [ 471.902579][T22317] FAULT_INJECTION: forcing a failure. [ 471.902579][T22317] name failslab, interval 1, probability 0, space 0, times 0 [ 471.915317][T22317] CPU: 1 UID: 0 PID: 22317 Comm: syz.8.5869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 471.915361][T22317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.915378][T22317] Call Trace: [ 471.915385][T22317] [ 471.915393][T22317] __dump_stack+0x1d/0x30 [ 471.915420][T22317] dump_stack_lvl+0xe8/0x140 [ 471.915454][T22317] dump_stack+0x15/0x1b [ 471.915478][T22317] should_fail_ex+0x265/0x280 [ 471.915508][T22317] should_failslab+0x8c/0xb0 [ 471.915580][T22317] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 471.915615][T22317] ? __get_vm_area_node+0x106/0x1d0 [ 471.915650][T22317] __get_vm_area_node+0x106/0x1d0 [ 471.915685][T22317] __vmalloc_node_range_noprof+0x28c/0xed0 [ 471.915723][T22317] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 471.915797][T22317] ? __rcu_read_unlock+0x4f/0x70 [ 471.915871][T22317] ? cred_has_capability+0x210/0x280 [ 471.915923][T22317] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 471.916004][T22317] __vmalloc_noprof+0x83/0xc0 [ 471.916152][T22317] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 471.916189][T22317] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 471.916263][T22317] ? bpf_prog_alloc+0x2a/0x150 [ 471.916299][T22317] bpf_prog_alloc+0x3c/0x150 [ 471.916386][T22317] bpf_prog_load+0x506/0x1100 [ 471.916419][T22317] ? security_bpf+0x2b/0x90 [ 471.916449][T22317] __sys_bpf+0x469/0x7c0 [ 471.916477][T22317] __x64_sys_bpf+0x41/0x50 [ 471.916583][T22317] x64_sys_call+0x2aee/0x3000 [ 471.916607][T22317] do_syscall_64+0xd2/0x200 [ 471.916629][T22317] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 471.916659][T22317] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 471.916710][T22317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.916734][T22317] RIP: 0033:0x7f76d9eff6c9 [ 471.916750][T22317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.916814][T22317] RSP: 002b:00007f76d895f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 471.916834][T22317] RAX: ffffffffffffffda RBX: 00007f76da155fa0 RCX: 00007f76d9eff6c9 [ 471.916848][T22317] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 471.916861][T22317] RBP: 00007f76d895f090 R08: 0000000000000000 R09: 0000000000000000 [ 471.916875][T22317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.916888][T22317] R13: 00007f76da156038 R14: 00007f76da155fa0 R15: 00007ffd3e292018 [ 471.916935][T22317] [ 472.186045][T22323] loop8: detected capacity change from 0 to 1024 [ 472.207033][T22321] loop9: detected capacity change from 0 to 128 [ 472.218367][T22323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.231541][T22321] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 472.243941][T22321] ext4 filesystem being mounted at /278/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 472.293829][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.364928][T17683] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 472.471405][T22346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5879'. [ 472.548751][T22354] loop9: detected capacity change from 0 to 1024 [ 472.558288][T22245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 472.575449][T22245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 472.595227][T22245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 472.606880][T22245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 472.619818][T22354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.659633][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.670685][T22245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.683167][T22245] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.692901][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.700093][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.728873][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.735993][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.874487][T22379] loop8: detected capacity change from 0 to 2048 [ 472.880195][T22245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.903625][T22379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.933834][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.949195][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5892'. [ 473.052216][T22245] veth0_vlan: entered promiscuous mode [ 473.059828][T22245] veth1_vlan: entered promiscuous mode [ 473.075297][T22245] veth0_macvtap: entered promiscuous mode [ 473.083391][T22245] veth1_macvtap: entered promiscuous mode [ 473.094921][T22245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.104327][T22417] loop8: detected capacity change from 0 to 128 [ 473.112699][T22245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.129743][ T4898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.152739][ T4898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.173494][ T4898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.183116][ T4898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.243260][T22426] loop3: detected capacity change from 0 to 2048 [ 473.257903][T22426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.287518][T22245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.347801][T22433] loop3: detected capacity change from 0 to 1024 [ 473.367528][T22433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.396581][T22245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.444217][T22440] loop3: detected capacity change from 0 to 164 [ 473.451953][T22440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 473.461198][T22440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 473.469702][T22440] Symlink component flag not implemented [ 473.475402][T22440] Symlink component flag not implemented [ 473.481232][T22440] Symlink component flag not implemented (7) [ 473.487357][T22440] Symlink component flag not implemented (116) [ 473.499639][T22440] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 473.508769][T22440] rock: directory entry would overflow storage [ 473.514939][T22440] rock: sig=0x4f50, size=4, remaining=3 [ 473.520523][T22440] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 473.585380][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5906'. [ 473.594787][T22444] veth1_macvtap: left promiscuous mode [ 473.923642][T22461] loop9: detected capacity change from 0 to 128 [ 473.927534][T22464] loop8: detected capacity change from 0 to 128 [ 473.948866][T22464] FAT-fs (loop8): Directory bread(block 32) failed [ 473.955538][T22464] FAT-fs (loop8): Directory bread(block 33) failed [ 473.963873][T22464] FAT-fs (loop8): Directory bread(block 34) failed [ 473.970631][T22464] FAT-fs (loop8): Directory bread(block 35) failed [ 473.979609][T22464] FAT-fs (loop8): Directory bread(block 36) failed [ 473.988715][T22464] FAT-fs (loop8): Directory bread(block 37) failed [ 473.995464][T22464] FAT-fs (loop8): Directory bread(block 38) failed [ 473.995844][T22468] loop9: detected capacity change from 0 to 164 [ 474.002430][T22464] FAT-fs (loop8): Directory bread(block 39) failed [ 474.015046][T22468] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 474.015626][T22464] FAT-fs (loop8): Directory bread(block 40) failed [ 474.026020][T22468] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 474.038225][T22464] FAT-fs (loop8): Directory bread(block 41) failed [ 474.042766][T22470] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 474.052958][T22470] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 474.063397][T22468] Symlink component flag not implemented [ 474.069125][T22468] Symlink component flag not implemented [ 474.075184][T22470] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22470 comm=syz.5.5917 [ 474.079484][T22468] Symlink component flag not implemented (7) [ 474.093920][T22468] Symlink component flag not implemented (116) [ 474.102413][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 474.106026][T22468] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 474.117816][T22468] rock: directory entry would overflow storage [ 474.124000][T22468] rock: sig=0x4f50, size=4, remaining=3 [ 474.129579][T22468] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 474.179457][T22475] No such timeout policy "syz1" [ 474.212725][T22478] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 474.217261][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5920'. [ 474.221502][T22478] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 474.247748][T22478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22478 comm=syz.9.5919 [ 474.263215][ T2681] Bluetooth: hci1: Frame reassembly failed (-84) [ 475.109765][T22495] No such timeout policy "syz1" [ 475.524085][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5929'. [ 475.533056][T22509] bridge_slave_1: left allmulticast mode [ 475.538725][T22509] bridge_slave_1: left promiscuous mode [ 475.544477][T22509] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.553204][T22509] bridge_slave_0: left allmulticast mode [ 475.558892][T22509] bridge_slave_0: left promiscuous mode [ 475.564526][T22509] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.728826][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5931'. [ 476.136558][T11029] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 476.155896][T22524] loop8: detected capacity change from 0 to 32768 [ 476.196931][T22524] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 476.202294][T22524] loop8: p1 start 460800 is beyond EOD, truncated [ 476.208775][T22524] loop8: p2 size 83886080 extends beyond EOD, truncated [ 476.217354][T22524] loop8: p5 start 460800 is beyond EOD, truncated [ 476.223863][T22524] loop8: p6 size 83886080 extends beyond EOD, truncated [ 476.296536][T22483] Bluetooth: hci1: command 0x1003 tx timeout [ 476.296536][ T4089] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 476.634981][T22528] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 476.641546][T22528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.649044][T22528] vhci_hcd vhci_hcd.0: Device attached [ 476.656746][T22528] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 476.663291][T22528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.670835][T22528] vhci_hcd vhci_hcd.0: Device attached [ 476.677703][T22528] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.685359][T22534] No such timeout policy "syz1" [ 476.686832][T22528] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.702726][T22528] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.712549][T22528] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 476.719739][T22528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.727387][T22528] vhci_hcd vhci_hcd.0: Device attached [ 476.736225][T22528] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(20) [ 476.742875][T22528] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.750540][T22528] vhci_hcd vhci_hcd.0: Device attached [ 476.760437][T22542] vhci_hcd: connection closed [ 476.760466][T22538] vhci_hcd: connection closed [ 476.761067][T22531] vhci_hcd: connection closed [ 476.765199][T22529] vhci_hcd: connection closed [ 476.774959][ T6713] vhci_hcd: stop threads [ 476.784056][ T6713] vhci_hcd: release socket [ 476.788534][ T6713] vhci_hcd: disconnect device [ 476.793310][ T6713] vhci_hcd: stop threads [ 476.797633][ T6713] vhci_hcd: release socket [ 476.802178][ T6713] vhci_hcd: disconnect device [ 476.808658][ T6713] vhci_hcd: stop threads [ 476.813028][ T6713] vhci_hcd: release socket [ 476.817582][ T6713] vhci_hcd: disconnect device [ 476.826980][ T4883] vhci_hcd: vhci_device speed not set [ 476.833676][ T6713] vhci_hcd: stop threads [ 476.838008][ T6713] vhci_hcd: release socket [ 476.842443][ T6713] vhci_hcd: disconnect device [ 476.871234][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 476.871271][ T29] audit: type=1326 audit(1762574193.895:42371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 476.906511][ T29] audit: type=1326 audit(1762574193.895:42372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 476.930258][ T29] audit: type=1326 audit(1762574193.895:42373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd63109e17f code=0x7ffc0000 [ 476.953717][ T29] audit: type=1326 audit(1762574193.895:42374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 476.977466][ T29] audit: type=1326 audit(1762574193.895:42375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.001093][ T29] audit: type=1326 audit(1762574193.895:42376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.024875][ T29] audit: type=1326 audit(1762574193.895:42377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.048506][ T29] audit: type=1326 audit(1762574193.895:42378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.072311][ T29] audit: type=1326 audit(1762574193.895:42379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.077867][T22554] loop8: detected capacity change from 0 to 128 [ 477.096088][ T4883] usb 5-1: new full-speed USB device number 6 using vhci_hcd [ 477.111168][ T4883] usb 5-1: enqueue for inactive port 0 [ 477.116670][ T4883] usb 5-1: enqueue for inactive port 0 [ 477.122220][ T4883] usb 5-1: enqueue for inactive port 0 [ 477.136911][ T29] audit: type=1326 audit(1762574194.135:42380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22545 comm="syz.9.5941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63109f6c9 code=0x7ffc0000 [ 477.218312][ T4883] vhci_hcd: vhci_device speed not set [ 477.228375][T22554] FAT-fs (loop8): Directory bread(block 32) failed [ 477.234973][T22554] FAT-fs (loop8): Directory bread(block 33) failed [ 477.243613][T22554] FAT-fs (loop8): Directory bread(block 34) failed [ 477.250205][T22554] FAT-fs (loop8): Directory bread(block 35) failed [ 477.256860][T22554] FAT-fs (loop8): Directory bread(block 36) failed [ 477.263466][T22554] FAT-fs (loop8): Directory bread(block 37) failed [ 477.271684][T22554] FAT-fs (loop8): Directory bread(block 38) failed [ 477.278303][T22554] FAT-fs (loop8): Directory bread(block 39) failed [ 477.285014][T22554] FAT-fs (loop8): Directory bread(block 40) failed [ 477.292739][T22554] FAT-fs (loop8): Directory bread(block 41) failed [ 477.378038][T22554] netlink: 'syz.8.5942': attribute type 3 has an invalid length. [ 477.438489][T22582] loop5: detected capacity change from 0 to 128 [ 477.448695][T22583] 9p: Unknown access argument : -22 [ 477.459041][T22582] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 477.471679][T22582] ext4 filesystem being mounted at /544/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 477.690679][T22592] loop8: detected capacity change from 0 to 512 [ 477.708626][T22592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 477.765470][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.104389][T22602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5955'. [ 478.404163][T14018] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.437011][T22612] loop9: detected capacity change from 0 to 2048 [ 478.455774][T22620] FAULT_INJECTION: forcing a failure. [ 478.455774][T22620] name failslab, interval 1, probability 0, space 0, times 0 [ 478.468863][T22620] CPU: 0 UID: 0 PID: 22620 Comm: syz.5.5960 Not tainted syzkaller #0 PREEMPT(voluntary) [ 478.468900][T22620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.468917][T22620] Call Trace: [ 478.468926][T22620] [ 478.468935][T22620] __dump_stack+0x1d/0x30 [ 478.468991][T22620] dump_stack_lvl+0xe8/0x140 [ 478.469073][T22620] dump_stack+0x15/0x1b [ 478.469091][T22620] should_fail_ex+0x265/0x280 [ 478.469113][T22620] ? copy_cgroup_ns+0x162/0x380 [ 478.469138][T22620] should_failslab+0x8c/0xb0 [ 478.469197][T22620] __kmalloc_cache_noprof+0x4c/0x4a0 [ 478.469241][T22620] copy_cgroup_ns+0x162/0x380 [ 478.469271][T22620] create_new_namespaces+0x1c2/0x3d0 [ 478.469356][T22620] unshare_nsproxy_namespaces+0xe8/0x120 [ 478.469378][T22620] ksys_unshare+0x3d0/0x6d0 [ 478.469419][T22620] ? ksys_write+0x15f/0x1a0 [ 478.469457][T22620] __x64_sys_unshare+0x1f/0x30 [ 478.469549][T22620] x64_sys_call+0x2915/0x3000 [ 478.469581][T22620] do_syscall_64+0xd2/0x200 [ 478.469608][T22620] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 478.469679][T22620] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 478.469769][T22620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.469791][T22620] RIP: 0033:0x7fc3c8a3f6c9 [ 478.469807][T22620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.469849][T22620] RSP: 002b:00007fc3c74a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 478.469951][T22620] RAX: ffffffffffffffda RBX: 00007fc3c8c95fa0 RCX: 00007fc3c8a3f6c9 [ 478.469966][T22620] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 478.469980][T22620] RBP: 00007fc3c74a7090 R08: 0000000000000000 R09: 0000000000000000 [ 478.469994][T22620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.470007][T22620] R13: 00007fc3c8c96038 R14: 00007fc3c8c95fa0 R15: 00007ffc1c936058 [ 478.470070][T22620] [ 478.718150][T22612] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.798718][T22635] loop3: detected capacity change from 0 to 128 [ 478.816979][T22635] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.843141][T22635] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 478.969391][T22636] loop8: detected capacity change from 0 to 512 [ 478.976752][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.989125][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5968'. [ 479.009235][T22636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.079679][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.201603][T22666] loop8: detected capacity change from 0 to 1024 [ 479.250649][T22666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.368964][T22673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5973'. [ 479.377984][T22673] bridge_slave_1: left allmulticast mode [ 479.383630][T22673] bridge_slave_1: left promiscuous mode [ 479.389344][T22673] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.428280][T22673] bridge_slave_0: left promiscuous mode [ 479.434001][T22673] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.547707][T22675] loop5: detected capacity change from 0 to 512 [ 479.586219][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.620743][T22675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.690829][T22245] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.751796][T22687] loop8: detected capacity change from 0 to 2048 [ 479.768863][T22687] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.781634][T14018] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.805907][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5982'. [ 479.877392][T22698] loop5: detected capacity change from 0 to 128 [ 479.885848][T22698] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 479.901312][T22698] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.933095][ T6713] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 479.946030][T21417] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.049577][T22715] loop8: detected capacity change from 0 to 164 [ 480.057302][T22715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.068293][T22715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.077119][T22715] Symlink component flag not implemented [ 480.082828][T22715] Symlink component flag not implemented [ 480.090041][T22715] Symlink component flag not implemented (7) [ 480.096121][T22715] Symlink component flag not implemented (116) [ 480.200323][T22720] loop9: detected capacity change from 0 to 1024 [ 480.207302][T22720] EXT4-fs: Ignoring removed orlov option [ 480.231594][T22720] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.251283][T22715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 480.259949][T22715] rock: directory entry would overflow storage [ 480.266146][T22715] rock: sig=0x4f50, size=4, remaining=3 [ 480.271767][T22715] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 480.475295][T22731] No such timeout policy "syz1" [ 480.784352][T17683] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.871105][T22742] loop3: detected capacity change from 0 to 1024 [ 481.012898][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5997'. [ 481.308299][T22742] EXT4-fs: Ignoring removed orlov option [ 481.329876][T22742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.473250][T22742] ================================================================== [ 481.481387][T22742] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 481.490640][T22742] [ 481.492981][T22742] write to 0xffff88811aa11758 of 4 bytes by task 22745 on cpu 1: [ 481.500718][T22742] writeback_single_inode+0x150/0x3f0 [ 481.506123][T22742] sync_inode_metadata+0x5b/0x90 [ 481.511095][T22742] generic_buffers_fsync_noflush+0xd9/0x120 [ 481.517013][T22742] ext4_sync_file+0x1ab/0x690 [ 481.521720][T22742] vfs_fsync_range+0x10d/0x130 [ 481.526522][T22742] ext4_buffered_write_iter+0x34f/0x3c0 [ 481.532104][T22742] ext4_file_write_iter+0x387/0xf60 [ 481.537334][T22742] iter_file_splice_write+0x666/0xa60 [ 481.542743][T22742] direct_splice_actor+0x156/0x2a0 [ 481.547965][T22742] splice_direct_to_actor+0x312/0x680 [ 481.553360][T22742] do_splice_direct+0xda/0x150 [ 481.558157][T22742] do_sendfile+0x380/0x650 [ 481.562631][T22742] __x64_sys_sendfile64+0x105/0x150 [ 481.567869][T22742] x64_sys_call+0x2bb4/0x3000 [ 481.572565][T22742] do_syscall_64+0xd2/0x200 [ 481.577081][T22742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.583002][T22742] [ 481.585328][T22742] read to 0xffff88811aa11758 of 4 bytes by task 22742 on cpu 0: [ 481.593048][T22742] generic_buffers_fsync_noflush+0x80/0x120 [ 481.599054][T22742] ext4_sync_file+0x1ab/0x690 [ 481.603744][T22742] vfs_fsync_range+0x10d/0x130 [ 481.608524][T22742] ext4_buffered_write_iter+0x34f/0x3c0 [ 481.614094][T22742] ext4_file_write_iter+0x387/0xf60 [ 481.619302][T22742] iter_file_splice_write+0x666/0xa60 [ 481.624691][T22742] direct_splice_actor+0x156/0x2a0 [ 481.629819][T22742] splice_direct_to_actor+0x312/0x680 [ 481.635217][T22742] do_splice_direct+0xda/0x150 [ 481.639994][T22742] do_sendfile+0x380/0x650 [ 481.644429][T22742] __x64_sys_sendfile64+0x105/0x150 [ 481.649648][T22742] x64_sys_call+0x2bb4/0x3000 [ 481.654342][T22742] do_syscall_64+0xd2/0x200 [ 481.658856][T22742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.664759][T22742] [ 481.667171][T22742] value changed: 0x00000070 -> 0x00000002 [ 481.672898][T22742] [ 481.675234][T22742] Reported by Kernel Concurrency Sanitizer on: [ 481.681396][T22742] CPU: 0 UID: 0 PID: 22742 Comm: syz.3.5996 Not tainted syzkaller #0 PREEMPT(voluntary) [ 481.691218][T22742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 481.701463][T22742] ================================================================== [ 481.896265][T22245] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.